last executing test programs: 11m28.331310686s ago: executing program 2 (id=3): openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0x193, 0x1, 0x3, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x4, 0x4}, {0x2, 0x9}}}}, 0x11) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000805000100070000000900020073797a30000000001400078008001240001500000500150020000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x60300, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$random(0xffffffffffffff9c, &(0x7f00000001c0), 0x20a40, 0x0) read(r5, 0x0, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r6, 0x1, &(0x7f00000000c0)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x8000, r4, 0x0, 0x0, 0x0, 0x0, 0x2}]) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x1, 0x1, 0x0, 0x2000, &(0x7f0000b07000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r7, 0x4048aecb, &(0x7f0000000000)) 11m20.469131771s ago: executing program 2 (id=10): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x3, @rand_addr=' \x01\x00'}, 0x1c) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0xd, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11m19.199180463s ago: executing program 2 (id=12): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x541b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r4, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) write$UHID_SET_REPORT_REPLY(r4, &(0x7f00000007c0)=ANY=[], 0xffe0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r7, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x971}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004015}, 0x448d0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00042cbd7000fedbdf257900000008000300", @ANYRES32=r6, @ANYBLOB="0c00000400f4000400f400"/24], 0x34}, 0x1, 0x0, 0x0, 0x885}, 0x0) 11m17.0865592s ago: executing program 2 (id=13): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x1c000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[], 0x118) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x14, 0x2, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 11m15.265846526s ago: executing program 2 (id=14): r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f00000000c0)={0x1, 0x0, 0x1000, 0x20, &(0x7f0000000000)="6c507fb73e8f8e641d43a4cd0e2d066d110f1339b76b46fd6541c8ff0a69b5c1", 0x40, 0x0, &(0x7f0000000040)="064254f54f0a325733423951b89e8c92e8656dc170f495b8a8f92f208621cbb95ffb3a1fbccfd26a2696baf20c4d7963215cc6ffe19645e825d26d5dfe04b19f"}) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$PTP_SYS_OFFSET(r1, 0x43403d05, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r3 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_delroute={0x44, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_ID={0xc, 0x1, 0x4}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}]}, 0x44}}, 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000040)=0x1) r6 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) write$snddsp(r6, 0x0, 0x0) 11m14.394946312s ago: executing program 2 (id=16): sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xfffffffffffffffe}, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2}, {{@in6=@remote, 0x4d5, 0x32}, 0x0, @in6=@loopback, 0x1, 0x3, 0x0, 0xb7, 0x1fb, 0xffffffff, 0xfffffff9}}, 0xe8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) sendmmsg(r2, &(0x7f0000000180), 0x400000000000077, 0x7600) 11m8.702577082s ago: executing program 4 (id=24): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0x34, r2, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40811}, 0x20) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xc5, &(0x7f0000001080)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x8b, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x8b, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "7e581ba68817f0697afa489cda495d81bca5c1d531f67ec390b65902a9d8469d6d3ed049f70a00aed1faecaa7e86fc972f816f1ea4b1219f6090b3d29a2783c57abee32b17f234d1205e1fe8fe7a8799a51579485af998a4ae0b94632d824b47d05187b2aa601db82495438d437a264be1c8aa2622bf7f447cb2df"}}}}}}}, 0x0) 11m6.694409368s ago: executing program 4 (id=27): socket(0x2, 0x80805, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) 11m4.657077548s ago: executing program 4 (id=29): r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f00000000c0)={0x1, 0x0, 0x1000, 0x20, &(0x7f0000000000)="6c507fb73e8f8e641d43a4cd0e2d066d110f1339b76b46fd6541c8ff0a69b5c1", 0x40, 0x0, &(0x7f0000000040)="064254f54f0a325733423951b89e8c92e8656dc170f495b8a8f92f208621cbb95ffb3a1fbccfd26a2696baf20c4d7963215cc6ffe19645e825d26d5dfe04b19f"}) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$PTP_SYS_OFFSET(r1, 0x43403d05, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r3 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_delroute={0x44, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_ID={0xc, 0x1, 0x4}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}]}, 0x44}}, 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000040)=0x1) r6 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) write$snddsp(r6, 0x0, 0x0) 11m3.170342101s ago: executing program 4 (id=33): r0 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x2) 11m1.179831499s ago: executing program 4 (id=35): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004041, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f00000007c0)={0x48, 