last executing test programs: 18.483213419s ago: executing program 0 (id=1): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 16.846749887s ago: executing program 0 (id=6): syz_io_uring_setup(0x47ec, &(0x7f0000000340)={0x0, 0x9ac4, 0x8000, 0x1, 0x27c}, &(0x7f0000000100), &(0x7f00000002c0), &(0x7f0000000140)) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) r0 = openat$sndseq(0xffffff9c, &(0x7f0000000500), 0x349202) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000540)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000180)='GPL\x00', 0xfffffffb, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) r5 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) writev(r5, &(0x7f0000000a40)=[{&(0x7f00000000c0)="ef", 0x1}], 0x1) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB='Lrdma'], 0xe) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) write$proc_mixer(r7, &(0x7f0000000280)=ANY=[@ANYBLOB='VOLUME \'Line'], 0x2a) close(r7) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') fchdir(r8) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x800000000001c8, 0x12) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000040)) write$cgroup_int(r6, &(0x7f0000000300)=0x7, 0x12) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) socket(0x1e, 0x4, 0x0) close_range(r12, 0xffffffffffffffff, 0x0) 16.837009303s ago: executing program 1 (id=2): r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) close(r0) r1 = inotify_init1(0x80800) fcntl$setstatus(r0, 0x4, 0x2c00) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = gettid() fcntl$setown(r0, 0x8, r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x44890) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') 16.521349004s ago: executing program 2 (id=7): r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) close(r0) r1 = inotify_init1(0x80800) fcntl$setstatus(r0, 0x4, 0x2c00) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = gettid() fcntl$setown(r0, 0x8, r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x44890) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 14.978811904s ago: executing program 0 (id=8): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private1, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x2, 0x0, 0x2, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private0, @in6=@loopback, @in=@broadcast, 0x6c, 0x1, 0x0, 0x0, 0x2, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) 11.96649022s ago: executing program 2 (id=10): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @void, @void}, 0x2f) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000200)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @val={0x10, 0x1, 0x21}}, 0x21) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val, @void}, 0x20) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@mgmt_frame=@beacon={{{}, {}, @broadcast, @device_b, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @val={0x5, 0x3, {0x7c, 0x20, 0x8}}, @val={0x25, 0x3, {0x0, 0x2, 0x4}}, @val={0x2a, 0x1, {0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x3d, 0xab, 0x5}}, @val={0x2d, 0x1a, {0x8, 0x3, 0x1, 0x0, {0x5, 0x1009, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x400, 0x4, 0x5}}, @void, @val={0x71, 0x7, {0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x21}}, @val={0x76, 0x6, {0x0, 0x9, 0x3d, 0x1}}}, 0x64) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)={0x24, r3, 0x5, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x24}}, 0x0) 11.770123215s ago: executing program 4 (id=11): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001800599c6d0e0000"], 0xfe33) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) socket$kcm(0x10, 0x2, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b", @ANYRES32=r1]) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000100)={0x0, 0x10, 0x0, 0x2, 0x6}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r2, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf980000000000000d080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 11.759493037s ago: executing program 1 (id=12): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x24008000) 9.425877855s ago: executing program 2 (id=13): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, &(0x7f0000000000)=ANY=[]) 9.350008286s ago: executing program 3 (id=14): syz_io_uring_setup(0x3ec3, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000), 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) listen(0xffffffffffffffff, 0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) gettid() sendmsg$key(r1, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 8.891030145s ago: executing program 4 (id=15): sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000300)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000001c0)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001cc0)={0x1, 0x0, [{0x54000, 0xffb, &(0x7f0000001d80)=""/4091}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, 0x0) 7.522053006s ago: executing program 3 (id=16): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 6.948962272s ago: executing program 4 (id=17): kexec_load(0x3, 0x6, &(0x7f00000005c0)=[{&(0x7f0000000000), 0x0, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e45715203107f8ce516d99c8c7db918e0989ef123cc524fa8ae0af5c952de542a26817", 0xcc, 0x5, 0xffffffff}, {0x0, 0x0, 0x5, 0x4}, {0x0, 0x0, 0x7, 0x2}, {0x0, 0x0, 0x2, 0xfffffffffffffffa}, {&(0x7f00000004c0)="fd7cd1d51fb9987e67d12dded82fd30b5e7675f10da30291367bede16a4fe296961baf3caee5bd5c0d76b25c3de77c56ddefc936fa712ec3d7e51f4b16e682d3ee59b2abf6c05927c1edb91d54f66cf99928f710cf98acec87a3d75a6388bab3c5a1474d", 0x64, 0x5, 0x6}], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)=@newtfilter={0x5c, 0x2c, 0x300, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1e}, {0xe, 0xa}, {0xb, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x6}}, @TCA_RATE={0x6, 0x5, {0x8, 0x9}}, @filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8}, @TCA_FLOW_MASK={0x8, 0x6, 0x9}]}}, @TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000090}, 0x4048010) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="4274aa814c8f6ea8d8db43", 0xb}, {&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5e9393ca029e477f71c7707c0e59c992ef8bb0993", 0x41}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307371d68817c7eca00a16bce0ea949", 