last executing test programs: 26.220682232s ago: executing program 0 (id=1): openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendto$inet6(r0, 0x0, 0x0, 0x240880c0, &(0x7f0000000280)={0xa, 0xe20, 0x0, @mcast1}, 0x1c) sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) sendto$inet6(r0, 0x0, 0x0, 0x4010, 0x0, 0x0) 24.981649224s ago: executing program 0 (id=6): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x6f31, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000040)=0xbf, 0x4) r3 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) io_setup(0x9, &(0x7f0000000b80)=0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) io_submit(r4, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) socketpair$unix(0x1, 0x3, 0x0, 0x0) bind$isdn(r3, &(0x7f0000000080)={0x22, 0x8, 0x4, 0x2, 0x1b}, 0x6) recvmmsg(r1, &(0x7f00000068c0)=[{{0x0, 0x0, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003880)=""/207, 0xcf}, {0x0}, {0x0}], 0x4}, 0x3}], 0x1, 0x40000000, 0x0) bind$l2tp6(r1, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000040)={@multicast2, @loopback, 0x1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x29, 0x0, 0x0) 24.784126603s ago: executing program 3 (id=4): socketpair$unix(0x1, 0x3, 0x0, 0x0) prlimit64(0x0, 0x5, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$vim2m(0x0, 0x3, 0x2) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/wireless\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r2, &(0x7f0000002300)={0x2020}, 0x2020) sendto$inet(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x805, 0x0, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) socket$inet(0x2, 0xa, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c000000020605000000000000000000070000001400078008000840000000980800064020000000050001000600"], 0x5c}}, 0x20000010) 23.828456887s ago: executing program 2 (id=3): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x48) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2182, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x20000023896) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x1d, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfc, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3b}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x0, 0xc9c, 0xa, 0x60, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x7f, 0x7, 0x2, 0x0, 0x4, 0xe3, 0xffffffffffffffff}, {0xffffffff, 0x0, 0xf, 0x2}, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x90}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x101042, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r6, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x4000, 0xa00}]) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x439, 0x0, 0x60000, {0x0, 0x0, 0x0, r7, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r7}, @IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x8000000) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000180)={0x1000, 0x0, 0x4, 0x7}, 0x10) 23.601422172s ago: executing program 0 (id=7): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x5}, {0xfff1, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x40}}, 0x10) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r6, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c900"], 0x16) 22.024647743s ago: executing program 0 (id=8): bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYBLOB="0009df6187ea928a3385a8ba1400000000000000000000001d000000", @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="18"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 21.647514088s ago: executing program 1 (id=2): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x3) socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0xdddd0000, 0x1000, &(0x7f000000d000/0x1000)=nil}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x18, r4, 0x211, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) 21.166224979s ago: executing program 2 (id=9): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x48) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x20000023896) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x101042, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r6, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x4000, 0xa00}]) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x439, 0x0, 0x60000, {0x0, 0x0, 0x0, r7, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r7}, @IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x8000000) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000180)={0x1000, 0x0, 0x4, 0x7}, 0x10) 16.364543437s ago: executing program 2 (id=10): keyctl$set_reqkey_keyring(0xe, 0x4) request_key(&(0x7f0000000140)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000000)='g\x19k!\xf3\xa9\xf6&\x008\r\x86\xfch(\xe6\xa1', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f00000013c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x8000, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r2, 0x2a) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCFLSH(r3, 0x400455c8, 0x4) rseq(0x0, 0x4b, 0x0, 0x0) r4 = add_key(&(0x7f0000000340)='logon\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f00000062c0)="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", 0xfdc, 0xfffffffffffffffb) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f00000093c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x2022012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000069fa6b079a848a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba5234400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b60dd7710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048636662867d08f50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x80000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r9, 0x0, 0x0) syz_fuse_handle_req(r5, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="f00100000000000006000000000000000600000000000000030000000000000006000000000000000600000000000000ebee00000300000006000000000000000c0000000000000008000000000000000a00000000000000ff00000000000000f9ffffffffffffff02000000010000007d00000000c0000006000000", @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="0e0800000300000000000000050000000000000000000000000000000700000001f0ffff757365725f6964000100000000000000030000000000000005000000000000002c0000000000000002000000010001000500000000000000090000000000000004000000000000000010000000000000fb0000000000000038000000000000000c00000000002b000900000000100000030000e2", @ANYRESOCT, @ANYRES32=r8, @ANYRESDEC=r3, @ANYBLOB="bcb78b2c4e194b4d4d1d611116a0", @ANYRES32=r8, @ANYBLOB="040000000600000000000000040000000000000000010000000000000500000005000000407b5d2ed9000000"], 0x0, 0x0, 0x0}) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r4) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) 10.57785703s ago: executing program 0 (id=11): syz_usb_connect$lan78xx(0x3, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x4000080) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000740)=0xe) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000007c0)=0x18) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000380)={'syz1\x00', {0x0, 