last executing test programs: 10.03741527s ago: executing program 3 (id=23): openat$sequencer(0xffffffffffffff9c, 0x0, 0x4a001, 0x0) r0 = userfaultfd(0x801) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x109, 0x0, &(0x7f00000001c0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000}) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f00000000c0)={'gre0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x20, 0x20, 0xffffffa7, 0x200, {{0x1c, 0x4, 0x2, 0x3, 0x70, 0x65, 0x0, 0x0, 0x4, 0x0, @multicast2, @multicast2, {[@rr={0x7, 0xb, 0x9d, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}, @timestamp_prespec={0x44, 0x34, 0x6c, 0x3, 0x9, [{@multicast1, 0x5}, {@multicast2, 0x2}, {@loopback, 0x8}, {@remote, 0xe68}, {@remote, 0x200}, {@multicast2, 0x7ff}]}, @ssrr={0x89, 0x1b, 0xf9, [@private=0xa010101, @remote, @multicast2, @local, @local, @rand_addr=0x64010100]}]}}}}}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(0xffffffffffffffff, 0x40044103, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) userfaultfd(0x80801) personality(0xc) 8.236065096s ago: executing program 0 (id=28): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x23, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @local=@item_4={0x3, 0x2, 0x0, "038970e5"}, @local=@item_4={0x3, 0x2, 0x0, "4bb73ddd"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_012={0x1, 0x2, 0x4, "95"}, @main=@item_012={0x1, 0x0, 0x8, "be"}]}}, 0x0}, 0x0) 7.525119913s ago: executing program 3 (id=30): syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x400c404) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2) syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x240048c1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xb0}]}, &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) sched_setscheduler(0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) 7.165572052s ago: executing program 2 (id=31): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x84, 0x0, 0x0, 0x0, 0x1) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) dup(r3) 6.052220982s ago: executing program 3 (id=33): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000300)=0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000440)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r5, 0x80605414, &(0x7f0000000240)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r6, 0x4, 0x40800) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r7, 0x2000009) sendfile(r6, r7, 0x0, 0x7ffff004) ppoll(&(0x7f0000000000), 0x0, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000180)={[0xffffffffffffff68]}, 0x8) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x14, r8, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 6.041778212s ago: executing program 2 (id=34): timerfd_create(0x8, 0x80000) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r1], 0x14}, 0x1, 0x0, 0x0, 0xc001}, 0x40000c0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0x1, 0x100) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r5, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000440)='urce\x18\x1c\xd6\x97Q\x84r!S\xde\x14\xe27\xd2\x13\xa8\xe1\xf8\xf6!\x87\xd3\xceD\xb6#\n2\xa0g^\xbc\xcbt\xf0ku\xe5\xdc\x98d\x05\f\xb2\xb6\xbdnJ\xed\x8bL\xef\xf6\xcc\xd3\xa9\"\x8d=sS\xe0\x7f\x01b\x1dw\xf0r3\x0f\xc9\x1a-?\x04\x14\"\xca\xfb\xa3\xc9L\x19\x9e\x1ca\v\xb6b\x15', &(0x7f0000000540)='\b\x00\x00\x00\x00$\x17.\x16\x97U\x88$j\x80\xe0\\9X8B\xeb\x97\xa40\'\xa1\xba\x90\x9bw\xb3m\x8f\xe3.\xc6\xd0\\/\xa2\xd3M\x91\xb9\xdex\xf6[\x18 \x13\x96\xb9\x8a+\xbd\xe7\xf7\x93x\xebs\xa5\xbc\x9c\xbe/Pl\xda\xb6\xad)8\xfd\xba\xc0T\x9d\xd92\xa86@\xd1(\xe5<\xc6\x82\xe9\xef\xa1\xa6D)\xf3+\xb9.V\xa99\x1b\x9c\xe3\xe7\xf9U\xcam ^*\x1a\xb0.d\x18\x80\x1aWp\x03\'\xa5\x90\xd9B\x81\x14\xa3c+\x1c\b;\x83\xe5\x88\x8d\x04D\xb3\"\x8f8\xf4l\x18\xf7i\xfa\xe8\x91w\xce\xdefU\x17y\x813\x00'/177, 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e24, 0x9, @remote, 0x7}, 0x1c) utimensat(r2, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000f00)=@ethtool_per_queue_op={0x4b, 0xf, [0xf68f, 0x8, 0x9, 0x1ff, 0x0, 0x4, 0xe97, 0x4, 0x6, 0xecbf, 0xff, 0x101, 0x7, 0x200, 0x3d, 0x5e, 0x1000, 0x1, 0xf557, 0x2, 0x5, 0x7c, 0xcd, 0x0, 0xffffff6b, 0xe52c, 0xaa8, 0x80000000, 0x11, 0xe9c4, 0xcd8, 0x6c, 0x6, 0x7, 0xd, 0x8a, 0x3, 0x6, 0x203, 0x3, 0x3, 0xfffffffc, 0xfd2, 0x6, 0x8, 0x5, 0xfffff801, 0x2b, 0xa, 0x0, 0x7, 0x8, 0x4005, 0x0, 0x6, 0xb05, 0x23, 0xff, 0x3, 0x10, 0x2, 0xffffffff, 0x6, 0x6000000, 0xd1, 0x0, 0x4, 0xa, 0x0, 0x400, 0x80000000, 0x9, 0x3, 0x8, 0x2, 0x0, 0x2, 0x8, 0x80, 0x4, 0x2, 0x0, 0xd, 0x6, 0x3, 0x8, 0x10, 0x1, 0x10000, 0x9, 0x7ff, 0x27, 0x2, 0xbde, 0x37, 0x9, 0x4, 0x1, 0x9, 0x4, 0x3d5f, 0x1, 0x8, 0x7b3, 0x401, 0x5, 0x7fff, 0x8, 0x100, 0x3, 0xfffffffd, 0x2, 0x6, 0x10008, 0x6, 0x7, 0x200, 0x6, 0xe, 0x81, 0x20, 0x4, 0x5, 0x5, 0x8, 0x3, 0x1, 0xfffffffa]}}) ioctl$PPPOEIOCSFWD(r0, 0x40047452, &(0x7f0000000000)={0x18, 0x0, {0x2, @local, 'veth1\x00'}}) 4.842192239s ago: executing program 3 (id=37): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ca46bb42f431c3e0a36fd25058505cb8e13b6aee"}, 0xfd3f, 0x0) read$FUSE(r0, &(0x7f000000a900)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008900)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bcd4681f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b2c1ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0xf098, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x1d0) 4.781062044s ago: executing program 2 (id=38): syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000200)="1d25", 0x2}], 0x1) 4.641095695s ago: executing program 0 (id=40): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20088004, 0x0, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x100) sendto$inet6(r4, 0x0, 0x0, 0xc001, 0x0, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000080), 0x4) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x50, 0xff, 0x0, 0xffeffffd}]}) 3.696746072s ago: executing program 1 (id=42): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000140)={0x4000000, 0x80}) syz_usb_control_io$printer(r0, 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x66) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) unshare(0x28000600) syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000280)={0x1011c2000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x43) wait4(0x0, 0x0, 0x80000000, 0x0) 3.690470452s ago: executing program 4 (id=43): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x28, r0, 0x603, 0x8070bd2b, 0x25df5bfc, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x4}, @ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x50) 3.665190784s ago: executing program 4 (id=44): mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6d706f6c3d643d7374617469633a2c00000000000000a113b66474bff5377bac2d70171de65cde95b3fe42cf7b10947b710cda6b81ee95f4b018f505"]) r0 = landlock_create_ruleset(&(0x7f0000000080)={0xc000, 0x1}, 0x18, 0x3) landlock_restrict_self(r0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000000)={0x8000000, 0x400000, 0x7}) close(0x3) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r5, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x404, 0x1, 0x80d6}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r6, 0x100000000) 3.628238787s ago: executing program 0 (id=45): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x5, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0, {0x40, 0x3, 0x0, 0xffff, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x120, 0x2000, 0x0, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x14c0348, 0x40, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x1) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x84000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x4, 0x0, 0x6}, 0x1d, [0x8000, 0x78, 0xf, 0x9, 0x80, 0x2, 0x203, 0x7e, 0x5, 0x4e, 0x39cc1919, 0x40, 0x9, 0x5, 0xffff2d37, 0xffffffff, 0x6, 0x3, 0x0, 0x5, 0x4, 0x3, 0x5, 0x3c5b, 0x1, 0x4, 0x9, 0x3, 0x15bb, 0x2, 0xe65f, 0x3, 0x7, 0x3, 0x7fff, 0x7, 0x80000000, 0xa72, 0x3, 0x7, 0x0, 0x71, 0x407, 0x5, 0x1, 0x5, 0x9, 0x3a, 0x7, 0xf07, 0x6, 0xfffbffff, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x4, 0x9, 0x8, 0x7, 0x2, 0x40], [0x10000007, 0x3, 0x800, 0x8000, 0x10, 0xffeffff3, 0x8, 0x200c7, 0xf9, 0x10, 0x2bf, 0x6c9, 0xfff, 0xfffffffc, 0x5, 0x0, 0xd14, 0x5, 0x2b, 0xe, 0x4312, 0x78, 0xea4, 0x0, 0x4, 0x24, 0x8000, 0x40009, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x7f9, 0x5, 0x2, 0x2, 0x9, 0x40005, 0x9, 0x8, 0x800000d, 0x6, 0x2007, 0xd, 0x1, 0xfe000000, 0xffff, 0x2, 0x7b, 0x9, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0xacf9], [0x7, 0xf5fd, 0x0, 0x5, 0x1, 0x100, 0x8d2, 0x9, 0x800003, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x5, 0x20000005, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x0, 0x3e7, 0xa, 0x5, 0x200, 0x5, 0x3, 0x8, 0x8, 0x6cfc, 0x80b, 0x39, 0x800003, 0x200, 0x80, 0x3, 0x4e0a, 0x7, 0x1000, 0xa2, 0x7, 0x5, 0x5, 0x6, 0xac8, 0xffffffff, 0x2, 0x11, 0x7ff, 0xfffffff9, 0x0, 0x10000, 0xffff, 0x2b98, 0x6, 0x4, 0x120000, 0xbe, 0x0, 0xa2ed, 0x2, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0x3, 0xa, 0x80000006, 0x0, 0x5, 0x7d, 0xc9, 0x6, 0x6, 0x8, 0x57b, 0x7, 0x10000, 0x6, 0x7ffd, 0xfffd, 0x4, 0x20002, 0x5, 0xe8a0556, 0x2, 0x14c, 0x60a6, 0x6, 0x6, 0x3, 0x80000000, 0x5, 0x8, 0xce, 0xee1, 0xfffff000, 0x179, 0x3, 0x7e, 0x100, 0x9600, 0x56e, 0x2, 0x1007, 0x40000006, 0x1, 0x0, 0x8, 0x8, 0x30b1d693, 0xa1f, 0xc, 0x800007, 0xfffffffe, 0x3, 0x0, 0x4, 0x8000007, 0x2bf, 0x3, 0x200, 0x10000, 0x2]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 3.520265056s ago: executing program 2 (id=46): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000638000/0x1000)=nil, 0x6aa000, 0x2000, 0x3, &(0x7f00005c0000/0x2000)=nil) close(r1) 3.519281766s ago: executing program 0 (id=47): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xf, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x400000, 0x99, 0x1}, 0x18) mknodat$loop(r4, &(0x7f0000000380)='./file0\x00', 0x10, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r5, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020605000000000000000000000000000c00078008000640000019000500010006000000"], 0x54}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000cab000)=0xc) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_driver={0x3, 