last executing test programs: 28.126898846s ago: executing program 1 (id=17): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000540)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) r6 = syz_open_dev$vcsu(&(0x7f0000000400), 0x1ff, 0x2002) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1f, 0x5a8, 0x8, 0x8f, 0x40080, r4, 0x6, '\x00', r5, r6, 0x1, 0x0, 0x2}, 0x50) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x5, 0x200, &(0x7f0000003c40)="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"}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40840) syz_usb_connect(0x5, 0x59, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec13b2106c04e814280b0102030109024700010000000009046900000e01000018240201020210e1049529eb1dda"], 0x0) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="00010000130010032abd7000fcdbdf25686d6163287368613235362d617678322900000000000000000071982906bf623d1f021e9ef26eabf8d80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000"/240], 0x100}, 0x1, 0x0, 0x0, 0x4040}, 0x80) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) r7 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) lseek(r7, 0x0, 0x1) 23.53034484s ago: executing program 1 (id=20): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r0, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x0, 0x7, 0x1, 0x81, 0x3, 0x3e, 0xfffffff9, 0x1d8, 0x40, 0x8b, 0xd32, 0x5, 0x38, 0x4, 0x78, 0x7, 0x9}, [{0x1, 0x2, 0x2, 0x9, 0x101, 0x1, 0x9, 0x855}, {0x70000003, 0x2, 0x7, 0x5, 0x7fff, 0x7980, 0x0, 0x3}, {0x1, 0x2, 0xc, 0x4c9, 0xd93b, 0xe94, 0x9, 0x7ff}, {0x6474e551, 0x10001, 0xc4e7, 0x10001, 0x8, 0x1cd2f15f, 0xfffffffffffffff9, 0x1}]}, 0x120) close(r0) ioctl$KVM_GET_DEVICE_ATTR(r0, 0x4018aee2, &(0x7f0000000080)=@attr_other={0x0, 0x9, 0x5, &(0x7f0000000040)}) r1 = socket$key(0xf, 0x3, 0x2) syz_emit_ethernet(0x5e, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0xf, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @private=0xa010102, {[@cipso={0x86, 0x1e, 0x3, [{0x0, 0x6, "ac7143c2"}, {0xa, 0x12, "40b8089383cbd96e560105991698547b"}]}, @generic={0x7, 0x9, "0428ad5ded0009"}]}}, {{0x0, 0x2, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newae={0x74, 0x1e, 0x301, 0x709d2a, 0x24dfdbfe, {{@in=@dev={0xac, 0x14, 0x14, 0xf}, 0x4d6, 0xa, 0x2b}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3, 0x3507}, [@replay_esn_val={0x20, 0x17, {0x1, 0x70bd2c, 0x70bd28, 0x70bd2c, 0x70bd27, 0x8, [0x1000000]}}, @mark={0xc, 0x15, {0x35075d, 0x3}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x2000}]}, 0x74}, 0x1, 0x0, 0x0, 0x40800}, 0xe21ade730554acfe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x1, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) pread64(r8, &(0x7f00000000c0)=""/36, 0xfffffe49, 0x800000000004) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="021081030a00000029bd7000fddbdf250800120000000100b06b6e000400000006002b00060400000800000000000000fe8800000000000084163931ac55cc6efe8000000000000000000000000000aa"], 0x50}}, 0x4008000) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000000)={r1}) socket$netlink(0x10, 0x3, 0xc) 22.203764001s ago: executing program 4 (id=24): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000042c0)="0000b9f519a7bd82cc5f0e90231bdb9f5cd245866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a471160e2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04a238922721cb7816094cb82950fd012d6d26d4f18ce716c263987671a18ac56927f58c4acfe083d5bf3264e046fd29f2fd7191eca45ebc8ab93248144ce3580591f63e41389ce010229", 0x91}, {&(0x7f0000000900)="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", 0x3f0}], 0x2}, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) 19.131856952s ago: executing program 3 (id=28): close(0x3) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0xf0f041}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$vsock(0xffffffffffffff9c, 0x0, 0x125801, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xc0b01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000000)=0x80, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) bind$packet(r3, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) close(0x3) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) preadv(r4, &(0x7f0000000700)=[{&(0x7f00000007c0)=""/124, 0x7c}, {&(0x7f0000000300)=""/82, 0x52}, {&(0x7f0000000380)=""/91, 0x5b}, {&(0x7f00000001c0)=""/23, 0x17}, {&(0x7f0000000440)=""/32, 0x20}, {&(0x7f0000000480)=""/138, 0x8a}, {&(0x7f0000000540)=""/191, 0xbf}, {&(0x7f0000000600)=""/245, 0xf5}], 0x8, 0x0, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_socket_connect_nvme_tcp() close(r5) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x440001, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 19.054838285s ago: executing program 4 (id=30): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000540)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) r6 = syz_open_dev$vcsu(&(0x7f0000000400), 0x1ff, 0x2002) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1f, 0x5a8, 0x8, 0x8f, 0x40080, r4, 0x6, '\x00', r5, r6, 0x1, 0x0, 0x2}, 0x50) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x5, 0x200, &(0x7f0000003c40)="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"}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40840) syz_usb_connect(0x5, 0x59, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec13b2106c04e814280b0102030109024700010000000009046900000e01000018240201020210e1049529eb1dda"], 0x0) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="00010000130010032abd7000fcdbdf25686d6163287368613235362d617678322900000000000000000071982906bf623d1f021e9ef26eabf8d8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000008000100ff000000"], 0x100}, 0x1, 0x0, 0x0, 0x4040}, 0x80) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) r7 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) lseek(r7, 0x0, 0x1) 17.412900785s ago: executing program 0 (id=32): socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)) syz_usb_connect(0x5, 0x59, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec13b2106c04e814280b0102030109024700010000000009046900000e01000018240201020210e1049529"], 0x0) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x4040}, 0x80) r4 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) lseek(r4, 0x0, 0x1) 15.260029716s ago: executing program 4 (id=33): sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x10}, 0x1, 0x7}, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0x6b19, 0x1, 0xffff, 0x400e0a, 0x7f, "203c5e0000ff765e000080fffffffffffffff2", 0x8, 0x5}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xff) r1 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$binderfs(0xffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1100, 0x3}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000200)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000240)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r1], 0xd8}}, 0x0) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000380)={0x7, "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"}) 15.119001363s ago: executing program 1 (id=34): fsopen(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x0, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x14, 0x3, 0x3, 0x201, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0xc010}, 0x4000) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) sendmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) 13.906528441s ago: executing program 0 (id=36): syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x800000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x20, 0x1) brk(0x689d80000003) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0900000002000000080000004000000042000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000043ee6453ae05aefb31c2bb5c771d02956370ed5598ec"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r3, &(0x7f0000000600), &(0x7f0000000580)=""/95}, 0x20) 13.690692248s ago: executing program 1 (id=37): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000540)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) r6 = syz_open_dev$vcsu(&(0x7f0000000400), 0x1ff, 0x2002) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1f, 0x5a8, 0x8, 0x8f, 0x40080, r4, 0x6, '\x00', r5, r6, 0x1, 0x0, 0x2}, 0x50) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x5, 0x200, &(0x7f0000003c40)="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"}) syz_usb_connect(0x5, 0x59, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec13b2106c04e814280b0102030109024700010000000009046900000e01000018240201020210e1049529"], 0x0) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="00010000130010032abd7000fcdbdf25686d6163287368613235362d617678322900000000000000000071982906bf623d1f021e9ef26eabf8d8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000008000100ff0000000800010001000000"], 0x100}, 0x1, 0x0, 0x0, 0x4040}, 0x80) r7 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) lseek(r7, 0x0, 0x1) 12.308666216s ago: executing program 2 (id=39): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x2, 0x1, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) listen(r1, 