last executing test programs: 30.84295297s ago: executing program 0 (id=22): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES32=0x0], 0x48) socket$inet_icmp(0x2, 0x2, 0x1) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x80180, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 24.124251199s ago: executing program 1 (id=31): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6(0xa, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) lseek(r3, 0x1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x94) 23.092337702s ago: executing program 4 (id=32): r0 = socket$inet6(0xa, 0x80002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x240880c0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xc001, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x2bc) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r4, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r5, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4080000}, 0x840) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) 20.73349957s ago: executing program 0 (id=33): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000000000/0x2000)=nil) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @remote}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000038c0)=@newtaction={0x18, 0x30, 0x9, 0x0, 0x25dfdbfc, {}, [{0x4}]}, 0x18}}, 0x0) r6 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r6, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x1, @empty}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000380)="0800fbfaffab2be7", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x1a92189d0dd42cd6) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 20.04873278s ago: executing program 4 (id=34): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x10) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001040)={0x44, &(0x7f0000000140)={0x20, 0x14, 0x2, "d817"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000580)={0x0, 0x16, 0x2, "f610"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000380)={0x18, &(0x7f0000000200)={0x40, 0x3, 0x1, '['}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_connect$midi(0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x202, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 19.965300487s ago: executing program 3 (id=35): openat$sequencer(0xffffffffffffff9c, 0x0, 0xc02, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) sched_getattr(r1, &(0x7f0000000440)={0x38}, 0x38, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c09c4, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) chdir(0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x220) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000001c0)="2dc8c6008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007"], 0x40}, 0x20000000) 19.872560741s ago: executing program 1 (id=36): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mkdir(0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) mkdirat(0xffffffffffffff9c, 0x0, 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x880, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.swap.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) 18.470523112s ago: executing program 3 (id=38): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x60, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x201, 0x0) 17.424465526s ago: executing program 0 (id=39): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0xc831, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(0x0, 0x100) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) close(r5) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) openat$binfmt(0xffffffffffffff9c, r4, 0x2, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000300)=0x20, 0x4) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv2(r6, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) 17.406595968s ago: executing program 1 (id=40): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000003c0)={0x6c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x22, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x0, @mcast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x0, 0x1, @l2={'ib', 0x3a, 'wg1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x0, 0x4, {{0x0, 0x1, @in6={0xa, 0x4e23, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}}, {0x0, 0x2, @in6={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x2}}}}]}]}, 0x6c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0xfffffffb) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000), 0x0, &(0x7f00000021c0)=[{0xfffffffffffffffc}], 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000100)=@ethtool_coalesce={0x50, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x0, 0x1, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}) r8 = syz_open_dev$mouse(&(0x7f0000000000), 0xfffffffffffffff8, 0x100) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl1\x00', r9, 0x700, 0x9b0, 0x4, 0xfffffc9e, {{0x5, 0x4, 0x2, 0xf, 0x14, 0x64, 0x0, 0x40, 0x29, 0x0, @multicast2, @multicast2}}}}) sendmmsg(r5, &(0x7f0000001c00), 0x400000000000159, 0x40840) 13.319540102s ago: executing program 1 (id=44): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/112, 0x70}, 0x12b}], 0x1, 0x42, &(0x7f0000002a00)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000006, 0x12, r3, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) 10.642929847s ago: executing program 0 (id=45): syz_open_procfs$pagemap(0x0, 0x0) openat$audio1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_procfs(0x0, 0x0) pread64(r4, 0x0, 0x0, 0x12c) listen(0xffffffffffffffff, 0x3) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x406f413, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x0) 10.641970191s ago: executing program 3 (id=46): openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x7c1c, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000003c0)={0xa, 0x4e24, 0x9, @mcast2, 0x80}, 0x1c) bind$inet6(r2, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xac800000}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 10.641683934s ago: executing program 4 (id=47): socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) unshare(0x22020600) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, 0x0, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) syz_emit_ethernet(0x288, &(0x7f0000000400)=ANY=[], 0x0) prlimit64(0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 9.56373825s ago: executing program 1 (id=49): r0 = socket$inet(0x2, 0xa, 0x10009) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d1) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') pread64(0xffffffffffffffff, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) setsockopt$sock_timeval(r0, 0x1, 0x57, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) sendto$inet(r0, &(0x7f0000002240), 0x0, 0x4004085, 0x0, 0x0) 7.439844978s ago: executing program 1 (id=51): r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8002, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa0e, 