0x7, &(0x7f00000007c0)="90a1ccf119e1d5bb31ee3c9175667c2aa33966584a1217ccf647c412c00c63c843643cbf14bed54fc7f7c041dcc7e0206ea5296f3bcff6b79e64ac6cc1df3eb227cef62ba80150ad7c0ea4331c54555a3a2e551f0d829ab289a394ef6a8b4cbcece782417e1ffd78399d800dcb5968b09d6518990ad220f4d975b73e2edd8049b0e2405984d6c0109893495642cf019d4105e5c34e05a595282c6db34e2fe094800603c46358bc5c60a17ed04bd8d61c21fe24af1052371ab7c4323e1de039188b18fbadfcdb12575121227a5fbb8086ad8bcb5fb6dab471e249119d2424f17a961175f308d4620f0046b1da88da28849eaba62f16ecc1cf39fb200a38bf4878bded27b1dd00409ce6f98bd8d955794654844b01c354c46318d885ca1b26ffa938fffa2028e2b66a8e53a34cd1508ecfde6a0e6158a4e9d17dfabde5ddf78f068c3c973f4f6fc72771639e73247676e6905122e1fa5f4b046c5f757daed1af26543d03eabea8b34fb7200af58c56281b905c5fb4dbfb3fd5a8978eb26d26348346c597a4e75dd5068438e5ea26702742f1ba6092589a0014c50dba5a350d8d9e76736875eddf4aaa052f4b6d6afb9198631d4b732e5aa53e573096d3034e9add6981375fb79c38bbc8fdaae5df30f821a88d4864e67022bbd0e4f6e558e1aff282191f8f91fc9b18c9441155bf47077a7011c9762d9d060777016ed354541542468bb9c4e726a1742fc957b743ed3531f0048933765cf6fef227320aa8a56f3a7e342d300a739629927ae5eb26311211c3fd6f64b5ef6575f73c774d0d72e3ae6c599d996d28af14125d56a99b191ac3dc1de3e8f310b367967474d1e46b5d07875d423cc2d01a7df3a9f1ebe32bfc5360ba954efdd575a9967b32ca02ef1e6c7fcc1b7473b04b07cc69d96a794d47a2297034d274de15746b30a4a6c965224f10e8e60893a8477d236a41d7ae8a68c7cccc9276f78891d34e991eb6f9b7b77e80e55eca922cd2dedcd83e612c6bfe3843821b4232d79111307f3cd9c35f79a803e8e7cc3aa681ba4e193b39b4597ef0f867dc6e953792c34437f75f849fdb888074d62ccfeaf967a9f5d1b9ab2a7136406b3bc9171f405939620875977d05c149ebb1860f89b3482015a192c5292c1dc64a94e30abfe47873a417091018aba82338f1773917fe66bca917002835f7815a1288b4852ff7e90f33678f69e491d7b004cfc1e834ad9961214c4e275eb1b28bd25f06908633325578730c12e3d434525adbbe30b34003fd3ac8041b90bffdd68e2e74185d81c8018a4fb7610954d4dfc0af84413b0586d709a3c91c404bb2a033c9e067dfadb3dc99e7f0a85eb1bd05d0b7511eabd748f3588faa0c21d247dadf9a3ac5d2017b766a8aab8760ef45fdda27029f08de154a156a6249eba26b63637a3f663bbb46c70974704642f8f56460ddca4ddfe297f390a4625b16383ea5cce705877528519840c8d5084508dbb778caf2664fda0956e448e7a58f9eae4e925098f63144832c17fbf974741baf36e5d926e0a6d7aebd84f9d75018931cbaecaf1e15401f75672a7c6b543e783e0d13d770da27a427b367eaaa7c9f1582db3a37461ddf339fc1942bf5f3969930e6b803697926b0c5ac3b64993d24f49831c1bf91ad962937407588d677fe3f2b5674279c9cc87194265833ead07ccc30f1c3a9a394f4a39cfb4cdb87357a47d20fe26f8cb0815ca05dcd84cb1ba4b111789b1eb42694556ec42523919a2b8d5214f6540eea10d9cee44fd504f8cf0318b531ac9be1b57c4945eebc34c76b3ab254496c0de8aeb8dfb009e022faaf09c4c2f6d7d553deb3303112469d1a1294b82404967a3159530429d6a1f541077d4b5dd3bbfdcaf7610a8992be0c461f37a197355f8a3e77eb939d6750af53f365131613546f5e73691be6b5e47e762ba0139091197f080fa8c96b39e42795c674b9a948dcee8f1a80de89bbdc812882605f6d8dc046cfd02853b56226f01f20b35f7a7b9c0d285e9f236ac44474b2e9cd18d12339f9a9acfce5e05775b10b6e80993ddf28accb93b280c78de79dcf62537c34c18491d7418e05bd479a02e5e62cd3a56ee9ff12e4b3b219d0da97aeefd9046c54594e68669752a98d2a3e225a2864e0436a6c6b6cd9db583306370d4ca3e3d965b6edd7e73b5453e9b8d875131edbe51d2ad4ec9661957897f98980ab6c0e957947f6802a27a788c1bc52bfed5a6f98be3e5c4c32d5c96fb4822956304c7a2584d55b06a90dab20f4f507f7e88a9b051175c6c5fabeb39c11d897f14be8c974f3dea14e400a5dab8b183f94af6a45e07796a0f431604109340eec6d9da12c31743b433e6924d7c2d2a28210c630aef1bd25b7781454546ab05c9a653acfea4554a17db4000d5da8639b958c4506880481414e3ac82164105cc3caef84ac8dad144f02d470bb65e8b138643ce4e42fb66b07a2710ae14f99e83d8e997f17138ca8d86225c3a960ed7e6a18bba3880bc52ce506e5919ed8c73163a13d62857fd907df0735dc00ff348c1ed7b3d97c94a782084ae27b8336a12e71ed52bde52dbd55a9db554937bf63fd63142e31bce4aab32e6e8ad699ebccac52577e4d3f6f65eccd286c2600ba1944b87af85a4902acd11fb71082f3539adc28bd73329bdee5711f5d747ed96fbd7c33d246fb0faabf4bc9317f01713c6ff229325228678e4976f1c8fa48368917ab2a50f3ebe9feffed71063aa074ad6a80dee9a14868c7e35148642f64a7f1bcba60af8dca4ee6fd99c3fff01e1bf3128ce111c12d5996191e004a5de3928d9ef4845990643d56d68903df1d544e4420c53260e69c4452bc77b2d773995e96b1c0d95caf4dde918e28b600c1c5e7142432f31d0289bb592eff258eb2e1777e303de36f0fbdfbc35f01b4ab9be85dc78c1b29ed3a0756b1562b14e08c7080407e3b3157d47f918b9ca754bcbf09fb508f3d94110407362838030296d422284279f7ea75b1a6b220b2d0593895460259ed207bc6c79b3d226762bff79e4cd7463c53b59ed0910d81fc0f450cf4d6135106b606b47db20aa4240742495ca7a8fafd2c45e81fac98004d87d23efacf11a53d9ad480803f660e83d54877af484c95a15f88d6d22ce36ed958170e5eed184302945252fa7693c3dadc3b1140fb7bc77f2bcc75c12c72390db0bef57bbd249bc1ade0f1f632916fca12cd4148412c1017c3474327174b3510e12e2bebc7eec8460d5a3e977f3824e530a66b00cf228f77bfc87f620811bfdb704d6057d44688dbf308d3f3bc4ba8d8af04881b564d4678c47f66d21f360d1d5dce86eb6ec01929bccacbd6eb921d34740979806969e8cffa5550b48c12fb541e0ae72872faf074dc9828d737268b2891d88f14954536e50cf72fa04430e4a570ada27222827874ae40085bb6becbd6a6eb9b562b95764f69ca34e63a97b4585376cc20f59275a65084c3365f1cfeec1ab03f65fb892beaf615cddbc94212e0a28d58faa29be772ca1cfb096d0bc9e0f9b68b8c385cd5c036"}) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x8c, 0x800) ioctl$EVIOCGVERSION(r6, 0x80044501, &(0x7f0000001a80)=""/133) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x100, 0x1403, 0x300, 0x70bd2b, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_hsr\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wlan1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team_slave_1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_team\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'hsr0\x00'}}]}, 0x100}}, 0x8000) 2.745077668s ago: executing program 2 (id=48): pipe2(0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0) r3 = syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000240)="352f1938d141676d9b6c59065f664735c08b9d697a645f85b19ba9030648cd046d1f26aad0196458046b81", 0xfffffffffffffe08, 0xebec93e830f96115}) io_uring_enter(r3, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) shutdown(r6, 0x1) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, &(0x7f0000000480)) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x12020) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r9 = ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r9) syz_emit_ethernet(0x46, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3908004900003800000000000690780a250104ac1414aa44044a01070b04030e004b5ca4c14a0000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c0000009078fffe"], 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x327cf3e4, 0xfffffffffffffffc, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x5, 0x3, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x4, 0x0, 0x4, 0x10000, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff]}) close(0xffffffffffffffff) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{&(0x7f0000000540)={0xa, 0x4e22, 0x1, @empty, 0xa}, 0x1c, 0x0}}], 0x1, 0x200880c0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 2.72458109s ago: executing program 4 (id=49): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0700000004000000002500000b000003200000002d215e40e69da1b53022fb62ead0855857fee2e190c53d4eb2b2885005b4ba656c3350c249bd2e390e1f6f6ad807d3289e32c19187a7fc5d356065d6a0cbee91035e09c8f9ff18838fdc429356b6cbd47eb9bb92b4dc2b8a6d7ec71fef56fe3d9645e0b7d41bcb8873142dc1d7dd995a30fb3b5d1151c4918e1d2f3ce6feb4091f88", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @broadcast}, &(0x7f0000000380)=0x10, 0x800) fcntl$addseals(r0, 0x409, 0x8) syz_emit_ethernet(0x7a, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa008100000086dd60f53a0400403a00ff0000000000000000000000000000bbff02000000000000000000000000000102009078000005006050835900000800fc010000000000000000000000000000fc0100000000000000000000000000003a00"/122], 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)}, 0x20) socket$nl_route(0x10, 0x3, 0x0) getpriority(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, r6, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r6, 0x7}}, 0x48) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000100)=0x1, r8, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r7, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @loopback, 0x3}, r8}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r7, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r8, 0xffffffff}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.246056248s ago: executing program 0 (id=50): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x61c, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfe, {0x0, 0x0, 0x0, r4, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x5f0, 0x2, [@TCA_U32_SEL={0x3a4, 0x5, {0x9, 0x7f, 0x3, 0x200, 0x8, 0x0, 0x3, 0x8, [{0x4, 0x400000, 0x0, 0x2}, {0x4800, 0x1, 0x9, 0x3}, {0x4, 0x0, 0x6, 0x8}, {0x1a8f, 0x9, 0xfffff801, 0x7}, {0x7, 0x6, 0x5, 0x400}, {0x73, 0x1400, 0x57e76c05, 0x7fff}, {0x7, 0x5, 0x0, 0x81}, {0x7f, 0x1, 0x1, 0x4}, {0x7fffffff, 0x0, 0x9, 0x7}, {0x800, 0x9, 0x1, 0x4}, {0x5c4, 0xa, 0x6, 0xc}, {0x2, 0x8, 0x4}, {0x7, 0x8, 0xff, 0x6}, {0x401, 0xffffffff, 0x7, 0x7}, {0x2, 0x3, 0xd, 0x7}, {0x2, 0x0, 0x100, 0x6}, {0x6, 0x8, 0x1, 0x9}, {0x0, 0x4, 0x2, 0x6}, {0x7fff, 0x0, 0x3, 0x101}, {0x4, 0x5b61, 0x0, 0xe37}, {0x7, 0x2, 0x6, 0x6d}, {0x21, 0x600000, 0xffff, 0x54}, {0xff, 0x81, 0xd4, 0x6}, {0x3, 0x2, 0x3fa4f833, 0x46a}, {0x1, 0x6, 0xff, 0x3ff}, {0x5, 0x9, 0x1, 0x3}, {0x7, 0x1, 0x401, 0x9}, {0x8, 0x100, 0x7, 0x3}, {0x7, 0x9819, 0x6, 0x6}, {0x3, 0xc, 0x5, 0x6}, {0x81, 0x9, 0xf3b8, 0xffff7fff}, {0x0, 0x1, 0x4, 0x9}, {0x4, 0x6, 0x5, 0x8001}, {0xfffffffb, 0xd, 0x7, 0x7f}, {0x2, 0x81, 0x80000000, 0x8}, {0x4, 0xffff, 0x6, 0x2}, {0x80000001, 0x7, 0x6, 0xe0}, {0x0, 0x9, 0x4, 0xb76}, {0x0, 0x8, 0x4, 0x36c2}, {0x6, 0xc63, 0xb, 0x7}, {0x1, 0x5, 0x5, 0x4}, {0x7, 0x200, 0x5, 0x400}, {0x10, 0x0, 0x6, 0x3}, {0xb, 0x5, 0x5, 0x5}, {0x0, 0x9, 0x8, 0xa}, {0x9, 0xd, 0x7f, 0x8000}, {0x7fffffff, 0x51, 0xd6fa, 0x9}, {0xd, 0x6, 0x2, 0x8}, {0x9, 0x9, 0x7ff, 0x9}, {0x8, 0xffffffff, 0x80, 0x200}, {0x7, 0x3, 0x6, 0x401}, {0xdc, 0x1ff, 0x101, 0x5}, {0x0, 0x7f, 0x60d4, 0x3}, {0x6, 0x8, 0xc, 0x8}, {0x400, 0xaef2, 0xffff, 0x1}, {0x10001, 0xfffffffb, 0xfffffffa, 0x1ad}, {0x2, 0x4, 0x800, 0x5}]}}, @TCA_U32_INDEV={0x14, 0x8, 'vxcan1\x00'}, @TCA_U32_SEL={0x234, 0x5, {0x10, 0x9, 0x6, 0x10da, 0xa760, 0x0, 0x10, 0x100, [{0x1000, 0xe, 0xfffff000, 0x9f6}, {0x5, 0x3ff, 0x3, 0x4}, {0x2, 0xffffffff, 0x69c, 0x4000000}, {0x4009, 0x7, 0x40, 0x7d}, {0x2, 0xd033, 0x57, 0x8000}, {0x1, 0x2, 0x9, 0x8}, {0x6, 0x7fff, 0x9, 0x6}, {0x3, 0xde5, 0x1, 0xbd}, {0x3, 0x80, 0x1, 0x6}, {0x7, 0x7fff, 0x0, 0x40}, {0x9, 0x10, 0x5, 0x5}, {0xac, 0xfffff08a, 0x8, 0x3}, {0x8, 0xfffffff9, 0xfffffffa, 0x51}, {0x49f, 0x7, 0x81, 0xb}, {0x5, 0x9, 0x2}, {0x10001, 0x7, 0xc841, 0x2}, {0x1000, 0x2, 0x264, 0x9}, {0x6, 0x0, 0x8, 0x7}, {0x3ff, 0xb, 0x3, 0xa6d}, {0x7, 0x7ff, 0x5, 0xc7}, {0x6, 0x8, 0x2, 0x1}, {0x7, 0x2, 0x5, 0x2}, {0xaa4, 0x406, 0x2, 0x127c}, {0x2, 0x4f, 0x5a2, 0xa2fa}, {0x10, 0xb, 0x2, 0x9}, {0x3, 0x7, 0x200, 0x1}, {0x4, 0x5d14, 0x7f, 0x72}, {0x7, 0x2, 0x7, 0x7}, {0x5, 0x7fff, 0x3, 0x438}, {0x7fff, 0x5, 0x401, 0xc42b}, {0x80, 0x3, 0x2, 0x1e0}, {0xfffffffc, 0x9, 0x40, 0x7}, {0x3, 0xa67, 0x400, 0x80}, {0xc, 0x2, 0xfffffffb}]}}]}}]}, 0x61c}}, 0x24040084) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socket$l2tp6(0xa, 0x2, 0x73) clock_adjtime(0x0, &(0x7f0000000100)={0x362, 0x6a, 0x55cd, 0x8000000000000001, 0x48c, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x2, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0x7}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) process_mrelease(0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r5, &(0x7f0000002180)=""/4101, 0x1005, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r6 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) fsopen(&(0x7f0000000240)='jfs\x00', 0x1) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f0000000000)={0xa, 0x100, 0x1, {0x6, 0x1000, 0x6, 0x86b}}) 2.137556227s ago: executing program 1 (id=51): syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="02c8"], 0x2) 2.059479543s ago: executing program 1 (id=52): r0 = syz_open_dev$vim2m(&(0x7f0000000280), 0x200000d6f, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x7, 0x29, 0x9, "0adb3fb8"}, 0x5}) 1.97146901s ago: executing program 1 (id=53): socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000440), 0x0, 0x0, 0x1) fremovexattr(r2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x4) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000003c0)='\x9a\xbb\x16\xd2<&\xf7\xb0\x92\x80\x98\xa3)\xa6vZ^\xba\xc4\x91\nKAz\xd4\xac\xaa\x9f\xb9&L\x94?