last executing test programs: 6.630438925s ago: executing program 1 (id=2): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x2, @local, 0x8ac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b9312948f6651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267513308a3d40aa1c788df6"}, 0xd8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0xffff) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 6.261612943s ago: executing program 1 (id=18): rseq(0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x9, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1}) 3.903215855s ago: executing program 1 (id=30): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xfc, {"fce3ad0eed0d07f91b50091887f70706d038e7ff7fc6e5539b0d3c0a8b089b3f35383a310890e0879b0af8c6e70a9b334a959b669a240d0a0af3988f7ef319520100ffe8d178708c523c921b1b233107200773090acd3b78130daa61d8e8040040005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bde7095d6a345badc56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a91e0dad47f36fd9f73c152a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76ea0270e4c10d64cd5a62427264f2377fe763c434708337c8de98f371bb943a8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa7ea5677747430af4162b987b80c3e001cd34e1c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df11847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e30400f7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad046581927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fc83c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad83872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddba02635478d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f79400000000ddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df04b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e785419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02b7fa64b6de3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd502ac8044ae185d2ba300004e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f08df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88e4facfd4c735a20307c737afa2d60399473296b831dbd933d93990f00064279b10ea0c5833f41f157ea2302993dbe97fb1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea10c00a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeee964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac3fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2102596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e42df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed62480ec43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e069160f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df076f0ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f87296ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb90372927db6ff959c0837d2e7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef869c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d050000008926407a4eddd5d0fc5a752f900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000023dd0000000400", 0x1000}}, 0x1006) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) write(r2, &(0x7f00000002c0)="fe", 0xfdef) read$watch_queue(r1, &(0x7f0000000780)=""/221, 0xfdef) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDSKBSENT(r4, 0x4b49, &(0x7f0000000640)={0xff, "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"}) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_io_uring_setup(0x13cb, 0x0, &(0x7f00000010c0)=0x0, 0x0, 0x0) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x549}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x18) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x9, 0xc95a, 0xd, 0x8, 0x80, 0x1, 0x3, 0x10007e, 0x20000006, 0x53, 0x8006, 0x410000, 0x80005, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x7, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x3, 0x26, 0xd, 0x1, 0x6, 0x7, 0x713a, 0x4, 0x7, 0x6, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x3, 0x800280ee, 0xa, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x8000005, 0x4, 0xa, 0x400, 0x80, 0x10001, 0x5, 0x6, 0x6, 0x5, 0x1, 0x5], [0x10000007, 0x9, 0x80000130, 0x8, 0x5, 0xfffffff3, 0x3, 0xc8, 0x1, 0xfffffffa, 0x1000007, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x42f, 0x0, 0x312, 0x78, 0x1, 0x3, 0x2, 0x7, 0x3, 0x6, 0x43fc, 0x401, 0x6, 0x1, 0xfc, 0x5, 0x1000005, 0x5f31, 0xd, 0x40000101, 0x1, 0x4, 0x2, 0x8, 0x6, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x3, 0x3, 0x9, 0x400, 0x3, 0x3, 0xbc45, 0x48c93694, 0xa74, 0x9], [0x7, 0xa, 0x0, 0x5, 0xfbfffffc, 0x100, 0x9, 0xb42a, 0x1, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x5, 0x8, 0x1, 0x0, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x3ff, 0x803, 0x200000, 0x2, 0x6d03, 0x86, 0xd, 0x800003, 0x200, 0x400080, 0x3, 0x4, 0x2950bfaf, 0x2, 0xa2, 0x7, 0x0, 0x5, 0x6, 0xe, 0xc2, 0x2, 0x3, 0x4007ff, 0x12b, 0x4, 0x6d, 0x7, 0x0, 0x2, 0x21c, 0xffffffff, 0x9, 0x0, 0x80aaed, 0x4, 0x24], [0x5, 0x40bb33, 0x7ffffffd, 0xb, 0x5, 0x93a, 0x9, 0x1000006, 0x100, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x2, 0x4, 0x7fff, 0x1000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000001, 0x7, 0x4, 0xcc, 0xfffffffd, 0xfffff000, 0x4010080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d69b, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x9, 0xb1e, 0xc7, 0x200, 0xffff2441, 0xfff]}, 0x45c) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) close(r6) syz_ublk_add_dev(r1, r5, 0x0, 0x0, 0x0, &(0x7f0000001240)) 3.699756705s ago: executing program 2 (id=31): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r0, 0x24, &(0x7f00000000c0)={0x1, 0x2, 0x8, 0x73e9}) 3.473625545s ago: executing program 2 (id=33): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000000)={0x0, 0x40, 0x3f, 0x30315559, 0x1, [], [0x20000000, 0x0, 0x1000010, 0x20000], [0x0, 0x40002, 0xfffffffe], [0x0, 0x10000000000000]}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) rseq(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) 2.384690097s ago: executing program 1 (id=35): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)={0x1c, 0x1a, 0x1, 0x3f, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str=':*b\xc3{\x00'}]}, 0x1c}], 0x1}, 0x0) 2.366695458s ago: executing program 2 (id=37): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007"], 0x0, 0x2}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.175779677s ago: executing program 1 (id=38): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x4, 