0x7fff, 0x2, 0x2}, 0x51, [0x3ff, 0x2, 0x10000, 0x0, 0x7ca6, 0x9, 0xc2ad, 0x4, 0x9, 0x9, 0x5, 0x9, 0x8, 0x200, 0x5, 0x3, 0x8, 0x5, 0xfffffff9, 0x6, 0x3, 0xfff, 0x7f, 0x4152, 0x8b3, 0x9, 0x861, 0x7, 0x5, 0x0, 0x3c, 0x4, 0x1005, 0x4, 0x8, 0x38, 0x8, 0x8, 0xd5bb, 0x3, 0x8001, 0x9de9, 0x8, 0x3, 0x3, 0x7f, 0x5, 0x8, 0x0, 0x1, 0x3ff, 0x6, 0x2e, 0x800, 0x846c, 0x3, 0x6, 0x31b, 0x8, 0xa, 0x1, 0x7, 0xffffffff, 0x3], [0x4a, 0x19a78cbf, 0xe936, 0x0, 0x200, 0x81, 0x2, 0x7d, 0x10001, 0x8, 0x3ff, 0x1, 0x7, 0x8f, 0x1, 0x5, 0x1ff, 0x200, 0x6f8, 0x7, 0xd, 0x7, 0x788, 0x6, 0x0, 0x0, 0x8, 0x3, 0x5, 0x2, 0xa, 0x7, 0x80, 0x5aa, 0xfffff000, 0x400, 0x2, 0x7, 0x6, 0x6, 0x5, 0x3, 0x87, 0x22e2, 0x502, 0xffffffff, 0x7, 0x1ff, 0x6, 0x10001, 0x9e, 0x1, 0x5, 0x101, 0xfffffffa, 0x0, 0x2, 0x2, 0x6, 0x1ff, 0x8, 0x3, 0x6], [0x2, 0x94da, 0xffffffff, 0x7, 0xc0000, 0x4, 0x4, 0xfffffffa, 0x6, 0x7, 0xea, 0x7, 0x6, 0x400, 0xfffeffff, 0xfc000000, 0x8, 0x8, 0xd1, 0x2, 0xb66, 0x3, 0x4, 0x52c, 0x4, 0x10001, 0xfffffff8, 0x2, 0x9, 0x1, 0x7, 0xe86, 0x8, 0x100, 0x7, 0x1, 0x746a6ffd, 0x3, 0x4, 0x0, 0x1, 0x45a6c325, 0x8, 0x10000, 0x1000, 0x2, 0x5, 0x0, 0x2, 0x2, 0x1, 0x8, 0x2, 0x2, 0x81, 0x200, 0x3ff, 0xffffffcc, 0x6, 0xa000000, 0x8, 0xfff, 0x4000, 0x1], [0x8, 0x7, 0x3, 0xfffffffc, 0x8000, 0x2, 0x8, 0x1ff, 0xfffffffe, 0x10, 0x5e, 0x2, 0x8, 0x8, 0x5, 0x8, 0xfb, 0xf25, 0xd, 0x1ff, 0x2, 0x95, 0x9, 0x9, 0x1, 0xc, 0xffff6f9e, 0x4, 0xfffffff7, 0x10000, 0x7, 0x52a, 0x5, 0xc1a4, 0x4, 0x8, 0x3, 0x9, 0x5, 0xb7af, 0x3, 0x4, 0x0, 0x1ff8, 0x2, 0x7, 0x6, 0x80000000, 0x652d, 0x7, 0x7fffffff, 0xd, 0x40, 0x3ff, 0xc, 0x1ff, 0x9, 0x6, 0x0, 0x1000, 0x9, 0x2, 0x9, 0x4]}, 0x45c) socket$nl_audit(0x10, 0x3, 0x9) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r5 = syz_clone(0x8240000, &(0x7f0000000280)="acd5294beba5ffe258eb6748cc5bd91e", 0x10, &(0x7f0000000340), &(0x7f0000000800), &(0x7f0000000880)="8df6c815b9f8e17941b63f258330606249d4b56038f3d0f3946af9abf88cb74f13042a709d24de10c0c60147065abb1382bbfb554ea9c71366d24b82142140965e498677cb8738c380ad41d32cab360fefaa") wait4(r5, 0x0, 0x20000000, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NL80211_CMD_DEL_PMKSA(r6, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f00000020c0)={0x1c, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4044000}, 0x8080) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0xc090}, 0x0) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x4) 10.38440367s ago: executing program 3 (id=12): syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xf635, 0x2000, 0x0, 0xfffffffc}, &(0x7f0000000240), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x5}, {0xfff1, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x40}}, 0x10) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r6, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c900"], 0x16) 10.18509126s ago: executing program 4 (id=5): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) fsopen(0x0, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r2, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r5, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000fff000800010015000800050025000000000008000400000000000c"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 9.795818352s ago: executing program 1 (id=13): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0500000004000000080000000c0000000000", @ANYRES32, @ANYBLOB="0009df6187ea928a3385a8ba140000000000000000", @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={&(0x7f0000000180)="484a1e9f0a296a1edda568735b175adba4a3682cabf4e8373bb7e7daf0dce87850ec769df0796230b08ed89fce6abe202dec401a3a8e7b87d7eaa3fda0984550f74589859ef7a5f516a584fa15cfcb2e45c1bb2c33905d9b03fec894fdb285c03c99a80e1e8f4a0401b76c6328d378f237ee3370dd0d60ffabbca116eb882e12e042b371f637108a6b2b", 0x0, &(0x7f00000003c0), 0x0, 0x1, r0}, 0x38) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="ef16", 0x0}, 0x50) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff08021100"], 0x6f4}}, 0x0) 8.426512642s ago: executing program 3 (id=14): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$update(0x2, r3, 0x0, 0x0) 3.930701813s ago: executing program 2 (id=15): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd81, &(0x7f00000035c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x24, 0xd73, 0x68, 0x0, 0x4, 0x88, 0x0, @local, @multicast2}, "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"}}}}, 0x0) 3.792917925s ago: executing program 4 (id=16): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0500000004000000080000000c0000000000", @ANYRES32, @ANYBLOB="0009df6187ea928a3385a8ba140000000000000000", @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={&(0x7f0000000180)="484a1e9f0a296a1edda568735b175adba4a3682cabf4e8373bb7e7daf0dce87850ec769df0796230b08ed89fce6abe202dec401a3a8e7b87d7eaa3fda0984550f74589859ef7a5f516a584fa15cfcb2e45c1bb2c33905d9b03fec894fdb285c03c99a80e1e8f4a0401b76c6328d378f237ee3370dd0d60ffabbca116eb882e12e042", 0x0, &(0x7f00000003c0), 0x0, 0x1, r0}, 0x38) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="18"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="ef16", 0x0}, 0x50) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.915006402s ago: executing program 0 (id=17): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x48) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x20000023896) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x1d, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfc, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3b}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x0, 0xc9c, 0xa, 0x60, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x7f, 0x7, 0x2, 0x0, 0x4, 0xe3, 0xffffffffffffffff}, {0xffffffff, 0x0, 0xf, 0x2}, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x90}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r6, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x4000, 0xa00}]) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x439, 0x0, 0x60000, {0x0, 0x0, 0x0, r7, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r7}, @IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x8000000) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000180)={0x1000, 0x0, 0x4, 0x7}, 0x10) 2.895000331s ago: executing program 3 (id=18): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$I2C(0x0, 0x1, 0x402) syz_80211_inject_frame(0x0, 0x0, 0x5f) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 2.646331411s ago: executing program 1 (id=19): socketpair$unix(0x1, 0x3, 0x0, 0x0) prlimit64(0x0, 0x5, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$vim2m(0x0, 0x3, 0x2) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/wireless\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r2, &(0x7f0000002300)={0x2020}, 0x2020) sendto$inet(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x805, 0x0, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) socket$inet(0x2, 0xa, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c000000020605000000000000000000070000001400078008000840000000980800064020000000050001000600"], 