0x0) accept4$unix(r1, 0x0, 0x0, 0x800) mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a050000000000000000000100fffc0900010073797a30000000004000000003f04e60ec01000000000000010000000900030073797a300000000014000480080002400000000008000140000000010900010073797a300000000050000000060a0104000000000000000001000000280004802c0001800b000100736f636b65740000140002800800024000000001080001400000000208000040000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0xd8}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) r2 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000040)) bind$unix(r2, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) accept(r1, &(0x7f0000000180)=@generic, &(0x7f0000000080)=0x80) 9.409457539s ago: executing program 3 (id=40): openat$rtc(0xffffffffffffff9c, 0x0, 0x182800, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async, rerun: 64) r0 = getpid() (rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 64) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000005640)=[{{&(0x7f0000000240)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000001540)=[{&(0x7f0000005740)=""/4107, 0x100b}, {&(0x7f0000000180)=""/25, 0x19}, {&(0x7f0000001300)=""/116, 0x74}, {&(0x7f0000001380)=""/32, 0x20}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/178, 0xb2}, {&(0x7f0000001480)=""/62, 0x3e}, {&(0x7f00000014c0)=""/125, 0x7d}, {&(0x7f00000032c0)=""/4096, 0x1000}, {&(0x7f00000042c0)=""/4096, 0x1000}], 0xa, &(0x7f0000001600)=""/42, 0x2a}, 0x2f}, {{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000001640)=""/78, 0x4e}, {&(0x7f00000016c0)=""/165, 0xa5}, {&(0x7f0000001780)=""/215, 0xd7}, {&(0x7f0000001880)=""/17, 0x11}, {&(0x7f00000018c0)=""/113, 0x71}, {&(0x7f0000001940)=""/141, 0x8d}, {&(0x7f0000001a00)=""/55, 0x37}], 0x7, &(0x7f0000001ac0)=""/226, 0xe2}, 0x6}, {{&(0x7f0000001bc0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f00000052c0)=[{&(0x7f0000001c40)=""/83, 0x53}, {&(0x7f0000001cc0)=""/109, 0x6d}, {&(0x7f0000001d40)=""/188, 0xbc}, {&(0x7f0000001e00)=""/203, 0xcb}, {&(0x7f0000001f00)=""/58, 0x3a}, {&(0x7f0000001f40)=""/253, 0xfd}, {&(0x7f0000002040)=""/88, 0x58}, {&(0x7f00000020c0)=""/114, 0x72}, {&(0x7f0000002140)=""/100, 0x64}, {&(0x7f0000000340)=""/45, 0x2d}], 0xa, &(0x7f0000005380)=""/131, 0x83}, 0x80}, {{&(0x7f0000005440)=@vsock, 0x80, &(0x7f00000055c0)=[{&(0x7f0000002200)=""/11, 0xb}, {&(0x7f00000054c0)=""/99, 0x63}, {&(0x7f0000005540)=""/90, 0x5a}], 0x3, &(0x7f0000005600)=""/3, 0x3}, 0x36338bfb}], 0x4, 0x2, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) (async) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write(r5, &(0x7f0000000140)="86", 0x1) splice(r5, &(0x7f0000000040), r4, 0x0, 0x6, 0x0) io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x0, r5}) (async) r6 = io_uring_setup(0x2a69, &(0x7f0000002240)={0x0, 0x0, 0x2, 0x2}) bind$inet(r3, &(0x7f0000000300)={0x2, 0x4e21, @multicast1}, 0x10) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) (async) r8 = fsmount(r7, 0x0, 0x8) fchdir(r8) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x4d) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x1, 0xd4, 0x81}]}) (async, rerun: 32) io_uring_register$IORING_REGISTER_FILES(r6, 0x2, 0x0, 0x0) (async, rerun: 32) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r6, 0x18, &(0x7f0000000000), 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 9.236771743s ago: executing program 1 (id=41): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_io_uring_setup(0x48ea, &(0x7f00000000c0)={0x0, 0x7c10, 0x4, 0x3, 0xee}, &(0x7f0000000180), &(0x7f00000001c0)) r2 = io_uring_setup(0x3ce5, &(0x7f0000000200)={0x0, 0x509e, 0x0, 0x2, 0x29f, 0x0, r1}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) membarrier(0x10, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000300)={0x0}) r5 = socket$nl_audit(0x10, 0x3, 0x9) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000480)={0x9, 0x0}, 0x8) r9 = fsopen(&(0x7f0000000140)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x0, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r10, 0x0, 0x0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r2, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xb, 0x9, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffc}, [@generic={0x6, 0x7, 0x7, 0x3ff, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}]}, &(0x7f00000003c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0x5, 0xb, 0xf}, 0x10, r8, 0xffffffffffffffff, 0x1, &(0x7f0000000540)=[r10, r11, r12], &(0x7f0000000600)=[{0x1, 0x4, 0x5, 0x5}], 0x10, 0x1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000001c0)={r4, 0x3, r5, 0x3, 0x80000}) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a58000000060a0b040000000000000000020000002c000480280001800e000100636f6e6e6c696d6974000000140002800800024000001b01080001400000007f0900010073797a30000000000900020073797a32"], 0x80}}, 0x0) 8.329333966s ago: executing program 3 (id=42): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x7}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x24040010}, 0x20000080) 8.328974366s ago: executing program 0 (id=43): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000540)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) r6 = syz_open_dev$vcsu(&(0x7f0000000400), 0x1ff, 0x2002) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1f, 0x5a8, 0x8, 0x8f, 0x40080, r4, 0x6, '\x00', r5, r6, 0x1, 0x0, 0x2}, 0x50) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x5, 0x200, &(0x7f0000003c40)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a73090000000000001b0f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000000000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413f4afbcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f9555da5ca6fdf75b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a25978b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6dccbe2ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f635a0cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f800"}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40840) syz_usb_connect(0x5, 0x59, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec13b2106c04e814280b0102030109024700010000000009046900000e01000018240201020210e1049529eb1dda"], 0x0) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="00010000130010032abd7000fcdbdf25686d6163287368613235362d617678322900000000000000000071982906bf623d1f021e9ef26eabf8d8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000008000100ff000000"], 0x100}, 0x1, 0x0, 0x0, 0x4040}, 0x80) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) r7 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) lseek(r7, 0x0, 0x1) 6.815904074s ago: executing program 3 (id=44): r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000000)={'syz_tun\x00', {0x2, 0x4e20, @multicast1}}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) ioctl$int_out(r1, 0x0, &(0x7f0000000080)) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) socket$qrtr(0x2a, 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_GROUP(r1, 0xc008af7b, &(0x7f0000000180)={0x1, 0x7}) sendmsg$nl_generic(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x70, 0x40, 0x100, 0x70bd26, 0x25dfdbfd, {0x16}, [@nested={0x1c, 0x9c, 0x0, 0x1, [@nested={0x4, 0x96}, @typed={0xc, 0x33, 0x0, 0x0, @u64=0x9}, @nested={0x4, 0xfe}, @nested={0x4, 0xe9}]}, @nested={0x3b, 0xaf, 0x0, 0x1, [@nested={0x4, 0x59}, @typed={0x8, 0x3e, 0x0, 0x0, @u32=0x10}, @typed={0x4, 0xe0}, @generic="5dd9d1c0fee7b2025fbd25027637fc7554d6a093b9ce614fd245bab04f294a", @typed={0x8, 0x136, 0x0, 0x0, @fd}]}, @typed={0x4, 0x2d}]}, 0x70}, 0x1, 0x0, 0x0, 0x804}, 0x40040) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x28, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x58000) 6.741587774s ago: executing program 2 (id=45): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve1\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_open_dev$rtc(&(0x7f00000007c0), 0x0, 0x80) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x15, 0x0, &(0x7f00000002c0)="b90103616908068c3c270040e700009e0dc5cf1d66", 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) fcntl$setstatus(r3, 0x4, 0x2800) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'hsr0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) sendto$packet(r2, &(0x7f0000000340)="05030006e8fe091c6202a0ffffffff0060031200100888fb143488a87f43055762cb80948864113b022543424aa608", 0xfef2, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) sendto$packet(r0, &(0x7f0000000340)="05030006e8fe091c6202a0ffffffff0060031200100888fb143488a87f43055762cb80948864113b022543424aa608", 0xfef2, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 6.148788096s ago: executing program 3 (id=46): socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_usb_connect(0x5, 0x59, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec13b2106c04e814280b0102030109024700010000000009046900000e01000018240201020210e1049529"], 0x0) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="00010000130010032abd7000fcdbdf25686d6163287368613235362d617678322900000000000000000071982906bf623d1f021e9ef26eabf8d8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000008000100ff0000000800010001000000"], 