0x7fff0000}]}) close_range(r0, r0, 0x2) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x4, 0x1000) fanotify_mark(r2, 0x1, 0x8000021, r1, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000001580)=""/4096, 0x1000}], 0x1) openat$dir(0xffffff9c, &(0x7f0000000580)='./file0\x00', 0x4041, 0x12) 2.175357707s ago: executing program 0 (id=39): socket$rxrpc(0x21, 0x2, 0xa) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) gettid() write(r0, &(0x7f0000000140)='e:my_read_msr2 msr/read_msr', 0x1b) 2.053593503s ago: executing program 0 (id=40): mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='4', 0x1) 2.009788525s ago: executing program 1 (id=41): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000801}, 0x4000000) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000001340)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x6402, 0x0) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000180)=0x6f) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000002f00090027bd7000000000000400000004001d0004001e"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x10) r6 = dup2(r4, r4) read$FUSE(r6, &(0x7f00000063c0)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000180)=0x6f) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) sendfile(r7, r7, 0x0, 0x8) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002200090400000700000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 1.843809823s ago: executing program 2 (id=42): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="e1", 0x1}], 0x1}, 0x24044041) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x200000000009, 0x7, 0xfffffffffffffffe, 0x2, 0x0, 0x4002004c4, 0x7, 0x8000000000000003, 0xc595, 0x8, 0x1, 0xffffffffffffffff, 0x3, 0xb3, 0x8d], 0xeeee8000}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.739060398s ago: executing program 0 (id=43): r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0) add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000240)="bc3087", 0x3, r0) 1.599825085s ago: executing program 0 (id=44): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x2404c081}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x42801, 0x0) 1.507633869s ago: executing program 3 (id=45): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000000)={0x0, 0x40, 0x3f, 0x30315559, 0x1, [], [0x20000000, 0x0, 0x1000010, 0x20000], [0x0, 0x40002, 0xfffffffe], [0x0, 0x10000000000000]}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) rseq(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) 1.493582429s ago: executing program 2 (id=46): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) close_range(r1, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="020000000400000004000000"], 0x50) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700), &(0x7f0000000880), 0xde9, r2}, 0x38) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x2, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0xfff9, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) socket$unix(0x1, 0x1, 0x0) 560.549543ms ago: executing program 3 (id=47): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mlock2(&(0x7f00008d4000/0x1000)=nil, 0x1000, 0x1) 491.671937ms ago: executing program 2 (id=48): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000006000079b005"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) r2 = openat$vhost_vsock(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r2, 0x8010af78, &(0x7f0000000040)) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d8b601020301090212000100000000090401"], 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000340)={&(0x7f0000000380)=[{0x1e, 0x5011, 0x0, 0x0}], 0x1}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r5, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000300)={0x5555555555553bb, 0x0, [{0x1, 0x2, 0x1, 0x0, @adapter={0xfffffffffffffff9, 0x0, 0x5, 0x0, 0x200400}}]}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="140100001f0001000000000000000000010100800c0001000400"], 0x114}], 0x1, 0x0, 0x0, 0x20044080}, 0x4000000) ioctl$KVM_IRQ_LINE_STATUS(r5, 0xc008ae67, &(0x7f00000002c0)={0x0, 0x81}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)='1\x00', 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:02.0/remove\x00', 0x1, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) write(r7, &(0x7f0000000140)='1\x00', 0x1) openat(r7, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:02.0/remove\x00', 0xfc94c54f54391741, 0x188) 491.187447ms ago: executing program 0 (id=49): r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="140000001600010000000000000000000286da008752a44dd0237a1257e7e2e1731c9d0a44db13d564e13cc19c75fb693005098b428ff9aa2ee680a6e1794035ddd1560654e8af99137f6926a107b745966f4b8cf7261c2a55b5ecad01f191849c6604c8a5b3de8d0df6abbaae5394a7f6c0a45d9bc44a6087718a2cdf3117fa227ca066e7965576a8af9262545e6f2df2f0d2c552a02098b29b598fbe7283382cafcff3a5344ac643933b95f74f5f15270cbd2abb7e0a66e823bf51b7e97f0d8f49f307d31d81638c2c6017889cc72ded16bf1df2156cdd62fd59079a3c35ba93ea48630e2e670e"], 0x14}], 0x1}, 0x4010) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x2, 0x3, 0xff) mount$cgroup(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0), 0x10012, &(0x7f0000000340)={[{@name={'name', 0x3d, '_))%['}}], [{@fsuuid={'fsuuid', 0x3d, {[0x65, 0x38, 0x38, 0x0, 0x38, 0x37, 0x65, 0x36], 0x2d, [0x32, 0x30, 0x32, 0x39], 0x2d, [0x30, 0x62, 0x37, 0x55], 0x2d, [0x30, 0x62, 0x63, 0x35], 0x2d, [0x31, 0x38, 0x31, 0x34, 0x31, 0x37, 0x64, 0x37]}}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@seclabel}, {@fsuuid={'fsuuid', 0x3d, {[0x50, 0x35, 0x35, 0x33, 0x30, 0x31, 0x30, 0x32], 0x2d, [0x36, 0x65, 0x39, 0x30], 0x2d, [0x61, 0x32, 0x37, 0x34], 0x2d, [0x5c, 0x34, 0x34, 0x35], 0x2d, [0x31, 0x33, 0x62, 0x65, 0x24, 0x66, 0x32, 0x34]}}}]}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r1) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r2, @ANYBLOB="02f324bd7000ffdbdf250e0000004000018014000300ffffffff0000000000000000000000000c00070020000000180000000800050001000000090006006c626c63000000000800080009000000480003800600040007000000080001000200000006000400060000000600040007000000080005007f00000114000200766c616e300000000000000000000000060007004e23000008000500080000000800060014b8"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) r3 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0)={[0xd]}, 0x8, 