0x97}], 0x3}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6.287657272s ago: executing program 0 (id=18): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x2000c000}, 0x20008000) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x100) r2 = fsopen(&(0x7f0000000080)='qnx4\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x28383, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x20080, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) epoll_create1(0x0) syz_io_uring_setup(0x2, &(0x7f0000000580)={0x0, 0x8b2, 0x13500, 0x0, 0x304}, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x400000, 0x0, 0xffffffffffffff1b, 0x7b}, 0x0, &(0x7f0000000280)={0x3fc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x4e74, 0x1c080, 0xa, 0x20002f7}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r5 = accept$alg(r4, 0x0, 0x0) sendmsg$alg(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000200)={'xfrm0\x00', 0x0}) 5.543196588s ago: executing program 3 (id=19): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x500}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 4.567976515s ago: executing program 3 (id=20): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) socket$inet(0x2, 0x80001, 0x84) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d", 0x2}, {0x0}], 0x2}], 0x1, 0x40800) syz_usb_connect(0x5, 0x7a0, &(0x7f0000001200)=ANY=[@ANYBLOB="12011001df382540cd0c990095bd0102030109028e0703020910000904"], 0x0) 4.43583775s ago: executing program 2 (id=21): r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) prlimit64(r1, 0xf, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0) r4 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r4, &(0x7f00000001c0)={0x18, 0x2, {0x0, @empty}}, 0x1e) pipe2(&(0x7f0000000200), 0x800) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r5, 0x0, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="39000000130003474cbb65e1c3e4ffff06000d00010000000700000025000000040016000c0014000000001f000006060400180000008cdb25", 0x39}], 0x1) 4.38124087s ago: executing program 0 (id=22): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) waitid(0x0, 0x0, &(0x7f0000000000), 0x40000000, &(0x7f0000000300)) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0xe8c00) ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000040)={0xd0, 0xfffffffffffffffe, 0x1000000}) close(r2) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r3, 0x0, 0x0, 0x20040081) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 4.333360546s ago: executing program 4 (id=23): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_j1939(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)="c9709aa7127c6dac28", 0x9}}, 0x8080) close(r2) 2.718109289s ago: executing program 2 (id=24): socket$nl_generic(0x10, 0x3, 0x10) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x500}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 2.60089586s ago: executing program 4 (id=25): socket$nl_netfilter(0x10, 0x3, 0xc) getdents(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) openat(0xffffffffffffff9c, 0x0, 0x107842, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89b0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sendmsg(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000700), 0x0, &(0x7f0000002280)=[{0xc0, 0x104, 0x10, "6bfa4ca8b5acd2d589c989829b122066c6473491836ddf8005c0284e47c33b4f77f9deaabf9d85042965f5cef55a17e661360859b8b40919f880f2a666ad86186d8e9ddd998a6727ef97786fcd84cad3b1553ce2faa731a9597df40f6a9e05d36d39124af402edfb5aa1f6e97cc53f3d00bd7aa98a348d651b4ddb71caf18ce128dfa3f8768e111c69c3792c45d86a3c51cdaf166dbf71c1f8d0db1ea99caeab05bacf639af146c79032"}, {0x10, 0x114, 0x2}, {0x168, 0x107, 0x1, "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"}], 0x238}, 0x20000800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) 1.652750082s ago: executing program 3 (id=26): socket$tipc(0x1e, 0x5, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/time\x00') open_by_handle_at(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000f1000100", @ANYRES64=r0], 0x0) 1.289464284s ago: executing program 4 (id=27): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0xc114) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) unshare(0x6a040000) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) 804.503328ms ago: executing program 3 (id=28): openat$kvm(0xffffff9c, 0x0, 0x8000, 0x0) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, 0x0, 0x40810) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x12, 0x0, 0x0) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r1, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) 0s ago: executing program 2 (id=29): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.210' (ED25519) to the list of known hosts. [ 86.945879][ T5589] cgroup: Unknown subsys name 'net' [ 87.194847][ T5589] cgroup: Unknown subsys name 'cpuset' [ 87.268296][ T5589] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 89.211414][ T5589] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.006169][ T1627] cfg80211: failed to load regulatory.db [ 93.584587][ T5618] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.595074][ T5620] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 93.615055][ T5619] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.630321][ T5620] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 93.634132][ T5620] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 93.643532][ T5618] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.650675][ T5618] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 93.653235][ T5619] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.684756][ T5619] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.687019][ T5619] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.693025][ T5617] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.693439][ T5619] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.693726][ T5619] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.694798][ T5619] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.699095][ T5619] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.715706][ T5612] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.717972][ T5612] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 