0x5c}}, 0x20000010) 2.645500057s ago: executing program 4 (id=20): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) 2.602562351s ago: executing program 2 (id=21): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2, 0x1}, 0x20) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='minix\x00', 0x0, 0x0) add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc4}, 0x0, 0x0, 0xffffffffffffffff) unshare(0x2c020400) open_tree(0xffffffffffffffff, &(0x7f0000000640)='\x00', 0x9901) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r4, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}, @IFLA_GRE_IKEY={0x8, 0x4, 0x3}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x4c}}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x6, 0x40}, {0xffff1000, 0x10000, 0xc, 0xeb, 0x2, 0x0, 0x0, 0x0, 0x7, 0x7}, {0xeeee0000, 0x1000, 0x9, 0x0, 0x7, 0xc4, 0x0, 0x0, 0x45, 0x3, 0x0, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0x1, 0x0, 0x9, 0x0, 0x3, 0x0, 0x4}, {0x6000, 0xffff1000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x3c}, {0xffff1000, 0x0, 0x0, 0x78, 0x5, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x7}, {0x0, 0xeeee8000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x20}, {0x0, 0x6000, 0x8, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x3}, {0xdddd1000, 0xfffd}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0x0, 0xf801, 0x41000, [0x80000001, 0x0, 0x1, 0xfffffffffffffffe]}) 421.922114ms ago: executing program 4 (id=22): syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xf635, 0x2000, 0x0, 0xfffffffc}, &(0x7f0000000240), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x5}, {0xfff1, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x40}}, 0x10) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r6, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c900"], 0x16) 0s ago: executing program 2 (id=23): syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xf635, 0x2000, 0x0, 0xfffffffc}, &(0x7f0000000240), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x5}, {0xfff1, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x40}}, 0x10) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r6, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c900"], 0x16) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.232' (ED25519) to the list of known hosts. [ 114.102278][ T5787] cgroup: Unknown subsys name 'net' [ 114.363794][ T5787] cgroup: Unknown subsys name 'cpuset' [ 114.398487][ T5787] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 116.616224][ T5787] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 119.425238][ T5814] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 119.439993][ T5816] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 119.444094][ T5816] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 119.446634][ T5816] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 119.455699][ T5816] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 119.466922][ T5816] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 119.485250][ T5816] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 119.495236][ T5817] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 119.503316][ T5816] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 119.504174][ T5816] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 119.507882][ T5819] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 119.508904][ T5819] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 119.509408][ T5819] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 119.528618][ T5819] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 119.528965][ T5819] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 119.531892][ T5817] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 119.540740][ T5116] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 119.553176][ T5819] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 119.580379][ T5819] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 119.608754][ T5116] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 119.614016][ T5819] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 119.615296][ T5819] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 119.620955][ T5812] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 119.630854][ T5812] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 119.631357][ T5817] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 120.946318][ T5802] chnl_net:caif_netlink_parms(): no params data found [ 121.039778][ T5804] chnl_net:caif_netlink_parms(): no params data found [ 121.200968][ T5805] chnl_net:caif_netlink_parms(): no params data found [ 121.244288][ T5801] chnl_net:caif_netlink_parms(): no params data found [ 121.308116][ T5803] chnl_net:caif_netlink_parms(): no params data found [ 121.510248][ T5802] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.511067][ T5802] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.511235][ T5802] bridge_slave_0: entered allmulticast mode [ 121.513265][ T5802] bridge_slave_0: entered promiscuous mode [ 121.583176][ T5802] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.583311][ T5802] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.583525][ T5802] bridge_slave_1: entered allmulticast mode [ 121.586412][ T5802] bridge_slave_1: entered promiscuous mode [ 121.597581][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.597821][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.598005][ T5804] bridge_slave_0: entered allmulticast mode [ 121.606625][ T5804] bridge_slave_0: entered promiscuous mode [ 121.632242][ T5814] Bluetooth: hci1: command tx timeout [ 121.708211][ T5814] Bluetooth: hci3: command tx timeout [ 121.715125][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.715269][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.715699][ T5804] bridge_slave_1: entered allmulticast mode [ 121.738417][ T5804] bridge_slave_1: entered promiscuous mode [ 121.788678][ T5806] Bluetooth: hci4: command tx timeout [ 121.788963][ T60] Bluetooth: hci0: command tx timeout [ 121.789106][ T5814] Bluetooth: hci2: command tx timeout [ 121.909422][ T5805] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.909639][ T5805] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.909884][ T5805] bridge_slave_0: entered allmulticast mode [ 121.912700][ T5805] bridge_slave_0: entered promiscuous mode [ 121.954174][ T5802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.980822][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.980952][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.981515][ T5801] bridge_slave_0: entered allmulticast mode [ 121.992420][ T5801] bridge_slave_0: entered promiscuous mode [ 122.044998][ T5805] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.045157][ T5805] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.045351][ T5805] bridge_slave_1: entered allmulticast mode [ 122.047680][ T5805] bridge_slave_1: entered promiscuous mode [ 122.073712][ T5802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.087781][ T5804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.088284][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.088667][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.089219][ T5801] bridge_slave_1: entered allmulticast mode [ 122.108015][ T5801] bridge_slave_1: entered promiscuous mode [ 122.135327][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.135694][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.136387][ T5803] bridge_slave_0: entered allmulticast mode [ 122.153745][ T5803] bridge_slave_0: entered promiscuous mode [ 122.225887][ T5804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.259666][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.259803][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.261437][ T5803] bridge_slave_1: entered allmulticast mode [ 122.264079][ T5803] bridge_slave_1: entered promiscuous mode [ 122.426122][ T5805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.442517][ T5802] team0: Port device team_slave_0 added [ 122.485307][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.504302][ T5802] team0: Port device team_slave_1 added [ 122.511406][ T5805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.523912][ T5804] team0: Port device team_slave_0 added [ 122.541721][ T5803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.545335][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.606337][ T5804] team0: Port device team_slave_1 added [ 122.618582][ T5803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.738488][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.738506][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.738533][ T5802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.742997][ T5805] team0: Port device team_slave_0 added [ 122.847244][ T5801] team0: Port device team_slave_0 added [ 122.848269][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.848283][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.848305][ T5802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.855904][ T5805] team0: Port device team_slave_1 added [ 122.871357][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.871410][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.871486][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.408743][ T5803] team0: Port device team_slave_0 added [ 123.443711][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.443728][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.443749][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.446660][ T5801] team0: Port device team_slave_1 added [ 123.456251][ T5803] team0: Port device team_slave_1 added [ 123.555522][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.555537][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.555557][ T5805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.638420][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.638445][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.638475][ T5805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.640672][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.640686][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.640705][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.685747][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.685809][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.685883][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.707836][ T5814] Bluetooth: hci1: command tx timeout [ 123.787896][ T5814] Bluetooth: hci3: command tx timeout [ 123.801635][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.801654][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.801681][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.826772][ T5802] hsr_slave_0: entered promiscuous mode [ 123.838363][ T5802] hsr_slave_1: entered promiscuous mode [ 123.846749][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.846802][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.846906][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.867912][ T5814] Bluetooth: hci2: command tx timeout [ 123.867945][ T5814] Bluetooth: hci0: command tx timeout [ 123.867965][ T5814] Bluetooth: hci4: command tx timeout [ 123.996085][ T5804] hsr_slave_0: entered promiscuous mode [ 123.997076][ T5804] hsr_slave_1: entered promiscuous mode [ 124.000052][ T5804] debugfs: 'hsr0' already exists in 'hsr' [ 124.000439][ T5804] Cannot create hsr debugfs directory [ 124.143033][ T5805] hsr_slave_0: entered promiscuous mode [ 124.143912][ T5805] hsr_slave_1: entered promiscuous mode [ 124.144752][ T5805] debugfs: 'hsr0' already exists in 'hsr' [ 124.144769][ T5805] Cannot create hsr debugfs directory [ 124.240029][ T5801] hsr_slave_0: entered promiscuous mode [ 124.241033][ T5801] hsr_slave_1: entered promiscuous mode [ 124.241714][ T5801] debugfs: 'hsr0' already exists in 'hsr' [ 124.241733][ T5801] Cannot create hsr debugfs directory [ 124.282061][ T5803] hsr_slave_0: entered promiscuous mode [ 124.283096][ T5803] hsr_slave_1: entered promiscuous mode [ 124.283810][ T5803] debugfs: 'hsr0' already exists in 'hsr' [ 124.283828][ T5803] Cannot create hsr debugfs directory [ 125.217673][ T5802] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 125.277510][ T5802] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 125.316938][ T5802] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 125.368191][ T5802] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 125.525727][ T5804] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 125.571933][ T5804] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 125.613618][ T5804] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 125.675133][ T5804] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 125.789803][ T60] Bluetooth: hci1: command tx timeout [ 125.847325][ T5805] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 125.872559][ T60] Bluetooth: hci3: command tx timeout [ 125.917455][ T5805] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 125.948339][ T60] Bluetooth: hci4: command tx timeout [ 125.948373][ T5806] Bluetooth: hci2: command tx timeout [ 125.954847][ T5814] Bluetooth: hci0: command tx timeout [ 125.956788][ T5805] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 126.056920][ T5805] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 126.252303][ T5801] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 126.303926][ T5801] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 126.337639][ T5801] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 126.405913][ T5801] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 126.564294][ T5802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.579910][ T5803] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 126.626021][ T5803] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 126.660153][ T5803] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 126.699139][ T5803] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 126.820949][ T5802] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.864248][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.896551][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.897498][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.965181][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.965950][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.055017][ T5804] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.077533][ T5805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.116564][ T179] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.116785][ T179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.167208][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.167432][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.224310][ T5805] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.271039][ T1547] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.271193][ T1547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.303807][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.341492][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.341865][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.510078][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.564953][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.612971][ T2248] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.613083][ T2248] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.704887][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.705052][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.809831][ T5803] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.871014][ T5814] Bluetooth: hci1: command tx timeout [ 127.877124][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.877444][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.948540][ T5814] Bluetooth: hci3: command tx timeout [ 127.981848][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.981986][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.028045][ T5814] Bluetooth: hci4: command tx timeout [ 128.028081][ T5814] Bluetooth: hci0: command tx timeout [ 128.028103][ T5814] Bluetooth: hci2: command tx timeout [ 128.035059][ T5802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.362597][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.517099][ T5802] veth0_vlan: entered promiscuous mode [ 128.586631][ T5802] veth1_vlan: entered promiscuous mode [ 128.632513][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.730433][ T5804] veth0_vlan: entered promiscuous mode [ 128.818963][ T5804] veth1_vlan: entered promiscuous mode [ 128.826242][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.846184][ T5802] veth0_macvtap: entered promiscuous mode [ 128.901763][ T5802] veth1_macvtap: entered promiscuous mode [ 128.954769][ T5805] veth0_vlan: entered promiscuous mode [ 128.995796][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.019998][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.039414][ T5805] veth1_vlan: entered promiscuous mode [ 129.044920][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.115990][ T5804] veth0_macvtap: entered promiscuous mode [ 129.158490][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.183809][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.205466][ T5804] veth1_macvtap: entered promiscuous mode [ 129.222305][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.249549][ T179] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.265049][ T5801] veth0_vlan: entered promiscuous mode [ 129.458955][ T5801] veth1_vlan: entered promiscuous mode [ 129.515282][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.557355][ T5805] veth0_macvtap: entered promiscuous mode [ 129.581880][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.617262][ T5805] veth1_macvtap: entered promiscuous mode [ 129.652105][ T179] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.670947][ T179] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.712721][ T179] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.752759][ T179] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.793954][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.793979][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.920320][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.065887][ T5801] veth0_macvtap: entered promiscuous mode [ 130.083958][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.105970][ T2248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.105993][ T2248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.188711][ T5803] veth0_vlan: entered promiscuous mode [ 130.224925][ T5801] veth1_macvtap: entered promiscuous mode [ 130.247053][ T179] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.265900][ T179] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.300271][ T179] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.321452][ T179] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.384505][ T5803] veth1_vlan: entered promiscuous mode [ 130.399692][ T179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.399716][ T179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.605533][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.690362][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.690386][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.696244][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.792747][ T67] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.794201][ T67] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.794417][ T67] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.794611][ T67] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.046747][ T5803] veth0_macvtap: entered promiscuous mode [ 132.116371][ T3570] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.116395][ T3570] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.170633][ T5803] veth1_macvtap: entered promiscuous mode [ 132.318292][ T5925] netlink: 'syz.0.6': attribute type 4 has an invalid length. [ 132.443245][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.455388][ T2248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.455412][ T2248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.561429][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.657869][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 132.659019][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 132.698784][ T5929] warning: `syz.3.4' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 132.701988][ T5929] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET) [ 132.707428][ T5929] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4'. [ 132.751238][ T68] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.751479][ T68] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.753941][ T68] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.753999][ T68] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.757806][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 132.844782][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.844800][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.420921][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.420947][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.646688][ T5806] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 134.646757][ T5806] CPU: 1 UID: 0 PID: 5806 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 134.646810][ T5806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 134.646826][ T5806] Workqueue: hci1 hci_rx_work [ 134.646886][ T5806] Call Trace: [ 134.646899][ T5806] [ 134.646911][ T5806] dump_stack_lvl+0xe8/0x150 [ 134.646949][ T5806] sysfs_create_dir_ns+0x271/0x2a0 [ 134.646975][ T5806] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 134.647002][ T5806] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 134.647040][ T5806] ? rt_spin_unlock+0x160/0x200 [ 134.647068][ T5806] kobject_add_internal+0x631/0xd10 [ 134.647113][ T5806] kobject_add+0x163/0x240 [ 134.647152][ T5806] ? __pfx_kobject_add+0x10/0x10 [ 134.647202][ T5806] ? get_device_parent+0x370/0x3a0 [ 134.647241][ T5806] device_add+0x408/0xb80 [ 134.647279][ T5806] hci_conn_add_sysfs+0xd5/0x210 [ 134.647310][ T5806] le_conn_complete_evt+0xf1d/0x1430 [ 134.647355][ T5806] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 134.647391][ T5806] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 134.647422][ T5806] ? lockdep_hardirqs_on+0x7a/0x110 [ 134.647455][ T5806] ? skb_pull_data+0xfb/0x200 [ 134.647494][ T5806] hci_le_conn_complete_evt+0x187/0x470 [ 134.647537][ T5806] hci_event_packet+0x7af/0x12c0 [ 134.647572][ T5806] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 134.647604][ T5806] ? __pfx_hci_event_packet+0x10/0x10 [ 134.647632][ T5806] ? preempt_schedule_common+0x82/0xd0 [ 134.647662][ T5806] ? preempt_schedule_thunk+0x16/0x30 [ 134.647787][ T5806] ? hci_send_to_monitor+0xe2/0x590 [ 134.647810][ T5806] hci_rx_work+0x3ee/0x1030 [ 134.647838][ T5806] ? preempt_schedule_thunk+0x16/0x30 [ 134.647865][ T5806] ? process_scheduled_works+0xa25/0x1830 [ 134.647896][ T5806] process_scheduled_works+0xb02/0x1830 [ 134.647956][ T5806] ? __pfx_process_scheduled_works+0x10/0x10 [ 134.647995][ T5806] ? assign_work+0x3d5/0x5e0 [ 134.648032][ T5806] worker_thread+0xa50/0xfc0 [ 134.648094][ T5806] kthread+0x388/0x470 [ 134.648236][ T5806] ? __pfx_worker_thread+0x10/0x10 [ 134.648280][ T5806] ? __pfx_kthread+0x10/0x10 [ 134.648307][ T5806] ret_from_fork+0x51e/0xb90 [ 134.648345][ T5806] ? __pfx_ret_from_fork+0x10/0x10 [ 134.648377][ T5806] ? __switch_to+0xc7d/0x1450 [ 134.648411][ T5806] ? __pfx_kthread+0x10/0x10 [ 134.648437][ T5806] ret_from_fork_asm+0x1a/0x30 [ 134.648477][ T5806] [ 134.648666][ T5806] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 134.648710][ T5806] Bluetooth: hci1: failed to register connection device [ 135.796974][ T2248] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.796998][ T2248] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.961395][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.961419][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.372933][ T5953] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 138.644856][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.646098][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 146.737889][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 147.210136][ T37] audit: type=1326 audit(1772530667.170:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5957 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8279fc799 code=0x7ffc0000 [ 147.210607][ T37] audit: type=1326 audit(1772530667.170:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5957 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8279fc799 code=0x7ffc0000 [ 147.955082][ T5806] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 147.955111][ T5806] CPU: 0 UID: 0 PID: 5806 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 147.955137][ T5806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 147.955152][ T5806] Workqueue: hci3 hci_rx_work [ 147.955188][ T5806] Call Trace: [ 147.955197][ T5806] [ 147.955207][ T5806] dump_stack_lvl+0xe8/0x150 [ 147.955247][ T5806] sysfs_create_dir_ns+0x271/0x2a0 [ 147.955274][ T5806] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 147.955301][ T5806] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 147.955330][ T5806] ? rt_spin_unlock+0x160/0x200 [ 147.955357][ T5806] kobject_add_internal+0x631/0xd10 [ 147.955401][ T5806] kobject_add+0x163/0x240 [ 147.955442][ T5806] ? __pfx_kobject_add+0x10/0x10 [ 147.955483][ T5806] ? get_device_parent+0x370/0x3a0 [ 147.955522][ T5806] device_add+0x408/0xb80 [ 147.955560][ T5806] hci_conn_add_sysfs+0xd5/0x210 [ 147.955592][ T5806] le_conn_complete_evt+0xf1d/0x1430 [ 147.955639][ T5806] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 147.955676][ T5806] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 147.955708][ T5806] ? lockdep_hardirqs_on+0x7a/0x110 [ 147.955741][ T5806] ? skb_pull_data+0xfb/0x200 [ 147.955781][ T5806] hci_le_conn_complete_evt+0x187/0x470 [ 147.955823][ T5806] hci_event_packet+0x7af/0x12c0 [ 147.955859][ T5806] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 147.955893][ T5806] ? __pfx_hci_event_packet+0x10/0x10 [ 147.955921][ T5806] ? rt_spin_unlock+0x14f/0x200 [ 147.955956][ T5806] ? hci_send_to_monitor+0xe2/0x590 [ 147.955993][ T5806] hci_rx_work+0x3ee/0x1030 [ 147.956031][ T5806] ? process_scheduled_works+0xa25/0x1830 [ 147.956067][ T5806] process_scheduled_works+0xb02/0x1830 [ 147.956130][ T5806] ? __pfx_process_scheduled_works+0x10/0x10 [ 147.956170][ T5806] ? assign_work+0x3d5/0x5e0 [ 147.956206][ T5806] worker_thread+0xa50/0xfc0 [ 147.956277][ T5806] kthread+0x388/0x470 [ 147.956302][ T5806] ? __pfx_worker_thread+0x10/0x10 [ 147.956332][ T5806] ? __pfx_kthread+0x10/0x10 [ 147.956357][ T5806] ret_from_fork+0x51e/0xb90 [ 147.956395][ T5806] ? __pfx_ret_from_fork+0x10/0x10 [ 147.956425][ T5806] ? __switch_to+0xc7d/0x1450 [ 147.956459][ T5806] ? __pfx_kthread+0x10/0x10 [ 147.956485][ T5806] ret_from_fork_asm+0x1a/0x30 [ 147.956526][ T5806] [ 147.956556][ T5806] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 147.956596][ T5806] Bluetooth: hci3: failed to register connection device [ 148.378097][ T37] audit: type=1326 audit(1772530668.260:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5957 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fe8279fc799 code=0x7ffc0000 [ 148.378165][ T37] audit: type=1326 audit(1772530668.260:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5957 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8279fc799 code=0x7ffc0000 [ 148.378197][ T37] audit: type=1326 audit(1772530668.260:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5957 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fe8279fc799 code=0x7ffc0000 [ 148.378228][ T37] audit: type=1326 audit(1772530668.260:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5957 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8279fc799 code=0x7ffc0000 [ 148.378258][ T37] audit: type=1326 audit(1772530668.260:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5957 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8279fc799 