0xffffffff}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4004851) setsockopt(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f00000002c0)={0x28, 0x6, r5, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1}) ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, &(0x7f0000000140)={0xc, r5}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40108000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x105}, 0x20000000) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$rds(0x15, 0x5, 0x0) socket$kcm(0x2, 0xa, 0x2) write$tun(r6, &(0x7f0000000240)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x66, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local, {[@timestamp={0x44, 0x4, 0xa2, 0x0, 0x4}]}}, @timestamp={0xd, 0x0, 0x0, 0x11b, 0x1, 0xf, 0x3, 0x26f}}}, 0x3a) ioctl$IOMMU_VFIO_SET_IOMMU(r4, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r4, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="1800007f0000000000"]) socket$unix(0x1, 0x4, 0x0) 7.393016126s ago: executing program 4 (id=52): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x1, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x4, @multicast}, 0x10) sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, 0x0) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 7.391642949s ago: executing program 2 (id=53): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0xffffffff}, 0x6e) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000f43000/0x3000)=nil, 0x3000, 0x16) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000340)={'pcmmio\x00', [0x8005, 0x5, 0x0, 0x100, 0x27, 0xcc7, 0x8, 0x7, 0x3, 0xff, 0x0, 0x0, 0xa, 0x2, 0x7, 0x2009, 0xfffffffe, 0x40ed, 0x43, 0x40000003, 0x89, 0x6beab93e, 0xf27, 0x6, 0x800b, 0x4, 0x2, 0x0, 0x4fa7f95b, 0x5, 0x5149]}) ioctl$COMEDI_DEVINFO(r1, 0x80b06401, &(0x7f00000000c0)) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x80000001}, 0x31) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x44043, 0xfffffffe, 0x3, 0x3}, 0x3c) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc) syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x4b58, 0x5040, 0x1000000, 0xf7}, &(0x7f0000000040), &(0x7f0000000080)) syz_clone(0x50104100, 0x0, 0x0, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000001280)='/proc/consoles\x00', 0x0, 0x0) 6.682670703s ago: executing program 3 (id=54): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0xffffffff) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, 0x0, 0x8000) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x101402, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) socket$inet_sctp(0x2, 0x3, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x82e, 0x0, &(0x7f0000000180), &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0), 0x803, r3}, 0x38) mount(&(0x7f0000000540)=@nullb, &(0x7f0000000040)='.\x00', 0x0, 0x3008085, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) 3.896025185s ago: executing program 2 (id=55): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009058103"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r3, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = syz_io_uring_setup(0xb, &(0x7f00000002c0)={0x0, 0x200002f, 0x10000, 0x1, 0x100020b}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000300)=""/143) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0xe8, 0x2) syz_usb_control_io(r0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4004000) syz_usb_connect$cdc_ecm(0x5, 0x65, &(0x7f0000000140)=ANY=[@ANYBLOB="12010002020000100505a1a4400001020301090253000101bd60c20904008302020600030724060000368e05240002000d240f0140000000050002007f07240a070202050724147f00090008241c0c00030400090582024004ca01b2090503020004010706"], &(0x7f0000000280)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0xf7, 0xc5, 0xe, 0xff, 0x2}, 0x10, &(0x7f00000001c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x4, 0x20, 0x3, 0x7, 0x75b1, 0x6}]}, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xc0c}}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$nl_generic(0x10, 0x3, 0x10) 3.37322587s ago: executing program 4 (id=56): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000200)="3a85429c498eb5954dae45976c5d7843", 0x10}], 0x1, &(0x7f00000002c0)=ANY=[], 0x18, 0x24004000}, 0xc800) getpgrp(0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x44000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) timer_create(0x6, &(0x7f0000533fa0)={0x0, 0x41, 0x800000000004}, &(0x7f0000000340)=0x0) timer_settime(r1, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000040)={0x3, 0xfffffdfffffffff9}, &(0x7f00000001c0)) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0xffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f909, 0x8000, '\x00', @p_u32=0x0}}) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r2 = shmget$private(0x0, 0x800000, 0x0, &(0x7f0000173000/0x800000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) shmctl$SHM_LOCK(r2, 0xb) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) shmctl$SHM_UNLOCK(r2, 0xc) 2.449664254s ago: executing program 2 (id=57): r0 = socket$inet_udp(0x2, 0x2, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) r1 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000b24000/0x1000)=nil, 0x7ffffffa, 0x0, 0x0, 0x6, 0x0, 0x2, 0x44, 0x18}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) r2 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x400) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0485510, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r3 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r3}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 2.438178654s ago: executing program 0 (id=58): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x1003ff, 0x4) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000180), &(0x7f0000000200), 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r4 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000300)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r4, 0xc04064aa, &(0x7f00000003c0)={0x0, 0x0, r5}) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r4, 0x6430) ioctl$VHOST_SET_FEATURES(r8, 0x4008af00, &(0x7f0000000080)=0x200000000) dup2(r8, r6) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000180)={r2, r3, r5, 0x0, 0x0, 0x2, &(0x7f0000000140)=[0x0, 0x0]}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x938, 0x4) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0x1000}], 0x1, 0x40012002, 0x0) 2.324184953s ago: executing program 3 (id=59): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x4) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=']) chdir(&(0x7f0000000140)='./file0\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f000000e0c0), 0x10010) 2.228265454s ago: executing program 2 (id=60): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x33, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) geteuid() r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0xcc, 0xffffffff}, 0x3c) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@enum, @struct={0x0, 0x0, 0x0, 0x4, 0x1, 0xffff}]}}, 0x0, 0x32}, 0x28) timer_settime(0x0, 