last executing test programs: 3m10.402511045s ago: executing program 1 (id=46): r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mknod(&(0x7f00000000c0)='./file0\x00', 0x10, 0xa96c) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x110, &(0x7f0000000080)=0x80000001, 0x0, 0x4) close(0x3) 3m9.260577996s ago: executing program 1 (id=47): ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, 0x0) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r1, r1, 0x0, 0x200000) cachestat(r1, &(0x7f0000000000)={0x9}, &(0x7f0000000040), 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x627, 0x4c1, 0x43, 0x0, 0x0) 3m7.717138758s ago: executing program 1 (id=51): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0x7000000) 3m5.305759189s ago: executing program 1 (id=53): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x64}]}, &(0x7f0000000080)='syzkaller\x00', 0x5}, 0x94) 2m59.603650443s ago: executing program 1 (id=61): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000002c00), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x74) 2m56.459180933s ago: executing program 1 (id=65): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x2000000008, 0x80000100008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) 2m40.374872738s ago: executing program 32 (id=65): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x2000000008, 0x80000100008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) 2m1.412290276s ago: executing program 4 (id=134): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) recvmmsg(0xffffffffffffffff, &(0x7f0000001cc0), 0x0, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setstatus(r3, 0x4, 0x2000) listen(r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r4, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r3}, 0x20) recvmmsg(r3, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) 2m0.163183521s ago: executing program 4 (id=137): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f00000005c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_usb_connect(0x5, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) creat(&(0x7f0000010280)='./file0\x00', 0x182) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v3, 0x18, 0x0) 1m51.381776979s ago: executing program 4 (id=143): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f00000003c0)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016fef8a9cedaf6bec340dee49474360d34cb800", 0x0, 0x48) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) 1m43.348009779s ago: executing program 4 (id=147): syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) socket$packet(0x11, 0x3, 0x300) socket(0x11, 0x800000003, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x15, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200001e00000000000000000000007a02500003ffffff95"], &(0x7f0000000080)='GPL\x00', 0x4, 0x98, &(0x7f00000001c0)=""/152, 0x40f00}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x69, 0x0, 0xfe}, {0x6}]}) io_uring_setup(0x5594, &(0x7f0000000080)={0x0, 0x10000000, 0x1, 0x200000, 0x229}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) 1m39.659053586s ago: executing program 4 (id=152): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) 1m38.04138809s ago: executing program 4 (id=153): socket$l2tp6(0xa, 0x2, 0x73) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500004400000000002190337bf58400ffffffff050090780a0101026a0000000000000000000000ac1e0001ac14140107be00e0"], 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) 1m21.718198352s ago: executing program 33 (id=153): socket$l2tp6(0xa, 0x2, 0x73) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500004400000000002190337bf58400ffffffff050090780a0101026a0000000000000000000000ac1e0001ac14140107be00e0"], 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) 21.829927438s ago: executing program 2 (id=221): timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000280), 0x400000000000180, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r6}, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, r2, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) unshare(0x2020480) 21.737460011s ago: executing program 3 (id=222): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) recvmsg$unix(r4, 0x0, 0x12) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) mount$afs(0x0, &(0x7f0000000140)='./cgroup\x00', &(0x7f0000000240), 0x800040, &(0x7f0000000300)=ANY=[@ANYBLOB='flock=write,flock=local,flock=strict,flock=strict,flock=strict,dyn']) 19.259192523s ago: executing program 3 (id=224): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x81}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, 0x0, 0x0) syz_fuse_handle_req(r4, &(0x7f0000000380)="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", 0x2000, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) mknod$loop(&(0x7f0000000380)='./file0\x00', 0xc000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() 17.979225982s ago: executing program 2 (id=226): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x32, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 13.178596533s ago: executing program 2 (id=229): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x180}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x3, &(0x7f0000000180)={{0x0, 0x3938700}, {0x77359400}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x1, 0x3, 0x0, 0x0}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) 12.824937315s ago: executing program 0 (id=230): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) unshare(0x22020600) r3 = syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace(0x8, r3) syz_pidfd_open(r3, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 11.446955213s ago: executing program 0 (id=231): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)={0x38, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x30}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast1}}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40840}, 0x4010) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc4}, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589d073c10184095fb00", 0x14}, 0x48, 0xffffffffffffffff) keyctl$setperm(0x5, r4, 0x4000410) 9.169532537s ago: executing program 3 (id=232): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x2) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x12) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x43) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) 8.657564529s ago: executing program 0 (id=233): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e22, 0x8ca, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x64}, 0x1c) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, &(0x7f00000001c0)) syz_usbip_server_init(0x1) setgroups(0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r1, 0x30925) keyctl$get_security(0x11, r1, 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f00000003c0)={0x6, 0x8, 0x0, 0xfffffffb, 0x0, [0x2, 0x1, 0x6, 0x7fffffff]}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ff07000000ffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x101, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4001, 0x71c, 0x4e23, 0x5, 0xa, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@multicast1, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0x81}, {0xffffffffffffffff, 0x0, 0x40000000000001d, 0xfffffffffffffffe}, {0xfffffffa, 0x3fc, 0xff}, 0x80, 0x3500, 0x2, 0x1, 0x4, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}]}, 0x140}, 0x1, 0x0, 0x0, 0x4000}, 0x844) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) 7.918269051s ago: executing program 3 (id=234): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x40840}, 