93.721582][ T5612] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.733740][ T5612] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.750844][ T5614] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.768450][ T5614] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.775922][ T5612] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.789685][ T5608] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 93.842071][ T5612] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.843919][ T5612] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.919481][ T5612] Bluetooth: hci1: command tx timeout [ 95.919475][ T4916] Bluetooth: hci3: command tx timeout [ 95.920897][ T59] Bluetooth: hci2: command tx timeout [ 95.928139][ T59] Bluetooth: hci4: command tx timeout [ 96.003435][ T59] Bluetooth: hci0: command tx timeout [ 96.640515][ T5603] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.641583][ T5603] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.641717][ T5603] bridge_slave_0: entered allmulticast mode [ 96.643661][ T5603] bridge_slave_0: entered promiscuous mode [ 96.688774][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.688884][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.689019][ T5606] bridge_slave_0: entered allmulticast mode [ 96.690919][ T5606] bridge_slave_0: entered promiscuous mode [ 96.737365][ T5602] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.737471][ T5602] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.739451][ T5602] bridge_slave_0: entered allmulticast mode [ 96.756328][ T5602] bridge_slave_0: entered promiscuous mode [ 96.767162][ T5603] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.767324][ T5603] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.767516][ T5603] bridge_slave_1: entered allmulticast mode [ 96.790177][ T5603] bridge_slave_1: entered promiscuous mode [ 96.823527][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.823671][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.823854][ T5606] bridge_slave_1: entered allmulticast mode [ 96.833112][ T5606] bridge_slave_1: entered promiscuous mode [ 96.876268][ T5602] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.876393][ T5602] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.876572][ T5602] bridge_slave_1: entered allmulticast mode [ 96.885217][ T5602] bridge_slave_1: entered promiscuous mode [ 96.920639][ T5604] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.920757][ T5604] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.920875][ T5604] bridge_slave_0: entered allmulticast mode [ 96.922649][ T5604] bridge_slave_0: entered promiscuous mode [ 96.966951][ T5605] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.967049][ T5605] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.967171][ T5605] bridge_slave_0: entered allmulticast mode [ 96.983525][ T5605] bridge_slave_0: entered promiscuous mode [ 97.026143][ T5604] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.026265][ T5604] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.026426][ T5604] bridge_slave_1: entered allmulticast mode [ 97.033988][ T5604] bridge_slave_1: entered promiscuous mode [ 97.066861][ T5605] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.066979][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.067148][ T5605] bridge_slave_1: entered allmulticast mode [ 97.074952][ T5605] bridge_slave_1: entered promiscuous mode [ 97.118764][ T5603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.144955][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.169848][ T5602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.173559][ T5603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.208947][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.236807][ T5602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.261150][ T5604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.285933][ T5605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.324719][ T5604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.348094][ T5605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.373481][ T5603] team0: Port device team_slave_0 added [ 97.395960][ T5606] team0: Port device team_slave_0 added [ 97.418453][ T5602] team0: Port device team_slave_0 added [ 97.422142][ T5603] team0: Port device team_slave_1 added [ 97.454708][ T5606] team0: Port device team_slave_1 added [ 97.480762][ T5602] team0: Port device team_slave_1 added [ 97.502676][ T5604] team0: Port device team_slave_0 added [ 97.523564][ T5605] team0: Port device team_slave_0 added [ 97.557172][ T5604] team0: Port device team_slave_1 added [ 97.579333][ T5605] team0: Port device team_slave_1 added [ 97.601183][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.601199][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.601226][ T5603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.654128][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.654140][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.654160][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.706135][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.706147][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.706167][ T5602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.707315][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.707330][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.707358][ T5603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.799125][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.799142][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.799170][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.842824][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.842881][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.842955][ T5602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.902432][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.902445][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.902464][ T5604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.937166][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.937211][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.937293][ T5605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.997733][ T59] Bluetooth: hci1: command tx timeout [ 