0x100}, 0x1, 0x0, 0x0, 0x4040}, 0x80) r4 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) lseek(r4, 0x0, 0x1) 4.537268165s ago: executing program 0 (id=47): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x0, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x14, 0x3, 0x3, 0x201, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0xc010}, 0x4000) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) sendmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) 3.936224142s ago: executing program 4 (id=48): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x6b) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x4, 0x2, 0x8d, 0x4, 0x3, 0x6, 0x8, 0x19, 0x38, 0x25e, 0x408, 0x4, 0x20, 0x3, 0x5, 0x8, 0x200}, [{0x70000000, 0x7, 0x6, 0x3, 0x9, 0x6, 0xffff, 0x5}, {0x6, 0x8, 0x7, 0x3, 0x45, 0xc, 0x8, 0x7fffffff}, {0x7, 0xa, 0x3, 0x2, 0x5, 0x9, 0x1, 0x4}]}, 0x98) close(r0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000), 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {0x5}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r3, 0xffffffffffffffff, 0x16, 0x0, @val=@tcx={@void, @value=r3}}, 0x1c) sendmsg$nl_route(r1, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001a000100000000000000000002000000750200060030000008000100ac1414ff"], 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x1a8, 0x0, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_PROTOINFO={0x30, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x54ad}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0xffa}]}}, @CTA_NAT_DST={0xc4, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}, @CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x3e}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @empty}, @CTA_NAT_PROTO={0x44, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}}]}, @CTA_TUPLE_MASTER={0x90, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x2040000}, 0x20000000) 3.824625835s ago: executing program 4 (id=49): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYRES64=0x0], &(0x7f0000000280)='GPL\x00', 0x0, 0xffffffffffffff93, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000100)={@mcast2}, &(0x7f0000000200)=0x14) r0 = socket$inet6(0xa, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x10) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$uinput(0xffffffffffffff9c, 0x0, 0xc03, 0x0) setresgid(0xee00, 0xee01, 0x0) setgroups(0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) syz_emit_ethernet(0xde, &(0x7f0000000580)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00@\x00', 0xa8, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, {[], {{0x4e24, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x808, 0x0, 0x58}, {"4ff7961c161b9fe011381532fe6a8c6ab1fd2a2b753fdd3f569fe79ab258b01d44f1a80d913ac3ab1577cc24abd2bf4642dad6ac7f4172e798c049fdce3aafc2e1ebda0537fefe959f2348e7184aa6a2b1a9148ecab4a809ce10462a5000ea17ccb42cd3e55e9976d16702c110734e4d9353144e288d8a5ebf5cc8ec0ef5692c4065497d719de3292ffbe677391a51d08db231bc"}}}}}}}, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, r6}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000040)={@remote, r6}, 0x14) socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f00000007c0)={'ah\x00'}, &(0x7f0000000800)=0x1e) 3.323420613s ago: executing program 3 (id=50): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000140)=ANY=[@ANYBLOB="5800000002060502ffffff0000000000000000000900020073797a310000000005000400000000000c00078005001400050000000500050002000000050001000600000011000300686173683a6e65742c6e6574"], 0x58}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x200000000000032e, &(0x7f00000005c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100000100000000000000002020207b47e913aecc0040ba1f1af8ff00000000bfa1000000000000f8ffffffb702000008000000850000007300000095000000000000000081ab98836800671014c57ae28b2eb79900000000"], &(0x7f0000000000)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp=0x84853eba50019ce0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) process_vm_writev(0x0, &(0x7f00000014c0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000040)={0x89}, 0x8) setsockopt$inet6_buf(r2, 0x29, 0x6, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_async', 0x402, 0x4) write$FUSE_NOTIFY_STORE(r3, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYRESOCT=r3], 0x28) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x80) r5 = msgget$private(0x0, 0x410) msgsnd(r5, &(0x7f0000000140)=ANY=[@ANYRES32=r1], 0x8, 0x800) msgrcv(r5, 0x0, 0x0, 0x1, 0x2400) syz_open_dev$dvb_demux(&(0x7f00000000c0), 0x8, 0x24800) msgrcv(r5, &(0x7f0000000180)={0x0, ""/62}, 0x46, 0x2, 0x1000) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYRES64=0x0, @ANYRES32=r7, @ANYBLOB="1000a206080001000000000008000f0005"], 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x200080c0) sendmsg$can_bcm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="0500000000e0ffffffffffff", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}}, 0x40000) sendmsg$can_bcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r4], 0x48}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r1, 0x18000000000002a0, 0xff1f, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f088a8", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) close_range(r1, r1, 0x2) 3.267382047s ago: executing program 2 (id=51): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000080000000000000c100000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70200001405000000030000000000008500000083000000c4090000000000005509010000000000950000000000000085101000feffffff8520000003000000b7080000000000007b8af8ff00000000b7080000300300007b8af0ff00000100bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYBLOB="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"], &(0x7f0000000880)='syzkaller\x00', 0x40, 0x0, 0x0, 0x41100, 0x74, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0xe, 0x0, 0x3}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000540)=[r0, 0xffffffffffffffff], &(0x7f0000000580)=[{0x8, 0x4, 0xe, 0x5}, {0x0, 0x9, 0x10, 0x3}, {0x0, 0x1, 0x5, 0xb}], 0x10, 0xa0000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r0}, &(0x7f0000000280), &(0x7f0000000680)=r1}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) r3 = gettid() socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000600)=ANY=[], 0x0) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x19) pwritev2(r6, &(0x7f0000000240)=[{&(0x7f0000000040)="85", 0x1}], 0x1, 0x1400, 0x0, 0x1) ioctl$HIDIOCGRAWINFO(r6, 0x80084803, &(0x7f0000000b00)=""/246) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0xf0, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x80}, {@in6=@rand_addr=' \x01\x00', 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0xf}, {0x0, 0x9, 0x6, 0xffff, 0xf, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000140)=0x19, 0x4) ioctl$sock_SIOCSIFBR(r6, 0x8941, &(0x7f0000000740)=@add_del={0x2, &(0x7f0000000700)='ip6gre0\x00'}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000000)={0x0, @remote, @private}, &(0x7f0000000140)=0x2) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="fc000000840000000d00000000050000006d52a776104fba35ad634743bcd1c15242e8fed4f3cddfc5fb855053d172d38298ad9cb8ca974566253c9bef8001114d3a1c065f9bd00aacec23d2d9b9ee19fe6dca96aaece097a2d008f202a48320dd30913f25d37cca2739c14adb63d4f06921b459ea573dc7a1db3131fe80abffd5a6c2944936917614b632721a89c02931bdce821f94d566867f1adde9b230ca13bb83fa0cc93882ad781480de44755f3f3f869aa4a5a39b2d021aaf6bf533783a78c585df8aa5f8521d92df6044522a2ac3cab98b861a7750231805785a35e4f2dea37e290b5db44ae82a807085d2d55669292676099b0b7e5d7a1cea6ac1fd8c5c72faca41024ba63e10f5049b8748187b237487cca53cb884a72c17def516539800e2938099bab338"], 0x138}}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a14000000020a030000000000000000000302000328000000000a010400000000000000000300000a0900010073797a30000000000800024000000007140000001000010000000000000000000100800a"], 0x64}, 0x1, 0x0, 0x0, 0x24040010}, 0x20000080) r9 = getpid() syz_pidfd_open(r9, 0x0) r10 = gettid() kcmp(r9, r10, 0x2, r7, r2) 1.993518477s ago: executing program 2 (id=52): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) sched_setaffinity(r4, 0x8, &(0x7f0000000200)=0x6) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ptrace$cont(0x16, r1, 0x7fffffff, 0x1) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$unix(0x1, 0x5, 0x0) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f00000003c0)=@ccm_128={{0x303}, "4206f9c95436c8f0", "c66992cbf1eccd9bd21a7048c660caf3", '4w\x00', "3f7dc9959b100b76"}, 0x28) r7 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x6, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b6090100c3ffffff660000000000000218010000646c6c2500000000002020207b9af8ff000000005d9100000000000037010000f8ffffffb702000008000000b70300000000000015000000060000f33e93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.90361939s ago: executing program 0 (id=53): r0 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001000390400"/20, @ANYRES32=r3, @ANYBLOB="8106e2bc00000200140012800b00010062726964"], 