0x0, 0x0, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) pipe(&(0x7f0000000080)) setfsgid(0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='fd', &(0x7f00000000c0)='2', 0x0) getpid() 1.005047012s ago: executing program 3 (id=61): fcntl$lock(0xffffffffffffffff, 0x6, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', 0x0, 0x0) mknodat(r4, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000240)='./bus\x00', 0x0) chdir(&(0x7f0000000300)='./bus\x00') renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='./bus/file0\x00', 0x0) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r5, 0x0, 0x0) 313.577499ms ago: executing program 0 (id=62): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b1889b90f105d66b3e5a7c94742"}, 0x4, 0x4}) r3 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000000000)={0x6, {"e512864f2c63b42b1e937260904ce544", "b80b00", "98fed86df169f801002f69ff0008e800"}, 0x3ff, 0x5}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000001200)={0xd, 0x6a6f28e2e7c9f297, 0x2, 0x10}) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x0) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000070a01040000000000000000020000000c0003400000"], 0x38}, 0x1, 0x0, 0x0, 0x44044}, 0x4004) ioctl$sock_TIOCOUTQ(r1, 0x5411, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x41, 0x0) r5 = socket(0x3, 0x6, 0x1000) getsockopt$bt_hci(r5, 0x84, 0x75, &(0x7f0000000000)=""/4071, &(0x7f0000001080)=0xfe7) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r5) ioctl$SNAPSHOT_UNFREEZE(r4, 0x3302) getsockopt$sock_int(r0, 0x1, 0x39, &(0x7f0000000440), &(0x7f0000000480)=0x4) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={[{}, {}]}) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x0, 0x2, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20004055}, 0x82) sendmsg$NFT_BATCH(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000002240)=ANY=[@ANYBLOB="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"], 0x1760}, 0x1, 0x0, 0x0, 0x8000}, 0x4048805) bind$inet(r5, &(0x7f0000001000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 193.250974ms ago: executing program 2 (id=63): socket(0x10, 0x3, 0xfffffffd) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000380)={"b8e50a31a002b94fcd8fc4db3056309d", 0x0, 0x0, {0x7, 0x100}, {0x0, 0x5}, 0x51, [0x7, 0x6, 0xe, 0x2, 0x0, 0x1, 0xd8e, 0x7fc0000, 0x5, 0x0, 0x6, 0x3, 0x40000005, 0x49, 0xfffffffffffffffe, 0xc]}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000040), 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) 191.749443ms ago: executing program 4 (id=64): syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xf635, 0x2000, 0x0, 0xfffffffc}, &(0x7f0000000240), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x5}, {0xfff1, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x40}}, 0x10) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r6, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c900"], 0x16) 0s ago: executing program 2 (id=65): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', 0x0}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x38, &(0x7f0000000240)={0x20, 0x523}) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r5 = io_uring_setup(0xab1, &(0x7f0000000340)={0x0, 0xdf4, 0x10000, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) writev(r4, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.38' (ED25519) to the list of known hosts. [ 90.290333][ T5786] cgroup: Unknown subsys name 'net' [ 90.551085][ T5786] cgroup: Unknown subsys name 'cpuset' [ 90.615504][ T5786] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 92.126372][ T9] cfg80211: failed to load regulatory.db [ 92.633228][ T5786] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 95.093466][ T5118] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.104386][ T5118] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.112915][ T5118] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.127761][ T5807] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.129723][ T5807] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.130458][ T5807] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.132258][ T5807] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.166235][ T5803] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.168464][ T5803] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.185622][ T5803] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.193877][ T5803] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.196474][ T5803] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.211675][ T5803] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.222179][ T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.223360][ T5810] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.223815][ T5808] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 95.249490][ T5808] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 95.254379][ T5807] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 95.296240][ T5808] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.303829][ T5808] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.326649][ T5810] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.334526][ T5810] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 95.342989][ T5810] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.344145][ T5810] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 95.355170][ T5810] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 96.368500][ T5799] chnl_net:caif_netlink_parms(): no params data found [ 96.429585][ T5797] chnl_net:caif_netlink_parms(): no params data found [ 96.491427][ T5798] chnl_net:caif_netlink_parms(): no params data found [ 96.587228][ T5801] chnl_net:caif_netlink_parms(): no params data found [ 96.613201][ T5800] chnl_net:caif_netlink_parms(): no params data found [ 96.845031][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.846144][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.846311][ T5799] bridge_slave_0: entered allmulticast mode [ 96.848372][ T5799] bridge_slave_0: entered promiscuous mode [ 96.921822][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.921927][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.922069][ T5799] bridge_slave_1: entered allmulticast mode [ 96.923968][ T5799] bridge_slave_1: entered promiscuous mode [ 96.934674][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.934777][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.934936][ T5797] bridge_slave_0: entered allmulticast mode [ 96.940361][ T5797] bridge_slave_0: entered promiscuous mode [ 97.026254][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.026395][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.028608][ T5797] bridge_slave_1: entered allmulticast mode [ 97.030600][ T5797] bridge_slave_1: entered promiscuous mode [ 97.068208][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.068344][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.068477][ T5798] bridge_slave_0: entered allmulticast mode [ 97.070316][ T5798] bridge_slave_0: entered promiscuous mode [ 97.149161][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.150025][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.150384][ T5798] bridge_slave_1: entered allmulticast mode [ 97.152170][ T5798] bridge_slave_1: entered promiscuous mode [ 97.192558][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.217615][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.217835][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.218450][ T5801] bridge_slave_0: entered allmulticast mode [ 97.220293][ T5801] bridge_slave_0: entered promiscuous mode [ 97.270432][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.270576][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.270722][ T5800] bridge_slave_0: entered allmulticast mode [ 97.272791][ T5800] bridge_slave_0: entered promiscuous mode [ 97.297567][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.316351][ T60] Bluetooth: hci0: command tx timeout [ 97.316484][ T5803] Bluetooth: hci1: command tx timeout [ 97.322397][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.322951][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.327003][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.327637][ T5801] bridge_slave_1: entered allmulticast mode [ 97.345670][ T5801] bridge_slave_1: entered promiscuous mode [ 97.387222][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.387353][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.388223][ T5800] bridge_slave_1: entered allmulticast mode [ 97.390257][ T5800] bridge_slave_1: entered promiscuous mode [ 97.401020][ T60] Bluetooth: hci4: command tx timeout [ 97.401027][ T5810] Bluetooth: hci2: command tx timeout [ 97.401405][ T5803] Bluetooth: hci3: command tx timeout [ 97.446088][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.472763][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.544164][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.570703][ T5799] team0: Port device team_slave_0 added [ 97.593243][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.619099][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.621735][ T5799] team0: Port device team_slave_1 added [ 97.623968][ T5797] team0: Port device team_slave_0 added [ 97.655362][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.686118][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.712706][ T5797] team0: Port device team_slave_1 added [ 97.733405][ T5798] team0: Port device team_slave_0 added [ 97.800004][ T5798] team0: Port device team_slave_1 added [ 97.822207][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.822226][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.822246][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.889884][ T5801] team0: Port device team_slave_0 added [ 97.911281][ T5800] team0: Port device team_slave_0 added [ 97.912222][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.912239][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.912269][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.957816][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.957878][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.957956][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.974307][ T5801] team0: Port device team_slave_1 added [ 98.022032][ T5800] team0: Port device team_slave_1 added [ 98.039525][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.039540][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.039560][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.093138][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.093159][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.093198][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.182972][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.182994][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.183023][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.242457][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.242473][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.242493][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.307262][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.307280][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.307299][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.312026][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.312042][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.312061][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.990431][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.990448][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.990468][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.052308][ T5799] hsr_slave_0: entered promiscuous mode [ 99.053515][ T5799] hsr_slave_1: entered promiscuous mode [ 99.122895][ T5797] hsr_slave_0: entered promiscuous mode [ 99.123942][ T5797] hsr_slave_1: entered promiscuous mode [ 99.136644][ T5797] debugfs: 'hsr0' already exists in 'hsr' [ 99.136757][ T5797] Cannot create hsr debugfs directory [ 99.203235][ T5798] hsr_slave_0: entered promiscuous mode [ 99.204318][ T5798] hsr_slave_1: entered promiscuous mode [ 99.216221][ T5798] debugfs: 'hsr0' already exists in 'hsr' [ 99.216330][ T5798] Cannot create hsr debugfs directory [ 99.309646][ T5801] hsr_slave_0: entered promiscuous mode [ 99.310639][ T5801] hsr_slave_1: entered promiscuous mode [ 99.311599][ T5801] debugfs: 'hsr0' already exists in 'hsr' [ 99.311620][ T5801] Cannot create hsr debugfs directory [ 99.365635][ T5800] hsr_slave_0: entered promiscuous mode [ 99.366640][ T5800] hsr_slave_1: entered promiscuous mode [ 99.367334][ T5800] debugfs: 'hsr0' already exists in 'hsr' [ 99.367354][ T5800] Cannot create hsr debugfs directory [ 99.397571][ T60] Bluetooth: hci1: command tx timeout [ 99.397962][ T5803] Bluetooth: hci0: command tx timeout [ 99.474830][ T60] Bluetooth: hci3: command tx timeout [ 99.474837][ T5810] Bluetooth: hci4: command tx timeout [ 99.474994][ T5803] Bluetooth: hci2: command tx timeout [ 100.287945][ T5799] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 100.326917][ T5799] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 100.362117][ T5799] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 100.419572][ T5799] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 100.542904][ T5797] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 100.585947][ T5797] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 100.622854][ T5797] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 100.674023][ T5797] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 100.793055][ T5798] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.835417][ T5798] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.881017][ T5798] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.929013][ T5798] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 101.081329][ T5801] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 101.113078][ T5801] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 101.139525][ T5801] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 101.173379][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.198622][ T5801] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 101.338040][ T5800] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 101.370877][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.391133][ T5800] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 101.432078][ T5800] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 101.474801][ T5803] Bluetooth: hci0: command tx timeout [ 101.474835][ T5803] Bluetooth: hci1: command tx timeout [ 101.483539][ T5800] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 101.531811][ T3539] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.532600][ T3539] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.556161][ T5810] Bluetooth: hci4: command tx timeout [ 101.556193][ T60] Bluetooth: hci3: command tx timeout [ 101.556285][ T5803] Bluetooth: hci2: command tx timeout [ 101.611159][ T3539] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.611311][ T3539] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.679014][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.779450][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.825300][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.825442][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.831494][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.882619][ T985] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.882732][ T985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.991278][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.011117][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.062395][ T985] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.062610][ T985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.113562][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.113782][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.169052][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.228294][ T3504] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.228519][ T3504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.232039][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.281106][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.295823][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.393961][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.449137][ T1004] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.449352][ T1004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.462696][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.501874][ T1004] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.503417][ T1004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.801349][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.179729][ T5797] veth0_vlan: entered promiscuous mode [ 103.248104][ T5797] veth1_vlan: entered promiscuous mode [ 103.322342][ T5799] veth0_vlan: entered promiscuous mode [ 103.332634][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.396937][ T5799] veth1_vlan: entered promiscuous mode [ 103.420692][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.466791][ T5797] veth0_macvtap: entered promiscuous mode [ 103.495232][ T5797] veth1_macvtap: entered promiscuous mode [ 103.502143][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.555922][ T5810] Bluetooth: hci0: command tx timeout [ 103.555976][ T5803] Bluetooth: hci1: command tx timeout [ 103.609312][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.610498][ T5799] veth0_macvtap: entered promiscuous mode [ 103.613806][ T5798] veth0_vlan: entered promiscuous mode [ 103.634831][ T5803] Bluetooth: hci4: command tx timeout [ 103.645178][ T5803] Bluetooth: hci2: command tx timeout [ 103.645215][ T5803] Bluetooth: hci3: command tx timeout [ 103.680652][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.682821][ T5799] veth1_macvtap: entered promiscuous mode [ 103.737945][ T5798] veth1_vlan: entered promiscuous mode [ 103.739641][ T3520] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.761427][ T5801] veth0_vlan: entered promiscuous mode [ 103.764158][ T3520] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.788271][ T3520] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.806591][ T3520] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.889532][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.892997][ T5801] veth1_vlan: entered promiscuous mode [ 103.989685][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.993292][ T5800] veth0_vlan: entered promiscuous mode [ 104.093229][ T3520] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.105814][ T3520] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.125331][ T3520] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.144985][ T5800] veth1_vlan: entered promiscuous mode [ 104.146444][ T3520] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.228312][ T5798] veth0_macvtap: entered promiscuous mode [ 104.264434][ T3520] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.264459][ T3520] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.306635][ T5798] veth1_macvtap: entered promiscuous mode [ 104.379197][ T5801] veth0_macvtap: entered promiscuous mode [ 104.452043][ T3539] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.452065][ T3539] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.478948][ T5801] veth1_macvtap: entered promiscuous mode [ 104.558254][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.584726][ T3539] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.584748][ T3539] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.585525][ T5800] veth0_macvtap: entered promiscuous mode [ 104.629022][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.667925][ T5800] veth1_macvtap: entered promiscuous mode [ 104.691809][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.726978][ T3539] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.733556][ T3539] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.761360][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.761383][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.781569][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.781699][ T3539] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.814791][ T3539] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.886279][ T3539] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.947792][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.982178][ T3539] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.002514][ T3539] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.020590][ T3539] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.024225][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.389600][ T5951] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.392937][ T5951] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.525713][ T5951] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.548517][ T5951] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.691564][ T5959] netlink: 'syz.1.6': attribute