code=0x7ffc0000 [ 148.378289][ T37] audit: type=1326 audit(1772530668.260:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5957 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fe8279fc799 code=0x7ffc0000 [ 148.378358][ T37] audit: type=1326 audit(1772530668.260:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5957 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8279fc799 code=0x7ffc0000 [ 148.378401][ T37] audit: type=1326 audit(1772530668.260:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5957 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8279fc799 code=0x7ffc0000 [ 148.686349][ T5973] Zero length message leads to an empty skb [ 149.127773][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 149.407810][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 149.407850][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 149.507802][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 150.369277][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 151.997762][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 154.430275][ T5997] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.149354][ T6013] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 157.244121][ T5814] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 157.244184][ T5814] CPU: 0 UID: 0 PID: 5814 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 157.244214][ T5814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 157.244232][ T5814] Workqueue: hci2 hci_rx_work [ 157.244270][ T5814] Call Trace: [ 157.244280][ T5814] [ 157.244292][ T5814] dump_stack_lvl+0xe8/0x150 [ 157.244331][ T5814] sysfs_create_dir_ns+0x271/0x2a0 [ 157.244358][ T5814] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 157.244386][ T5814] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 157.244430][ T5814] ? rt_spin_unlock+0x160/0x200 [ 157.244473][ T5814] kobject_add_internal+0x631/0xd10 [ 157.244519][ T5814] kobject_add+0x163/0x240 [ 157.244564][ T5814] ? __pfx_kobject_add+0x10/0x10 [ 157.244622][ T5814] ? get_device_parent+0x370/0x3a0 [ 157.244663][ T5814] device_add+0x408/0xb80 [ 157.244701][ T5814] hci_conn_add_sysfs+0xd5/[ 157.244701][ T5814] hci_conn_add_sysfs+0xd5/0x210 [ 157.244733][ T5814] le_conn_complete_evt+0xf1d/0x1430 [ 157.244779][ T5814] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 157.244826][ T5814] ? skb_pull_data+0x11c/0x200 [ 157.244870][ T5814] hci_le_conn_complete_evt+0x187/0x470 [ 157.244913][ T5814] hci_event_packet+0x7af/0x12c0 [ 157.244950][ T5814] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 157.244983][ T5814] ? __pfx_hci_event_packet+0x10/0x10 [ 157.245012][ T5814] ? preempt_schedule_common+0x82/0xd0 [ 157.245042][ T5814] ? preempt_schedule_thunk+0x16/0x30 [ 157.245086][ T5814] ? hci_send_to_monitor+0xe2/0x590 [ 157.245119][ T5814] hci_rx_work+0x3ee/0x1030 [ 157.245151][ T5814] ? preempt_schedule_thunk+0x16/0x30 [ 157.245182][ T5814] ? process_scheduled_works+0xa25/0x1830 [ 157.245217][ T5814] process_scheduled_works+0xb02/0x1830 [ 157.245281][ T5814] ? __pfx_process_scheduled_works+0x10/0x10 [ 157.245320][ T5814] ? assign_work+0x3d5/0x5e0 [ 157.245357][ T5814] worker_thread+0xa50/0xfc0 [ 157.245420][ T5814] kthread+0x388/0x470 [ 157.245444][ T5814] ? __pfx_worker_thread+0x10/0x10 [ 157.245473][ T5814] ? __pfx_kthread+0x10/0x10 [ 157.245499][ T5814] ret_from_fork+0x51e/0xb90 [ 157.245534][ T5814] ? __pfx_ret_from_fork+0x10/0x10 [ 157.245564][ T5814] ? __switch_to+0xc7d/0x1450 [ 157.245597][ T5814] ? __pfx_kthread+0x10/0x10 [ 157.245623][ T5814] ret_from_fork_asm+0x1a/0x30 [ 157.245664][ T5814] [ 157.246011][ T5814] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 157.246315][ T5814] Bluetooth: hci2: failed to register connection device [ 157.535060][ T5814] ================================================================== [ 157.535082][ T5814] BUG: KASAN: slab-use-after-free in l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 157.535122][ T5814] Read of size 8 at addr ffff88805fa6d7b0 by task kworker/u9:4/5814 [ 157.535142][ T5814] [ 157.535156][ T5814] CPU: 0 UID: 0 PID: 5814 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 157.535182][ T5814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 157.535199][ T5814] Workqueue: hci2 hci_rx_work [ 157.535230][ T5814] Call Trace: [ 157.535240][ T5814] [ 157.535251][ T5814] dump_stack_lvl+0xe8/0x150 [ 157.535287][ T5814] print_report+0xba/0x230 [ 157.535316][ T5814] ? l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 157.535343][ T5814] kasan_report+0x117/0x150 [ 157.535379][ T5814] ? l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 157.535411][ T5814] l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 157.535440][ T5814] l2cap_connect_cfm+0x368/0x1390 [ 157.535468][ T5814] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 157.535491][ T5814] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 157.535522][ T5814] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 157.535546][ T5814] ? hci_connect_cfm+0x86/0x140 [ 157.535580][ T5814] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 157.535603][ T5814] hci_connect_cfm+0x95/0x140 [ 157.535638][ T5814] le_conn_complete_evt+0xf65/0x1430 [ 157.535679][ T5814] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 157.535716][ T5814] ? skb_pull_data+0x11c/0x200 [ 157.535755][ T5814] hci_le_conn_complete_evt+0x187/0x470 [ 157.535792][ T5814] hci_event_packet+0x7af/0x12c0 [ 157.535823][ T5814] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 157.535855][ T5814] ? __pfx_hci_event_packet+0x10/0x10 [ 157.535883][ T5814] ? preempt_schedule_common+0x82/0xd0 [ 157.535913][ T5814] ? preempt_schedule_thunk+0x16/0x30 [ 157.535942][ T5814] ? hci_send_to_monitor+0xe2/0x590 [ 157.535966][ T5814] hci_rx_work+0x3ee/0x1030 [ 157.535995][ T5814] ? preempt_schedule_thunk+0x16/0x30 [ 157.536022][ T5814] ? process_scheduled_works+0xa25/0x1830 [ 157.536054][ T5814] process_scheduled_works+0xb02/0x1830 [ 157.536101][ T5814] ? __pfx_process_scheduled_works+0x10/0x10 [ 157.536135][ T5814] ? assign_work+0x3d5/0x5e0 [ 157.536167][ T5814] worker_thread+0xa50/0xfc0 [ 157.536214][ T5814] kthread+0x388/0x470 [ 157.536238][ T5814] ? __pfx_worker_thread+0x10/0x10 [ 157.536267][ T5814] ? __pfx_kthread+0x10/0x10 [ 157.536290][ T5814] ret_from_fork+0x51e/0xb90 [ 157.536323][ T5814] ? __pfx_ret_from_fork+0x10/0x10 [ 157.536353][ T5814] ? __switch_to+0xc7d/0x1450 [ 157.536381][ T5814] ? __pfx_kthread+0x10/0x10 [ 157.536404][ T5814] ret_from_fork_asm+0x1a/0x30 [ 157.536434][ T5814] [ 157.536443][ T5814] [ 157.536448][ T5814] Allocated by task 5814: [ 157.536458][ T5814] kasan_save_track+0x3e/0x80 [ 157.536486][ T5814] __kasan_kmalloc+0x93/0xb0 [ 157.536526][ T5814] __kmalloc_noprof+0x3e7/0x7b0 [ 157.536557][ T5814] sk_prot_alloc+0xe7/0x210 [ 157.536583][ T5814] sk_alloc+0x3a/0x390 [ 157.536608][ T5814] bt_sock_alloc+0x3b/0x310 [ 157.536636][ T5814] l2cap_sock_new_connection_cb+0xe2/0x2e0 [ 157.536660][ T5814] l2cap_connect_cfm+0x368/0x1390 [ 157.536680][ T5814] hci_connect_cfm+0x95/0x140 [ 157.536708][ T5814] le_conn_complete_evt+0xf65/0x1430 [ 157.536739][ T5814] hci_le_conn_complete_evt+0x187/0x470 [ 157.536769][ T5814] hci_event_packet+0x7af/0x12c0 [ 157.536793][ T5814] hci_rx_work+0x3ee/0x1030 [ 157.536816][ T5814] process_scheduled_works+0xb02/0x1830 [ 157.536843][ T5814] worker_thread+0xa50/0xfc0 [ 157.536870][ T5814] kthread+0x388/0x470 [ 157.536889][ T5814] ret_from_fork+0x51e/0xb90 [ 157.536916][ T5814] ret_from_fork_asm+0x1a/0x30 [ 157.536934][ T5814] [ 157.536939][ T5814] Freed by task 6016: [ 157.536949][ T5814] kasan_save_track+0x3e/0x80 [ 157.536976][ T5814] kasan_save_free_info+0x46/0x50 [ 157.536998][ T5814] __kasan_slab_free+0x5c/0x80 [ 157.537027][ T5814] kfree+0x1c1/0x6c0 [ 157.537052][ T5814] __sk_destruct+0x626/0x880 [ 157.537078][ T5814] l2cap_sock_cleanup_listen+0xe0/0x440 [ 157.537101][ T5814] l2cap_sock_release+0x6e/0x270 [ 157.537121][ T5814] sock_close+0xc3/0x240 [ 157.537137][ T5814] __fput+0x461/0xa90 [ 157.537160][ T5814] task_work_run+0x1d9/0x270 [ 157.537181][ T5814] exit_to_user_mode_loop+0xed/0x480 [ 157.537211][ T5814] do_syscall_64+0x32d/0xf80 [ 157.537238][ T5814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.537267][ T5814] [ 157.537273][ T5814] The buggy address belongs to the object at ffff88805fa6d000 [ 157.537273][ T5814] which belongs to the cache kmalloc-2k of size 2048 [ 157.537292][ T5814] The buggy address is located 1968 bytes inside of [ 157.537292][ T5814] freed 2048-byte region [ffff88805fa6d000, ffff88805fa6d800) [ 157.537315][ T5814] [ 157.537321][ T5814] The buggy address belongs to the physical page: [ 157.537342][ T5814] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5fa68 [ 157.537363][ T5814] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 157.537382][ T5814] flags: 0x80000000000040(head|node=0|zone=1) [ 157.537405][ T5814] page_type: f5(slab) [ 157.537426][ T5814] raw: 0080000000000040 ffff88813fe1d000 dead000000000100 dead000000000122 [ 157.537446][ T5814] raw: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 157.537467][ T5814] head: 0080000000000040 ffff88813fe1d000 dead000000000100 dead000000000122 [ 157.537486][ T5814] head: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 157.537520][ T5814] head: 0080000000000003 ffffea00017e9a01 00000000ffffffff 00000000ffffffff [ 157.537539][ T5814] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 157.537550][ T5814] page dumped because: kasan: bad access detected [ 157.537567][ T5814] page_owner tracks the page as allocated [ 157.537575][ T5814] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5155, tgid 5155 (klogd), ts 121990074288, free_ts 0 [ 157.537613][ T5814] post_alloc_hook+0x231/0x280 [ 157.537643][ T5814] get_page_from_freelist+0x28bb/0x2950 [ 157.537665][ T5814] __alloc_frozen_pages_noprof+0x18d/0x380 [ 157.537686][ T5814] allocate_slab+0x77/0x660 [ 157.537712][ T5814] refill_objects+0x334/0x3c0 [ 157.537730][ T5814] __pcs_replace_empty_main+0x328/0x5f0 [ 157.537755][ T5814] __kmalloc_cache_noprof+0x44e/0x690 [ 157.537785][ T5814] syslog_print+0x103/0x610 [ 157.537808][ T5814] do_syslog+0x583/0x7d0 [ 157.537830][ T5814] __x64_sys_syslog+0x7c/0x90 [ 157.537852][ T5814] do_syscall_64+0x14d/0xf80 [ 157.537879][ T5814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.537900][ T5814] page_owner free stack trace missing [ 157.537908][ T5814] [ 157.537913][ T5814] Memory state around the buggy address: [ 157.537925][ T5814] ffff88805fa6d680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 157.537940][ T5814] ffff88805fa6d700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 157.537955][ T5814] >ffff88805fa6d780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 157.537966][ T5814] ^ [ 157.537978][ T5814] ffff88805fa6d800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 157.537993][ T5814] ffff88805fa6d880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 157.538004][ T5814] ================================================================== [ 157.538066][ T5814] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 157.538084][ T5814] CPU: 0 UID: 0 PID: 5814 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 157.538110][ T5814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 157.538125][ T5814] Workqueue: hci2 hci_rx_work [ 157.538154][ T5814] Call Trace: [ 157.538163][ T5814] [ 157.538172][ T5814] vpanic+0x56c/0xa60 [ 157.538209][ T5814] ? __pfx_vpanic+0x10/0x10 [ 157.538242][ T5814] ? irqentry_exit+0x59e/0x620 [ 157.538275][ T5814] panic+0xc5/0xd0 [ 157.538307][ T5814] ? __pfx_panic+0x10/0x10 [ 157.538339][ T5814] ? l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 157.538372][ T5814] ? l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 157.538397][ T5814] check_panic_on_warn+0x89/0xb0 [ 157.538422][ T5814] ? l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 157.538449][ T5814] end_report+0x73/0x180 [ 157.538482][ T5814] ? l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 157.538524][ T5814] kasan_report+0x128/0x150 [ 157.538559][ T5814] ? l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 157.538591][ T5814] l2cap_sock_new_connection_cb+0x1f9/0x2e0 [ 157.538620][ T5814] l2cap_connect_cfm+0x368/0x1390 [ 157.538648][ T5814] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 157.538671][ T5814] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 157.538693][ T5814] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 157.538715][ T5814] ? hci_connect_cfm+0x86/0x140 [ 157.538747][ T5814] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 157.538770][ T5814] hci_connect_cfm+0x95/0x140 [ 157.538804][ T5814] le_conn_complete_evt+0xf65/0x1430 [ 157.538844][ T5814] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 157.538886][ T5814] ? skb_pull_data+0x11c/0x200 [ 157.538924][ T5814] hci_le_conn_complete_evt+0x187/0x470 [ 157.538961][ T5814] hci_event_packet+0x7af/0x12c0 [ 157.538991][ T5814] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 157.539023][ T5814] ? __pfx_hci_event_packet+0x10/0x10 [ 157.539050][ T5814] ? preempt_schedule_common+0x82/0xd0 [ 157.539078][ T5814] ? preempt_schedule_thunk+0x16/0x30 [ 157.539118][ T5814] ? hci_send_to_monitor+0xe2/0x590 [ 157.539143][ T5814] hci_rx_work+0x3ee/0x1030 [ 157.539171][ T5814] ? preempt_schedule_thunk+0x16/0x30 [ 157.539198][ T5814] ? process_scheduled_works+0xa25/0x1830 [ 157.539230][ T5814] process_scheduled_works+0xb02/0x1830 [ 157.539275][ T5814] ? __pfx_process_scheduled_works+0x10/0x10 [ 157.539315][ T5814] ? assign_work+0x3d5/0x5e0 [ 157.539346][ T5814] worker_thread+0xa50/0xfc0 [ 157.539391][ T5814] kthread+0x388/0x470 [ 157.539421][ T5814] ? __pfx_worker_thread+0x10/0x10 [ 157.539456][ T5814] ? __pfx_kthread+0x10/0x10 [ 157.539479][ T5814] ret_from_fork+0x51e/0xb90 [ 157.539517][ T5814] ? __pfx_ret_from_fork+0x10/0x10 [ 157.539546][ T5814] ? __switch_to+0xc7d/0x1450 [ 157.539574][ T5814] ? __pfx_kthread+0x10/0x10 [ 157.539597][ T5814] ret_from_fork_asm+0x1a/0x30 [ 157.539627][ T5814] [ 157.540230][ T5814] Kernel Offset: disabled