0x34}}, 0x20044002) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001400b59500000000000000000a400000", @ANYRES32=r5, @ANYBLOB="1400020000000000000000000000efff00"], 0x2c}}, 0x0) 768.773684ms ago: executing program 1 (id=54): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000400)=0x6, 0x4) recvmmsg(r0, &(0x7f0000008cc0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x6, 0x1, 0x0, 0xb, 0x0, 0x0, 0xc, 0x0, 0x8}, 0xe) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x4) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x7d, &(0x7f0000000080)={r3}, &(0x7f0000000100)=0x8) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0x2}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @remote}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) sendto$inet6(r8, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0x80000000}, 0x1c) write$FUSE_INIT(r4, &(0x7f0000000400)={0x50, 0x0, r5, {0x7, 0x2b, 0x10, 0x1c20040, 0x0, 0x0, 0xc0000000, 0x1, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x6000, 0xd, r6, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, r6, r7, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000001c0)='./file0/file0\x00', 0x1802, 0x40) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r9, 0xffffffffffffffff, 0x0) 567.901685ms ago: executing program 2 (id=55): r0 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001000390400"/20, @ANYRES32=r3, @ANYBLOB="8106e2bc00000200140012800b0001006272696467"], 0x34}}, 0x20044002) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001400b59500000000000000000a400000", @ANYRES32=r5, @ANYBLOB="1400020000000000000000000000efff00"], 0x2c}}, 0x0) 294.091592ms ago: executing program 0 (id=56): r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000000)={'syz_tun\x00', {0x2, 0x4e20, @multicast1}}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) ioctl$int_out(r1, 0x0, &(0x7f0000000080)) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) ioctl$VHOST_VDPA_GET_VRING_GROUP(r1, 0xc008af7b, &(0x7f0000000180)={0x1, 0x7}) sendmsg$nl_generic(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x70, 0x40, 0x100, 0x70bd26, 0x25dfdbfd, {0x16}, [@nested={0x1c, 0x9c, 0x0, 0x1, [@nested={0x4, 0x96}, @typed={0xc, 0x33, 0x0, 0x0, @u64=0x9}, @nested={0x4, 0xfe}, @nested={0x4, 0xe9}]}, @nested={0x3b, 0xaf, 0x0, 0x1, [@nested={0x4, 0x59}, @typed={0x8, 0x3e, 0x0, 0x0, @u32=0x10}, @typed={0x4, 0xe0}, @generic="5dd9d1c0fee7b2025fbd25027637fc7554d6a093b9ce614fd245bab04f294a", @typed={0x8, 0x136, 0x0, 0x0, @fd}]}, @typed={0x4, 0x2d}]}, 0x70}, 0x1, 0x0, 0x0, 0x804}, 0x40040) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x28, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x58000) 166.578758ms ago: executing program 2 (id=57): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) keyctl$KEYCTL_WATCH_KEY(0x6, 0x0, 0xffffffffffffffff, 0xfffffffdffffffff) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r3, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) ppoll(&(0x7f00000000c0)=[{r3, 0x60}], 0x1, 0x0, 0x0, 0x0) r4 = memfd_create(0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x8001a0) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x200002, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fff7ff3}]}) close_range(r5, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) 0s ago: executing program 4 (id=58): sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x10}, 0x1, 0x7}, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0x6b19, 0x1, 0xffff, 0x400e0a, 0x7f, "203c5e0000ff765e000080fffffffffffffff2", 0x8, 0x5}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xff) r1 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$binderfs(0xffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1100, 0x3}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000200)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000240)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r1], 0xd8}}, 0x0) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000380)={0x7, "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"}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.186' (ED25519) to the list of known hosts. [ 73.982996][ T5783] cgroup: Unknown subsys name 'net' [ 74.224360][ T5783] cgroup: Unknown subsys name 'cpuset' [ 74.280334][ T5783] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.867923][ T5783] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.206964][ T5802] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.208759][ T5802] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.227344][ T5802] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.228217][ T5802] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.230902][ T5802] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.231028][ T5802] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.232655][ T5802] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.233347][ T5802] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.260426][ T5116] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.265512][ T5116] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.266496][ T5116] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.267808][ T61] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.268785][ T61] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.301262][ T5805] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.302253][ T5805] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.360215][ T5798] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.362112][ T5798] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.364686][ T5803] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.366071][ T5803] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.367695][ T5803] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.369274][ T5803] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.419180][ T5803] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.427258][ T5805] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.430311][ T5805] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.451257][ T5805] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.107447][ T5799] chnl_net:caif_netlink_parms(): no params data found [ 79.192820][ T5795] chnl_net:caif_netlink_parms(): no params data found [ 79.206586][ T5796] chnl_net:caif_netlink_parms(): no params data found [ 79.284082][ T5808] chnl_net:caif_netlink_parms(): no params data found [ 79.391632][ T5809] chnl_net:caif_netlink_parms(): no params data found [ 79.453738][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.455140][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.455503][ T5799] bridge_slave_0: entered allmulticast mode [ 79.457056][ T5799] bridge_slave_0: entered promiscuous mode [ 79.515439][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.515554][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.515726][ T5799] bridge_slave_1: entered allmulticast mode [ 79.517347][ T5799] bridge_slave_1: entered promiscuous mode [ 79.595297][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.595406][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.595682][ T5795] bridge_slave_0: entered allmulticast mode [ 79.597012][ T5795] bridge_slave_0: entered promiscuous mode [ 79.638323][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.638426][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.638531][ T5796] bridge_slave_0: entered allmulticast mode [ 79.641079][ T5796] bridge_slave_0: entered promiscuous mode [ 79.677668][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.677784][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.678249][ T5795] bridge_slave_1: entered allmulticast mode [ 79.680630][ T5795] bridge_slave_1: entered promiscuous mode [ 79.716540][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.716672][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.716823][ T5796] bridge_slave_1: entered allmulticast mode [ 79.718599][ T5796] bridge_slave_1: entered promiscuous mode [ 79.749214][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.771950][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.772059][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.772354][ T5808] bridge_slave_0: entered allmulticast mode [ 79.773733][ T5808] bridge_slave_0: entered promiscuous mode [ 79.802012][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.831346][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.831446][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.831545][ T5808] bridge_slave_1: entered allmulticast mode [ 79.832895][ T5808] bridge_slave_1: entered promiscuous mode [ 79.875581][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.903715][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.918352][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.918679][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.918788][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.918937][ T5809] bridge_slave_0: entered allmulticast mode [ 79.922676][ T5809] bridge_slave_0: entered promiscuous