0x4010) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0xc044) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc4}, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589d073c10184095fb00", 0x14}, 0x48, 0xffffffffffffffff) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, 0x0, 0x0) keyctl$unlink(0x9, r5, 0xffffffffffffffff) 6.477464026s ago: executing program 2 (id=235): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x200000}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r5}, 0x10) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x9, 0x80, 0x0, 0x0, 0x101, 0x0}) 5.105781786s ago: executing program 0 (id=236): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c4159b364a4fd7013f34db173a4fdacf15229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be867a28f09c5877fc2355ecdc9c30dcb2d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff3a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb357b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50265a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x20}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.861931803s ago: executing program 2 (id=237): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFC_CMD_SE_IO(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) unshare(0x2040400) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0xff, 0x5, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{r4}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pi6 \x00'}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) 1.877298746s ago: executing program 3 (id=238): socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x3) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00fff00401a80008000800104004080000055c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe144ecc447c65e206d25b4084121d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300fc0d15", 0xd8}], 0x1}, 0x4000000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r2, &(0x7f0000001c00)={0x0, 0x0, 0x0}, 0x80000c0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000a40)={0x74, 0x0, &(0x7f0000000940)=[@enter_looper, @increfs={0x40046304, 0x2}, @enter_looper, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x68, 0x18, &(0x7f00000008c0)={@ptr={0x70742a85, 0x1, &(0x7f00000007c0)=""/226, 0xe2, 0x0, 0x39}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/106, 0x6a, 0x1, 0x1f}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000300)={0x0, 0x28, 0x50}}}, @exit_looper, @increfs_done={0x40106308, 0x3}, @decrefs={0x40046307, 0x2}], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x32, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r3}, @flat=@binder={0x73622a85, 0xa, 0x1}, @flat=@binder={0x73622a85, 0x1000, 0x3}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f00000034c0)={0x2020}, 0x3ba) 1.852529557s ago: executing program 2 (id=239): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r5, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) 1.425672699s ago: executing program 3 (id=240): socket$kcm(0x29, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = dup(r0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = syz_open_dev$loop(&(0x7f00000007c0), 0x10000, 0x100) ioctl$BLKIOOPT(r4, 0x1279, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) 1.228794957s ago: executing program 0 (id=241): r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) fdatasync(r0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_vhci(0x0, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x400, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000440)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x27, 0x0, "a58fc096f80633b333145c32b45013f5547000229e90bfdd2cbb775085438751fa41b217c492169b0cb51256adc3e5baedfa65fd3c4429b247e9dc51c16f89c5a42145bb09f23ab88b0bd564fd44893a"}, 0xd8) 0s ago: executing program 0 (id=242): getdents64(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) socket(0x1e, 0x805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = shmget(0x1, 0x4000, 0xa20, &(0x7f0000ffb000/0x4000)=nil) shmat(r3, &(0x7f0000ffd000/0x2000)=nil, 0x4000) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r4, 0x3) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.247' (ED25519) to the list of known hosts. [ 90.436972][ T5787] cgroup: Unknown subsys name 'net' [ 90.688686][ T5787] cgroup: Unknown subsys name 'cpuset' [ 90.733000][ T5787] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 92.056347][ T31] cfg80211: failed to load regulatory.db [ 92.747801][ T5787] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 96.776935][ T5806] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.786628][ T5806] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 96.796830][ T5806] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 96.800572][ T5806] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 96.806122][ T5806] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 96.808163][ T5806] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 96.815320][ T5806] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 96.816293][ T5808] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.849909][ T5806] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.856723][ T5806] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.858328][ T5808] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.860578][ T5806] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 96.861458][ T5806] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 96.863658][ T5806] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 96.889350][ T5119] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.906919][ T5802] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 96.910821][ T5802] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 96.912023][ T5806] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 96.943859][ T5802] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 96.952230][ T5802] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.045625][ T5802] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 97.049868][ T5802] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 97.051398][ T5802] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 97.054941][ T5802] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 97.057796][ T5802] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 98.114356][ T5803] chnl_net:caif_netlink_parms(): no params data found [ 98.160636][ T5800] chnl_net:caif_netlink_parms(): no params data found [ 98.176668][ T5798] chnl_net:caif_netlink_parms(): no params data found [ 98.356191][ T5799] chnl_net:caif_netlink_parms(): no params data found [ 98.362032][ T5804] chnl_net:caif_netlink_parms(): no params data found [ 98.933949][ T61] Bluetooth: hci1: command tx timeout [ 99.022575][ T5802] Bluetooth: hci3: command tx timeout [ 99.022915][ T61] Bluetooth: hci2: command tx timeout [ 99.092541][ T61] Bluetooth: hci0: command tx timeout [ 99.174324][ T61] Bluetooth: hci4: command tx timeout [ 99.213904][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.215250][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.215704][ T5803] bridge_slave_0: entered allmulticast mode [ 99.217727][ T5803] bridge_slave_0: entered promiscuous mode [ 99.318817][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.318945][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.319127][ T5800] bridge_slave_0: entered allmulticast mode [ 99.320966][ T5800] bridge_slave_0: entered promiscuous mode [ 99.350570][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.350766][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.350968][ T5803] bridge_slave_1: entered allmulticast mode [ 99.358477][ T5803] bridge_slave_1: entered