98.001436][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.001448][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.001467][ T5604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.003368][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.003378][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.003403][ T5605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.008706][ T59] Bluetooth: hci4: command tx timeout [ 98.008741][ T5612] Bluetooth: hci2: command tx timeout [ 98.008824][ T59] Bluetooth: hci3: command tx timeout [ 98.079262][ T59] Bluetooth: hci0: command tx timeout [ 98.683316][ T5603] hsr_slave_0: entered promiscuous mode [ 98.684473][ T5603] hsr_slave_1: entered promiscuous mode [ 98.701173][ T5606] hsr_slave_0: entered promiscuous mode [ 98.702134][ T5606] hsr_slave_1: entered promiscuous mode [ 98.702908][ T5606] debugfs: 'hsr0' already exists in 'hsr' [ 98.702992][ T5606] Cannot create hsr debugfs directory [ 98.752256][ T5602] hsr_slave_0: entered promiscuous mode [ 98.753255][ T5602] hsr_slave_1: entered promiscuous mode [ 98.753911][ T5602] debugfs: 'hsr0' already exists in 'hsr' [ 98.753930][ T5602] Cannot create hsr debugfs directory [ 98.811912][ T5604] hsr_slave_0: entered promiscuous mode [ 98.812913][ T5604] hsr_slave_1: entered promiscuous mode [ 98.813599][ T5604] debugfs: 'hsr0' already exists in 'hsr' [ 98.813616][ T5604] Cannot create hsr debugfs directory [ 98.839441][ T5605] hsr_slave_0: entered promiscuous mode [ 98.843205][ T5605] hsr_slave_1: entered promiscuous mode [ 98.845823][ T5605] debugfs: 'hsr0' already exists in 'hsr' [ 98.845846][ T5605] Cannot create hsr debugfs directory [ 99.826167][ T5603] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 99.881110][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 99.896033][ T5603] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 99.933630][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 99.936787][ T5603] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 99.984924][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.006427][ T5603] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.027189][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.079054][ T4916] Bluetooth: hci3: command tx timeout [ 100.079086][ T4916] Bluetooth: hci4: command tx timeout [ 100.079109][ T4916] Bluetooth: hci1: command tx timeout [ 100.080138][ T59] Bluetooth: hci2: command tx timeout [ 100.158703][ T59] Bluetooth: hci0: command tx timeout [ 100.158885][ T5606] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 100.188125][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.191671][ T5606] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 100.221785][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.224238][ T5606] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 100.271470][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.305524][ T5606] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 100.331187][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.476869][ T5604] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 100.503990][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.522078][ T5604] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 100.570853][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.595914][ T5604] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 100.632040][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.660003][ T5604] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 100.692689][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.853173][ T5605] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 100.892059][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.909695][ T5605] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 100.943706][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.956645][ T5605] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 100.994825][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.026367][ T5605] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 101.051174][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.138637][ T5603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.227317][ T5602] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 101.265326][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.286468][ T5602] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 101.322229][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.342770][ T5602] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 101.382386][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.398664][ T5602] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 101.443259][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.460410][ T5603] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.510296][ T1382] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.510449][ T1382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.547288][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.580483][ T1382] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.580625][ T1382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.692905][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.739847][ T1382] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.740679][ T1382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.767022][ T5604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.831977][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.832093][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.929285][ T5604] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.992598][ T98] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.992810][ T98] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.042832][ T5605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.096182][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.096295][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.157817][ T5612] Bluetooth: hci1: command tx timeout [ 102.157848][ T5612] Bluetooth: hci4: command tx timeout [ 102.157870][ T5612] Bluetooth: hci3: command tx timeout [ 102.159816][ T59] Bluetooth: hci2: command tx timeout [ 102.228099][ T5605] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.247346][ T59] Bluetooth: hci0: command tx timeout [ 