type 4 has an invalid length. [ 107.913807][ T3594] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.913836][ T3594] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.812924][ T3549] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.812945][ T3549] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.975066][ T3520] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.975088][ T3520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.141388][ T3509] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.141412][ T3509] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.600201][ T3520] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.600225][ T3520] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.719529][ T5978] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 112.904911][ T5885] IPVS: starting estimator thread 0... [ 112.942732][ T3504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.942758][ T3504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.038889][ T5989] IPVS: using max 8 ests per chain, 19200 per kthread [ 113.325188][ T5991] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 119.225613][ T6000] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 119.407924][ T6000] usb 3-1: Using ep0 maxpacket: 16 [ 119.582227][ T6019] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 120.358964][ T6000] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 120.359015][ T6000] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.359056][ T6000] usb 3-1: Product: syz [ 120.359098][ T6000] usb 3-1: Manufacturer: syz [ 120.359137][ T6000] usb 3-1: SerialNumber: syz [ 120.794661][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 120.804632][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 120.814610][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 120.824600][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 120.834603][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 120.844602][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 124.174772][ T5885] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 124.657083][ T5885] usb 5-1: Using ep0 maxpacket: 32 [ 124.662524][ T5885] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 124.662554][ T5885] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 124.662701][ T5885] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 125.591220][ T6000] r8152-cfgselector 3-1: Unknown version 0x0000 [ 125.591251][ T6000] r8152-cfgselector 3-1: config 0 descriptor?? [ 125.623680][ T6000] r8152-cfgselector 3-1: can't set config #0, error -32 [ 126.144608][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 126.226879][ T5884] r8152-cfgselector 3-1: USB disconnect, device number 2 [ 126.365838][ T5885] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 126.365872][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.365912][ T5885] usb 5-1: Product: syz [ 126.403435][ T5885] usb 5-1: can't set config #1, error -71 [ 126.417079][ T5885] usb 5-1: USB disconnect, device number 2 [ 126.714905][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 126.724641][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 126.727311][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 130.194036][ T6074] Bluetooth: MGMT ver 1.23 [ 130.194073][ T6074] Bluetooth: hci0: invalid length 0, exp 2 for type 17 [ 130.415955][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 130.454858][ T6021] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 130.737958][ T6084] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 130.880464][ T6084] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 130.881061][ T6084] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 130.895050][ T6084] vhci_hcd vhci_hcd.0: Device attached [ 131.464871][ T5885] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 131.567065][ T6085] vhci_hcd: connection reset by peer [ 131.617911][ T3504] vhci_hcd vhci_hcd.1: stop threads [ 131.618610][ T3504] vhci_hcd vhci_hcd.1: release socket [ 131.673181][ T3504] vhci_hcd vhci_hcd.1: disconnect device [ 131.866100][ T6021] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.866154][ T6021] usb 4-1: New USB device found, idVendor=0596, idProduct=0506, bcdDevice= 0.00 [ 131.878527][ T6021] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.176289][ T6021] usb 4-1: config 0 descriptor?? [ 132.179380][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 132.217400][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 132.217438][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 132.217453][ T10] usb 3-1: Product: syz [ 132.217464][ T10] usb 3-1: Manufacturer: syz [ 132.217474][ T10] usb 3-1: SerialNumber: syz [ 132.287123][ T6021] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 133.087503][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.087599][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.377537][ T10] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 133.474495][ T10] usb 3-1: USB disconnect, device number 3 [ 133.588409][ T10] usblp0: removed [ 136.477368][ T6021] usb 4-1: USB disconnect, device number 2 [ 136.931446][ T5885] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 138.134714][ T6000] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 139.166701][ T6126] netlink: 16 bytes leftover after parsing attributes in process `syz.1.40'. [ 139.166908][ T6126] netlink: 30 bytes leftover after parsing attributes in process `syz.1.40'. [ 139.166935][ T6126] tipc: Invalid UDP bearer configuration [ 139.166979][ T6126] tipc: Enabling of bearer rejected, failed to enable media [ 141.266918][ T6132] process 'syz.0.39' launched './file1' with NULL argv: empty string added [ 145.375547][ T6137] syz.3.38 (6137) used greatest stack depth: 16112 bytes left [ 145.377076][ T6000] usb 5-1: Using ep0 maxpacket: 32 [ 145.771783][ T6000] usb 5-1: device descriptor read/all, error -71 [ 146.980213][ T6155] syz.1.49 uses obsolete (PF_INET,SOCK_PACKET) [ 148.309938][ T36] audit: type=1326 audit(1772547870.462:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6154 comm="syz.1.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4eb3c799 code=0x7ffc0000 [ 148.309996][ T36] audit: type=1326 audit(1772547870.462:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6154 comm="syz.1.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4eb3c799 code=0x7ffc0000 [ 148.310042][ T36] audit: type=1326 audit(1772547870.462:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6154 comm="syz.1.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4eb3c799 code=0x7ffc0000 [ 148.310086][ T36] audit: type=1326 audit(1772547870.462:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6154 comm="syz.1.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4eb3c799 code=0x7ffc0000 [ 148.310132][ T36] audit: type=1326 audit(1772547870.462:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6154 comm="syz.1.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f9e4eb3c799 code=0x7ffc0000 [ 148.311231][ T36] audit: type=1326 audit(1772547870.462:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6154 comm="syz.1.