promiscuous mode [ 99.373798][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.374166][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.374658][ T5798] bridge_slave_0: entered allmulticast mode [ 99.399660][ T5798] bridge_slave_0: entered promiscuous mode [ 99.584555][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.584646][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.584855][ T5800] bridge_slave_1: entered allmulticast mode [ 99.586781][ T5800] bridge_slave_1: entered promiscuous mode [ 99.673468][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.673618][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.673781][ T5798] bridge_slave_1: entered allmulticast mode [ 99.675881][ T5798] bridge_slave_1: entered promiscuous mode [ 100.023531][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.023652][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.023787][ T5799] bridge_slave_0: entered allmulticast mode [ 100.025673][ T5799] bridge_slave_0: entered promiscuous mode [ 100.028002][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.028126][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.028301][ T5804] bridge_slave_0: entered allmulticast mode [ 100.030423][ T5804] bridge_slave_0: entered promiscuous mode [ 100.148054][ T5803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.223532][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.223725][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.223943][ T5799] bridge_slave_1: entered allmulticast mode [ 100.226022][ T5799] bridge_slave_1: entered promiscuous mode [ 100.227997][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.228143][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.228480][ T5804] bridge_slave_1: entered allmulticast mode [ 100.230385][ T5804] bridge_slave_1: entered promiscuous mode [ 100.289246][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.292173][ T5803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.313481][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.436703][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.516267][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.836339][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.839809][ T5804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.916115][ T5803] team0: Port device team_slave_0 added [ 101.006552][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.009209][ T5804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.011572][ T5800] team0: Port device team_slave_0 added [ 101.020562][ T5803] team0: Port device team_slave_1 added [ 101.022400][ T61] Bluetooth: hci1: command tx timeout [ 101.031517][ T5798] team0: Port device team_slave_0 added [ 101.092565][ T61] Bluetooth: hci2: command tx timeout [ 101.092580][ T5802] Bluetooth: hci3: command tx timeout [ 101.172558][ T5802] Bluetooth: hci0: command tx timeout [ 101.252538][ T5802] Bluetooth: hci4: command tx timeout [ 101.256645][ T5798] team0: Port device team_slave_1 added [ 101.258671][ T5800] team0: Port device team_slave_1 added [ 101.905333][ T5799] team0: Port device team_slave_0 added [ 101.907486][ T5804] team0: Port device team_slave_0 added [ 101.909161][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.909174][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.909193][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.085755][ T5799] team0: Port device team_slave_1 added [ 102.087704][ T5804] team0: Port device team_slave_1 added [ 102.088527][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.088538][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.088558][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.090907][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.090922][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.090949][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.096086][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.096127][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.096200][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.334326][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.334341][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.334360][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.335516][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.335528][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.335547][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.532929][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.532943][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.532962][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.535048][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.535059][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.535078][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.539708][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.539719][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.539740][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.540796][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.540806][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.540826][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.983889][ T5803] hsr_slave_0: entered promiscuous mode [ 102.985177][ T5803] hsr_slave_1: entered promiscuous mode [ 103.093624][ T5802] Bluetooth: hci1: command tx timeout [ 103.134187][ T5798] hsr_slave_0: entered promiscuous mode [ 103.135237][ T5798] hsr_slave_1: entered promiscuous mode [ 103.136049][ T5798] debugfs: 'hsr0' already exists in 'hsr' [ 103.136140][ T5798] Cannot create hsr debugfs directory [ 103.172884][ T5802] Bluetooth: hci2: command tx timeout [ 103.172892][ T61] Bluetooth: hci3: command tx timeout [ 103.239875][ T5800] hsr_slave_0: entered promiscuous mode [ 103.240944][ T5800] hsr_slave_1: entered promiscuous mode [ 103.241635][ T5800] debugfs: 'hsr0' already exists in 'hsr' [ 103.241652][ T5800] Cannot create hsr debugfs directory [ 103.262351][ T61] Bluetooth: hci0: command tx timeout [ 103.332495][ T61] Bluetooth: hci4: command tx timeout [ 103.571412][ T5799] hsr_slave_0: entered promiscuous mode [ 103.574528][ T5799] hsr_slave_1: entered promiscuous mode [ 103.577036][ T5799] debugfs: 'hsr0' already exists in 'hsr' [ 103.577100][ T5799] Cannot create hsr debugfs directory [ 103.601533][ T5804] hsr_slave_0: entered promiscuous mode [ 103.608469][ T5804] hsr_slave_1: entered promiscuous mode [ 103.609183][ T5804] debugfs: 'hsr0' already exists in 'hsr' [ 103.609201][ T5804] Cannot create hsr debugfs directory [ 105.172593][ T61] Bluetooth: hci1: command tx timeout [ 105.253292][ T61] Bluetooth: hci3: command tx timeout [ 105.262820][ T61] Bluetooth: hci2: command tx timeout [ 105.306654][ T5803] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 105.332773][ T61] Bluetooth: hci0: command tx timeout [ 105.359322][ T5803] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 105.378078][ T5803] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 105.412772][ T61] Bluetooth: hci4: command tx timeout [ 105.439087][ T5803] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 105.564357][ T5800] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 105.599810][ T5800] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 105.643983][ T5800] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 105.697224][ T5800] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 105.848416][ T5798] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 105.872921][ T5798] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 105.909726][ T5798] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 105.966764][ T5798] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 106.115816][ T5799] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 106.157507][ T5799] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 106.191545][ T5799] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 106.250069][ T5799] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 106.390552][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.411608][ T5804] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 106.454173][ T5804] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 106.490542][ T5804] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 106.516015][ T5804] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 106.588683][ T5803] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.631570][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.636886][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.660293][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.696204][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.696576][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.777174][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.809436][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.831379][ T3461] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.831528][ T3461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.895100][ T4472] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.895249][ T4472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.959079][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.988743][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.009246][ T4547] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.009398][ T4547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.058416][ T4472] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.067976][ T4472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.140338][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.185031][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.189491][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.189663][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.256331][ T158] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.257628][ T158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.375615][ T5804] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.454114][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.455873][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.517337][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.517527][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.636061][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.728165][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.962881][ T5803] veth0_vlan: entered promiscuous mode [ 108.011641][ T5803] veth1_vlan: entered promiscuous mode [ 108.131804][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.216882][ T5803] veth0_macvtap: entered promiscuous mode [ 108.237909][ T5803] veth1_macvtap: entered promiscuous mode [ 108.358481][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.394834][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.450213][ T3461] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.479709][ T3461] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.498645][ T3461] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.527643][ T3461] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.528368][ T5798] veth0_vlan: entered promiscuous mode [ 108.562006][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.670145][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.671604][ T5798] veth1_vlan: entered promiscuous mode [ 108.868519][ T5800] veth0_vlan: entered promiscuous mode [ 108.891471][ T1017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.891493][ T1017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.948297][ T5800] veth1_vlan: entered promiscuous mode [ 109.011116][ T5798] veth0_macvtap: entered promiscuous mode [ 109.026521][ T1017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.026543][ T1017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.057074][ T5799] veth0_vlan: entered promiscuous mode [ 109.070682][ T5798] veth1_macvtap: entered promiscuous mode [ 109.113696][ T5804] veth0_vlan: entered promiscuous mode [ 109.130279][ T5799] veth1_vlan: entered promiscuous mode [ 109.186700][ T5804] veth1_vlan: entered promiscuous mode [ 109.199816][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.227792][ T5800] veth0_macvtap: entered promiscuous mode [ 109.243752][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.255446][ T5800] veth1_macvtap: entered promiscuous mode [ 109.285429][ T1279] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.289057][ T1279] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.314575][ T1279] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.319428][ T1279] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.393673][ T5799] veth0_macvtap: entered promiscuous mode [ 109.454196][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.462077][ T5799] veth1_macvtap: entered promiscuous mode [ 109.719231][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.719929][ T5804] veth0_macvtap: entered promiscuous mode [ 110.498929][ T5804] veth1_macvtap: entered promiscuous mode [ 110.530329][ T69] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.547255][ T69] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.579544][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.579709][ T69] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.611643][ T69] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.630727][ T1017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.630749][ T1017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.703362][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.788187][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.824283][ T69] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.841452][ T69] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.852219][ T69] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.887031][ T69] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.906668][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.921062][ T1017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.921084][ T1017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.018290][ T69] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.048177][ T69] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.079745][ T69] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.127989][ T69] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.146931][ T158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.146954][ T158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.452513][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.452587][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.452705][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.842516][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.132071][ T1279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.132129][ T1279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.183459][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.184504][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.189448][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.243431][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.249709][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.252546][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.204482][ T37] audit: type=1326 audit(1768095201.226:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5927 comm="syz.2.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488f8bf749 code=0x7ffc0000 [ 114.209386][ T37] audit: type=1326 audit(1768095201.236:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5927 comm="syz.2.