102.312844][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.313027][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.344670][ T5602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.404252][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.405640][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.618786][ T5602] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.704717][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.704856][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.831336][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.831497][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.184696][ T5603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.605648][ T5603] veth0_vlan: entered promiscuous mode [ 103.685059][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.719661][ T5603] veth1_vlan: entered promiscuous mode [ 103.951691][ T5604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.066286][ T5603] veth0_macvtap: entered promiscuous mode [ 104.130572][ T5603] veth1_macvtap: entered promiscuous mode [ 104.175560][ T5606] veth0_vlan: entered promiscuous mode [ 104.260917][ T5606] veth1_vlan: entered promiscuous mode [ 104.295905][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.354483][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.374380][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.386658][ T5604] veth0_vlan: entered promiscuous mode [ 104.410567][ T5602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.452115][ T66] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.467155][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.498211][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.527778][ T5604] veth1_vlan: entered promiscuous mode [ 104.530672][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.699403][ T5606] veth0_macvtap: entered promiscuous mode [ 104.770583][ T5606] veth1_macvtap: entered promiscuous mode [ 105.003029][ T5604] veth0_macvtap: entered promiscuous mode [ 105.038657][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.064740][ T5602] veth0_vlan: entered promiscuous mode [ 105.067143][ T5604] veth1_macvtap: entered promiscuous mode [ 105.101978][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.178480][ T1382] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.182645][ T1382] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.187275][ T5602] veth1_vlan: entered promiscuous mode [ 105.216223][ T1382] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.236285][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.236311][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.237308][ T1382] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.351743][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.453613][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.472302][ T1027] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.472323][ T1027] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.607028][ T98] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.654073][ T98] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.673919][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.696339][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.708607][ T5605] veth0_vlan: entered promiscuous mode [ 105.883449][ T5602] veth0_macvtap: entered promiscuous mode [ 105.979047][ T5605] veth1_vlan: entered promiscuous mode [ 106.002118][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.002138][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.004932][ T5602] veth1_macvtap: entered promiscuous mode [ 106.390261][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.566917][ T1056] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.566939][ T1056] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.600077][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.696875][ T1056] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.712582][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.712621][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.715583][ T1056] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.717032][ T5605] veth0_macvtap: entered promiscuous mode [ 106.799654][ T1056] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.821616][ T1056] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.844543][ T5605] veth1_macvtap: entered promiscuous mode [ 107.072779][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.072800][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.327398][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.406834][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.484985][ T43] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.486972][ T43] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.515717][ T43] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.515818][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.515845][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.517405][ T43] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.629708][ T5801] netlink: 'syz.2.3': attribute type 2 has an invalid length. [ 107.629726][ T5801] netlink: 'syz.2.3': attribute type 1 has an invalid length. [ 107.629885][ T5801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 107.873700][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.873723][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.556113][ T5810] 9pnet_virtio: no channels available for device syz [ 108.933089][ T5810] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 108.976372][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.976393][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.074959][ T5807] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 109.170369][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.170391][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.189903][ T1007] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 109.208852][ T5607] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 109.450300][ T1007] usb 4-1: Using ep0 maxpacket: 32 [ 109.497584][ T5807] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 109.497620][ T5807] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 109.497659][ T5807] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 109.497682][ T5807] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.562721][ T1007] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.562754][ T1007] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.562808][ T1007] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 109.562832][ T1007] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.635565][ T5607] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 109.635605][ T5607] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 109.635647][ T5607] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 109.635673][ T5607] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.863603][ T1007] usb 4-1: config 0 descriptor?? [ 109.911498][ T5815] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 110.021095][ T5804] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 110.112478][ T1007] hub 4-1:0.0: USB hub found [ 110.197036][ T1007] hub 4-1:0.0: 1 port detected [ 110.472346][ T1007] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 110.472375][ T1007] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 110.606787][ T5607] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 110.724767][ T1007] usbhid 4-1:0.0: can't add hid device: -71 [ 110.724902][ T1007] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 112.247620][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.355298][ T1007] usb 4-1: USB disconnect, device number 2 [ 113.404301][ T5843] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.645990][ T5846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.648312][ T4983] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 113.733425][ T5843] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.847741][ T4983] usb 5-1: Using ep0 maxpacket: 32 [ 113.865237][ T4983] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 113.865262][ T4983] usb 5-1: config 0 has no interface number 0 [ 113.919381][ T4983] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 113.919417][ T4983] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.919438][ T4983] usb 5-1: Product: syz [ 113.919454][ T4983] usb 5-1: Manufacturer: syz [ 113.919469][ T4983] usb 5-1: SerialNumber: syz [ 113.997508][ T4983] usb 5-1: config 0 descriptor?? [ 114.048330][ T4983] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 114.054192][ T5843] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.438300][ C1] usb-serial ttyUSB0: qt2_process_read_urb - unsupported command 6 [ 114.466025][ T5807] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 114.826178][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 114.837810][ T5607] usb 3-1: USB disconnect, device number 2 [ 115.152515][ T4983] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 115.237120][ T4983] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 115.355227][ T4983] usb 5-1: USB disconnect, device number 2 [ 115.943691][ T4983] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 116.171291][ T4983] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 116.217070][ T4983] quatech2 5-1:0.51: device disconnected [ 116.529257][ T5807] usb 2-1: USB disconnect, device number 2 [ 120.216069][ T5842] infiniband syz1: set active [ 120.216090][ T5842] infiniband syz1: added bond0 [ 120.415199][ T5842] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 120.415239][ T5842] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 120.415284][ T5842] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 120.690201][ T5924] netlink: 5 bytes leftover after parsing attributes in process `syz.2.21'. [ 120.701214][ T5924] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 120.895722][ T5714] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 121.938925][ T5714] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 121.938954][ T5714] usb 4-1: config 2 has 1 interface, different from the descriptor's value: 3 [ 121.945589][ T5714] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=bd.95 [ 121.945621][ T5714] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.945653][ T5714] usb 4-1: Product: syz [ 121.945667][ T5714] usb 4-1: Manufacturer: syz [ 121.945681][ T5714] usb 4-1: SerialNumber: syz [ 122.013408][ T5842] RDS/IB: syz1: added [ 122.052877][ T5842] smc: adding ib device syz1 with port count 1 [ 122.068542][ T5842] smc: ib device syz1 port 1 has no pnetid [ 122.419049][ T5714] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 122.569305][ T5714] dvb_usb_af9015 4-1:2.0: probe with driver dvb_usb_af9015 failed with error -22 [ 122.592183][ T5714] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 122.592286][ T5714] dvb_usb_af9035 4-1:2.0: probe with driver dvb_usb_af9035 failed with error -22 [ 122.647282][ T5714] usb 4-1: USB disconnect, device number 3 [ 124.474879][ T5943] kAFS: unable to lookup cell '(,c¾ûL' [ 124.984926][ T59] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 124.984974][ T59] CPU: 0 UID: 0 PID: 59 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 124.985001][ T59] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 124.985016][ T59] Workqueue: hci0 hci_rx_work [ 124.985075][ T59] Call Trace: [ 124.985084][ T59] [ 124.985093][ T59] dump_stack_lvl+0xe8/0x150 [ 124.985123][ T59] sysfs_create_dir_ns+0x271/0x2a0 [ 124.985159][ T59] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 124.985189][ T59] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 124.985229][ T59] ? rt_spin_unlock+0x160/0x200 [ 124.985260][ T59] kobject_add_internal+0x631/0xd10 [ 124.985293][ T59] kobject_add+0x163/0x240 [ 124.985321][ T59] ? __pfx_kobject_add+0x10/0x10 [ 124.985352][ T59] ? get_device_parent+0x370/0x3a0 [ 124.985388][ T59] device_add+0x408/0xbb0 [ 124.985427][ T59] hci_conn_add_sysfs+0xd5/0x210 [ 124.985462][ T59] le_conn_complete_evt+0x10e6/0x16b0 [ 124.985497][ T59] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 124.985523][ T59] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 124.985556][ T59] ? lockdep_hardirqs_on+0x7a/0x110 [ 124.985591][ T59] ? skb_pull_data+0xfb/0x200 [ 124.985631][ T59] hci_le_conn_complete_evt+0x187/0x470 [ 124.985667][ T59] hci_event_packet+0x659/0xef0 [ 124.985704][ T59] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 124.985729][ T59] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 124.985749][ T59] ? __pfx_hci_event_packet+0x10/0x10 [ 124.985779][ T59] ? rt_spin_unlock+0x14f/0x200 [ 