mode [ 79.948175][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.962698][ T5799] team0: Port device team_slave_0 added [ 79.981652][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.981780][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.981884][ T5809] bridge_slave_1: entered allmulticast mode [ 79.983214][ T5809] bridge_slave_1: entered promiscuous mode [ 79.986575][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.251983][ T5799] team0: Port device team_slave_1 added [ 80.281161][ T5802] Bluetooth: hci1: command tx timeout [ 80.281605][ T5802] Bluetooth: hci0: command tx timeout [ 80.303430][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.333078][ T5795] team0: Port device team_slave_0 added [ 80.359677][ T5805] Bluetooth: hci2: command tx timeout [ 80.360078][ T5796] team0: Port device team_slave_0 added [ 80.374685][ T5795] team0: Port device team_slave_1 added [ 80.379177][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.400060][ T5796] team0: Port device team_slave_1 added [ 80.400901][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.400910][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.400924][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.440030][ T5805] Bluetooth: hci3: command tx timeout [ 80.472401][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.474056][ T5808] team0: Port device team_slave_0 added [ 80.492229][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.492246][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.492270][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.521467][ T5805] Bluetooth: hci4: command tx timeout [ 80.535639][ T5808] team0: Port device team_slave_1 added [ 80.560933][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.560948][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.560961][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.610977][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.610995][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.611019][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.632204][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.632220][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.632242][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.662416][ T5809] team0: Port device team_slave_0 added [ 80.684727][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.684744][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.684767][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.702399][ T5809] team0: Port device team_slave_1 added [ 80.704074][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.704087][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.704110][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.757453][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.757476][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.757500][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.829419][ T5799] hsr_slave_0: entered promiscuous mode [ 80.831477][ T5799] hsr_slave_1: entered promiscuous mode [ 80.834110][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.834124][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.834147][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.878830][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.878848][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.878871][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.956277][ T5795] hsr_slave_0: entered promiscuous mode [ 80.957053][ T5795] hsr_slave_1: entered promiscuous mode [ 80.957823][ T5795] debugfs: 'hsr0' already exists in 'hsr' [ 80.957900][ T5795] Cannot create hsr debugfs directory [ 80.967681][ T5796] hsr_slave_0: entered promiscuous mode [ 80.968973][ T5796] hsr_slave_1: entered promiscuous mode [ 80.970405][ T5796] debugfs: 'hsr0' already exists in 'hsr' [ 80.970428][ T5796] Cannot create hsr debugfs directory [ 81.027461][ T5808] hsr_slave_0: entered promiscuous mode [ 81.028258][ T5808] hsr_slave_1: entered promiscuous mode [ 81.028833][ T5808] debugfs: 'hsr0' already exists in 'hsr' [ 81.028854][ T5808] Cannot create hsr debugfs directory [ 81.530158][ T5809] hsr_slave_0: entered promiscuous mode [ 81.530901][ T5809] hsr_slave_1: entered promiscuous mode [ 81.531411][ T5809] debugfs: 'hsr0' already exists in 'hsr' [ 81.531431][ T5809] Cannot create hsr debugfs directory [ 81.744056][ T829] cfg80211: failed to load regulatory.db [ 82.268557][ T5799] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.298727][ T5799] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.337511][ T5799] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.359750][ T5805] Bluetooth: hci0: command tx timeout [ 82.359784][ T5805] Bluetooth: hci1: command tx timeout [ 82.394564][ T5799] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.440018][ T5802] Bluetooth: hci2: command tx timeout [ 82.468757][ T5795] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.506230][ T5795] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.519763][ T5802] Bluetooth: hci3: command tx timeout [ 82.545179][ T5795] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.599779][ T5802] Bluetooth: hci4: command tx timeout [ 82.600959][ T5795] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.732654][ T5796] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.778583][ T5796] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.803058][ T5796] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.848811][ T5796] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.979225][ T5808] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 83.018864][ T5808] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 83.040140][ T5808] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 83.089395][ T5808] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.224530][ T5809] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.264985][ T5809] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.301588][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.301810][ T5809] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.351802][ T5809] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.458864][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.465736][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.506406][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.507252][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.548462][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.548547][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.579054][ T5795] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.617068][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.627933][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.628066][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.668860][ T1266] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.669004][ T1266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.734608][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.767877][ T1266] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.768014][ T1266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.774346][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.813923][ T1266] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.814051][ T1266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.923555][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.933680][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.992219][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.992309][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.047606][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.047747][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.084194][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.121871][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.122040][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.168332][ T1281] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.168461][ T1281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.351926][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.444255][ T5805] Bluetooth: hci0: command tx timeout [ 84.444338][ T5802] Bluetooth: hci1: command tx timeout [ 84.520706][ T5802] Bluetooth: hci2: command tx timeout [ 84.581577][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.600553][ T5802] Bluetooth: hci3: command tx timeout [ 84.653193][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.679752][ T5802] Bluetooth: hci4: command tx timeout [ 84.695750][ T5799] veth0_vlan: entered promiscuous mode [ 84.744254][ T5799] veth1_vlan: entered promiscuous mode [ 84.798577][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.873559][ T5795] veth0_vlan: entered promiscuous mode [ 84.903494][ T5796] veth0_vlan: entered promiscuous mode [ 84.953449][ T5795] veth1_vlan: entered promiscuous mode [ 84.955407][ T5799] veth0_macvtap: entered promiscuous mode [ 84.966286][ T5796] veth1_vlan: entered promiscuous mode [ 84.977932][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.985054][ T5799] veth1_macvtap: entered promiscuous mode [ 