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488f8bf749 code=0x7ffc0000 [ 114.275631][ T37] audit: type=1326 audit(1768095201.306:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5927 comm="syz.2.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f488f8bf749 code=0x7ffc0000 [ 114.279194][ T37] audit: type=1326 audit(1768095201.306:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5927 comm="syz.2.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488f8bf749 code=0x7ffc0000 [ 114.280291][ T37] audit: type=1326 audit(1768095201.306:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5927 comm="syz.2.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488f8bf749 code=0x7ffc0000 [ 114.282191][ T37] audit: type=1326 audit(1768095201.306:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5927 comm="syz.2.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f488f8bf749 code=0x7ffc0000 [ 114.382490][ T37] audit: type=1326 audit(1768095201.376:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5927 comm="syz.2.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488f8bf749 code=0x7ffc0000 [ 114.382547][ T37] audit: type=1326 audit(1768095201.386:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5927 comm="syz.2.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488f8bf749 code=0x7ffc0000 [ 114.382592][ T37] audit: type=1326 audit(1768095201.386:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5927 comm="syz.2.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f488f8bf749 code=0x7ffc0000 [ 114.382635][ T37] audit: type=1326 audit(1768095201.386:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5927 comm="syz.2.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488f8bf749 code=0x7ffc0000 [ 114.562414][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.562436][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.632984][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.633006][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.717682][ T3461] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.717707][ T3461] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.809308][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.809331][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.604015][ T5946] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 118.484817][ T5960] netlink: 504 bytes leftover after parsing attributes in process `syz.3.11'. [ 118.650838][ T5963] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 121.597404][ T5963] Zero length message leads to an empty skb [ 122.908520][ T5813] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 124.621156][ T5813] usb 1-1: Using ep0 maxpacket: 32 [ 127.402734][ T5813] usb 1-1: device descriptor read/all, error -71 [ 131.732996][ T6043] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 137.842452][ T6069] tap0: tun_chr_ioctl cmd 1074025681 [ 137.847360][ T6069] tap0: tun_chr_ioctl cmd 35108 [ 138.026072][ T6071] netlink: 'syz.2.38': attribute type 1 has an invalid length. [ 138.033089][ T61] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 138.033143][ T61] CPU: 1 UID: 0 PID: 61 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 138.033170][ T61] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 138.033185][ T61] Workqueue: hci4 hci_rx_work [ 138.033235][ T61] Call Trace: [ 138.033249][ T61] [ 138.033259][ T61] dump_stack_lvl+0xe8/0x150 [ 138.033295][ T61] sysfs_create_dir_ns+0x259/0x280 [ 138.033327][ T61] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 138.033361][ T61] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 138.033398][ T61] ? rt_spin_unlock+0x161/0x200 [ 138.033433][ T61] kobject_add_internal+0x6b1/0xcd0 [ 138.033471][ T61] kobject_add+0x155/0x220 [ 138.033511][ T61] ? __pfx_kobject_add+0x10/0x10 [ 138.033546][ T61] ? get_device_parent+0x370/0x3a0 [ 138.033577][ T61] device_add+0x408/0xb80 [ 138.033607][ T61] hci_conn_add_sysfs+0xd5/0x210 [ 138.033646][ T61] le_conn_complete_evt+0xf1d/0x1420 [ 138.033686][ T61] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 138.033715][ T61] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 138.033739][ T61] ? lockdep_hardirqs_on+0x7b/0x110 [ 138.033765][ T61] ? skb_pull_data+0xfb/0x200 [ 138.033804][ T61] hci_le_conn_complete_evt+0x187/0x480 [ 138.033840][ T61] hci_event_packet+0x78f/0x1260 [ 138.033866][ T61] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 138.033896][ T61] ? __pfx_hci_event_packet+0x10/0x10 [ 138.033918][ T61] ? rt_spin_unlock+0x150/0x200 [ 138.033968][ T61] ? hci_send_to_monitor+0xe2/0x590 [ 138.034002][ T61] hci_rx_work+0x3ee/0x1060 [ 138.034033][ T61] ? process_scheduled_works+0x9ef/0x1770 [ 138.034062][ T61] process_scheduled_works+0xad1/0x1770 [ 138.034122][ T61] ? __pfx_process_scheduled_works+0x10/0x10 [ 138.034146][ T61] ? do_raw_spin_lock+0x121/0x290 [ 138.034191][ T61] worker_thread+0x8a0/0xda0 [ 138.034248][ T61] kthread+0x711/0x8a0 [ 138.034282][ T61] ? __pfx_worker_thread+0x10/0x10 [ 138.034307][ T61] ? __pfx_kthread+0x10/0x10 [ 138.034334][ T61] ? rt_spin_unlock+0x150/0x200 [ 138.034370][ T61] ? rt_spin_unlock+0x161/0x200 [ 138.034398][ T61] ? __pfx_kthread+0x10/0x10 [ 138.034432][ T61] ret_from_fork+0x510/0xa50 [ 138.034459][ T61] ? __pfx_ret_from_fork+0x10/0x10 [ 138.034488][ T61] ? __switch_to+0xc9e/0x1480 [ 138.034527][ T61] ? __pfx_kthread+0x10/0x10 [ 138.034559][ T61] ret_from_fork_asm+0x1a/0x30 [ 138.034614][ T61] [ 138.034811][ T61] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 138.034855][ T61] Bluetooth: hci4: failed to register connection device [ 138.362352][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.362451][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 158.831265][ T6191] netlink: 12 bytes leftover after parsing attributes in process `syz.0.68'. [ 162.631121][ T6214] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 165.216701][ T6222] syz.3.73 (6222) used greatest stack depth: 17624 bytes left [ 166.942563][ T6238] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size. [ 168.773364][ T6244] syz.3.79 uses obsolete (PF_INET,SOCK_PACKET) [ 171.602583][ T6259] capability: warning: `syz.3.84' uses deprecated v2 capabilities in a way that may be insecure [ 175.074161][ T5802] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 175.108854][ T5802] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 175.579716][ T5802] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 175.639696][ T5802] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 175.640685][ T5802] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 177.944759][ T5802] Bluetooth: hci5: command tx timeout [ 179.987365][ T5802] Bluetooth: hci5: command tx timeout [ 183.057266][ T5802] Bluetooth: hci5: command tx timeout [ 183.512397][ T5869] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 183.662318][ T5869] usb 3-1: Using ep0 maxpacket: 16 [ 183.676101][ T5869] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 183.676175][ T5869] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 183.709835][ T5869] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 183.709946][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.709968][ T5869] usb 3-1: Product: syz [ 183.709984][ T5869] usb 3-1: Manufacturer: syz [ 183.709999][ T5869] usb 3-1: SerialNumber: syz [ 184.091483][ T5869] usb 3-1: 0:2 : does not exist [ 184.111690][ T5869] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 184.335894][ T5869] usb 3-1: USB disconnect, device number 2 [ 185.010045][ T5862] udevd[5862]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 185.167395][ T5802] Bluetooth: hci5: command tx timeout [ 187.001895][ T6041] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.155813][ T6282] chnl_net:caif_netlink_parms(): no params data found [ 188.491777][ T6041] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.263622][ T6041] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.167509][ T6041] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.688576][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.688654][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.105295][ T37] kauditd_printk_skb: 3 callbacks suppressed [ 200.105317][ T37] audit: type=1804 audit(1768095288.111:15): pid=6424 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.0.124" name="bus" dev="ramfs" ino=9802 res=1 errno=0 [ 201.357888][ T6282] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.361799][ T6282] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.362058][ T6282] bridge_slave_0: entered allmulticast mode [ 201.384299][ T6282] bridge_slave_0: entered promiscuous mode [ 201.424831][ T6282] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.424988][ T6282] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.425241][ T6282] bridge_slave_1: entered allmulticast mode [ 201.428117][ T6282] bridge_slave_1: entered promiscuous mode [ 201.562360][ T6033] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 202.533790][ T6033] usb 4-1: Using ep0 maxpacket: 32 [ 204.030274][ T6033] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.030375][ T6033] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 204.030422][ T6033] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 204.030447][ T6033] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.125918][ T6033] usb 4-1: config 0 descriptor?? [ 205.949781][ T6033] usb 4-1: can't set config #0, error -71 [ 205.989709][ T6033] usb 4-1: USB disconnect, device number 2 [ 206.047278][ T6282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.095971][ T6282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.634169][ T6282] team0: Port device team_slave_0 added [ 208.683457][ T6282] team0: Port device team_slave_1 added [ 209.214779][ T6041] bridge_slave_1: left allmulticast mode [ 209.214909][ T6041] bridge_slave_1: left promiscuous mode [ 209.216933][ T6041] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.375286][ T6453] overlayfs: failed to resolve './bus': -2 [ 209.436039][ T6041] bridge_slave_0: left allmulticast mode [ 209.436072][ T6041] bridge_slave_0: left promiscuous mode [ 209.436337][ T6041] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.736145][ T6476] ceph: No mds server is up or the cluster is laggy [ 217.738276][ T10] libceph: connect (1)[c::]:6789 error -101 [ 217.756622][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 222.746340][ T5812] Bluetooth: hci0: command 0x0406 tx timeout [ 222.746376][ T5812] Bluetooth: hci4: command 0x0406 tx timeout [ 222.746398][ T5812] Bluetooth: hci2: command 0x0406 tx timeout [ 222.746446][ T5806] Bluetooth: hci3: command 0x0406 tx timeout [ 227.360225][ T6041] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.568148][ T6041] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.666911][ T6041] bond0 (unregistering): Released all slaves [ 229.041126][ T6282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.041247][ T6282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 229.041368][ T6282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.785204][ T6282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.785225][ T6282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 229.785260][ T6282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.193869][ T61] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 235.197960][ T61] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 235.234038][ T61] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 235.235611][ T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 235.236397][ T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 237.492775][ T61] Bluetooth: hci1: command tx timeout [ 239.574029][ T61] Bluetooth: hci1: command tx timeout [ 243.035349][ T61] Bluetooth: hci1: command tx timeout [ 245.092515][ T61] Bluetooth: hci1: command tx timeout [ 246.888036][ T5811] libceph: connect (1)[c::]:6789 error -101 [ 246.888183][ T5811] libceph: mon0 (1)[c::]:6789 connect error [ 246.958729][ T6595] ceph: No mds server is up or the cluster is laggy [ 246.961081][ T5811] libceph: connect (1)[c::]:6789 error -101 [ 246.961228][ T5811] libceph: mon0 (1)[c::]:6789 connect error [ 247.211442][ T6041] hsr_slave_0: left promiscuous mode [ 247.326675][ T6041] hsr_slave_1: left promiscuous mode [ 247.327970][ T6041] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.328075][ T6041] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.236295][ T6041] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.236325][ T6041] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.061824][ T6041] veth1_macvtap: left promiscuous mode [ 251.062092][ T6041] veth0_macvtap: left promiscuous mode [ 251.181271][ T6041] veth1_vlan: left promiscuous mode [ 251.191516][ T6041] veth0_vlan: left promiscuous mode [ 253.269354][ T5802] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 253.285409][ T5802] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 253.307932][ T5802] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 253.315995][ T5802] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 253.322963][ T5802] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 255.731197][ T5802] Bluetooth: hci5: command tx timeout [ 255.817453][ T6626] ceph: No mds server is up or the cluster is laggy [ 255.830281][ T5941] libceph: connect (1)[c::]:6789 error -101 [ 256.187805][ T5941] libceph: mon0 (1)[c::]:6789 connect error [ 257.229021][ T6033] libceph: connect (1)[c::]:6789 error -101 [ 257.229293][ T6033] libceph: mon0 (1)[c::]:6789 connect error [ 257.739419][ T5802] Bluetooth: hci5: command tx timeout [ 258.860166][ T6640] kvm_intel: kvm [6639]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x75 [ 259.844737][ T5802] Bluetooth: hci5: command tx timeout [ 261.677307][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.677387][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.048901][ T5802] Bluetooth: hci5: command tx timeout [ 277.981820][ T6727] IPv6: Can't replace route, no match found [ 286.166343][ T6041] team0 (unregistering): Port device team_slave_1 removed [ 289.788683][ T6777] ======================================================= [ 289.788683][ T6777] WARNING: The mand mount option has been deprecated and [ 289.788683][ T6777] and is ignored by this kernel. Remove the mand [ 289.788683][ T6777] option from the mount to silence this warning. [ 289.788683][ T6777] ======================================================= [ 289.894661][ T6779] overlayfs: overlapping lowerdir path [ 292.270609][ T6041] team0 (unregistering): Port device team_slave_0 removed [ 295.916120][ T61] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 295.965493][ T61] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 295.976382][ T61] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 295.978200][ T61] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 295.979220][ T61] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 298.132492][ T61] Bluetooth: hci2: command tx timeout [ 300.472253][ T61] Bluetooth: hci2: command tx timeout [ 302.551377][ T61] Bluetooth: hci2: command tx timeout [ 304.709887][ T61] Bluetooth: hci2: command tx timeout [ 314.613138][ T5802] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 314.615811][ T5802] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 