124.985814][ T59] ? hci_send_to_monitor+0xe2/0x590 [ 124.985843][ T59] hci_rx_work+0x3ee/0x1040 [ 124.985881][ T59] ? process_scheduled_works+0xa70/0x1860 [ 124.985907][ T59] process_scheduled_works+0xb5d/0x1860 [ 124.985953][ T59] ? __pfx_process_scheduled_works+0x10/0x10 [ 124.985976][ T59] ? assign_work+0x3d5/0x5e0 [ 124.986000][ T59] worker_thread+0xa53/0xfc0 [ 124.986046][ T59] kthread+0x388/0x470 [ 124.986074][ T59] ? __pfx_worker_thread+0x10/0x10 [ 124.986094][ T59] ? __pfx_kthread+0x10/0x10 [ 124.986143][ T59] ret_from_fork+0x514/0xb70 [ 124.986169][ T59] ? __pfx_ret_from_fork+0x10/0x10 [ 124.986192][ T59] ? __switch_to+0xc79/0x1410 [ 124.986226][ T59] ? __pfx_kthread+0x10/0x10 [ 124.986254][ T59] ret_from_fork_asm+0x1a/0x30 [ 124.986293][ T59] [ 124.986348][ T59] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 124.986394][ T59] Bluetooth: hci0: failed to register connection device [ 125.287513][ T59] ================================================================== [ 125.287532][ T59] BUG: KASAN: slab-use-after-free in l2cap_sock_ready_cb+0xe3/0x180 [ 125.287575][ T59] Read of size 8 at addr ffff88803a0e8200 by task kworker/u9:0/59 [ 125.287594][ T59] [ 125.287606][ T59] CPU: 0 UID: 0 PID: 59 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 125.287631][ T59] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 125.287645][ T59] Workqueue: hci0 hci_rx_work [ 125.287677][ T59] Call Trace: [ 125.287685][ T59] [ 125.287694][ T59] dump_stack_lvl+0xe8/0x150 [ 125.287720][ T59] print_address_description+0x55/0x1e0 [ 125.287745][ T59] ? l2cap_sock_ready_cb+0xe3/0x180 [ 125.287772][ T59] print_report+0x58/0x70 [ 125.287793][ T59] kasan_report+0x117/0x150 [ 125.287821][ T59] ? l2cap_sock_ready_cb+0xe3/0x180 [ 125.287853][ T59] l2cap_sock_ready_cb+0xe3/0x180 [ 125.287883][ T59] l2cap_le_start+0x25b/0x1960 [ 125.287911][ T59] ? __pfx_l2cap_le_start+0x10/0x10 [ 125.287947][ T59] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 125.287979][ T59] ? lockdep_hardirqs_on+0x7a/0x110 [ 125.288010][ T59] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 125.288042][ T59] ? mutex_lock_nested+0x152/0x1d0 [ 125.288065][ T59] ? l2cap_connect_cfm+0x894/0x1560 [ 125.288091][ T59] l2cap_connect_cfm+0x8d5/0x1560 [ 125.288120][ T59] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 125.288145][ T59] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 125.288175][ T59] ? lockdep_hardirqs_on+0x7a/0x110 [ 125.288203][ T59] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 125.288235][ T59] ? mutex_lock_nested+0x152/0x1d0 [ 125.288258][ T59] ? hci_connect_cfm+0x2c/0x140 [ 125.288278][ T59] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 125.288303][ T59] hci_connect_cfm+0x95/0x140 [ 125.288324][ T59] le_conn_complete_evt+0x1134/0x16b0 [ 125.288353][ T59] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 125.288385][ T59] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 125.288416][ T59] ? lockdep_hardirqs_on+0x7a/0x110 [ 125.288448][ T59] ? skb_pull_data+0xfb/0x200 [ 125.288472][ T59] hci_le_conn_complete_evt+0x187/0x470 [ 125.288497][ T59] hci_event_packet+0x659/0xef0 [ 125.288529][ T59] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 125.288553][ T59] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 125.288570][ T59] ? __pfx_hci_event_packet+0x10/0x10 [ 125.288599][ T59] ? rt_spin_unlock+0x14f/0x200 [ 125.288628][ T59] ? hci_send_to_monitor+0xe2/0x590 [ 125.288653][ T59] hci_rx_work+0x3ee/0x1040 [ 125.288684][ T59] ? process_scheduled_works+0xa70/0x1860 [ 125.288706][ T59] process_scheduled_works+0xb5d/0x1860 [ 125.288744][ T59] ? __pfx_process_scheduled_works+0x10/0x10 [ 125.288768][ T59] ? assign_work+0x3d5/0x5e0 [ 125.288791][ T59] worker_thread+0xa53/0xfc0 [ 125.288825][ T59] kthread+0x388/0x470 [ 125.288851][ T59] ? __pfx_worker_thread+0x10/0x10 [ 125.288871][ T59] ? __pfx_kthread+0x10/0x10 [ 125.288899][ T59] ret_from_fork+0x514/0xb70 [ 125.288924][ T59] ? __pfx_ret_from_fork+0x10/0x10 [ 125.288947][ T59] ? __switch_to+0xc79/0x1410 [ 125.288980][ T59] ? __pfx_kthread+0x10/0x10 [ 125.289008][ T59] ret_from_fork_asm+0x1a/0x30 [ 125.289041][ T59] [ 125.289049][ T59] [ 125.289054][ T59] Allocated by task 5949: [ 125.289064][ T59] kasan_save_track+0x3e/0x80 [ 125.289084][ T59] __kasan_kmalloc+0x93/0xb0 [ 125.289104][ T59] __kmalloc_noprof+0x3e7/0x7b0 [ 125.289126][ T59] sk_prot_alloc+0xe7/0x210 [ 125.289152][ T59] sk_alloc+0x3a/0x390 [ 125.289177][ T59] bt_sock_alloc+0x3b/0x340 [ 125.289207][ T59] l2cap_sock_create+0x147/0x330 [ 125.289231][ T59] bt_sock_create+0x163/0x240 [ 125.289248][ T59] __sock_create+0x4b2/0x9d0 [ 125.289270][ T59] __sys_socket+0xd6/0x1b0 [ 125.289291][ T59] __x64_sys_socket+0x7a/0x90 [ 125.289313][ T59] do_syscall_64+0x174/0x580 [ 125.289341][ T59] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.289371][ T59] [ 125.289376][ T59] Freed by task 5948: [ 125.289385][ T59] kasan_save_track+0x3e/0x80 [ 125.289404][ T59] kasan_save_free_info+0x46/0x50 [ 125.289432][ T59] __kasan_slab_free+0x5c/0x80 [ 125.289452][ T59] kfree+0x1c5/0x6c0 [ 125.289470][ T59] __sk_destruct+0x74b/0x9d0 [ 125.289498][ T59] l2cap_sock_release+0x1c1/0x270 [ 125.289521][ T59] sock_close+0xc3/0x240 [ 125.289539][ T59] __fput+0x461/0xa70 [ 125.289555][ T59] task_work_run+0x1d9/0x270 [ 125.289582][ T59] exit_to_user_mode_loop+0x193/0x680 [ 125.289606][ T59] do_syscall_64+0x353/0x580 [ 125.289634][ T59] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.289652][ T59] [ 125.289657][ T59] The buggy address belongs to the object at ffff88803a0e8000 [ 125.289657][ T59] which belongs to the cache kmalloc-4k of size 4096 [ 125.289674][ T59] The buggy address is located 512 bytes inside of [ 125.289674][ T59] freed 4096-byte region [ffff88803a0e8000, ffff88803a0e9000) [ 125.289695][ T59] [ 125.289700][ T59] The buggy address belongs to the physical page: [ 125.289723][ T59] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3a0e8 [ 125.289743][ T59] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 125.289760][ T59] flags: 0x80000000000040(head|node=0|zone=1) [ 125.289784][ T59] page_type: f5(slab) [ 125.289803][ T59] raw: 0080000000000040 ffff88801a00a140 dead000000000100 dead000000000122 [ 125.289821][ T59] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 