85.065581][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.118712][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.135014][ T5795] veth0_macvtap: entered promiscuous mode [ 85.145849][ T5796] veth0_macvtap: entered promiscuous mode [ 85.166039][ T4368] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.179332][ T5795] veth1_macvtap: entered promiscuous mode [ 85.184602][ T4368] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.195065][ T5796] veth1_macvtap: entered promiscuous mode [ 85.202202][ T4368] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.217460][ T4368] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.294963][ T5809] veth0_vlan: entered promiscuous mode [ 85.358609][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.366020][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.421527][ T5809] veth1_vlan: entered promiscuous mode [ 85.434640][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.446568][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.481644][ T58] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.506557][ T58] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.521191][ T58] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.526620][ T58] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.546485][ T58] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.560085][ T58] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.566991][ T1266] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.567015][ T1266] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.581683][ T58] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.649445][ T58] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.698460][ T5808] veth0_vlan: entered promiscuous mode [ 85.844398][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.844416][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.924485][ T5809] veth0_macvtap: entered promiscuous mode [ 85.950950][ T5808] veth1_vlan: entered promiscuous mode [ 85.980988][ T5809] veth1_macvtap: entered promiscuous mode [ 86.013361][ T4368] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.013380][ T4368] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.103176][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.103195][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.132095][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.180151][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.180171][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.184008][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.192887][ T5808] veth0_macvtap: entered promiscuous mode [ 86.298099][ T5808] veth1_macvtap: entered promiscuous mode [ 86.301968][ T58] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.305052][ T4368] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.307738][ T4368] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.307755][ T4368] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.315123][ T4368] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.322866][ T58] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.465784][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.519659][ T5805] Bluetooth: hci0: command tx timeout [ 86.519712][ T5802] Bluetooth: hci1: command tx timeout [ 86.540786][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.599830][ T5802] Bluetooth: hci2: command tx timeout [ 86.719579][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 86.729581][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 86.739560][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 86.749605][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 86.759555][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 86.769551][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 86.779552][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 86.789553][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 86.799551][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 86.809553][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 87.845395][ T5805] Bluetooth: hci4: command tx timeout [ 87.845440][ T5802] Bluetooth: hci3: command tx timeout [ 87.909003][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.932433][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.939253][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.952510][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.212976][ T5917] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 88.257533][ T1266] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.257553][ T1266] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.446636][ T5920] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET) [ 88.553264][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.553285][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.686217][ T1266] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.686238][ T1266] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.742507][ T5896] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 88.758284][ T5920] Zero length message leads to an empty skb [ 88.826527][ T1266] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.826547][ T1266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.936319][ T5896] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 88.936351][ T5896] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 88.993751][ T5896] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 88.993770][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.993780][ T5896] usb 2-1: Product: syz [ 88.993787][ T5896] usb 2-1: Manufacturer: syz [ 88.993795][ T5896] usb 2-1: SerialNumber: syz [ 89.044933][ T5896] usb 2-1: config 0 descriptor?? [ 89.113483][ T5919] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 89.155943][ T5919] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 89.425576][ T5927] binder: 5923:5927 ioctl c0306201 0 returned -14 [ 89.930241][ T5919] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 89.933829][ T5919] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 91.233777][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 91.397017][ T5951] process 'syz.2.10' launched './file2' with NULL argv: empty string added [ 91.410617][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 91.420328][ T9] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 91.420354][ T9] usb 5-1: config 0 has no interface number 0 [ 91.423324][ T9] usb 5-1: New USB device found, idVendor=1546, idProduct=1313, bcdDevice=8c.e5 [ 91.423352][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.423371][ T9] usb 5-1: Product: syz [ 91.423384][ T9] usb 5-1: Manufacturer: syz [ 91.423397][ T9] usb 5-1: SerialNumber: syz [ 91.471900][ T9] usb 5-1: config 0 descriptor?? [ 91.511348][ T9] usb 5-1: bad CDC descriptors [ 91.567503][ T5954] vivid-007: disconnect [ 91.736953][ T5938] tipc: Enabling of bearer rejected, failed to enable media [ 91.746770][ T5954] vivid-007: reconnect [ 93.845878][ T5919] syz.1.2 (5919): drop_caches: 2 [ 93.895097][ T5864] usb 5-1: USB disconnect, device number 2 [ 94.110727][ T5896] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 94.338047][ T5896] dm9601 2-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet, 72:51:6e:20:45:ee [ 95.214772][ T5972] binder: 5970:5972 ioctl c0306201 0 returned -14 [ 95.365559][ T5896] usb 2-1: USB disconnect, device number 2 [ 95.368506][ T5896] dm9601 2-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet [ 98.880190][ T5987] No source specified [ 98.881232][ T5987] netlink: 68 bytes leftover after parsing attributes in process `syz.0.19'. [ 101.866314][ T6018] loop2: detected capacity change from 0 to 7 [ 101.887994][ T6018] Dev loop2: unable to read RDB block 7 [ 101.888038][ T6018] loop2: AHDI p1 p2 p3 [ 101.888068][ T6018] loop2: partition table partially beyond EOD, truncated [ 101.888770][ T6018] loop2: p1 start 1818582900 is beyond EOD, truncated [ 101.888793][ T6018] loop2: p3 start 335544320 is beyond EOD, truncated [ 104.789677][ T43] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 104.939571][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 104.945751][ T43] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 104.945781][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.985461][ T43] usb 3-1: config 0 descriptor?? [ 106.041297][ T6022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.041780][ T6022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.051155][ T5949] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 106.086222][ T43] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 106.950998][ T5949] usb 5-1: Using ep0 maxpacket: 16 [ 106.958945][ T5949] usb 5-1: device descriptor read/all, error -71 [ 107.327789][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 107.482125][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 107.497963][ T9] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 107.498007][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.498026][ T9] usb 1-1: config 0 has no interface number 0 [ 107.502569][ T9] usb 1-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 