314.617073][ T5802] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 314.618809][ T5802] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 314.619710][ T5802] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 314.785000][ T6879] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 314.785044][ T6879] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 314.785065][ T6879] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 316.776904][ T61] Bluetooth: hci6: command tx timeout [ 319.104129][ T61] Bluetooth: hci6: command tx timeout [ 321.252630][ T61] Bluetooth: hci6: command tx timeout [ 323.681760][ T61] Bluetooth: hci6: command tx timeout [ 323.753099][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.753173][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 325.130837][ T6949] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 325.131641][ T6949] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 325.150216][ T6949] vhci_hcd vhci_hcd.0: Device attached [ 326.607691][ T6950] vhci_hcd: connection closed [ 326.687763][ T6405] vhci_hcd vhci_hcd.0: stop threads [ 326.688987][ T6405] vhci_hcd vhci_hcd.0: release socket [ 326.742504][ T6405] vhci_hcd vhci_hcd.0: disconnect device [ 328.953541][ T6890] chnl_net:caif_netlink_parms(): no params data found [ 331.200931][ T6798] chnl_net:caif_netlink_parms(): no params data found [ 331.233350][ T6982] netlink: 'syz.3.238': attribute type 21 has an invalid length. [ 333.320219][ T6890] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.321508][ T6890] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.321778][ T6890] bridge_slave_0: entered allmulticast mode [ 333.717253][ T61] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 333.717310][ T61] CPU: 1 UID: 0 PID: 61 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 333.717339][ T61] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 333.717355][ T61] Workqueue: hci3 hci_rx_work [ 333.717384][ T61] Call Trace: [ 333.717394][ T61] [ 333.717406][ T61] dump_stack_lvl+0xe8/0x150 [ 333.717441][ T61] sysfs_create_dir_ns+0x259/0x280 [ 333.717475][ T61] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 333.717508][ T61] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 333.717545][ T61] ? rt_spin_unlock+0x161/0x200 [ 333.717578][ T61] kobject_add_internal+0x6b1/0xcd0 [ 333.717617][ T61] kobject_add+0x155/0x220 [ 333.717642][ T61] ? rcu_is_watching+0x15/0xb0 [ 333.717668][ T61] ? __pfx_kobject_add+0x10/0x10 [ 333.717710][ T61] device_add+0x408/0xb80 [ 333.717742][ T61] hci_conn_add_sysfs+0xd5/0x210 [ 333.717781][ T61] le_conn_complete_evt+0xf1d/0x1420 [ 333.717821][ T61] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 333.717852][ T61] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 333.717876][ T61] ? lockdep_hardirqs_on+0x7b/0x110 [ 333.717901][ T61] ? skb_pull_data+0xfb/0x200 [ 333.717949][ T61] hci_le_conn_complete_evt+0x187/0x480 [ 333.717985][ T61] hci_event_packet+0x78f/0x1260 [ 333.718012][ T61] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 333.718012][ T61] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 333.718042][ T61] ? __pfx_hci_event_packet+0x10/0x10 [ 333.718065][ T61] ? preempt_schedule_common+0x83/0xd0 [ 333.718088][ T61] ? preempt_schedule_thunk+0x16/0x30 [ 333.718118][ T61] ? hci_send_to_monitor+0xe2/0x590 [ 333.718153][ T61] hci_rx_work+0x3ee/0x1060 [ 333.718178][ T61] ? preempt_schedule_thunk+0x16/0x30 [ 333.718209][ T61] ? process_scheduled_works+0x9ef/0x1770 [ 333.718237][ T61] process_scheduled_works+0xad1/0x1770 [ 333.718294][ T61] ? __pfx_process_scheduled_works+0x10/0x10 [ 333.718317][ T61] ? do_raw_spin_lock+0x121/0x290 [ 333.718360][ T61] worker_thread+0x8a0/0xda0 [ 333.718416][ T61] kthread+0x711/0x8a0 [ 333.718450][ T61] ? __pfx_worker_thread+0x10/0x10 [ 333.718475][ T61] ? __pfx_kthread+0x10/0x10 [ 333.718503][ T61] ? rt_spin_unlock+0x150/0x200 [ 333.718538][ T61] ? rt_spin_unlock+0x161/0x200 [ 333.718567][ T61] ? __pfx_kthread+0x10/0x10 [ 333.718599][ T61] ret_from_fork+0x510/0xa50 [ 333.718627][ T61] ? __pfx_ret_from_fork+0x10/0x10 [ 333.718649][ T61] ? __switch_to+0xc9e/0x1480 [ 333.718688][ T61] ? __pfx_kthread+0x10/0x10 [ 333.718721][ T61] ret_from_fork_asm+0x1a/0x30 [ 333.718775][ T61] [ 333.719127][ T61] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 333.719345][ T61] Bluetooth: hci3: failed to register connection device [ 333.988975][ T61] ================================================================== [ 333.988997][ T61] BUG: KASAN: slab-use-after-free in l2cap_connect_cfm+0x6d0/0x10e0 [ 333.989038][ T61] Read of size 8 at addr ffff888028c60500 by task kworker/u9:0/61 [ 333.989057][ T61] [ 333.989071][ T61] CPU: 1 UID: 0 PID: 61 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 333.989097][ T61] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 333.989112][ T61] Workqueue: hci3 hci_rx_work [ 333.989137][ T61] Call Trace: [ 333.989146][ T61] [ 333.989156][ T61] dump_stack_lvl+0xe8/0x150 [ 333.989187][ T61] print_report+0xca/0x240 [ 333.989214][ T61] ? l2cap_connect_cfm+0x6d0/0x10e0 [ 333.989244][ T61] kasan_report+0x118/0x150 [ 333.989279][ T61] ? l2cap_connect_cfm+0x6d0/0x10e0 [ 333.989313][ T61] l2cap_connect_cfm+0x6d0/0x10e0 [ 333.989349][ T61] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 333.989379][ T61] ? lockdep_hardirqs_on+0x7b/0x110 [ 333.989401][ T61] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 333.989424][ T61] ? mutex_lock_nested+0x154/0x1d0 [ 333.989453][ T61] ? hci_connect_cfm+0x2c/0x140 [ 333.989479][ T61] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 333.989517][ T61] hci_connect_cfm+0x95/0x140 [ 333.989549][ T61] le_conn_complete_evt+0xf65/0x1420 [ 333.989585][ T61] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 333.989614][ T61] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 333.989637][ T61] ? lockdep_hardirqs_on+0x7b/0x110 [ 333.989659][ T61] ? skb_pull_data+0xfb/0x200 [ 333.989697][ T61] hci_le_conn_complete_evt+0x187/0x480 [ 333.989727][ T61] hci_event_packet+0x78f/0x1260 [ 333.989750][ T61] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 333.989776][ T61] ? __pfx_hci_event_packet+0x10/0x10 [ 333.989797][ T61] ? preempt_schedule_common+0x83/0xd0 [ 333.989819][ T61] ? preempt_schedule_thunk+0x16/0x30 [ 333.989845][ T61] ? hci_send_to_monitor+0xe2/0x590 [ 333.989876][ T61] hci_rx_work+0x3ee/0x1060 [ 333.989898][ T61] ? preempt_schedule_thunk+0x16/0x30 [ 333.989923][ T61] ? process_scheduled_works+0x9ef/0x1770 [ 333.989957][ T61] process_scheduled_works+0xad1/0x1770 [ 333.989997][ T61] ? __pfx_process_scheduled_works+0x10/0x10 [ 333.990021][ T61] ? do_raw_spin_lock+0x121/0x290 [ 333.990055][ T61] worker_thread+0x8a0/0xda0 [ 333.990094][ T61] kthread+0x711/0x8a0 [ 333.990126][ T61] ? __pfx_worker_thread+0x10/0x10 [ 333.990151][ T61] ? __pfx_kthread+0x10/0x10 [ 333.990180][ T61] ? rt_spin_unlock+0x150/0x200 [ 333.990211][ T61] ? rt_spin_unlock+0x161/0x200 [ 333.990240][ T61] ? __pfx_kthread+0x10/0x10 [ 333.990270][ T61] ret_from_fork+0x510/0xa50 [ 333.990295][ T61] ? __pfx_ret_from_fork+0x10/0x10 [ 333.990317][ T61] ? __switch_to+0xc9e/0x1480 [ 333.990352][ T61] ? __pfx_kthread+0x10/0x10 [ 333.990382][ T61] ret_from_fork_asm+0x1a/0x30 [ 333.990423][ T61] [ 333.990432][ T61] [ 333.990437][ T61] Allocated by task 61: [ 333.990447][ T61] kasan_save_track+0x3e/0x80 [ 333.990475][ T61] __kasan_kmalloc+0x93/0xb0 [ 333.990503][ T61] __kmalloc_cache_noprof+0x1fb/0x6d0 [ 333.990531][ T61] l2cap_chan_create+0x51/0x7a0 [ 333.990563][ T61] l2cap_sock_new_connection_cb+0x182/0x2e0 [ 333.990594][ T61] l2cap_connect_cfm+0x367/0x10e0 [ 333.990620][ T61] hci_connect_cfm+0x95/0x140 [ 333.990642][ T61] le_conn_complete_evt+0xf65/0x1420 [ 333.990666][ T61] hci_le_conn_complete_evt+0x187/0x480 [ 333.990690][ T61] hci_event_packet+0x78f/0x1260 [ 333.990707][ T61] hci_rx_work+0x3ee/0x1060 [ 333.990724][ T61] process_scheduled_works+0xad1/0x1770 [ 333.990745][ T61] worker_thread+0x8a0/0xda0 [ 333.990766][ T61] kthread+0x711/0x8a0 [ 333.990791][ T61] ret_from_fork+0x510/0xa50 [ 333.990810][ T61] ret_from_fork_asm+0x1a/0x30 [ 333.990838][ T61] [ 333.990843][ T61] Freed by task 7002: [ 333.990852][ T61] kasan_save_track+0x3e/0x80 [ 333.990878][ T61] kasan_save_free_info+0x46/0x50 [ 333.990900][ T61] __kasan_slab_free+0x5c/0x80 [ 333.990934][ T61] kfree+0x1bd/0x900 [ 333.990958][ T61] l2cap_sock_cleanup_listen+0xf0/0x450 [ 333.990988][ T61] l2cap_sock_release+0x6e/0x270 [ 333.991015][ T61] sock_close+0xc3/0x240 [ 333.991043][ T61] __fput+0x45b/0xa80 [ 333.991064][ T61] task_work_run+0x1d4/0x260 [ 333.991092][ T61] exit_to_user_mode_loop+0xef/0x4e0 [ 333.991119][ T61] do_syscall_64+0x2c1/0xf80 [ 333.991138][ T61] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.991158][ T61] [ 333.991163][ T61] The buggy address belongs to the object at ffff888028c60000 [ 333.991163][ T61] which belongs to the cache kmalloc-2k of size 2048 [ 333.991181][ T61] The buggy address is located 1280 bytes inside of [ 333.991181][ T61] freed 2048-byte region [ffff888028c60000, ffff888028c60800) [ 333.991203][ T61] [ 333.991209][ T61] The buggy address belongs to the physical page: [ 333.991231][ T61] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28c60 [ 333.991252][ T61] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 333.991271][ T61] flags: 0x80000000000040(head|node=0|zone=1) [ 333.991295][ T61] page_type: f5(slab) [ 333.991315][ T61] raw: 0080000000000040 ffff88813ff27000 ffffea0001733000 dead000000000002 [ 333.991334][ T61] raw: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 333.991355][ T61] head: 0080000000000040 ffff88813ff27000 ffffea0001733000 dead000000000002 [ 333.991374][ T61] head: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 333.991394][ T61] head: 0080000000000003 ffffea0000a31801 00000000ffffffff 00000000ffffffff [ 333.991412][ T61] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 333.991424][ T61] page dumped because: kasan: bad access detected [ 333.991441][ T61] page_owner tracks the page as allocated [ 333.991449][ T61] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 805, tgid 805 (kworker/1:2), ts 110891197911, free_ts 110663681933 [ 333.991489][ T61] post_alloc_hook+0x234/0x290 [ 333.991517][ T61] get_page_from_freelist+0x28c0/0x2960 [ 333.991535][ T61] __alloc_frozen_pages_noprof+0x181/0x370 [ 333.991555][ T61] alloc_pages_mpol+0xd1/0x380 [ 333.991572][ T61] allocate_slab+0x86/0x3b0 [ 333.991594][ T61] ___slab_alloc+0xb10/0x13e0 [ 333.991613][ T61] __slab_alloc+0xc6/0x1f0 [ 333.991632][ T61] __kmalloc_cache_noprof+0x101/0x6d0 [ 333.991660][ T61] wg_noise_handshake_begin_session+0xcc/0xbe0 [ 333.991692][ T61] wg_packet_send_handshake_response+0x11d/0x2d0 [ 333.991715][ T61] wg_packet_handshake_receive_worker+0x6a6/0xf90 [ 333.991738][ T61] process_scheduled_works+0xad1/0x1770 [ 333.991759][ T61] worker_thread+0x8a0/0xda0 [ 333.991780][ T61] kthread+0x711/0x8a0 [ 333.991805][ T61] ret_from_fork+0x510/0xa50 [ 333.991824][ T61] ret_from_fork_asm+0x1a/0x30 [ 333.991852][ T61] page last free pid 5862 tgid 5862 stack trace: [ 333.991864][ T61] __free_frozen_pages+0xfe1/0x1170 [ 333.991892][ T61] __slab_free+0x2e6/0x330 [ 333.991914][ T61] qlist_free_all+0x97/0x100 [ 333.991947][ T61] kasan_quarantine_reduce+0x148/0x160 [ 333.991974][ T61] __kasan_slab_alloc+0x22/0x80 [ 333.992002][ T61] __kmalloc_cache_noprof+0x18d/0x6d0 [ 333.992030][ T61] kernfs_fop_open+0x39a/0xcb0 [ 333.992051][ T61] do_dentry_open+0x7d0/0x1270 [ 333.992071][ T61] vfs_open+0x3b/0x350 [ 333.992089][ T61] path_openat+0x342a/0x3df0 [ 333.992116][ T61] do_filp_open+0x1fa/0x410 [ 333.992143][ T61] do_sys_openat2+0x121/0x200 [ 333.992162][ T61] __x64_sys_openat+0x138/0x170 [ 333.992182][ T61] do_syscall_64+0xec/0xf80 [ 333.992202][ T61] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.992220][ T61] [ 333.992224][ T61] Memory state around the buggy address: [ 333.992255][ T61] ffff888028c60400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 333.992619][ T61] ffff888028c60480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 333.992633][ T61] >ffff888028c60500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 333.992652][ T61] ^ [ 333.992662][ T61] ffff888028c60580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 333.992729][ T61] ffff888028c60600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 333.992740][ T61] ================================================================== [ 334.196746][ T61] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 334.196825][ T61] CPU: 0 UID: 0 PID: 61 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 334.196898][ T61] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 334.196938][ T61] Workqueue: hci3 hci_rx_work [ 334.197010][ T61] Call Trace: [ 334.197032][ T61] [ 334.197061][ T61] vpanic+0x1e0/0x670 [ 334.197146][ T61] panic+0xb9/0xc0 [ 334.197220][ T61] ? __pfx_panic+0x10/0x10 [ 334.197295][ T61] ? preempt_schedule_thunk+0x16/0x30 [ 334.197368][ T61] ? l2cap_connect_cfm+0x6d0/0x10e0 [ 334.197463][ T61] check_panic_on_warn+0x89/0xb0 [ 334.197568][ T61] ? l2cap_connect_cfm+0x6d0/0x10e0 [ 334.197652][ T61] end_report+0x6f/0x140 [ 334.197736][ T61] kasan_report+0x129/0x150 [ 334.197821][ T61] ? l2cap_connect_cfm+0x6d0/0x10e0 [ 334.197915][ T61] l2cap_connect_cfm+0x6d0/0x10e0 [ 334.198008][ T61] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 334.198075][ T61] ? lockdep_hardirqs_on+0x7b/0x110 [ 334.198137][ T61] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 334.198198][ T61] ? mutex_lock_nested+0x154/0x1d0 [ 334.198270][ T61] ? hci_connect_cfm+0x2c/0x140 [ 334.198326][ T61] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 334.198406][ T61] hci_connect_cfm+0x95/0x140 [ 334.198470][ T61] le_conn_complete_evt+0xf65/0x1420 [ 334.198556][ T61] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 334.198624][ T61] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 334.198679][ T61] ? lockdep_hardirqs_on+0x7b/0x110 [ 334.198740][ T61] ? skb_pull_data+0xfb/0x200 [ 334.198846][ T61] hci_le_conn_complete_evt+0x187/0x480 [ 334.198944][ T61] hci_event_packet+0x78f/0x1260 [ 334.199005][ T61] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 334.199070][ T61] ? __pfx_hci_event_packet+0x10/0x10 [ 334.199122][ T61] ? preempt_schedule_common+0x83/0xd0 [ 334.199175][ T61] ? preempt_schedule_thunk+0x16/0x30 [ 334.199239][ T61] ? hci_send_to_monitor+0xe2/0x590 [ 334.199314][ T61] hci_rx_work+0x3ee/0x1060 [ 334.199376][ T61] ? preempt_schedule_thunk+0x16/0x30 [ 334.199431][ T61] ? process_scheduled_works+0x9ef/0x1770 [ 334.199501][ T61] process_scheduled_works+0xad1/0x1770 [ 334.199590][ T61] ? __pfx_process_scheduled_works+0x10/0x10 [ 334.199646][ T61] ? do_raw_spin_lock+0x121/0x290 [ 334.199724][ T61] worker_thread+0x8a0/0xda0 [ 334.199819][ T61] kthread+0x711/0x8a0 [ 334.199903][ T61] ? __pfx_worker_thread+0x10/0x10 [ 334.199965][ T61] ? __pfx_kthread+0x10/0x10 [ 334.200036][ T61] ? rt_spin_unlock+0x150/0x200 [ 334.200119][ T61] ? rt_spin_unlock+0x161/0x200 [ 334.200198][ T61] ? __pfx_kthread+0x10/0x10 [ 334.200288][ T61] ret_from_fork+0x510/0xa50 [ 334.200351][ T61] ? __pfx_ret_from_fork+0x10/0x10 [ 334.200405][ T61] ? __switch_to+0xc9e/0x1480 [ 334.200489][ T61] ? __pfx_kthread+0x10/0x10 [ 334.200569][ T61] ret_from_fork_asm+0x1a/0x30 [ 334.200679][ T61] [ 334.201318][ T61] Kernel Offset: disabled