125.289840][ T59] head: 0080000000000040 ffff88801a00a140 dead000000000100 dead000000000122 [ 125.289876][ T59] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 125.289895][ T59] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 125.289912][ T59] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 125.289923][ T59] page dumped because: kasan: bad access detected [ 125.289938][ T59] page_owner tracks the page as allocated [ 125.289946][ T59] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4976, tgid 4976 (udevd), ts 57110172605, free_ts 38647349990 [ 125.289983][ T59] post_alloc_hook+0x22d/0x280 [ 125.290007][ T59] get_page_from_freelist+0x28b2/0x2930 [ 125.290035][ T59] __alloc_frozen_pages_noprof+0x18d/0x380 [ 125.290061][ T59] allocate_slab+0x77/0x660 [ 125.290090][ T59] refill_objects+0x33c/0x3d0 [ 125.290116][ T59] __pcs_replace_empty_main+0x373/0x720 [ 125.290142][ T59] __kmalloc_noprof+0x530/0x7b0 [ 125.290159][ T59] tomoyo_realpath_from_path+0xe3/0x5d0 [ 125.290178][ T59] tomoyo_path_perm+0x283/0x560 [ 125.290202][ T59] security_inode_getattr+0x12b/0x310 [ 125.290224][ T59] vfs_getattr+0x23/0x70 [ 125.290247][ T59] vfs_statx_path+0x2b/0x230 [ 125.290261][ T59] vfs_statx+0x12e/0x200 [ 125.290283][ T59] vfs_fstatat+0x11b/0x170 [ 125.290305][ T59] __x64_sys_newfstatat+0x151/0x200 [ 125.290330][ T59] do_syscall_64+0x174/0x580 [ 125.290353][ T59] page last free pid 4974 tgid 4974 stack trace: [ 125.290372][ T59] __free_frozen_pages+0xfe5/0x10d0 [ 125.290391][ T59] __slab_free+0x252/0x2a0 [ 125.290409][ T59] qlist_free_all+0x99/0x100 [ 125.290424][ T59] kasan_quarantine_reduce+0x148/0x160 [ 125.290441][ T59] __kasan_slab_alloc+0x22/0x80 [ 125.290458][ T59] kmem_cache_alloc_noprof+0x33b/0x680 [ 125.290475][ T59] seq_open+0x62/0x140 [ 125.290497][ T59] kernfs_fop_open+0x548/0xcb0 [ 125.290519][ T59] do_dentry_open+0x83d/0x13e0 [ 125.290542][ T59] vfs_open+0x3b/0x350 [ 125.290564][ T59] path_openat+0x2e43/0x38a0 [ 125.290582][ T59] do_file_open+0x23e/0x4a0 [ 125.290599][ T59] do_sys_openat2+0x113/0x200 [ 125.290625][ T59] __x64_sys_openat+0x138/0x170 [ 125.290639][ T59] do_syscall_64+0x174/0x580 [ 125.290662][ T59] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.290679][ T59] [ 125.290683][ T59] Memory state around the buggy address: [ 125.290692][ T59] ffff88803a0e8100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 125.290703][ T59] ffff88803a0e8180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 125.290715][ T59] >ffff88803a0e8200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 125.290724][ T59] ^ [ 125.290732][ T59] ffff88803a0e8280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 125.290744][ T59] ffff88803a0e8300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 125.290752][ T59] ================================================================== [ 125.295676][ T59] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 125.295729][ T59] CPU: 0 UID: 0 PID: 59 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 125.295801][ T59] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 125.295856][ T59] Workqueue: hci0 hci_rx_work [ 125.295962][ T59] Call Trace: [ 125.295983][ T59] [ 125.296005][ T59] vpanic+0x56c/0xa60 [ 125.296079][ T59] ? rcu_is_watching+0x15/0xb0 [ 125.296167][ T59] ? __pfx_vpanic+0x10/0x10 [ 125.296243][ T59] panic+0xc5/0xd0 [ 125.296318][ T59] ? __pfx_panic+0x10/0x10 [ 125.296391][ T59] ? preempt_schedule_thunk+0x16/0x30 [ 125.296491][ T59] ? preempt_schedule_thunk+0x16/0x30 [ 125.296577][ T59] ? l2cap_sock_ready_cb+0xe3/0x180 [ 125.296677][ T59] check_panic_on_warn+0x89/0xb0 [ 125.296762][ T59] ? l2cap_sock_ready_cb+0xe3/0x180 [ 125.296829][ T59] end_report+0x73/0x170 [ 125.296903][ T59] ? l2cap_sock_ready_cb+0xe3/0x180 [ 125.296976][ T59] kasan_report+0x128/0x150 [ 125.297044][ T59] ? l2cap_sock_ready_cb+0xe3/0x180 [ 125.297149][ T59] l2cap_sock_ready_cb+0xe3/0x180 [ 125.297256][ T59] l2cap_le_start+0x25b/0x1960 [ 125.297371][ T59] ? __pfx_l2cap_le_start+0x10/0x10 [ 125.297439][ T59] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 125.297528][ T59] ? lockdep_hardirqs_on+0x7a/0x110 [ 125.297572][ T59] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 125.297604][ T59] ? mutex_lock_nested+0x152/0x1d0 [ 125.297628][ T59] ? l2cap_connect_cfm+0x894/0x1560 [ 125.297655][ T59] l2cap_connect_cfm+0x8d5/0x1560 [ 125.297716][ T59] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 125.297783][ T59] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 125.297861][ T59] ? lockdep_hardirqs_on+0x7a/0x110 [ 125.297936][ T59] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 125.298024][ T59] ? mutex_lock_nested+0x152/0x1d0 [ 125.298081][ T59] ? hci_connect_cfm+0x2c/0x140 [ 125.298137][ T59] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 125.298220][ T59] hci_connect_cfm+0x95/0x140 [ 125.298276][ T59] le_conn_complete_evt+0x1134/0x16b0 [ 125.298354][ T59] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 125.298420][ T59] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 125.298499][ T59] ? lockdep_hardirqs_on+0x7a/0x110 [ 125.298600][ T59] ? skb_pull_data+0xfb/0x200 [ 125.298677][ T59] hci_le_conn_complete_evt+0x187/0x470 [ 125.298749][ T59] hci_event_packet+0x659/0xef0 [ 125.298836][ T59] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 125.298902][ T59] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 125.298955][ T59] ? __pfx_hci_event_packet+0x10/0x10 [ 125.299032][ T59] ? rt_spin_unlock+0x14f/0x200 [ 125.299111][ T59] ? hci_send_to_monitor+0xe2/0x590 [ 125.299159][ T59] hci_rx_work+0x3ee/0x1040 [ 125.299236][ T59] ? process_scheduled_works+0xa70/0x1860 [ 125.299301][ T59] process_scheduled_works+0xb5d/0x1860 [ 125.299410][ T59] ? __pfx_process_scheduled_works+0x10/0x10 [ 125.299470][ T59] ? assign_work+0x3d5/0x5e0 [ 125.299495][ T59] worker_thread+0xa53/0xfc0 [ 125.299540][ T59] kthread+0x388/0x470 [ 125.299619][ T59] ? __pfx_worker_thread+0x10/0x10 [ 125.299640][ T59] ? __pfx_kthread+0x10/0x10 [ 125.299669][ T59] ret_from_fork+0x514/0xb70 [ 125.299693][ T59] ? __pfx_ret_from_fork+0x10/0x10 [ 125.299717][ T59] ? __switch_to+0xc79/0x1410 [ 125.299751][ T59] ? __pfx_kthread+0x10/0x10 [ 125.299780][ T59] ret_from_fork_asm+0x1a/0x30 [ 125.299816][ T59] [ 125.300417][ T59] Kernel Offset: disabled