\xa4\x9dFt(,\xfc{QL\xfb\xd4A*x\xf7v\x16`\xc9\xcdJ\xe9\x01\b\xd6\xb0\xf8|\x7f\x1e\x83\xef\x0eR\xf8a\xe5\xbc\xb3\x00z\x9a\xc5qF\x99v4[\x84\xad\x1f\xb9\x04f\xa5\x9c\x9cqlS\x83Y\x90\xcb\x81>x\xfb/\x98\x8e\x19\x1b\x9a\xa4\xa3R\xef\x97\x81d\xae\x0fS\xdbM\xb0p\x0e\xa6o\x14\x1c\x8d/\x88+\x1d\xdf\x17\xe6V\x9f\xfaz\xe3\x12\xde\xf5\x03V\b*\xac$\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00C\x8e%\xf3\xb7\x85(\xd4^\xe2=\x1f\x1e\xa9\xb0\x18\xfa?\xa2\xed\xfe\x8d\x80\x8e\xb2\xe2\x8eZ\aT\xc2\xc4\xfa\xb5\xe3\xda\xe41\xf2\x12\x8e\xe9q\x0f\x86m\x99^7\xfb\x83\xc6\xcf\xde\xd3\xa8\xb7\xab\xb8\x867\xb2$\xbc\xa5\xa6\xdc\x0e/\'@\xfa\x9e\x13}\xb4#\xd7X\xd2\xd4\x9cS\\g\v\b\xa1\xc3o', &(0x7f0000000040)='c:::\x00', 0x0) tkill(0x0, 0xb) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2401, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x10000, 0x6, 0x2, 0x0, 0x7, 0xb, 0x651, 0xfffffffffffffff9, 0x8000009657, 0x1, 0x7fffffff, 0x0, 0x10, 0xb, 0x80000000000000, 0xcc0, 0x1, 0x100000000001, 0x94d6, 0x0, 0x0, 0x809, 0x0, 0xfffffffffffffffa, 0x3, 0x9}) 1.843851521s ago: executing program 4 (id=54): read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000000000/0x4000)=nil) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) flistxattr(r3, 0x0, 0x0) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) lseek(0xffffffffffffffff, 0x1000000, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001240)={0x50, 0x0, 0x0, {0x7, 0x2b, 0xfff, 0x83120, 0x3, 0x7, 0x1ff, 0x9, 0x0, 0x0, 0x10, 0x8}}, 0x50) r4 = socket(0x2b, 0x80801, 0x1) ioctl$sock_qrtr_TIOCINQ(r4, 0x8905, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x800, 0x2) socket$netlink(0x10, 0x3, 0x0) gettid() 1.072134233s ago: executing program 1 (id=55): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) tkill(0x0, 0x12) pselect6(0x40, &(0x7f0000000040)={0x4, 0x4, 0x3, 0x7fff, 0x5, 0x7, 0x5, 0x1f}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000180)={&(0x7f0000000140)={[0xed]}, 0x8}) 1.050315985s ago: executing program 3 (id=56): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x20, 0x7, 0x7fffffd, 0x6, {{0x5, 0x4, 0x0, 0x16, 0xfffffffffffffe8b, 0xfffc, 0x0, 0x7f, 0x4, 0x0, @empty, @empty}}}}) 964.833292ms ago: executing program 1 (id=57): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18) r1 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f00000001c0)={{0x80000000, 0x0, 0xe10faebb7221f0, [0xffffffff, 0xd]}, {0x80000000, 0x0, 0x7, [0x5, 0x836f]}, 0x2, [0x4000, 0x4]}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x5, &(0x7f0000000780)=ANY=[@ANYBLOB="18020000000000000000000000001d3a8500000017000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$caif_seqpacket(0x25, 0x5, 0x5) r7 = fsmount(r6, 0x0, 0x18) symlinkat(&(0x7f00000001c0)='./file0\x00', r7, &(0x7f0000000140)='./file0\x00') openat2(r7, &(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)={0x0, 0x29, 0x8}, 0x18) fsetxattr$trusted_overlay_opaque(r5, 0x0, 0x0, 0x0, 0x3) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000040)={0x1, 0x0, 0x98, &(0x7f0000000140)={0x0, 0x1000, 0x1}}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f00000002c0), 0x0) 957.470612ms ago: executing program 4 (id=58): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)=@delchain={0x140, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0x2}, {0x0, 0xe}, {0x6, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x110, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x8065738cbab9bcb1}, @TCA_FLOW_XOR={0x8, 0x7, 0x1ff}, @TCA_FLOW_XOR={0x8, 0x7, 0xfffffff9}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7fff}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_ACT={0xe4, 0x9, 0x0, 0x1, [@m_skbmod={0xe0, 0x1f, 0x0, 0x0, {{0xb}, {0x4}, {0xb2, 0x6, "364a95306a0125f7c7762d651b8604a6d91ec4567f627089ed8d3453859a3d2c79d3d70f085dca8af621c4a5da976ca910f38151f1a68c0e0730e7273e6af4eab8e2ea5df8cb0f6ab249f7561ea8c0dd3e562e5e6a1db3a546a7f7c5f1d0ae94557d9f43b53f0c2e3edaf804191d2d3a1cbdae068d8e342ed2d4e751b25b639e2536238fb6a4824a50b9c6bb62944110874faeed2eb2a6db4dfa6ff7d67302260dd8c80e3c4c3a3a11f1d204106e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x140}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {0x0}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf, 0xa1}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 918.556866ms ago: executing program 3 (id=59): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x90004) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = syz_io_uring_setup(0x12de, &(0x7f0000000300)={0x0, 0x2000, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r1, 0x80, &(0x7f0000000540)=@l2tp6={0xa, 0x0, 0x7, @mcast1, 0xbf6b}}) io_uring_enter(r2, 0x5b43, 0xaced, 0x20, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r8, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) accept4(r0, 0x0, 0x0, 0x0) 809.577754ms ago: executing program 4 (id=60): socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) unshare(0x78000100) r4 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) close(r4) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x16}}, 0x2, 0x0, 0x4, 0x1}}, 0x26) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r6) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="bbfb2bbd7000fddbdf25670000000c009900060000000d0000000800c400f7ffffff0800c38623e1bad68ba30081ffffff0b42fd01d5c5fd0c0328b30e939e009e4966387afe7850f451a58b7875c4f8dc9a3151bce00cef5748626fd0525b363a6539b1f01522756b1f8f1033bd4858e533666f240a5cae7ccf4eec6d9db8c0"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x0) 272.66µs ago: executing program 0 (id=61): timerfd_create(0x8, 0x80000) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r1], 0x14}, 0x1, 0x0, 0x0, 0xc001}, 0x40000c0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0x1, 0x100) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r5, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000440)='urce\x18\x1c\xd6\x97Q\x84r!S\xde\x14\xe27\xd2\x13\xa8\xe1\xf8\xf6!\x87\xd3\xceD\xb6#\n2\xa0g^\xbc\xcbt\xf0ku\xe5\xdc\x98d\x05\f\xb2\xb6\xbdnJ\xed\x8bL\xef\xf6\xcc\xd3\xa9\"\x8d=sS\xe0\x7f\x01b\x1dw\xf0r3\x0f\xc9\x1a-?\x04\x14\"\xca\xfb\xa3\xc9L\x19\x9e\x1ca\v\xb6b\x15', &(0x7f0000000540)='\b\x00\x00\x00\x00$\x17.\x16\x97U\x88$j\x80\xe0\\9X8B\xeb\x97\xa40\'\xa1\xba\x90\x9bw\xb3m\x8f\xe3.\xc6\xd0\\/\xa2\xd3M\x91\xb9\xdex\xf6[\x18 \x13\x96\xb9\x8a+\xbd\xe7\xf7\x93x\xebs\xa5\xbc\x9c\xbe/Pl\xda\xb6\xad)8\xfd\xba\xc0T\x9d\xd92\xa86@\xd1(\xe5<\xc6\x82\xe9\xef\xa1\xa6D)\xf3+\xb9.V\xa99\x1b\x9c\xe3\xe7\xf9U\xcam ^*\x1a\xb0.d\x18\x80\x1aWp\x03\'\xa5\x90\xd9B\x81\x14\xa3c+\x1c\b;\x83\xe5\x88\x8d\x04D\xb3\"\x8f8\xf4l\x18\xf7i\xfa\xe8\x91w\xce\xdefU\x17y\x813\x00'/177, 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e24, 0x9, @remote, 0x7}, 0x1c) utimensat(r2, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000f00)=@ethtool_per_queue_op={0x4b, 0xf, [0xf68f, 0x8, 0x9, 0x1ff, 0x0, 0x4, 0xe97, 0x4, 0x6, 0xecbf, 0xff, 0x101, 0x7, 0x200, 0x3d, 0x5e, 0x1000, 0x1, 0xf557, 0x2, 0x5, 0x7c, 0xcd, 0x0, 0xffffff6b, 0xe52c, 0xaa8, 0x80000000, 0x11, 0xe9c4, 0xcd8, 0x6c, 0x6, 0x7, 0xd, 0x8a, 0x3, 0x6, 0x203, 0x3, 0x3, 0xfffffffc, 0xfd2, 0x6, 0x8, 0x5, 0xfffff801, 0x2b, 0xa, 0x0, 0x7, 0x8, 0x4005, 0x0, 0x6, 0xb05, 0x23, 0xff, 0x3, 0x10, 0x2, 0xffffffff, 0x6, 0x6000000, 0xd1, 0x0, 0x4, 0xa, 0x0, 0x400, 0x80000000, 0x9, 0x3, 0x8, 0x2, 0x0, 0x2, 0x8, 0x80, 0x4, 0x2, 0x0, 0xd, 0x6, 0x3, 0x8, 0x10, 0x1, 0x10000, 0x9, 0x7ff, 0x27, 0x2, 0xbde, 0x37, 0x9, 0x4, 0x1, 0x9, 0x4, 0x3d5f, 0x1, 0x8, 0x7b3, 0x401, 0x5, 0x7fff, 0x8, 0x100, 0x3, 0xfffffffd, 0x2, 0x6, 0x10008, 0x6, 0x7, 0x200, 0x6, 0xe, 0x81, 0x20, 0x4, 0x5, 0x5, 0x8, 0x3, 0x1, 0xfffffffa]}}) ioctl$PPPOEIOCSFWD(r0, 0x40047452, &(0x7f0000000000)={0x18, 0x0, {0x2, @local, 'veth1\x00'}}) 0s ago: executing program 2 (id=62): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="170000000000"], 0x50) socket$nl_generic(0x10, 0x3, 0x10) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000500)=ANY=[@ANYBLOB="84010000100001000000000000000000ac1e0101000000000000000000000000fe8000000000000000000000000000aa0000000020000000000000005c0000005a98788e37138cdf233b1baa5cf68e8d04a3015dcd5c5c24749b4d1ab15683c95a1afc43256c96da956c64f6e4e39e49e2928c44c299c74776a5cc534602cb30463a0fb63b66ed68d9ff560bbf4f1082d89786a2137d1a130f08c9762beafbd65b038b9642a14b707be0de25b564767e8bc7c8d0d8652188", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb000000146c00000000000014000000000000000000000000000000000000000000000000080000000000000000000000fffffffff7ffffff00000000000000000000000000000000000000000000001000"/107], 0x184}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000100)=ANY=[@ANYRESHEX=r2, @ANYRESHEX=r0], 0x0, 0x3}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_coalesce={0xf, 0x5af, 0x10000, 0x6, 0xc6, 0x8001, 0xb28e, 0x46, 0x6, 0x81, 0xe, 0x3, 0x8, 0x8008, 0x8000, 0xae, 0x101, 0x6, 0xfff, 0x4d, 0x1000000, 0x1000001, 0x159}}) r4 = openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r4, 0x4004510d, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x48, 0x14, 0xf0b, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xfff1, 0x5}, {0x6, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xd, 0x4, 0xc, 0x487, 0x1, 0x0, 0xfffffffc}}, {0x4}}]}]}, 0x48}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.81' (ED25519) to the list of known hosts. [ 24.249801][ T4309] cgroup: Unknown subsys name 'net' [ 24.495701][ T4309] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 24.778228][ T4309] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 26.196242][ T4327] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 