0x800) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r4, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) signalfd4(r3, &(0x7f0000000000)={[0xa5]}, 0x8, 0x0) 441.558189ms ago: executing program 3 (id=50): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) io_setup(0xd4, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) write(r0, &(0x7f0000000000)="2e000000010002", 0x7) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYRES8, @ANYRESHEX=r0, @ANYRESDEC=r1, @ANYRES32=r0, @ANYRESDEC, @ANYRES16=r1, @ANYBLOB="f27f71192bd0aa6fd33805c8bb4e43dd8e33cf267b9eebbd4ac129dc8017352762a10e9dd0080e89854a177901580430f41cf2511895d8a776efd22e3731e5d812371dba348d18dd193fcb35202a9a34ec26da6680b27bce3bd079e13b2ca1af45fe602a0f5be05686aaf5b97eebb0f5ef0d66e3143a89098c7ab111a4cacc2dd29ad2977fed0c2cbeaabd3f79c66c146047f508d022a20dd5bed5d329d4b52e463b174dec3065cccf6a914cdfa47a0651a78c9fc7bc2ba763d13ea13d886e29b53830cd08d3d5375b2cdda737f84719dd6aea6ec2fc9f19d3f1e012062e4e6f9719515e07bfa033110ec01500162e9f4255", @ANYBLOB="f6b1e88d7f16e7760ec6695b8b2f06506e450e0e40460c0772785b040c250bcd73d2fbd19018c93ce9c691af9ea8fc9eea8fa116153aaaff019c234b1da862c01a957e9fc704577d987441102afeccc5ac3e22cf4adc2083b571e245db25b170838a7716e5532a91a0e8b8e261d55840c665afd6397a3871ccaaabd559cb3b63eb95f6afc3612427ec1faccb18fb344cd57725c0088ce91f882599f452556df7f607edfde01120d14b4cbb3b6cc739e8405c86f1116f2909a7547ce545aa964b9f36cad2", @ANYRESDEC=r1], 0xfe6c) 322.890815ms ago: executing program 3 (id=51): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)="707265765f73746174652e66756e6374696f6e203d3d78d0d00e", 0x1a) 211.58047ms ago: executing program 0 (id=52): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r2) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000025c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x7, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51}}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendto$inet6(r6, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) setsockopt$inet6_mreq(r1, 0x29, 0x1b, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) read$midi(0xffffffffffffffff, &(0x7f00000001c0)=""/70, 0xffffffd8) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004ec0)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 198.5548ms ago: executing program 3 (id=53): syz_emit_ethernet(0x5e, &(0x7f0000000280)={@link_local, @local, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, '9u\x00', 0x28, 0x3c, 0x0, @rand_addr=' \x01\x00', @mcast2, {[@routing={0x21, 0x2, 0x0, 0xb, 0x0, [@mcast1]}], {{0x0, 0x4e20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '8(}', 0xff, "1d00"}}}}}}}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write(r0, &(0x7f0000000100)="520000002300010100020600"/41, 0x29) 0s ago: executing program 3 (id=54): write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0], 0x59a) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x1ff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x801, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r3, 0xc008ae09, &(0x7f0000000000)={0x5, 0x0, [{0x0, 0x84, 0x4, 0x9, 0x4, 0x0, 0xb}, {0xb, 0x5, 0x0, 0xd, 0x6, 0x0, 0x9}, {0x80000000, 0xffffffff, 0x4, 0x2d, 0x3, 0x40007, 0x1000}, {0x40000001, 0x0, 0x4, 0x10001, 0x6, 0x3, 0x8}, {0xa, 0x3, 0x8, 0x2, 0xfffffff7, 0x8459, 0x401}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0xff, 0x9, 0x3, 0x8, 0xb9, 0x3, 0x8e, 0x5, 0xc50}, {0x804, 0x1, 0x1, 0x45, 0xff, 0x6, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0xf1c2, 0x3, 0x38, 0xf, 0x84, 0x7, 0x3, 0x50, 0x0, 0x5, 0x4, 0x5, 0x3a}], 0xffffffff}) openat$vimc2(0xffffffffffffff9c, &(0x7f0000003240), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x4, 0x61, 0x200002000001, 0x2, 0x2004c8, 0x0, 0x0, 0x36ae, 0x4, 0x7fff, 0x3, 0x400000000], 0x80a0000}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r4 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r4, 0x8931, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mkdir(&(0x7f0000000000)='my_debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_debugfs\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_debugfs/asoc/components\x00', 0x0, 0x0) read(r5, &(0x7f0000000500), 0x400) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x20040011}}], 0x1, 0x80) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mount$afs(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000c00), 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.155' (ED25519) to the list of known hosts. [ 63.057952][ T5758] cgroup: Unknown subsys name 'net' [ 63.220294][ T5758] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.591450][ T5758] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 66.525712][ T5772] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.534623][ T5772] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.542504][ T5772] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.551381][ T5772] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.551846][ T5775] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.559196][ T5772] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 66.568054][ T5775] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.573775][ T5772] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.580503][ T5775] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 66.595927][ T5772] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.631246][ T5086] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 66.639174][ T5086] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 66.684929][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.695742][ T5775] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.700989][ T5772] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.711294][ T5775] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.716973][ T5772] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.727064][ T5775] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.735410][ T5775] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.743752][ T5772] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.744123][ T5775] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 66.765069][ T5775] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 66.772359][ T5772] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 66.772482][ T5775] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.173201][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 67.227963][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 