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4eb3c799 code=0x7ffc0000 [ 148.311279][ T36] audit: type=1326 audit(1772547870.462:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6154 comm="syz.1.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4eb3c799 code=0x7ffc0000 [ 148.311323][ T36] audit: type=1326 audit(1772547870.462:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6154 comm="syz.1.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4eb3c799 code=0x7ffc0000 [ 148.311370][ T36] audit: type=1326 audit(1772547870.462:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6154 comm="syz.1.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4eb3c799 code=0x7ffc0000 [ 148.311413][ T36] audit: type=1326 audit(1772547870.462:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6154 comm="syz.1.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f9e4eb3c799 code=0x7ffc0000 [ 153.874795][ T36] kauditd_printk_skb: 80 callbacks suppressed [ 153.874816][ T36] audit: type=1800 audit(1772547875.692:92): pid=6188 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.56" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 156.422051][ T6206] netlink: 24 bytes leftover after parsing attributes in process `syz.0.62'. [ 156.438718][ T6206] random: crng reseeded on system resumption [ 157.098428][ T5810] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 157.098541][ T5810] CPU: 1 UID: 0 PID: 5810 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 157.098570][ T5810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 157.098586][ T5810] Workqueue: hci1 hci_rx_work [ 157.098659][ T5810] Call Trace: [ 157.098674][ T5810] [ 157.098686][ T5810] dump_stack_lvl+0xe8/0x150 [ 157.098726][ T5810] sysfs_create_dir_ns+0x271/0x2a0 [ 157.098754][ T5810] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 157.098783][ T5810] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 157.098814][ T5810] ? rt_spin_unlock+0x160/0x200 [ 157.098814][ T5810] ? rt_spin_unlock+0x160/0x200 [ 157.098842][ T5810] kobject_add_internal+0x631/0xd10 [ 157.098893][ T5810] kobject_add+0x163/0x240 [ 157.098934][ T5810] ? __pfx_kobject_add+0x10/0x10 [ 157.098980][ T5810] ? get_device_parent+0x370/0x3a0 [ 157.099019][ T5810] device_add+0x408/0xb80 [ 157.099057][ T5810] hci_conn_add_sysfs+0xd5/0x210 [ 157.099089][ T5810] le_conn_complete_evt+0xf1d/0x1430 [ 157.099123][ T5810] ? lockdep_hardirqs_on+0x7a/0x110 [ 157.099159][ T5810] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 157.099199][ T5810] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 157.099232][ T5810] ? skb_pull_data+0xfb/0x200 [ 157.099272][ T5810] hci_le_conn_complete_evt+0x187/0x470 [ 157.099320][ T5810] hci_event_packet+0x7af/0x12c0 [ 157.099356][ T5810] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 157.099389][ T5810] ? __pfx_hci_event_packet+0x10/0x10 [ 157.099417][ T5810] ? preempt_schedule_common+0x82/0xd0 [ 157.099448][ T5810] ? preempt_schedule_thunk+0x16/0x30 [ 157.099480][ T5810] ? hci_send_to_monitor+0xe2/0x590 [ 157.099507][ T5810] hci_rx_work+0x3ee/0x1030 [ 157.099538][ T5810] ? preempt_schedule_thunk+0x16/0x30 [ 157.099568][ T5810] ? process_scheduled_works+0xa25/0x1830 [ 157.099604][ T5810] process_scheduled_works+0xb02/0x1830 [ 157.099760][ T5810] ? __pfx_process_scheduled_works+0x10/0x10 [ 157.099799][ T5810] ? assign_work+0x3d5/0x5e0 [ 157.099836][ T5810] worker_thread+0xa50/0xfc0 [ 157.099898][ T5810] kthread+0x388/0x470 [ 157.099924][ T5810] ? __pfx_worker_thread+0x10/0x10 [ 157.099953][ T5810] ? __pfx_kthread+0x10/0x10 [ 157.099979][ T5810] ret_from_fork+0x51e/0xb90 [ 157.100016][ T5810] ? __pfx_ret_from_fork+0x10/0x10 [ 157.100046][ T5810] ? __switch_to+0xc7d/0x1450 [ 157.100079][ T5810] ? __pfx_kthread+0x10/0x10 [ 157.100105][ T5810] ret_from_fork_asm+0x1a/0x30 [ 157.100145][ T5810] [ 157.100497][ T5810] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 157.100844][ T5810] Bluetooth: hci1: failed to register connection device [ 157.299047][ T5810] ================================================================== [ 157.299066][ T5810] BUG: KASAN: slab-use-after-free in l2cap_connect_cfm+0x86a/0x1390 [ 157.299101][ T5810] Read of size 8 at addr ffff88805d3da500 by task kworker/u9:5/5810 [ 157.299122][ T5810] [ 157.299136][ T5810] CPU: 1 UID: 0 PID: 5810 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 157.299168][ T5810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 157.299185][ T5810] Workqueue: hci1 hci_rx_work [ 157.299216][ T5810] Call Trace: [ 157.299225][ T5810] [ 157.299235][ T5810] dump_stack_lvl+0xe8/0x150 [ 157.299270][ T5810] print_report+0xba/0x230 [ 157.299301][ T5810] ? l2cap_connect_cfm+0x86a/0x1390 [ 157.299323][ T5810] kasan_report+0x117/0x150 [ 157.299359][ T5810] ? l2cap_connect_cfm+0x86a/0x1390 [ 157.299385][ T5810] l2cap_connect_cfm+0x86a/0x1390 [ 157.299413][ T5810] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 157.299441][ T5810] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 157.299464][ T5810] hci_connect_cfm+0x95/0x140 [ 157.299498][ T5810] le_conn_complete_evt+0xf65/0x1430 [ 157.299532][ T5810] ? lockdep_hardirqs_on+0x7a/0x110 [ 157.299567][ T5810] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 157.299603][ T5810] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 157.299635][ T5810] ? skb_pull_data+0xfb/0x200 [ 157.299671][ T5810] hci_le_conn_complete_evt+0x187/0x470 [ 157.299709][ T5810] hci_event_packet+0x7af/0x12c0 [ 157.299739][ T5810] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 157.299772][ T5810] ? __pfx_hci_event_packet+0x10/0x10 [ 157.299800][ T5810] ? preempt_schedule_common+0x82/0xd0 [ 157.299829][ T5810] ? preempt_schedule_thunk+0x16/0x30 [ 157.299857][ T5810] ? hci_send_to_monitor+0xe2/0x590 [ 157.299881][ T5810] hci_rx_work+0x3ee/0x1030 [ 157.299910][ T5810] ? preempt_schedule_thunk+0x16/0x30 [ 157.299937][ T5810] ? process_scheduled_works+0xa25/0x1830 [ 157.299970][ T5810] process_scheduled_works+0xb02/0x1830 [ 157.300015][ T5810] ? __pfx_process_scheduled_works+0x10/0x10 [ 157.300049][ T5810] ? assign_work+0x3d5/0x5e0 [ 157.300082][ T5810] worker_thread+0xa50/0xfc0 [ 157.300127][ T5810] kthread+0x388/0x470 [ 157.300156][ T5810] ? __pfx_worker_thread+0x10/0x10 [ 157.300186][ T5810] ? __pfx_kthread+0x10/0x10 [ 157.300215][ T5810] ret_from_fork+0x51e/0xb90 [ 157.300248][ T5810] ? __pfx_ret_from_fork+0x10/0x10 [ 157.300278][ T5810] ? __switch_to+0xc7d/0x1450 [ 157.300306][ T5810] ? __pfx_kthread+0x10/0x10 [ 157.300329][ T5810] ret_from_fork_asm+0x1a/0x30 [ 157.300359][ T5810] [ 157.300367][ T5810] [ 157.300373][ T5810] Allocated by task 5810: [ 157.300383][ T5810] kasan_save_track+0x3e/0x80 [ 157.300411][ T5810] __kasan_kmalloc+0x93/0xb0 [ 157.300439][ T5810] __kmalloc_cache_noprof+0x3a6/0x690 [ 157.300470][ T5810] l2cap_chan_create+0x51/0x7a0 [ 157.300493][ T5810] l2cap_sock_new_connection_cb+0x182/0x2e0 [ 157.300517][ T5810] l2cap_connect_cfm+0x368/0x1390 [ 157.300537][ T5810] hci_connect_cfm+0x95/0x140 [ 157.300566][ T5810] le_conn_complete_evt+0xf65/0x1430 [ 157.300597][ T5810] hci_le_conn_complete_evt+0x187/0x470 [ 157.300626][ T5810] hci_event_packet+0x7af/0x12c0 [ 157.300650][ T5810] hci_rx_work+0x3ee/0x1030 [ 157.300674][ T5810] process_scheduled_works+0xb02/0x1830 [ 157.300701][ T5810] worker_thread+0xa50/0xfc0 [ 157.300729][ T5810] kthread+0x388/0x470 [ 157.300747][ T5810] ret_from_fork+0x51e/0xb90 [ 157.300774][ T5810] ret_from_fork_asm+0x1a/0x30 [ 157.300792][ T5810] [ 157.300797][ T5810] Freed by task 6204: [ 157.300807][ T5810] kasan_save_track+0x3e/0x80 [ 157.300833][ T5810] kasan_save_free_info+0x46/0x50 [ 157.300856][ T5810] __kasan_slab_free+0x5c/0x80 [ 157.300885][ T5810] kfree+0x1c1/0x6c0 [ 157.300910][ T5810] l2cap_sock_cleanup_listen+0xf0/0x440 [ 157.300933][ T5810] l2cap_sock_release+0x6e/0x270 [ 157.300952][ T5810] sock_close+0xc3/0x240 [ 157.300969][ T5810] __fput+0x461/0xa90 [ 157.300991][ T5810] task_work_run+0x1d9/0x270 [ 157.301013][ T5810] exit_to_user_mode_loop+0xed/0x480 [ 157.301043][ T5810] do_syscall_64+0x32d/0xf80 [ 157.301070][ T5810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.301091][ T5810] [ 157.301096][ T5810] The buggy address belongs to the object at ffff88805d3da000 [ 157.301096][ T5810] which belongs to the cache kmalloc-2k of size 2048 [ 157.301115][ T5810] The buggy address is located 1280 bytes inside of [ 157.301115][ T5810] freed 2048-byte region [ffff88805d3da000, ffff88805d3da800) [ 157.301138][ T5810] [ 157.301144][ T5810] The buggy address belongs to the physical page: [ 157.301171][ T5810] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805d3db000 pfn:0x5d3d8 [ 157.301194][ T5810] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 157.301213][ T5810] flags: 0x80000000000240(workingset|head|node=0|zone=1) [ 157.301241][ T5810] page_type: f5(slab) [ 157.301261][ T5810] raw: 0080000000000240 ffff88813fe1d000 ffffea00017ae010 ffff88813fe17c88 [ 157.301282][ T5810] raw: ffff88805d3db000 0000000800080006 00000000f5000000 0000000000000000 [ 157.301303][ T5810] head: 0080000000000240 ffff88813fe1d000 ffffea00017ae010 ffff88813fe17c88 [ 157.301322][ T5810] head: ffff88805d3db000 0000000800080006 00000000f5000000 0000000000000000 [ 157.301343][ T5810] head: 0080000000000003 ffffea000174f601 00000000ffffffff 00000000ffffffff [ 157.301362][ T5810] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 157.301374][ T5810] page dumped because: kasan: bad access detected [ 157.301389][ T5810] page_owner tracks the page as allocated [ 157.301397][ T5810] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5801, tgid 5801 (syz-executor), ts 98092505219, free_ts 0 [ 157.301435][ T5810] post_alloc_hook+0x231/0x280 [ 157.301466][ T5810] get_page_from_freelist+0x28bb/0x2950 [ 157.301488][ T5810] __alloc_frozen_pages_noprof+0x18d/0x380 [ 157.301508][ T5810] allocate_slab+0x77/0x660 [ 157.301532][ T5810] refill_objects+0x334/0x3c0 [ 157.301552][ T5810] __pcs_replace_empty_main+0x328/0x5f0 [ 157.301577][ T5810] __kmalloc_cache_noprof+0x44e/0x690 [ 157.301606][ T5810] rtnl_newlink+0x136/0x1be0 [ 157.301628][ T5810] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 157.301649][ T5810] netlink_rcv_skb+0x232/0x4b0 [ 157.301671][ T5810] netlink_unicast+0x831/0x9f0 [ 157.301701][ T5810] netlink_sendmsg+0x813/0xb40 [ 157.301722][ T5810] __sys_sendto+0x72a/0x7d0 [ 157.301746][ T5810] __x64_sys_sendto+0xde/0x100 [ 157.301770][ T5810] do_syscall_64+0x14d/0xf80 [ 157.301797][ T5810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.301817][ T5810] page_owner free stack trace missing [ 157.301825][ T5810] [ 157.301830][ T5810] Memory state around the buggy address: [ 157.301841][ T5810] ffff88805d3da400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 157.301856][ T5810] ffff88805d3da480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 157.301871][ T5810] >ffff88805d3da500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 157.301882][ T5810] ^ [ 157.301894][ T5810] ffff88805d3da580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 157.301908][ T5810] ffff88805d3da600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 157.301920][ T5810] ================================================================== [ 157.301939][ T5810] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 157.301955][ T5810] CPU: 1 UID: 0 PID: 5810 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 157.301981][ T5810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 157.301996][ T5810] Workqueue: hci1 hci_rx_work [ 157.302023][ T5810] Call Trace: [ 157.302032][ T5810] [ 157.302041][ T5810] vpanic+0x56c/0xa60 [ 157.302082][ T5810] ? __pfx_vpanic+0x10/0x10 [ 157.302120][ T5810] panic+0xc5/0xd0 [ 157.302160][ T5810] ? __pfx_panic+0x10/0x10 [ 157.302195][ T5810] ? l2cap_connect_cfm+0x86a/0x1390 [ 157.302222][ T5810] ? l2cap_connect_cfm+0x86a/0x1390 [ 157.302244][ T5810] check_panic_on_warn+0x89/0xb0 [ 157.302271][ T5810] ? l2cap_connect_cfm+0x86a/0x1390 [ 157.302293][ T5810] end_report+0x73/0x180 [ 157.302326][ T5810] ? l2cap_connect_cfm+0x86a/0x1390 [ 157.302348][ T5810] kasan_report+0x128/0x150 [ 157.302381][ T5810] ? l2cap_connect_cfm+0x86a/0x1390 [ 157.302407][ T5810] l2cap_connect_cfm+0x86a/0x1390 [ 157.302435][ T5810] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 157.302463][ T5810] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 157.302485][ T5810] hci_connect_cfm+0x95/0x140 [ 157.302518][ T5810] le_conn_complete_evt+0xf65/0x1430 [ 157.302553][ T5810] ? lockdep_hardirqs_on+0x7a/0x110 [ 157.302586][ T5810] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 157.302622][ T5810] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 157.302653][ T5810] ? skb_pull_data+0xfb/0x200 [ 157.302688][ T5810] hci_le_conn_complete_evt+0x187/0x470 [ 157.302726][ T5810] hci_event_packet+0x7af/0x12c0 [ 157.302756][ T5810] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 157.302788][ T5810] ? __pfx_hci_event_packet+0x10/0x10 [ 157.302816][ T5810] ? preempt_schedule_common+0x82/0xd0 [ 157.302844][ T5810] ? preempt_schedule_thunk+0x16/0x30 [ 157.302873][ T5810] ? hci_send_to_monitor+0xe2/0x590 [ 157.302896][ T5810] hci_rx_work+0x3ee/0x1030 [ 157.302925][ T5810] ? preempt_schedule_thunk+0x16/0x30 [ 157.302952][ T5810] ? process_scheduled_works+0xa25/0x1830 [ 157.302983][ T5810] process_scheduled_works+0xb02/0x1830 [ 157.303028][ T5810] ? __pfx_process_scheduled_works+0x10/0x10 [ 157.303061][ T5810] ? assign_work+0x3d5/0x5e0 [ 157.303093][ T5810] worker_thread+0xa50/0xfc0 [ 157.303139][ T5810] kthread+0x388/0x470 [ 157.303169][ T5810] ? __pfx_worker_thread+0x10/0x10 [ 157.303198][ T5810] ? __pfx_kthread+0x10/0x10 [ 157.303221][ T5810] ret_from_fork+0x51e/0xb90 [ 157.303252][ T5810] ? __pfx_ret_from_fork+0x10/0x10 [ 157.303281][ T5810] ? __switch_to+0xc7d/0x1450 [ 157.303310][ T5810] ? __pfx_kthread+0x10/0x10 [ 157.303333][ T5810] ret_from_fork_asm+0x1a/0x30 [ 157.303376][ T5810] [ 157.303971][ T5810] Kernel Offset: disabled