26.197891][ T4327] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 26.199745][ T4331] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 26.201221][ T4331] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 26.202632][ T4331] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 26.204199][ T4331] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 26.204394][ T4336] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 26.205532][ T4331] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 26.207909][ T4336] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 26.208054][ T4331] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 26.209179][ T4336] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 26.210739][ T4331] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 26.211744][ T4336] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 26.212545][ T4331] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 26.214920][ T4331] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 26.215370][ T4337] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 26.216458][ T4331] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 26.217627][ T4337] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 26.218793][ T4331] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 26.219791][ T4337] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 26.221098][ T4331] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 26.221716][ T4337] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 26.222712][ T4331] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 26.223848][ T4337] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 26.225440][ T4331] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 26.237687][ T4336] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 26.239363][ T4338] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 26.240697][ T4338] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 26.248781][ T4338] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 26.250000][ T4338] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 26.379635][ T4326] chnl_net:caif_netlink_parms(): no params data found [ 26.381773][ T4328] chnl_net:caif_netlink_parms(): no params data found [ 26.417332][ T4321] chnl_net:caif_netlink_parms(): no params data found [ 26.420283][ T4320] chnl_net:caif_netlink_parms(): no params data found [ 26.438620][ T4326] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.439956][ T4326] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.441502][ T4326] device bridge_slave_0 entered promiscuous mode [ 26.444827][ T4326] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.445960][ T4326] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.447346][ T4326] device bridge_slave_1 entered promiscuous mode [ 26.452213][ T4328] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.453602][ T4328] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.455135][ T4328] device bridge_slave_0 entered promiscuous mode [ 26.470154][ T4326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.471867][ T4328] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.473478][ T4328] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.475007][ T4328] device bridge_slave_1 entered promiscuous mode [ 26.483723][ T4326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.497234][ T4328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.504705][ T4320] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.505937][ T4320] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.507394][ T4320] device bridge_slave_0 entered promiscuous mode [ 26.510141][ T4320] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.511329][ T4320] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.512864][ T4320] device bridge_slave_1 entered promiscuous mode [ 26.517620][ T4328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.521246][ T4330] chnl_net:caif_netlink_parms(): no params data found [ 26.527882][ T4326] team0: Port device team_slave_0 added [ 26.534534][ T4321] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.535685][ T4321] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.537215][ T4321] device bridge_slave_0 entered promiscuous mode [ 26.540478][ T4321] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.541543][ T4321] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.542970][ T4321] device bridge_slave_1 entered promiscuous mode [ 26.546791][ T4326] team0: Port device team_slave_1 added [ 26.548966][ T4320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.560582][ T4320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.567356][ T4328] team0: Port device team_slave_0 added [ 26.574889][ T4326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.576116][ T4326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.580176][ T4326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.585858][ T4328] team0: Port device team_slave_1 added [ 26.591048][ T4321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.594643][ T4326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.595853][ T4326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.600039][ T4326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.603813][ T4320] team0: Port device team_slave_0 added [ 26.607844][ T4321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.616200][ T4320] team0: Port device team_slave_1 added [ 26.617505][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.618600][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.622476][ T4328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.629732][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.630941][ T4330] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.632502][ T4330] device bridge_slave_0 entered promiscuous mode [ 26.636578][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.637883][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.641815][ T4328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.647616][ T4321] team0: Port device team_slave_0 added [ 26.648730][ T4330] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.649955][ T4330] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.651358][ T4330] device bridge_slave_1 entered promiscuous mode [ 26.661815][ T4321] team0: Port device team_slave_1 added [ 26.668457][ T4330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.670314][ T4320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.671496][ T4320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.675854][ T4320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.678056][ T4320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.679138][ T4320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.683386][ T4320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.714749][ T4326] device hsr_slave_0 entered promiscuous mode [ 26.753252][ T4326] device hsr_slave_1 entered promiscuous mode [ 26.796638][ T4330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.810028][ T4321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.811210][ T4321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.815489][ T4321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.821378][ T4330] team0: Port device team_slave_0 added [ 26.864186][ T4328] device hsr_slave_0 entered promiscuous mode [ 26.903514][ T4328] device hsr_slave_1 entered promiscuous mode [ 26.943157][ T4328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.944315][ T4328] Cannot create hsr debugfs directory [ 26.945478][ T4321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.946547][ T4321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.950163][ T4321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.952619][ T4330] team0: Port device team_slave_1 added [ 27.006294][ T4320] device hsr_slave_0 entered promiscuous mode [ 27.043257][ T4320] device hsr_slave_1 entered promiscuous mode [ 27.083128][ T4320] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.084390][ T4320] Cannot create hsr debugfs directory [ 27.092998][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.094266][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.098381][ T4330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.107356][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.108447][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.112642][ T4330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.174003][ T4321] device hsr_slave_0 entered promiscuous mode [ 27.223280][ T4321] device hsr_slave_1 entered promiscuous mode [ 27.263159][ T4321] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.264335][ T4321] Cannot create hsr debugfs directory [ 27.333935][ T4330] device hsr_slave_0 entered promiscuous mode [ 27.385513][ T4330] device hsr_slave_1 entered promiscuous mode [ 27.433128][ T4330] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.434308][ T4330] Cannot create hsr debugfs directory [ 27.502089][ T4326] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 27.524219][ T4326] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 27.575884][ T4326] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 27.618583][ T4326] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 27.680537][ T4328] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 27.714707][ T4328] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 27.764575][ T4328] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 27.825575][ T4328] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 27.885971][ T4326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.888789][ T4321] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 27.935816][ T4321] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 27.974217][ T4321] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.024188][ T4321] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.087485][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.089377][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.091707][ T4320] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.125831][ T4326] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.130435][ T4320] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.174406][ T4320] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.219666][ T4320] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.253375][ T4338] Bluetooth: hci2: command 0x0409 tx timeout [ 28.253379][ T4327] Bluetooth: hci1: command 0x0409 tx timeout [ 28.254473][ T4338] Bluetooth: hci0: command 0x0409 tx timeout [ 28.255383][ T4327] Bluetooth: hci4: command 0x0409 tx timeout [ 