107.502606][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.502625][ T9] usb 1-1: Product: syz [ 107.502638][ T9] usb 1-1: Manufacturer: syz [ 107.502651][ T9] usb 1-1: SerialNumber: syz [ 107.540887][ T9] usb 1-1: config 0 descriptor?? [ 107.812552][ T9] uvcvideo 1-1:0.105: Found UVC 0.00 device syz (046c:14e8) [ 107.812593][ T9] uvcvideo 1-1:0.105: No valid video chain found. [ 107.884177][ T9] usb 1-1: USB disconnect, device number 2 [ 108.013985][ T43] gspca_vc032x: reg_w err -71 [ 108.014016][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 108.014026][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 108.014034][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 108.014043][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 108.014051][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 108.014060][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 108.014068][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 108.014076][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 108.014085][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 108.014093][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 108.014101][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 108.014109][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 108.014117][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 108.014126][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 108.014134][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 108.014142][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 108.014150][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 108.014158][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 108.014171][ T43] gspca_vc032x: Unknown sensor... [ 108.014259][ T43] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 108.145277][ T43] usb 3-1: USB disconnect, device number 2 [ 111.489655][ T43] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 111.630334][ T6055] vivid-007: disconnect [ 111.689896][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 111.731319][ T43] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 111.731436][ T43] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.731509][ T43] usb 2-1: config 0 has no interface number 0 [ 111.751629][ T6057] vivid-007: reconnect [ 111.892897][ T43] usb 2-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 111.892927][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.892947][ T43] usb 2-1: Product: syz [ 111.892960][ T43] usb 2-1: Manufacturer: syz [ 111.892974][ T43] usb 2-1: SerialNumber: syz [ 112.203600][ T43] usb 2-1: config 0 descriptor?? [ 112.418320][ T43] uvcvideo 2-1:0.105: Found UVC 0.00 device syz (046c:14e8) [ 112.418359][ T43] uvcvideo 2-1:0.105: No valid video chain found. [ 112.497426][ T43] usb 2-1: USB disconnect, device number 3 [ 115.499613][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 115.814229][ T6087] binder: 6083:6087 ioctl c0306201 0 returned -14 [ 116.029560][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 116.031875][ T9] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 116.031899][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.031914][ T9] usb 1-1: config 0 has no interface number 0 [ 116.038570][ T9] usb 1-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 116.038599][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.038618][ T9] usb 1-1: Product: syz [ 116.038632][ T9] usb 1-1: Manufacturer: syz [ 116.038645][ T9] usb 1-1: SerialNumber: syz [ 116.045561][ T9] usb 1-1: config 0 descriptor?? [ 116.059833][ T9] uvcvideo 1-1:0.105: probe with driver uvcvideo failed with error -22 [ 116.131931][ T6090] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 116.132213][ T6090] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 117.605062][ T9] usb 1-1: USB disconnect, device number 3 [ 117.850072][ T5949] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 118.019576][ T5949] usb 4-1: Using ep0 maxpacket: 16 [ 118.027941][ T5949] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 118.027968][ T5949] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.027987][ T5949] usb 4-1: config 0 has no interface number 0 [ 118.032351][ T5949] usb 4-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 118.032381][ T5949] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.032400][ T5949] usb 4-1: Product: syz [ 118.032413][ T5949] usb 4-1: Manufacturer: syz [ 118.032427][ T5949] usb 4-1: SerialNumber: syz [ 118.129821][ T5949] usb 4-1: config 0 descriptor?? [ 118.337434][ T5949] uvcvideo 4-1:0.105: Found UVC 0.00 device syz (046c:14e8) [ 118.337468][ T5949] uvcvideo 4-1:0.105: No valid video chain found. [ 118.360783][ T6098] Invalid argument reading file caps for ./file0 [ 118.409624][ T5949] usb 4-1: USB disconnect, device number 2 [ 121.101202][ T6126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.53'. [ 121.837219][ T6133] netlink: 4 bytes leftover after parsing attributes in process `syz.2.55'. [ 122.332411][ T5802] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 122.332459][ T5802] CPU: 1 UID: 0 PID: 5802 Comm: kworker/u9:[ 122.332459][ T5802] CPU: 1 UID: 0 PID: 5802 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 122.332483][ T5802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 122.332495][ T5802] Workqueue: hci0 hci_rx_work [ 122.332548][ T5802] Call Trace: [ 122.332559][ T5802] [ 122.332567][ T5802] dump_stack_lvl+0xe8/0x150 [ 122.332595][ T5802] sysfs_create_dir_ns+0x271/0x2a0 [ 122.332616][ T5802] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 122.332638][ T5802] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 122.332661][ T5802] ? rt_spin_unlock+0x160/0x200 [ 122.332683][ T5802] kobject_add_internal+0x631/0xd10 [ 122.332719][ T5802] kobject_add+0x163/0x240 [ 122.332749][ T5802] ? __pfx_kobject_add+0x10/0x10 [ 122.332781][ T5802] ? get_device_parent+0x370/0x3a0 [ 122.332812][ T5802] device_add+0x408/0xb80 [ 122.332842][ T5802] hci_conn_add_sysfs+0xd5/0x210 [ 122.332871][ T5802] le_conn_complete_evt+0xf1d/0x1430 [ 122.332908][ T5802] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 122.332930][ T5802] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 122.332954][ T5802] ? lockdep_hardirqs_on+0x7a/0x110 [ 122.332979][ T5802] ? skb_pull_data+0xfb/0x200 [ 122.333004][ T5802] hci_le_conn_complete_evt+0x187/0x470 [ 122.333033][ T5802] hci_event_packet+0x7af/0x12c0 [ 122.333064][ T5802] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 122.333084][ T5802] ? __pfx_hci_event_packet+0x10/0x10 [ 122.333118][ T5802] ? rt_spin_unlock+0x14f/0x200 [ 122.333147][ T5802] ? hci_send_to_monitor+0xe2/0x590 [ 122.333172][ T5802] hci_rx_work+0x3ee/0x1030 [ 122.333204][ T5802] ? process_scheduled_works+0xa0f/0x17a0 [ 122.333229][ T5802] process_scheduled_works+0xaec/0x17a0 [ 122.333276][ T5802] ? __pfx_process_scheduled_works+0x10/0x10 [ 122.333301][ T5802] ? assign_work+0x3d5/0x5e0 [ 122.333326][ T5802] worker_thread+0xa50/0xfc0 [ 122.333377][ T5802] kthread+0x388/0x470 [ 122.333403][ T5802] ? __pfx_worker_thread+0x10/0x10 [ 122.333432][ T5802] ? __pfx_kthread+0x10/0x10 [ 122.333458][ T5802] ret_from_fork+0x51e/0xb90 [ 122.333485][ T5802] ? __pfx_ret_from_fork+0x10/0x10 [ 122.333505][ T5802] ? __switch_to+0xc7d/0x1400 [ 122.333529][ T5802] ? __pfx_kthread+0x10/0x10 [ 122.333556][ T5802] ret_from_fork_asm+0x1a/0x30 [ 122.333599][ T5802] [ 122.333631][ T5802] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 122.333670][ T5802] Bluetooth: hci0: failed to register connection device [ 122.362940][ T5802] ================================================================== [ 122.362955][ T5802] BUG: KASAN: slab-use-after-free in l2cap_connect_cfm+0x87d/0x13e0 [ 122.362976][ T5802] Read of size 8 at addr ffff888024a27500 by task kworker/u9:3/5802 [ 122.362986][ T5802] [ 122.362994][ T5802] CPU: 1 UID: 0 PID: 5802 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 122.363007][ T5802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 122.363016][ T5802] Workqueue: hci0 hci_rx_work [ 122.363035][ T5802] Call Trace: [ 122.363040][ T5802] [ 122.363045][ T5802] dump_stack_lvl+0xe8/0x150 [ 122.363061][ T5802] print_report+0xba/0x230 [ 122.363073][ T5802] ? l2cap_connect_cfm+0x87d/0x13e0 [ 122.363092][ T5802] kasan_report+0x117/0x150 [ 122.363105][ T5802] ? l2cap_connect_cfm+0x87d/0x13e0 [ 122.363119][ T5802] l2cap_connect_cfm+0x87d/0x13e0 [ 122.363133][ T5802] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 122.363145][ T5802] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 122.363159][ T5802] ? lockdep_hardirqs_on+0x7a/0x110 [ 122.363172][ T5802] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 122.363184][ T5802] ? mutex_lock_nested+0x152/0x1d0 [ 122.363193][ T5802] ? hci_connect_cfm+0x2c/0x140 [ 122.363203][ T5802] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 122.363215][ T5802] hci_connect_cfm+0x95/0x140 [ 122.363226][ T5802] le_conn_complete_evt+0xf65/0x1430 [ 122.363241][ T5802] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 122.363252][ T5802] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 