67.301041][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 67.320132][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 67.431553][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.441810][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.449283][ T5773] bridge_slave_0: entered allmulticast mode [ 67.458535][ T5773] bridge_slave_0: entered promiscuous mode [ 67.471346][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.478810][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.486095][ T5770] bridge_slave_0: entered allmulticast mode [ 67.492928][ T5770] bridge_slave_0: entered promiscuous mode [ 67.506010][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.513186][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.520432][ T5773] bridge_slave_1: entered allmulticast mode [ 67.527215][ T5773] bridge_slave_1: entered promiscuous mode [ 67.548992][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.556509][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.563787][ T5770] bridge_slave_1: entered allmulticast mode [ 67.570551][ T5770] bridge_slave_1: entered promiscuous mode [ 67.629020][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.641403][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.680693][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.687939][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.697531][ T5781] bridge_slave_0: entered allmulticast mode [ 67.704575][ T5781] bridge_slave_0: entered promiscuous mode [ 67.722000][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.729211][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.736665][ T5781] bridge_slave_1: entered allmulticast mode [ 67.743918][ T5781] bridge_slave_1: entered promiscuous mode [ 67.753004][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.766412][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.776396][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.783477][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.791143][ T5778] bridge_slave_0: entered allmulticast mode [ 67.798397][ T5778] bridge_slave_0: entered promiscuous mode [ 67.842875][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.850526][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.858255][ T5778] bridge_slave_1: entered allmulticast mode [ 67.865876][ T5778] bridge_slave_1: entered promiscuous mode [ 67.876357][ T5773] team0: Port device team_slave_0 added [ 67.884646][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.905884][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.926959][ T5773] team0: Port device team_slave_1 added [ 67.944909][ T5770] team0: Port device team_slave_0 added [ 67.981828][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.993163][ T5770] team0: Port device team_slave_1 added [ 68.021678][ T5781] team0: Port device team_slave_0 added [ 68.030181][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.040168][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.047265][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.073301][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.086816][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.093872][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.120431][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.149504][ T5781] team0: Port device team_slave_1 added [ 68.182986][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.190132][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.216326][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.259277][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.266556][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.294052][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.310512][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.317707][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.343937][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.356859][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.364070][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.390040][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.403563][ T5778] team0: Port device team_slave_0 added [ 68.425867][ T5773] hsr_slave_0: entered promiscuous mode [ 68.432949][ T5773] hsr_slave_1: entered promiscuous mode [ 68.447501][ T5778] team0: Port device team_slave_1 added [ 68.519925][ T5770] hsr_slave_0: entered promiscuous mode [ 68.526307][ T5770] hsr_slave_1: entered promiscuous mode [ 68.532487][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.540505][ T5770] Cannot create hsr debugfs directory [ 68.558165][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.565272][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.591222][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.605232][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.612205][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.638240][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.654603][ T5086] Bluetooth: hci0: command tx timeout [ 68.660459][ T51] Bluetooth: hci1: command tx timeout [ 68.678822][ T5781] hsr_slave_0: entered promiscuous mode [ 68.686688][ T5781] hsr_slave_1: entered promiscuous mode [ 68.692778][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.701288][ T5781] Cannot create hsr debugfs directory [ 68.813956][ T51] Bluetooth: hci2: command tx timeout [ 68.819682][ T51] Bluetooth: hci3: command tx timeout [ 68.863510][ T5778] hsr_slave_0: entered promiscuous mode [ 68.870357][ T5778] hsr_slave_1: entered promiscuous mode [ 68.876825][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.885375][ T5778] Cannot create hsr debugfs directory [ 69.085978][ T5773] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.105204][ T5773] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.115657][ T5773] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.127276][ T5773] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.251843][ T5781] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.263180][ T5781] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.280426][ T5781] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.290095][ T5781] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.375106][ T5770] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.392783][ T5770] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.403014][ T5770] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.414356][ T5770] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.536478][ T5778] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.551398][ T5778] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.561020][ T5778] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.573210][ T5778] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.637353][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.661499][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.689488][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.726522][ T1083] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.733982][ T1083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.752249][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.784249][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.791346][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.823425][ T3505] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.830591][ T3505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.848689][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.862782][ T3505] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.869932][ T3505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.935665][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.954141][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.005276][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.012407][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.037851][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.045101][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.070869][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.103154][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.110595][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.158135][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.165335][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.307530][ T5778] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.337843][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.432059][ T5781] veth0_vlan: entered promiscuous mode [ 70.461458][ T5781] veth1_vlan: entered promiscuous mode [ 70.508796][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.547318][ T5781] veth0_macvtap: entered promiscuous mode [ 70.581849][ T5781] veth1_macvtap: entered promiscuous mode [ 70.640660][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.665696][ T5773] veth0_vlan: entered promiscuous mode [ 70.683252][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.709098][ T5781] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.734421][ T5086] Bluetooth: hci0: command tx timeout [ 70.734935][ T5781] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.739907][ T51] Bluetooth: hci1: command tx timeout [ 70.758921][ T5781] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.768097][ T5781] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.784137][ T5773] veth1_vlan: entered promiscuous mode [ 70.886671][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.895040][ T5086] Bluetooth: hci2: command tx timeout [ 70.900535][ T51] Bluetooth: hci3: command tx timeout [ 70.911222][ T1083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.928917][ T1083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.956782][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.998208][ T5773] veth0_macvtap: entered promiscuous mode [ 71.004529][ T1128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.012356][ T1128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.059362][ T5773] veth1_macvtap: entered promiscuous mode [ 71.110574][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.122312][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.141409][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.158119][ T5770] veth0_vlan: entered promiscuous mode [ 71.178427][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.190275][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.209918][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.263203][ T5778] veth0_vlan: entered promiscuous mode [ 71.278016][ T5773] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.288314][ T5773] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.301306][ T5773] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.311811][ T5773] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.348798][ T5770] veth1_vlan: entered promiscuous mode [ 71.372083][ T5778] veth1_vlan: entered promiscuous mode [ 71.458907][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.466451][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.514782][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.536492][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.551616][ T5770] veth0_macvtap: entered promiscuous mode [ 71.632583][ T5770] veth1_macvtap: entered promiscuous mode [ 71.652113][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.675440][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.706869][ T5778] veth0_macvtap: entered promiscuous mode [ 71.741563][ T5778] veth1_macvtap: entered promiscuous mode [ 71.761516][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.774222][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.778664][ T5836] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 71.788863][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.819694][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.832625][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.853368][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.871719][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.882262][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.904980][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.919380][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.932045][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.947045][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.978739][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.990128][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.001929][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.012922][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.029300][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.044111][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.055588][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.066153][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.077116][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.087694][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.117904][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.133115][ T27] audit: type=1800 audit(1789162872.230:2): pid=5842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.8" name="memory_backed" dev="configfs" ino=7112 res=0 errno=0 [ 72.142204][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.199171][ T5770] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.204266][ T27] audit: type=1800 audit(1789162872.260:3): pid=5842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.8" name="zoned" dev="configfs" ino=7113 res=0 errno=0 [ 72.223666][ T5770] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.255427][ T5770] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.266857][ T5770] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.275666][ T27] audit: type=1800 audit(1789162872.350:4): pid=5842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.8" name="power" dev="configfs" ino=7119 res=0 errno=0 [ 72.305532][ T5778] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.318490][ T5778] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.333047][ T5778] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.421540][ T5842] null_blk: disk my_zoned_dev created [ 72.557136][ T5778] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.895941][ T51] Bluetooth: hci1: command tx timeout [ 72.903501][ T51] Bluetooth: hci0: command tx timeout [ 73.076774][ T5086] Bluetooth: hci3: command tx timeout [ 73.082315][ T5086] Bluetooth: hci2: command tx timeout [ 73.370825][ T1128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.420450][ T1128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.489190][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.514887][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.554526][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.575070][ T5857] FAULT_INJECTION: forcing a failure. [ 73.575070][ T5857] name failslab, interval 1, probability 0, space 0, times 1 [ 73.587934][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.605253][ T5857] CPU: 0 PID: 5857 Comm: syz.3.12 Not tainted syzkaller #0 [ 73.612514][ T5857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 73.622617][ T5857] Call Trace: [ 73.625925][ T5857] [ 73.628879][ T5857] dump_stack_lvl+0x18c/0x250 [ 73.633613][ T5857] ? show_regs_print_info+0x20/0x20 [ 73.638852][ T5857] ? load_image+0x420/0x420 [ 73.643396][ T5857] ? __might_sleep+0xe0/0xe0 [ 73.648032][ T5857] ? __lock_acquire+0x7d80/0x7d80 [ 73.653098][ T5857] should_fail_ex+0x394/0x4c0 [ 73.657806][ T5857] should_failslab+0x9/0x20 [ 73.662308][ T5857] slab_pre_alloc_hook+0x59/0x300 [ 73.667350][ T5857] ? memcg_list_lru_alloc+0x335/0xb00 [ 73.672758][ T5857] ? memcg_list_lru_alloc+0x335/0xb00 [ 73.678164][ T5857] __kmem_cache_alloc_node+0x53/0x250 [ 73.683573][ T5857] ? memcg_list_lru_alloc+0x335/0xb00 [ 73.687987][ T1128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.688981][ T5857] __kmalloc+0xa7/0x240 [ 73.689017][ T5857] memcg_list_lru_alloc+0x335/0xb00 [ 73.706211][ T5857] ? memcg_reparent_list_lrus+0x860/0x860 [ 73.710008][ T1128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.711956][ T5857] ? get_obj_cgroup_from_current+0xd4/0x280 [ 73.711987][ T5857] ? get_obj_cgroup_from_current+0xd4/0x280 [ 73.731083][ T5857] slab_pre_alloc_hook+0x2ad/0x300 [ 73.736235][ T5857] ? slab_pre_alloc_hook+0xb1/0x300 [ 73.741477][ T5857] kmem_cache_alloc_lru+0x4d/0x2b0 [ 73.746638][ T5857] ? hugetlbfs_alloc_inode+0xf3/0x140 [ 73.752048][ T5857] hugetlbfs_alloc_inode+0xf3/0x140 [ 73.757270][ T5857] ? hugetlbfs_fill_super+0x8f0/0x8f0 [ 73.762637][ T5857] new_inode_pseudo+0x63/0x1d0 [ 73.767416][ T5857] new_inode+0x22/0x1d0 [ 73.771617][ T5857] ? resv_map_alloc+0x1c4/0x2c0 [ 73.776464][ T5857] hugetlbfs_get_inode+0x78/0x500 [ 73.781483][ T5857] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 73.787453][ T5857] hugetlb_file_setup+0x215/0x610 [ 73.792471][ T5857] ksys_mmap_pgoff+0x1e6/0x720 [ 73.797228][ T5857] do_syscall_64+0x55/0xb0 [ 73.801648][ T5857] ? clear_bhb_loop+0x40/0x90 [ 73.806309][ T5857] ? clear_bhb_loop+0x40/0x90 [ 73.810974][ T5857] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 73.816879][ T5857] RIP: 0033:0x7fc139b9e159 [ 73.821343][ T5857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.840946][ T5857] RSP: 002b:00007fc137df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 73.849371][ T5857] RAX: ffffffffffffffda RBX: 00007fc139e25fa0 RCX: 00007fc139b9e159 [ 73.857365][ T5857] RDX: 0000000000000001 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 73.865340][ T5857] RBP: 00007fc139c3503b R08: ffffffffffffffff R09: 0000000000000000 [ 73.873333][ T5857] R10: 000200000005c832 R11: 0000000000000246 R12: 0000000000000000 [ 73.881297][ T5857] R13: 00007fc139e26038 R14: 00007fc139e25fa0 R15: 00007ffc38558d08 [ 73.889273][ T5857] [ 74.391060][ T5875] FAULT_INJECTION: forcing a failure. [ 74.391060][ T5875] name failslab, interval 1, probability 0, space 0, times 0 [ 74.429926][ T5875] CPU: 1 PID: 5875 Comm: syz.2.16 Not tainted syzkaller #0 [ 74.437190][ T5875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 74.447270][ T5875] Call Trace: [ 74.450572][ T5875] [ 74.453522][ T5875] dump_stack_lvl+0x18c/0x250 [ 74.458237][ T5875] ? show_regs_print_info+0x20/0x20 [ 74.463470][ T5875] ? load_image+0x420/0x420 [ 74.468003][ T5875] ? __might_sleep+0xe0/0xe0 [ 74.472626][ T5875] ? __lock_acquire+0x7d80/0x7d80 [ 74.477675][ T5875] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 74.483698][ T5875] should_fail_ex+0x394/0x4c0 [ 74.488416][ T5875] should_failslab+0x9/0x20 [ 74.492938][ T5875] slab_pre_alloc_hook+0x59/0x300 [ 74.497983][ T5875] ? lockdep_hardirqs_on+0x98/0x150 [ 74.503223][ T5875] kmem_cache_alloc+0x5a/0x2c0 [ 74.508061][ T5875] ? taskstats_exit+0x14d/0xce0 [ 74.512946][ T5875] taskstats_exit+0x14d/0xce0 [ 74.517655][ T5875] ? sysctl_delayacct+0x220/0x220 [ 74.522699][ T5875] ? rcu_read_lock_any_held+0xb4/0x140 [ 74.528185][ T5875] ? rcu_read_lock_bh_held+0x100/0x100 [ 74.533673][ T5875] do_exit+0x8fc/0x2530 [ 74.537882][ T5875] ? put_task_struct+0xc0/0xc0 [ 74.542680][ T5875] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 74.548730][ T5875] ? get_signal+0x100e/0x1390 [ 74.553422][ T5875] ? lock_chain_count+0x20/0x20 [ 74.558290][ T5875] ? _raw_spin_lock_irq+0xbb/0xf0 [ 74.563320][ T5875] do_group_exit+0x22d/0x2f0 [ 74.567918][ T5875] ? lockdep_hardirqs_on+0x98/0x150 [ 74.573122][ T5875] get_signal+0x12a6/0x1390 [ 74.577649][ T5875] arch_do_signal_or_restart+0xc2/0x7b0 [ 74.583204][ T5875] ? __ia32_sys_get_robust_list+0x110/0x110 [ 74.589099][ T5875] ? get_sigframe_size+0x20/0x20 [ 74.594056][ T5875] ? exit_to_user_mode_loop+0x3b/0x110 [ 74.599518][ T5875] exit_to_user_mode_loop+0x70/0x110 [ 74.604804][ T5875] exit_to_user_mode_prepare+0xee/0x180 [ 74.610358][ T5875] syscall_exit_to_user_mode+0x1a/0x50 [ 74.615824][ T5875] do_syscall_64+0x61/0xb0 [ 74.620241][ T5875] ? clear_bhb_loop+0x40/0x90 [ 74.624922][ T5875] ? clear_bhb_loop+0x40/0x90 [ 74.629603][ T5875] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 74.635496][ T5875] RIP: 0033:0x7fc7f339e159 [ 74.639914][ T5875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.659527][ T5875] RSP: 002b:00007fc7f42240e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 74.667948][ T5875] RAX: fffffffffffffe00 RBX: 00007fc7f3625fa8 RCX: 00007fc7f339e159 [ 74.675922][ T5875] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc7f3625fa8 [ 74.683890][ T5875] RBP: 00007fc7f3625fa0 R08: 0000000000000000 R09: 0000000000000000 [ 74.691879][ T5875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.699854][ T5875] R13: 00007fc7f3626038 R14: 00007ffc2da0cca0 R15: 00007ffc2da0cd88 [ 74.707834][ T5875] [ 74.710926][ C1] vkms_vblank_simulate: vblank timer overrun [ 74.725072][ T5877] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17'. [ 74.894503][ T5852] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 74.921403][ T5877] syz.3.17 uses obsolete (PF_INET,SOCK_PACKET) [ 74.976843][ T51] Bluetooth: hci0: command tx timeout [ 74.982406][ T5086] Bluetooth: hci1: command tx timeout [ 75.117104][ T5852] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.133945][ T51] Bluetooth: hci2: command tx timeout [ 75.139435][ T5086] Bluetooth: hci3: command tx timeout [ 75.161019][ T5852] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.234185][ T5852] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 75.251653][ T5782] logitech-hidpp-device 0003:046D:C082.0001: Device not connected [ 75.261617][ T5852] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 75.296709][ T5852] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.350259][ T5852] usb 2-1: config 0 descriptor?? [ 76.388639][ T5852] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 76.637538][ T5852] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 76.645450][ T5852] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 76.652984][ T5852] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 76.661231][ T5852] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 76.668964][ T5852] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 76.677850][ T5852] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 76.686386][ T5852] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 76.694721][ T5852] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 76.702186][ T5852] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 76.709903][ T5852] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 76.718965][ T5852] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 76.728457][ T5852] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 76.737278][ T5852] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 76.745201][ T5852] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 76.755210][ T5852] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 76.823326][ T5852] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 76.863507][ T5852] usb 2-1: USB disconnect, device number 2 [ 77.036425][ T5923] 9pnet_virtio: no channels available for device syz [ 77.246149][ T5925] fido_id[5925]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 79.105907][ T27] audit: type=1326 audit(1789162879.200:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5960 comm="syz.0.44" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f396799e159 code=0x7ffc0000 [ 79.160292][ T5961] random: crng reseeded on system resumption [ 79.185270][ T27] audit: type=1326 audit(1789162879.240:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5960 comm="syz.0.44" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f396799e159 code=0x7ffc0000 [ 79.211133][ T5961] FAULT_INJECTION: forcing a failure. [ 79.211133][ T5961] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 79.222896][ T27] audit: type=1326 audit(1789162879.250:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5960 comm="syz.0.44" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f396799e159 code=0x7ffc0000 [ 79.254655][ T27] audit: type=1326 audit(1789162879.250:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5960 comm="syz.0.44" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f396799e159 code=0x7ffc0000 [ 79.280293][ T5961] CPU: 1 PID: 5961 Comm: syz.0.44 Not tainted syzkaller #0 [ 79.287539][ T5961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 79.297619][ T5961] Call Trace: [ 79.300915][ T5961] [ 79.303861][ T5961] dump_stack_lvl+0x18c/0x250 [ 79.308557][ T5961] ? show_regs_print_info+0x20/0x20 [ 79.313757][ T5961] ? load_image+0x420/0x420 [ 79.318258][ T5961] ? __lock_acquire+0x7d80/0x7d80 [ 79.323299][ T5961] should_fail_ex+0x394/0x4c0 [ 79.327975][ T5961] prepare_alloc_pages+0x1e1/0x5b0 [ 79.333083][ T5961] __alloc_pages+0x134/0x460 [ 79.337667][ T5961] ? zone_statistics+0x170/0x170 [ 79.342611][ T5961] ? alloc_pages+0x4e1/0x740 [ 79.347219][ T5961] get_zeroed_page+0x17/0x40 [ 79.351834][ T5961] get_image_page+0x41/0x310 [ 79.356418][ T5961] alloc_rtree_node+0xfb/0x180 [ 79.361174][ T5961] memory_bm_create+0x50b/0x990 [ 79.366024][ T5961] create_basic_memory_bitmaps+0x99/0x380 [ 79.371738][ T5961] snapshot_open+0x1b0/0x280 [ 79.376326][ T5961] ? snapshot_compat_ioctl+0x90/0x90 [ 79.381605][ T5961] misc_open+0x326/0x3a0 [ 79.385869][ T5961] chrdev_open+0x58c/0x600 [ 79.390278][ T5961] ? cd_forget+0x160/0x160 [ 79.394698][ T5961] ? fsnotify_perm+0x3ed/0x5e0 [ 79.399472][ T5961] do_dentry_open+0x880/0x14b0 [ 79.404230][ T5961] ? cd_forget+0x160/0x160 [ 79.408646][ T5961] path_openat+0x284f/0x3270 [ 79.413249][ T5961] ? do_sys_openat2+0xda/0x1d0 [ 79.418004][ T5961] ? __x64_sys_openat+0x139/0x160 [ 79.423047][ T5961] ? verify_lock_unused+0x140/0x140 [ 79.428238][ T5961] ? do_filp_open+0x430/0x430 [ 79.432932][ T5961] do_filp_open+0x1f2/0x430 [ 79.437427][ T5961] ? vfs_tmpfile+0x620/0x620 [ 79.442018][ T5961] ? _raw_spin_unlock+0x28/0x40 [ 79.446856][ T5961] ? alloc_fd+0x590/0x640 [ 79.451185][ T5961] do_sys_openat2+0x134/0x1d0 [ 79.455876][ T5961] ? do_sys_open+0xe0/0xe0 [ 79.460307][ T5961] ? lock_chain_count+0x20/0x20 [ 79.465154][ T5961] __x64_sys_openat+0x139/0x160 [ 79.469998][ T5961] do_syscall_64+0x55/0xb0 [ 79.474407][ T5961] ? clear_bhb_loop+0x40/0x90 [ 79.479082][ T5961] ? clear_bhb_loop+0x40/0x90 [ 79.483753][ T5961] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 79.489637][ T5961] RIP: 0033:0x7f396799e159 [ 79.494041][ T5961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.513648][ T5961] RSP: 002b:00007f3968838028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 79.522070][ T5961] RAX: ffffffffffffffda RBX: 00007f3967c25fa0 RCX: 00007f396799e159 [ 79.530058][ T5961] RDX: 0000000000042801 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 79.538026][ T5961] RBP: 00007f3967a3503b R08: 0000000000000000 R09: 0000000000000000 [ 79.545997][ T5961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.553979][ T5961] R13: 00007f3967c26038 R14: 00007f3967c25fa0 R15: 00007ffebfc1f1d8 [ 79.561951][ T5961] [ 79.572065][ T27] audit: type=1326 audit(1789162879.250:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5960 comm="syz.0.44" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f396799e159 code=0x7ffc0000 [ 79.596836][ T27] audit: type=1326 audit(1789162879.250:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5960 comm="syz.0.44" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f396799e159 code=0x7ffc0000 [ 79.628069][ T27] audit: type=1326 audit(1789162879.250:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5960 comm="syz.0.44" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f396799e159 code=0x7ffc0000 [ 79.709681][ T27] audit: type=1326 audit(1789162879.250:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5960 comm="syz.0.44" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f396799e159 code=0x7ffc0000 [ 79.788161][ T27] audit: type=1326 audit(1789162879.250:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5960 comm="syz.0.44" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f396799e159 code=0x7ffc0000 [ 80.037056][ T27] audit: type=1326 audit(1789162879.250:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5960 comm="syz.0.44" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f396799e159 code=0x7ffc0000 [ 80.103759][ T5086] Bluetooth: hci3: command 0x0406 tx timeout [ 80.236264][ T5974] Bluetooth: MGMT ver 1.22 [ 80.660048][ T51] list_del corruption, ffff88805e7cf780->next is LIST_POISON1 (dead000000000100) [ 80.670942][ T51] ------------[ cut here ]------------ [ 80.676596][ T51] kernel BUG at lib/list_debug.c:58! [ 80.682079][ T51] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 80.688160][ T51] CPU: 0 PID: 51 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 80.695530][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 80.705588][ T51] Workqueue: hci0 hci_cmd_sync_work [ 80.710796][ T51] RIP: 0010:__list_del_entry_valid_or_report+0xe9/0x130 [ 80.717743][ T51] Code: 48 89 de e8 69 78 49 06 0f 0b 48 c7 c7 60 39 1d 8b 48 89 de e8 58 78 49 06 0f 0b 48 c7 c7 c0 39 1d 8b 48 89 de e8 47 78 49 06 <0f> 0b 48 c7 c7 20 3a 1d 8b 48 89 de e8 36 78 49 06 0f 0b 48 c7 c7 [ 80.737355][ T51] RSP: 0018:ffffc90000bbfa00 EFLAGS: 00010246 [ 80.743424][ T51] RAX: 000000000000004e RBX: ffff88805e7cf780 RCX: f95bf83d76245400 [ 80.751388][ T51] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 80.759356][ T51] RBP: 1ffff1100bcf9ef3 R08: ffffc90000bbf707 R09: 1ffff92000177ee0 [ 80.767317][ T51] R10: dffffc0000000000 R11: fffff52000177ee1 R12: dffffc0000000000 [ 80.775277][ T51] R13: dffffc0000000000 R14: dead000000000100 R15: dead000000000122 [ 80.783237][ T51] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 80.792161][ T51] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 80.798736][ T51] CR2: 000000110c32ff46 CR3: 000000006165f000 CR4: 00000000003506f0 [ 80.806716][ T51] Call Trace: [ 80.809988][ T51] [ 80.812915][ T51] mgmt_pending_remove+0x53/0x1f0 [ 80.817946][ T51] mgmt_add_adv_patterns_monitor_complete+0x45d/0x730 [ 80.824720][ T51] ? mgmt_add_adv_patterns_monitor_sync+0x90/0x90 [ 80.831142][ T51] ? msft_monitor_supported+0x69/0x80 [ 80.836526][ T51] ? hci_add_adv_monitor+0x17d/0x2a0 [ 80.841816][ T51] ? mgmt_add_adv_patterns_monitor_sync+0x90/0x90 [ 80.848248][ T51] hci_cmd_sync_work+0x24b/0x380 [ 80.853202][ T51] ? process_scheduled_works+0x975/0x1600 [ 80.858917][ T51] process_scheduled_works+0xa60/0x1600 [ 80.864468][ T51] ? worker_attach_to_pool+0x370/0x370 [ 80.869923][ T51] ? assign_work+0x3cc/0x5d0 [ 80.874508][ T51] worker_thread+0xa5e/0xfe0 [ 80.879101][ T51] kthread+0x2fa/0x390 [ 80.883160][ T51] ? pr_cont_work+0x550/0x550 [ 80.887838][ T51] ? kthread_blkcg+0xd0/0xd0 [ 80.892420][ T51] ret_from_fork+0x48/0x80 [ 80.896832][ T51] ? kthread_blkcg+0xd0/0xd0 [ 80.901415][ T51] ret_from_fork_asm+0x11/0x20 [ 80.906177][ T51] [ 80.909195][ T51] Modules linked in: [ 80.913469][ T5811] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 80.916018][ T51] ---[ end trace 0000000000000000 ]--- [ 81.098625][ T51] RIP: 0010:__list_del_entry_valid_or_report+0xe9/0x130 [ 81.107650][ T51] Code: 48 89 de e8 69 78 49 06 0f 0b 48 c7 c7 60 39 1d 8b 48 89 de e8 58 78 49 06 0f 0b 48 c7 c7 c0 39 1d 8b 48 89 de e8 47 78 49 06 <0f> 0b 48 c7 c7 20 3a 1d 8b 48 89 de e8 36 78 49 06 0f 0b 48 c7 c7 [ 81.140153][ T51] RSP: 0018:ffffc90000bbfa00 EFLAGS: 00010246 [ 81.182186][ T51] RAX: 000000000000004e RBX: ffff88805e7cf780 RCX: f95bf83d76245400 [ 81.249891][ T51] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 81.262345][ T51] RBP: 1ffff1100bcf9ef3 R08: ffffc90000bbf707 R09: 1ffff92000177ee0 [ 81.270607][ T51] R10: dffffc0000000000 R11: fffff52000177ee1 R12: dffffc0000000000 [ 81.278845][ T51] R13: dffffc0000000000 R14: dead000000000100 R15: dead000000000122 [ 81.287057][ T51] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 81.368469][ T5987] kAFS: No cell specified [ 81.372487][ T51] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 81.379481][ T51] CR2: 0000200000004000 CR3: 0000000026cb6000 CR4: 00000000003526e0 [ 81.387749][ T51] Kernel panic - not syncing: Fatal exception [ 81.393948][ T51] Kernel Offset: disabled [ 81.398258][ T51] Rebooting in 86400 seconds..