28.261827][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.263683][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.265294][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.266482][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.277781][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.279416][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.280897][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.282295][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.283424][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.285150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 28.286882][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 28.291687][ T4330] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.305817][ T4330] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.333222][ T4327] Bluetooth: hci3: command 0x0409 tx timeout [ 28.364676][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 28.366403][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 28.368020][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 28.374050][ T4330] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.424416][ T4330] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.474584][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 28.476224][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 28.482152][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.483732][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.499071][ T4321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.501413][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.502888][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.520098][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 28.522927][ T4328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.527432][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.528890][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.531579][ T4321] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.535397][ T4320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.544675][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.546537][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.548038][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.549222][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.550842][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.554772][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.556105][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.560648][ T4328] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.565055][ T4320] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.567162][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.568701][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.570123][ T1657] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.571258][ T1657] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.572565][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.575774][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.578737][ T4330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.584284][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.585982][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.587824][ T1657] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.588962][ T1657] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.590275][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 28.591867][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.594085][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.595778][ T1657] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.596857][ T1657] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.606375][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.608159][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.609778][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.611356][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.612693][ T1657] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.613838][ T1657] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.616205][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 28.617903][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 28.619573][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 28.621459][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 28.623883][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 28.626035][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 28.631460][ T4330] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.635461][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 28.636963][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 28.638658][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.640029][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.641438][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 28.643007][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 28.644790][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 28.646421][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 28.647963][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.649752][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.651316][ T1657] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.652467][ T1657] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.662444][ T4330] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.664799][ T4330] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.669478][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 28.671093][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.672620][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.674757][ T1657] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.675907][ T1657] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.677402][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.678885][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.680371][ T1657] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.681454][ T1657] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.682748][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 28.684972][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 28.686952][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 28.688540][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 28.690055][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 28.691682][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 28.695182][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.696614][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.698227][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.699670][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.701117][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.702550][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.704420][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.705926][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.709431][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.710996][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 28.712485][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 28.717218][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 28.719924][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.721419][ T209] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.729130][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 28.730542][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 28.739657][ T4326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.742005][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.743769][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.746309][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 28.749582][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 28.765573][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 28.767492][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 28.769821][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 28.771346][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 28.777789][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 28.779530][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 28.782147][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.783617][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.792957][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.794843][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.796263][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.797832][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.803204][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 28.825465][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 28.826869][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 28.835358][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.836955][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.838969][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.840285][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.842350][ T4326] device veth0_vlan entered promiscuous mode [ 28.848271][ T4330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.854651][ T4326] device veth1_vlan entered promiscuous mode [ 28.874972][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 28.876416][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 28.877844][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.879330][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.897353][ T4326] device veth0_macvtap entered promiscuous mode [ 28.898867][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 28.900450][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 28.901645][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 28.905758][ T4321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.911799][ T4326] device veth1_macvtap entered promiscuous mode [ 28.934874][ T4328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.937849][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.939398][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.940901][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.942297][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 28.944180][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 28.951596][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.956078][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.957658][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.965427][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.967081][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.970771][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.972427][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.977136][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.978765][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.980763][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.981951][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.992486][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.996566][ T4321] device veth0_vlan entered promiscuous mode [ 29.001845][ T4326] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.003793][ T4326] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.005139][ T4326] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.006445][ T4326] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.010193][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 29.011538][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 29.025484][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 29.027088][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.028530][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 29.029948][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.031427][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 29.032815][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.035472][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.036847][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.038204][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.039563][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.042360][ T4328] device veth0_vlan entered promiscuous mode [ 29.052299][ T4321] device veth1_vlan entered promiscuous mode [ 29.055420][ T4320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.056806][ T4330] device veth0_vlan entered promiscuous mode [ 29.059982][ T4328] device veth1_vlan entered promiscuous mode [ 29.089426][ T4321] device veth0_macvtap entered promiscuous mode [ 29.089531][ T1611] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.091787][ T1611] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.092842][ T4330] device veth1_vlan entered promiscuous mode [ 29.097079][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 29.098521][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 29.100004][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 29.101494][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 29.102922][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 29.105224][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 29.106856][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.108378][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 29.109908][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 29.117314][ T4321] device veth1_macvtap entered promiscuous mode [ 29.131581][ T4418] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.132872][ T4418] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.133888][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.135748][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.137938][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.139856][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 29.141459][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 29.143008][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 29.145995][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.147507][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.157266][ T4328] device veth0_macvtap entered promiscuous mode [ 29.159971][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.161629][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.166314][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.167738][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 29.169360][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.171164][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 29.172758][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.175015][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.176603][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.180024][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 29.182726][ T4328] device veth1_macvtap entered promiscuous mode [ 29.185947][ T4321] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.187361][ T4321] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.188821][ T4321] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.190278][ T4321] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.195778][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 29.197682][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 29.199170][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.200805][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.202149][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.208156][ T4320] device veth0_vlan entered promiscuous mode [ 29.211471][ T4320] device veth1_vlan entered promiscuous mode [ 29.215770][ T4330] device veth0_macvtap entered promiscuous mode [ 29.218289][ T4330] device veth1_macvtap entered promiscuous mode [ 29.225430][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 29.227048][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 29.228668][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.230139][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 29.236439][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 29.239692][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 29.257835][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 29.259443][ T1611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.261594][ T4320] device veth0_macvtap entered promiscuous mode [ 29.265751][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.267462][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.269065][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.270840][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.273020][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.275903][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.277535][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.278975][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.280430][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.282334][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.284834][ T4328] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.286225][ T4328] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.287614][ T4328] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.288977][ T4328] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.317152][ T1611] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.318554][ T1611] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.337811][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 29.339397][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.340982][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.342556][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.345137][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.346679][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 29.350618][ T4320] device veth1_macvtap entered promiscuous mode [ 29.358564][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.360302][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.361977][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.364365][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.365797][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.367332][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.369811][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.375671][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 29.377211][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.378726][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.407816][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.409660][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.412012][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.414447][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.416326][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.418087][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.419931][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.421710][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.539970][ T4327] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 29.541568][ T4327] CPU: 0 PID: 4327 Comm: kworker/u5:3 Not tainted 6.1.147-syzkaller #0 [ 29.542844][ T4327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 29.544553][ T4327] Workqueue: hci2 hci_rx_work [ 29.545402][ T4327] Call trace: [ 29.545984][ T4327] dump_backtrace+0x1c8/0x1f4 [ 29.546823][ T4327] show_stack+0x2c/0x3c [ 29.547554][ T4327] __dump_stack+0x30/0x40 [ 29.548318][ T4327] dump_stack_lvl+0xf8/0x160 [ 29.549103][ T4327] dump_stack+0x1c/0x5c [ 29.549766][ T4327] sysfs_create_dir_ns+0x22c/0x24c [ 29.550644][ T4327] kobject_add_internal+0x5a8/0xb30 [ 29.551522][ T4327] kobject_add+0x134/0x1f8 [ 29.552246][ T4327] device_add+0x3f0/0xf94 [ 29.552961][ T4327] hci_conn_add_sysfs+0xbc/0x1cc [ 29.553785][ T4327] le_conn_complete_evt+0xa24/0xf8c [ 29.554566][ T4327] hci_le_conn_complete_evt+0x114/0x3f8 [ 29.555484][ T4327] hci_le_meta_evt+0x2c0/0x4a4 [ 29.556171][ T4327] hci_event_packet+0x6ac/0xf08 [ 29.557019][ T4327] hci_rx_work+0x324/0xaa0 [ 29.557698][ T4327] process_one_work+0x7f4/0x13a8 [ 29.558441][ T4327] worker_thread+0x8c8/0xfbc [ 29.559146][ T4327] kthread+0x250/0x2d8 [ 29.559837][ T4327] ret_from_fork+0x10/0x20 [ 29.561230][ T4327] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 29.563524][ T4327] Bluetooth: hci2: failed to register connection device [ 29.673237][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.679661][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.681353][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.682979][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.685015][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.688891][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.690618][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.692907][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.696234][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.697914][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.699631][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.701210][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.705488][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.707577][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.709110][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.711013][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.712627][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.714613][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.716201][ T4320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.717805][ T4320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.719957][ T4320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.727191][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.728866][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.732188][ T1657] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.732647][ T4330] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.735720][ T4330] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.736832][ T1657] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.737184][ T4330] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.739538][ T4330] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.744644][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 29.751563][ T4320] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.753569][ T4320] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.755004][ T4320] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.756423][ T4320] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.759791][ T1657] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.761082][ T1657] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.762987][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 29.816753][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.818127][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.820627][ T4418] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.821767][ T4418] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.830077][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 29.831474][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 29.876971][ T1611] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.878530][ T1657] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.879977][ T1611] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.881088][ T1657] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.884070][ T1611] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.885540][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 29.886666][ T1611] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.888225][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 29.891302][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 29.967884][ T4441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.969664][ T4441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.334392][ T4322] Bluetooth: hci4: command 0x041b tx timeout [ 30.336747][ T4322] Bluetooth: hci0: command 0x041b tx timeout [ 30.337968][ T4322] Bluetooth: hci1: command 0x041b tx timeout [ 30.339078][ T4322] Bluetooth: hci2: command 0x041b tx timeout [ 30.423214][ T4327] Bluetooth: hci3: command 0x041b tx timeout [ 31.208869][ T4458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.210532][ T4458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.803019][ T4467] input: syz1 as /devices/virtual/input/input2 [ 32.192836][ T4454] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.203624][ T4454] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 32.584503][ T4327] Bluetooth: hci2: command 0x040f tx timeout [ 32.585541][ T4327] Bluetooth: hci0: command 0x040f tx timeout [ 32.586526][ T4327] Bluetooth: hci4: command 0x040f tx timeout [ 32.587471][ T4327] Bluetooth: hci3: command 0x040f tx timeout [ 33.018785][ T4497] netlink: 20 bytes leftover after parsing attributes in process `syz.2.17'. [ 33.089182][ T4495] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.090712][ T4495] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.215997][ T4504] device syz_tun entered promiscuous mode [ 33.291302][ T4509] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18'. [ 33.525713][ T4504] device batadv_slave_0 entered promiscuous mode [ 34.130550][ T4517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.132451][ T4517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.180406][ T4322] Bluetooth: hci1: command 0x0419 tx timeout [ 34.284298][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 34.654103][ T4322] Bluetooth: hci3: command 0x0419 tx timeout [ 34.654130][ T4327] Bluetooth: hci0: command 0x0419 tx timeout [ 34.656197][ T4327] Bluetooth: hci2: command 0x0419 tx timeout [ 34.701365][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 34.705743][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.707621][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.451411][ T4537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.469047][ T4537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.683198][ T4523] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 36.733131][ T4338] Bluetooth: hci2: command 0x0406 tx timeout [ 36.883222][ T4523] usb 1-1: Using ep0 maxpacket: 16 [ 36.886922][ T4523] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.888704][ T4523] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.890351][ T4523] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 36.894005][ T4523] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 36.898701][ T4523] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.909918][ T4523] usb 1-1: config 0 descriptor?? [ 37.165641][ T4553] can0: slcan on ttyS3. [ 37.294071][ T4555] can0 (unregistered): slcan off ttyS3. [ 38.084316][ T4523] microsoft 0003:045E:07DA.0002: item fetching failed at offset 33/34 [ 38.256303][ T4523] microsoft 0003:045E:07DA.0002: parse failed [ 38.259393][ T4523] microsoft: probe of 0003:045E:07DA.0002 failed with error -22 [ 38.753281][ T4436] usb 1-1: USB disconnect, device number 2 [ 39.550007][ T4593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.551486][ T4593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.582529][ T4605] binder: 4603:4605 tried to acquire reference to desc 0, got 1 instead [ 40.586195][ T4382] binder: undelivered TRANSACTION_COMPLETE [ 40.595648][ T4382] binder: undelivered transaction 5, process died. [ 40.619080][ T4609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.620561][ T4609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.691814][ T4615] tmpfs: Bad value for 'mpol' [ 41.313489][ T4625] netlink: 44 bytes leftover after parsing attributes in process `syz.0.47'. [ 42.216336][ T4338] Bluetooth: hci3: ACL packet too small [ 42.460095][ T4638] mmap: syz.0.50 (4638) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 44.284862][ T4338] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 44.292830][ T4338] CPU: 0 PID: 4338 Comm: kworker/u5:8 Not tainted 6.1.147-syzkaller #0 [ 44.294176][ T4338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 44.295652][ T4338] Workqueue: hci1 hci_rx_work [ 44.296379][ T4338] Call trace: [ 44.296872][ T4338] dump_backtrace+0x1c8/0x1f4 [ 44.297649][ T4338] show_stack+0x2c/0x3c [ 44.298344][ T4338] __dump_stack+0x30/0x40 [ 44.298993][ T4338] dump_stack_lvl+0xf8/0x160 [ 44.299676][ T4338] dump_stack+0x1c/0x5c [ 44.300365][ T4338] sysfs_create_dir_ns+0x22c/0x24c [ 44.301151][ T4338] kobject_add_internal+0x5a8/0xb30 [ 44.301923][ T4338] kobject_add+0x134/0x1f8 [ 44.302589][ T4338] device_add+0x3f0/0xf94 [ 44.303258][ T4338] hci_conn_add_sysfs+0xbc/0x1cc [ 44.304017][ T4338] le_conn_complete_evt+0xa24/0xf8c [ 44.304864][ T4338] hci_le_conn_complete_evt+0x114/0x3f8 [ 44.305835][ T4338] hci_le_meta_evt+0x2c0/0x4a4 [ 44.306642][ T4338] hci_event_packet+0x6ac/0xf08 [ 44.307449][ T4338] hci_rx_work+0x324/0xaa0 [ 44.308201][ T4338] process_one_work+0x7f4/0x13a8 [ 44.309029][ T4338] worker_thread+0x8c8/0xfbc [ 44.309831][ T4338] kthread+0x250/0x2d8 [ 44.310516][ T4338] ret_from_fork+0x10/0x20 [ 44.425477][ T4338] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 44.427774][ T4338] Bluetooth: hci1: failed to register connection device [ 44.969516][ T4338] ================================================================== [ 44.970909][ T4338] BUG: KASAN: use-after-free in l2cap_sock_new_connection_cb+0x1d4/0x284 [ 44.972328][ T4338] Read of size 8 at addr ffff0000d01fe540 by task kworker/u5:8/4338 [ 44.973705][ T4338] [ 44.974133][ T4338] CPU: 0 PID: 4338 Comm: kworker/u5:8 Not tainted 6.1.147-syzkaller #0 [ 44.975495][ T4338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 44.977140][ T4338] Workqueue: hci1 hci_rx_work [ 44.977874][ T4338] Call trace: [ 44.978388][ T4338] dump_backtrace+0x1c8/0x1f4 [ 44.979196][ T4338] show_stack+0x2c/0x3c [ 44.979861][ T4338] __dump_stack+0x30/0x40 [ 44.980569][ T4338] dump_stack_lvl+0xf8/0x160 [ 44.981294][ T4338] print_address_description+0x88/0x200 [ 44.982228][ T4338] print_report+0x50/0x68 [ 44.982953][ T4338] kasan_report+0xa8/0x100 [ 44.983655][ T4338] __asan_report_load8_noabort+0x2c/0x38 [ 44.984556][ T4338] l2cap_sock_new_connection_cb+0x1d4/0x284 [ 44.985506][ T4338] l2cap_connect_cfm+0x2d4/0xd64 [ 44.986293][ T4338] hci_connect_cfm+0x98/0x130 [ 44.987032][ T4338] le_conn_complete_evt+0xaa4/0xf8c [ 44.987860][ T4338] hci_le_conn_complete_evt+0x114/0x3f8 [ 44.988774][ T4338] hci_le_meta_evt+0x2c0/0x4a4 [ 44.989591][ T4338] hci_event_packet+0x6ac/0xf08 [ 44.990388][ T4338] hci_rx_work+0x324/0xaa0 [ 44.991113][ T4338] process_one_work+0x7f4/0x13a8 [ 44.991883][ T4338] worker_thread+0x8c8/0xfbc [ 44.992639][ T4338] kthread+0x250/0x2d8 [ 44.993257][ T4338] ret_from_fork+0x10/0x20 [ 44.993901][ T4338] [ 44.994246][ T4338] Allocated by task 4338: [ 44.994902][ T4338] kasan_set_track+0x4c/0x80 [ 44.995661][ T4338] kasan_save_alloc_info+0x28/0x34 [ 44.996460][ T4338] __kasan_kmalloc+0xa0/0xb8 [ 44.997170][ T4338] __kmalloc+0xec/0x178 [ 44.997804][ T4338] sk_prot_alloc+0xc4/0x1f0 [ 44.998493][ T4338] sk_alloc+0x44/0x390 [ 44.999144][ T4338] bt_sock_alloc+0x4c/0x140 [ 44.999864][ T4338] l2cap_sock_new_connection_cb+0xe4/0x284 [ 45.000837][ T4338] l2cap_connect_cfm+0x2d4/0xd64 [ 45.001708][ T4338] hci_connect_cfm+0x98/0x130 [ 45.002516][ T4338] le_conn_complete_evt+0xaa4/0xf8c [ 45.003430][ T4338] hci_le_conn_complete_evt+0x114/0x3f8 [ 45.004351][ T4338] hci_le_meta_evt+0x2c0/0x4a4 [ 45.005178][ T4338] hci_event_packet+0x6ac/0xf08 [ 45.006011][ T4338] hci_rx_work+0x324/0xaa0 [ 45.006756][ T4338] process_one_work+0x7f4/0x13a8 [ 45.007572][ T4338] worker_thread+0x8c8/0xfbc [ 45.008352][ T4338] kthread+0x250/0x2d8 [ 45.009040][ T4338] ret_from_fork+0x10/0x20 [ 45.009799][ T4338] [ 45.010206][ T4338] Freed by task 4675: [ 45.010850][ T4338] kasan_set_track+0x4c/0x80 [ 45.011585][ T4338] kasan_save_free_info+0x3c/0x60 [ 45.012437][ T4338] ____kasan_slab_free+0x148/0x1b0 [ 45.013348][ T4338] __kasan_slab_free+0x18/0x28 [ 45.014203][ T4338] slab_free_freelist_hook+0x16c/0x1ec [ 45.015158][ T4338] __kmem_cache_free+0xc0/0x224 [ 45.015980][ T4338] kfree+0xd0/0x1ac [ 45.016634][ T4338] __sk_destruct+0x4bc/0x760 [ 45.017405][ T4338] __sk_free+0x320/0x430 [ 45.018074][ T4338] sk_free+0x60/0xc8 [ 45.018653][ T4338] l2cap_sock_kill+0x12c/0x234 [ 45.019393][ T4338] l2cap_sock_cleanup_listen+0xf4/0x28c [ 45.020284][ T4338] l2cap_sock_release+0x5c/0x1ac [ 45.021083][ T4338] sock_close+0xb4/0x1f8 [ 45.021740][ T4338] __fput+0x1bc/0x7c0 [ 45.022371][ T4338] ____fput+0x20/0x30 [ 45.022973][ T4338] task_work_run+0x1ec/0x270 [ 45.023703][ T4338] get_signal+0x1120/0x1310 [ 45.024442][ T4338] do_notify_resume+0x340/0x2b0c [ 45.025189][ T4338] el0_svc+0x98/0x138 [ 45.025874][ T4338] el0t_64_sync_handler+0x84/0xf0 [ 45.026678][ T4338] el0t_64_sync+0x18c/0x190 [ 45.027399][ T4338] [ 45.027799][ T4338] The buggy address belongs to the object