122.363264][ T5802] ? lockdep_hardirqs_on+0x7a/0x110 [ 122.363276][ T5802] ? skb_pull_data+0xfb/0x200 [ 122.363288][ T5802] hci_le_conn_complete_evt+0x187/0x470 [ 122.363300][ T5802] hci_event_packet+0x7af/0x12c0 [ 122.363315][ T5802] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 122.363325][ T5802] ? __pfx_hci_event_packet+0x10/0x10 [ 122.363341][ T5802] ? rt_spin_unlock+0x14f/0x200 [ 122.363352][ T5802] ? hci_send_to_monitor+0xe2/0x590 [ 122.363365][ T5802] hci_rx_work+0x3ee/0x1030 [ 122.363380][ T5802] ? process_scheduled_works+0xa0f/0x17a0 [ 122.363392][ T5802] process_scheduled_works+0xaec/0x17a0 [ 122.363409][ T5802] ? __pfx_process_scheduled_works+0x10/0x10 [ 122.363421][ T5802] ? assign_work+0x3d5/0x5e0 [ 122.363433][ T5802] worker_thread+0xa50/0xfc0 [ 122.363451][ T5802] kthread+0x388/0x470 [ 122.363466][ T5802] ? __pfx_worker_thread+0x10/0x10 [ 122.363477][ T5802] ? __pfx_kthread+0x10/0x10 [ 122.363491][ T5802] ret_from_fork+0x51e/0xb90 [ 122.363503][ T5802] ? __pfx_ret_from_fork+0x10/0x10 [ 122.363514][ T5802] ? __switch_to+0xc7d/0x1400 [ 122.363525][ T5802] ? __pfx_kthread+0x10/0x10 [ 122.363539][ T5802] ret_from_fork_asm+0x1a/0x30 [ 122.363556][ T5802] [ 122.363560][ T5802] [ 122.363562][ T5802] Allocated by task 5802: [ 122.363568][ T5802] kasan_save_track+0x3e/0x80 [ 122.363576][ T5802] __kasan_kmalloc+0x93/0xb0 [ 122.363584][ T5802] __kmalloc_cache_noprof+0x3a6/0x690 [ 122.363594][ T5802] l2cap_chan_create+0x51/0x7a0 [ 122.363606][ T5802] l2cap_sock_new_connection_cb+0x182/0x2e0 [ 122.363619][ T5802] l2cap_connect_cfm+0x368/0x13e0 [ 122.363629][ T5802] hci_connect_cfm+0x95/0x140 [ 122.363638][ T5802] le_conn_complete_evt+0xf65/0x1430 [ 122.363648][ T5802] hci_le_conn_complete_evt+0x187/0x470 [ 122.363658][ T5802] hci_event_packet+0x7af/0x12c0 [ 122.363670][ T5802] hci_rx_work+0x3ee/0x1030 [ 122.363682][ T5802] process_scheduled_works+0xaec/0x17a0 [ 122.363692][ T5802] worker_thread+0xa50/0xfc0 [ 122.363702][ T5802] kthread+0x388/0x470 [ 122.363713][ T5802] ret_from_fork+0x51e/0xb90 [ 122.363723][ T5802] ret_from_fork_asm+0x1a/0x30 [ 122.363736][ T5802] [ 122.363738][ T5802] Freed by task 6144: [ 122.363742][ T5802] kasan_save_track+0x3e/0x80 [ 122.363750][ T5802] kasan_save_free_info+0x46/0x50 [ 122.363761][ T5802] __kasan_slab_free+0x5c/0x80 [ 122.363769][ T5802] kfree+0x1c1/0x690 [ 122.363776][ T5802] l2cap_sock_cleanup_listen+0xf0/0x440 [ 122.363788][ T5802] l2cap_sock_release+0x6e/0x270 [ 122.363799][ T5802] sock_close+0xc3/0x240 [ 122.363808][ T5802] __fput+0x45e/0xa80 [ 122.363819][ T5802] task_work_run+0x1d9/0x270 [ 122.363826][ T5802] exit_to_user_mode_loop+0xed/0x480 [ 122.363837][ T5802] do_syscall_64+0x32d/0xf80 [ 122.363849][ T5802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.363858][ T5802] [ 122.363860][ T5802] The buggy address belongs to the object at ffff888024a27000 [ 122.363860][ T5802] which belongs to the cache kmalloc-2k of size 2048 [ 122.363869][ T5802] The buggy address is located 1280 bytes inside of [ 122.363869][ T5802] freed 2048-byte region [ffff888024a27000, ffff888024a27800) [ 122.363880][ T5802] [ 122.363882][ T5802] The buggy address belongs to the physical page: [ 122.363894][ T5802] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888024a22000 pfn:0x24a20 [ 122.363907][ T5802] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 122.363917][ T5802] flags: 0x80000000000240(workingset|head|node=0|zone=1) [ 122.363931][ T5802] page_type: f5(slab) [ 122.363942][ T5802] raw: 0080000000000240 ffff88813fe0e000 ffffea000183de10 ffff88813fe0cc88 [ 122.363951][ T5802] raw: ffff888024a22000 0000000000080005 00000000f5000000 0000000000000000 [ 122.363960][ T5802] head: 0080000000000240 ffff88813fe0e000 ffffea000183de10 ffff88813fe0cc88 [ 122.363969][ T5802] head: ffff888024a22000 0000000000080005 00000000f5000000 0000000000000000 [ 122.363979][ T5802] head: 0080000000000003 ffffea0000928801 00000000ffffffff 00000000ffffffff [ 122.363987][ T5802] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 122.363992][ T5802] page dumped because: kasan: bad access detected [ 122.364001][ T5802] page_owner tracks the page as allocated [ 122.364004][ T5802] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5155, tgid 5155 (klogd), ts 82852030094, free_ts 82813221198 [ 122.364023][ T5802] post_alloc_hook+0x228/0x280 [ 122.364033][ T5802] get_page_from_freelist+0x28bb/0x2950 [ 122.364044][ T5802] __alloc_frozen_pages_noprof+0x18d/0x380 [ 122.364055][ T5802] allocate_slab+0x77/0x660 [ 122.364068][ T5802] refill_objects+0x334/0x3c0 [ 122.364079][ T5802] __pcs_replace_empty_main+0x328/0x5f0 [ 122.364097][ T5802] __kmalloc_cache_noprof+0x44e/0x690 [ 122.364107][ T5802] syslog_print+0x103/0x610 [ 122.364114][ T5802] do_syslog+0x583/0x7d0 [ 122.364128][ T5802] __x64_sys_syslog+0x7c/0x90 [ 122.364136][ T5802] do_syscall_64+0x14d/0xf80 [ 122.364147][ T5802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.364156][ T5802] page last free pid 5155 tgid 5155 stack trace: [ 122.364162][ T5802] __free_frozen_pages+0xfd0/0x1160 [ 122.364172][ T5802] __slab_free+0x24f/0x2a0 [ 122.364181][ T5802] qlist_free_all+0x97/0x100 [ 122.364193][ T5802] kasan_quarantine_reduce+0x148/0x160 [ 122.364206][ T5802] __kasan_slab_alloc+0x22/0x80 [ 122.364215][ T5802] __kmalloc_cache_noprof+0x338/0x690 [ 122.364224][ T5802] syslog_print+0x103/0x610 [ 122.364231][ T5802] do_syslog+0x583/0x7d0 [ 122.364243][ T5802] __x64_sys_syslog+0x7c/0x90 [ 122.364251][ T5802] do_syscall_64+0x14d/0xf80 [ 122.364261][ T5802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.364270][ T5802] [ 122.364272][ T5802] Memory state around the buggy address: [ 122.364277][ T5802] ffff888024a27400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 122.364284][ T5802] ffff888024a27480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 122.364290][ T5802] >ffff888024a27500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 122.364295][ T5802] ^ [ 122.364300][ T5802] ffff888024a27580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 122.364306][ T5802] ffff888024a27600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 122.364311][ T5802] ================================================================== [ 122.364322][ T5802] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 122.364333][ T5802] CPU: 1 UID: 0 PID: 5802 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 122.364348][ T5802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 122.364355][ T5802] Workqueue: hci0 hci_rx_work [ 122.364370][ T5802] Call Trace: [ 122.364374][ T5802] [ 122.364378][ T5802] vpanic+0x1e0/0x670 [ 122.364393][ T5802] panic+0xc5/0xd0 [ 122.364406][ T5802] ? __pfx_panic+0x10/0x10 [ 122.364420][ T5802] ? l2cap_connect_cfm+0x87d/0x13e0 [ 122.364431][ T5802] ? rcu_is_watching+0x15/0xb0 [ 122.364449][ T5802] ? l2cap_connect_cfm+0x87d/0x13e0 [ 122.364460][ T5802] check_panic_on_warn+0x89/0xb0 [ 122.364471][ T5802] ? l2cap_connect_cfm+0x87d/0x13e0 [ 122.364482][ T5802] end_report+0x6f/0x140 [ 122.364492][ T5802] kasan_report+0x128/0x150 [ 122.364502][ T5802] ? l2cap_connect_cfm+0x87d/0x13e0 [ 122.364515][ T5802] l2cap_connect_cfm+0x87d/0x13e0 [ 122.364529][ T5802] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 122.364540][ T5802] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 122.364553][ T5802] ? lockdep_hardirqs_on+0x7a/0x110 [ 122.364565][ T5802] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 122.364577][ T5802] ? mutex_lock_nested+0x152/0x1d0 [ 122.364586][ T5802] ? hci_connect_cfm+0x2c/0x140 [ 122.364597][ T5802] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 122.364608][ T5802] hci_connect_cfm+0x95/0x140 [ 122.364618][ T5802] le_conn_complete_evt+0xf65/0x1430 [ 122.364632][ T5802] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 122.364647][ T5802] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 122.364665][ T5802] ? lockdep_hardirqs_on+0x7a/0x110 [ 122.364677][ T5802] ? skb_pull_data+0xfb/0x200 [ 122.364689][ T5802] hci_le_conn_complete_evt+0x187/0x470 [ 122.364701][ T5802] hci_event_packet+0x7af/0x12c0 [ 122.364716][ T5802] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 122.364726][ T5802] ? __pfx_hci_event_packet+0x10/0x10 [ 122.364740][ T5802] ? rt_spin_unlock+0x14f/0x200 [ 122.364757][ T5802] ? hci_send_to_monitor+0xe2/0x590 [ 122.364769][ T5802] hci_rx_work+0x3ee/0x1030 [ 122.364785][ T5802] ? process_scheduled_works+0xa0f/0x17a0 [ 122.364797][ T5802] process_scheduled_works+0xaec/0x17a0 [ 122.364814][ T5802] ? __pfx_process_scheduled_works+0x10/0x10 [ 122.364826][ T5802] ? assign_work+0x3d5/0x5e0 [ 122.364838][ T5802] worker_thread+0xa50/0xfc0 [ 122.364855][ T5802] kthread+0x388/0x470 [ 122.364868][ T5802] ? __pfx_worker_thread+0x10/0x10 [ 122.364879][ T5802] ? __pfx_kthread+0x10/0x10 [ 122.364892][ T5802] ret_from_fork+0x51e/0xb90 [ 122.364905][ T5802] ? __pfx_ret_from_fork+0x10/0x10 [ 122.364916][ T5802] ? __switch_to+0xc7d/0x1400 [ 122.364927][ T5802] ? __pfx_kthread+0x10/0x10 [ 122.364940][ T5802] ret_from_fork_asm+0x1a/0x30 [ 122.364958][ T5802] [ 122.365132][ T5802] Kernel Offset: disabled