at ffff0000d01fe000 [ 45.027799][ T4338] which belongs to the cache kmalloc-2k of size 2048 [ 45.030226][ T4338] The buggy address is located 1344 bytes inside of [ 45.030226][ T4338] 2048-byte region [ffff0000d01fe000, ffff0000d01fe800) [ 45.032497][ T4338] [ 45.032877][ T4338] The buggy address belongs to the physical page: [ 45.033963][ T4338] page:0000000049236102 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1101f8 [ 45.035657][ T4338] head:0000000049236102 order:3 compound_mapcount:0 compound_pincount:0 [ 45.037040][ T4338] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 45.038425][ T4338] raw: 05ffc00000010200 fffffc0003d7cc00 dead000000000002 ffff0000c0002900 [ 45.039835][ T4338] raw: 0000000000000000 0000000080080008 00000001ffffffff 0000000000000000 [ 45.041305][ T4338] page dumped because: kasan: bad access detected [ 45.042415][ T4338] [ 45.042803][ T4338] Memory state around the buggy address: [ 45.043766][ T4338] ffff0000d01fe400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 45.045133][ T4338] ffff0000d01fe480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 45.046365][ T4338] >ffff0000d01fe500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 45.047618][ T4338] ^ [ 45.048615][ T4338] ffff0000d01fe580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 45.050001][ T4338] ffff0000d01fe600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 45.051418][ T4338] ================================================================== [ 45.052660][ C0] vkms_vblank_simulate: vblank timer overrun [ 45.053696][ T4338] Disabling lock debugging due to kernel taint [ 45.054581][ T4338] ------------[ cut here ]------------ [ 45.055495][ T4338] refcount_t: addition on 0; use-after-free. [ 45.056647][ T4338] WARNING: CPU: 0 PID: 4338 at lib/refcount.c:25 refcount_warn_saturate+0x134/0x1f8 [ 45.058217][ T4338] Modules linked in: [ 45.058839][ T4338] CPU: 0 PID: 4338 Comm: kworker/u5:8 Tainted: G B 6.1.147-syzkaller #0 [ 45.060412][ T4338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 45.062063][ T4338] Workqueue: hci1 hci_rx_work [ 45.062878][ T4338] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 45.064204][ T4338] pc : refcount_warn_saturate+0x134/0x1f8 [ 45.065182][ T4338] lr : refcount_warn_saturate+0x134/0x1f8 [ 45.066100][ T4338] sp : ffff800020ee7590 [ 45.066786][ T4338] x29: ffff800020ee7590 x28: dfff800000000000 x27: 0000000000000000 [ 45.068195][ T4338] x26: 1fffe0001a03fa07 x25: 1fffe0001b6d1200 x24: dfff800000000000 [ 45.069452][ T4338] x23: 0000000000000000 x22: ffff0000d01fd018 x21: ffff0000d01fd03f [ 45.070707][ T4338] x20: ffff0000d01fd018 x19: ffff800017a78000 x18: ffff800011aabce0 [ 45.071955][ T4338] x17: 1fffe00033ed9d7e x16: ffff800008042c60 x15: 0000000040000000 [ 45.073194][ T4338] x14: 0000000000000002 x13: 0000000000ff0100 x12: 0000000000ff0100 [ 45.074434][ T4338] x11: ff00800008047eec x10: 0000000040000002 x9 : 700a4acee4ffd100 [ 45.075710][ T4338] x8 : 700a4acee4ffd100 x7 : 0000000000000004 x6 : ffff800008251ec8 [ 45.077039][ T4338] x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000000 [ 45.078416][ T4338] x2 : ffff800020ee7120 x1 : 0000000000000000 x0 : ffff800008251f5c [ 45.079762][ T4338] Call trace: [ 45.080324][ T4338] refcount_warn_saturate+0x134/0x1f8 [ 45.081149][ T4338] __l2cap_chan_add+0x4cc/0x7c8 [ 45.081940][ T4338] l2cap_connect_cfm+0x380/0xd64 [ 45.082769][ T4338] hci_connect_cfm+0x98/0x130 [ 45.083506][ T4338] le_conn_complete_evt+0xaa4/0xf8c [ 45.084296][ T4338] hci_le_conn_complete_evt+0x114/0x3f8 [ 45.085211][ T4338] hci_le_meta_evt+0x2c0/0x4a4 [ 45.086014][ T4338] hci_event_packet+0x6ac/0xf08 [ 45.086816][ T4338] hci_rx_work+0x324/0xaa0 [ 45.087536][ T4338] process_one_work+0x7f4/0x13a8 [ 45.088353][ T4338] worker_thread+0x8c8/0xfbc [ 45.089115][ T4338] kthread+0x250/0x2d8 [ 45.089795][ T4338] ret_from_fork+0x10/0x20 [ 45.090511][ T4338] irq event stamp: 1775 [ 45.091169][ T4338] hardirqs last enabled at (1775): [] finish_lock_switch+0xb0/0x1c4 [ 45.092695][ T4338] hardirqs last disabled at (1774): [] __schedule+0x298/0x1b18 [ 45.094288][ T4338] softirqs last enabled at (1764): [] release_sock+0x16c/0x1bc [ 45.095773][ T4338] softirqs last disabled at (1758): [] release_sock+0x34/0x1bc [ 45.097215][ T4338] ---[ end trace 0000000000000000 ]--- [ 45.098066][ C0] vkms_vblank_simulate: vblank timer overrun [ 45.115420][ T4338] ------------[ cut here ]------------ [ 45.116333][ T4338] ODEBUG: assert_init not available (active state 0) object type: timer_list hint: l2cap_chan_timeout+0x0/0x280 [ 45.118470][ T4338] WARNING: CPU: 0 PID: 4338 at lib/debugobjects.c:518 debug_print_object+0x148/0x1d4 [ 45.119931][ T4338] Modules linked in: [ 45.120617][ T4338] CPU: 0 PID: 4338 Comm: kworker/u5:8 Tainted: G B W 6.1.147-syzkaller #0 [ 45.122199][ T4338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 45.123761][ T4338] Workqueue: hci1 hci_rx_work [ 45.124534][ T4338] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 45.125753][ T4338] pc : debug_print_object+0x148/0x1d4 [ 45.126644][ T4338] lr : debug_print_object+0x148/0x1d4 [ 45.127529][ T4338] sp : ffff800020ee72b0 [ 45.128196][ T4338] x29: ffff800020ee72b0 x28: 1fffe0001a03fa06 x27: 0000000000000000 [ 45.129448][ T4338] x26: ffff8000150b0000 x25: ffff8000083adff8 x24: dfff800000000000 [ 45.130690][ T4338] x23: 0000000000000000 x22: ffff800010bc55fc x21: ffff800011f9a500 [ 45.131977][ T4338] x20: ffff800011acad00 x19: ffff800011f9a040 x18: ffff800011aabce0 [ 45.133159][ T4338] x17: 203a657079742074 x16: ffff8000082e7bb0 x15: 0000000000000002 [ 45.134416][ T4338] x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000100000 [ 45.135708][ T4338] x11: 000000000006043a x10: ffff80003226d000 x9 : 700a4acee4ffd100 [ 45.137045][ T4338] x8 : 700a4acee4ffd100 x7 : 0000000000000001 x6 : 0000000000000001 [ 45.138380][ T4338] x5 : ffff800020ee6d38 x4 : ffff800015194800 x3 : ffff80000852e34c [ 45.139724][ T4338] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 [ 45.140994][ T4338] Call trace: [ 45.141493][ T4338] debug_print_object+0x148/0x1d4 [ 45.142245][ T4338] debug_object_assert_init+0x250/0x2c8 [ 45.143091][ T4338] timer_delete+0x48/0x1e8 [ 45.143780][ T4338] try_to_grab_pending+0xa4/0x65c [ 45.144519][ T4338] __cancel_work+0x44/0x224 [ 45.145233][ T4338] cancel_delayed_work+0x24/0x38 [ 45.145984][ T4338] l2cap_le_start+0x768/0x1010 [ 45.146690][ T4338] l2cap_connect_cfm+0x578/0xd64 [ 45.147433][ T4338] hci_connect_cfm+0x98/0x130 [ 45.148103][ T4338] le_conn_complete_evt+0xaa4/0xf8c [ 45.148886][ T4338] hci_le_conn_complete_evt+0x114/0x3f8 [ 45.149737][ T4338] hci_le_meta_evt+0x2c0/0x4a4 [ 45.150452][ T4338] hci_event_packet+0x6ac/0xf08 [ 45.151193][ T4338] hci_rx_work+0x324/0xaa0 [ 45.151849][ T4338] process_one_work+0x7f4/0x13a8 [ 45.152633][ T4338] worker_thread+0x8c8/0xfbc [ 45.153422][ T4338] kthread+0x250/0x2d8 [ 45.154068][ T4338] ret_from_fork+0x10/0x20 [ 45.154751][ T4338] irq event stamp: 1775 [ 45.155421][ T4338] hardirqs last enabled at (1775): [] finish_lock_switch+0xb0/0x1c4 [ 45.156897][ T4338] hardirqs last disabled at (1774): [] __schedule+0x298/0x1b18 [ 45.158416][ T4338] softirqs last enabled at (1764): [] release_sock+0x16c/0x1bc [ 45.159837][ T4338] softirqs last disabled at (1758): [] release_sock+0x34/0x1bc [ 45.161501][ T4338] ---[ end trace 0000000000000000 ]--- [ 45.162454][ C0] vkms_vblank_simulate: vblank timer overrun [ 45.174162][ T4338] Unable to handle kernel paging request at virtual address dfff800000000013 [ 45.175501][ T4338] KASAN: null-ptr-deref in range [0x0000000000000098-0x000000000000009f] [ 45.176866][ T4338] Mem abort info: [ 45.177428][ T4338] ESR = 0x0000000096000006 [ 45.178094][ T4338] EC = 0x25: DABT (current EL), IL = 32 bits [ 45.179016][ T4338] SET = 0, FnV = 0 [ 45.179590][ T4338] EA = 0, S1PTW = 0 [ 45.180219][ T4338] FSC = 0x06: level 2 translation fault [ 45.181150][ T4338] Data abort info: [ 45.181803][ T4338] ISV = 0, ISS = 0x00000006 [ 45.182531][ T4338] CM = 0, WnR = 0 [ 45.183205][ T4338] [dfff800000000013] address between user and kernel address ranges [ 45.184432][ T4338] Internal error: Oops: 0000000096000006 [#1] PREEMPT SMP [ 45.185613][ T4338] Modules linked in: [ 45.186258][ T4338] CPU: 0 PID: 4338 Comm: kworker/u5:8 Tainted: G B W 6.1.147-syzkaller #0 [ 45.187840][ T4338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 45.189520][ T4338] Workqueue: hci1 hci_rx_work [ 45.190324][ T4338] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 45.191580][ T4338] pc : do_raw_spin_lock+0x80/0x2ec [ 45.192412][ T4338] lr : _raw_spin_lock_bh+0x5c/0x6c [ 45.193265][ T4338] sp : ffff800020ee7340 [ 45.193919][ T4338] x29: ffff800020ee73d0 x28: 1fffe0001a03fa06 x27: ffff0000d01fd030 [ 45.195149][ T4338] x26: dfff800000000000 x25: 1fffe0001a03fa04 x24: 1fffe0001a03fa00 [ 45.196481][ T4338] x23: dfff800000000000 x22: 1ffff000041dce6c x21: 0000000000000000 [ 45.197744][ T4338] x20: 000000000000009c x19: 0000000000000098 x18: ffff800011aabce0 [ 45.199036][ T4338] x17: 203a657079742074 x16: ffff8000082e76dc x15: 0000000000000002 [ 45.200309][ T4338] x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000100000 [ 45.201616][ T4338] x11: ffff800020ee7360 x10: ffff8000149d2b82 x9 : f3f3f304f1f1f1f1 [ 45.202926][ T4338] x8 : 0000000000000013 x7 : 0000000000000000 x6 : ffff80000fcc744c [ 45.204293][ T4338] x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000000 [ 45.205596][ T4338] x2 : 0000000000000000 x1 : ffff800011f99a20 x0 : 0000000000000098 [ 45.206950][ T4338] Call trace: [ 45.207482][ T4338] do_raw_spin_lock+0x80/0x2ec [ 45.208302][ T4338] _raw_spin_lock_bh+0x5c/0x6c [ 45.209119][ T4338] lock_sock_nested+0x88/0x130 [ 45.209933][ T4338] l2cap_sock_ready_cb+0x4c/0x130 [ 45.210735][ T4338] l2cap_le_start+0x8f0/0x1010 [ 45.211448][ T4338] l2cap_connect_cfm+0x578/0xd64 [ 45.212359][ T4338] hci_connect_cfm+0x98/0x130 [ 45.213239][ T4338] le_conn_complete_evt+0xaa4/0xf8c [ 45.214164][ T4338] hci_le_conn_complete_evt+0x114/0x3f8 [ 45.215156][ T4338] hci_le_meta_evt+0x2c0/0x4a4 [ 45.215965][ T4338] hci_event_packet+0x6ac/0xf08 [ 45.216781][ T4338] hci_rx_work+0x324/0xaa0 [ 45.217491][ T4338] process_one_work+0x7f4/0x13a8 [ 45.218294][ T4338] worker_thread+0x8c8/0xfbc [ 45.218992][ T4338] kthread+0x250/0x2d8 [ 45.219602][ T4338] ret_from_fork+0x10/0x20 [ 45.220353][ T4338] Code: f2de6089 aa0003f3 f2fe7e69 f8376ac9 (38f76908) [ 45.221448][ T4338] ---[ end trace 0000000000000000 ]--- [ 45.394350][ T4338] Kernel panic - not syncing: Oops: Fatal exception in interrupt [ 45.395658][ T4338] SMP: stopping secondary CPUs [ 45.396509][ T4338] Kernel Offset: disabled [ 45.397253][ T4338] CPU features: 0x080000,000f0097,a65bfea7 [ 45.398149][ T4338] Memory Limit: none [ 45.584656][ T4338] Rebooting in 86400 seconds..