0x2, r4}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r4, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) 10m59.509084585s ago: executing program 4 (id=38): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd5cd7000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x14, 0x2d, 0x9, 0x70bd26, 0x0, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x84) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) 10m57.520437404s ago: executing program 32 (id=16): sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xfffffffffffffffe}, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2}, {{@in6=@remote, 0x4d5, 0x32}, 0x0, @in6=@loopback, 0x1, 0x3, 0x0, 0xb7, 0x1fb, 0xffffffff, 0xfffffff9}}, 0xe8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) sendmmsg(r2, &(0x7f0000000180), 0x400000000000077, 0x7600) 10m44.170362147s ago: executing program 33 (id=38): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd5cd7000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x14, 0x2d, 0x9, 0x70bd26, 0x0, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x84) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) 8m7.380709181s ago: executing program 0 (id=281): setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) getdents64(r1, &(0x7f0000000fc0)=""/224, 0xe0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) 8m5.321476635s ago: executing program 0 (id=282): openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0x193, 0x1, 0x3, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x4, 0x4}, {0x2, 0x9}}}}, 0x11) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000805000100070000000900020073797a30000000001400078008001240001500000500150020000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x60300, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x2c, 0x0, 0x8, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88fb}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0441}, 0x4008000) r5 = openat$random(0xffffffffffffff9c, &(0x7f00000001c0), 0x20a40, 0x0) read(r5, 0x0, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r6, 0x1, &(0x7f00000000c0)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x8000, r3, 0x0, 0x0, 0x0, 0x0, 0x2}]) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r7, 0x4048aecb, &(0x7f0000000000)) 8m3.426459733s ago: executing program 0 (id=284): bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r4, 0x4161, 0x0) 7m58.817826265s ago: executing program 0 (id=289): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) alarm(0x3) 7m57.316679408s ago: executing program 0 (id=291): timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xe7b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56", 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x100000000004, 0x0, 0x106, 0x8}}, 0x20) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x51, 0x0, 0x0) 7m56.427634589s ago: executing program 0 (id=293): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) r2 = fsopen(&(0x7f0000000040)='pvfs2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f00000007c0)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R\x11\xad\x89\xd1\xb8\xe0h\\.\xa3`fv\xdc\x8b\x18r\x8e\x9ac\x182q\xb8\xca\xb09Blk\x8e\xb1\xc3j\x03\xb7\x00\x00\x00\x00\x00\x00\xfc\xe3\xb8\xc7\x0f\xaaQ\x98F*T\xd5\xcd4g+\xbd\b\xe0R\x9d\x18\x19a:\xa2\xa1\xcb\xd7jx\x94\v1\xb7\xb5\xdb\x9a\b\xf9\xb4\x8c\xab{\x1dU \r\xc1\x19!\x86~\xa9\x01\xda\x020\xe7\xc0\x9b\xf8NtV\xf5\xe7\xb2\xc6\x16A\xa9\xe8\xea\x95?I\xf9}\a\xc66}a)\xb4\xa9C\xc4\xfa\xf9L\x8d}\xf2>\xc5p4\x16\x91G\xe3\x9ef\xe7\xdc9;\x1c|\x1b.q\xb2\xc7\xed\xa8{\xac\x0e\xe5\xb7\x9d\xa4\xa6\xdd\xe4\x16\a\x13+\'\x05i\x7f\xd2\xc0\xd0f&\xbc\xd0M\xe9\x0e\x819\x02\x9b\xe6\xef\xe0\x1fD=A\xdf\x10\xd5]\xcbL|-\xe8\xf4Q\xd1\x0e\x81v]\xb9\xfc\xf0\x89\"\xc2]{\xa7\xe6:\x87\r\xf2-\xd1Z\xbd\xef\xe04\xa2\'\xca\x92\xe1\x91uy\xe1\x1d\xa7\x00\x00\x00\x00\x00\x00\xbeE\a\xd2\x96\xb3_)*\x1c\xf8Z\xbd\xfaI\xe4\x9c\xc93f\xe5\xd8\xdeXh\x9a\xd5\xd9n\x80\x00\x02\xc0 =W\xbcq\x19\x90\xd9\xdb\x87!\xees\xcajZ^\x94\"k\xaeqg\x92\x90\xa3!Z\xb5\xac\x8f\x9e\x8c8\x83 DI\x8c5\x9cwX\xb1_\xb0S\x15\x0f{\x1fa\x92 \xfa\xfa\x16izQ\xeaw\x967V\'\x11=\xac\xd1V*\xfeUt\xf9`\xb1+\xcc\x7f&j\x15T\xe5r\x8a{#\xf3\x8f\x8c/:\xb8\xf7\xad\xdc1\xd1U)\x9e\xa1\xad|\xf3\x83\xe3%\xc0\xbc\x91\xeaZox \xac\xfa}A\xb5\"B\xe6\x7f\xe9\xf0\xfc\xf2\\S\x1c\xc8\xe1\xa5\x8c\x84p]\xa9C\x13D\x1fa\xb8\xb7&(\xe9\xfcqx\xf4\xfe\xec\xd7\x99Fa\xf8\xee\xb1\xc3\xbb\x04PO\x91)G\xa0\x9a\x8e\x89h\xd3lE\x03\x1eJ\xc2\xa8N\xcd\x1a\\o\xb6\xef\xa2q$\xbdu\xa9\xd2', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_clone(0x103480, &(0x7f0000000680), 0x0, &(0x7f0000000100), 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48004}, 0x20000040) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r1, 0x1, 0x6, @broadcast}, 0x10) 7m40.94500992s ago: executing program 34 (id=293): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) r2 = fsopen(&(0x7f0000000040)='pvfs2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f00000007c0)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R\x11\xad\x89\xd1\xb8\xe0h\\.\xa3`fv\xdc\x8b\x18r\x8e\x9ac\x182q\xb8\xca\xb09Blk\x8e\xb1\xc3j\x03\xb7\x00\x00\x00\x00\x00\x00\xfc\xe3\xb8\xc7\x0f\xaaQ\x98F*T\xd5\xcd4g+\xbd\b\xe0R\x9d\x18\x19a:\xa2\xa1\xcb\xd7jx\x94\v1\xb7\xb5\xdb\x9a\b\xf9\xb4\x8c\xab{\x1dU \r\xc1\x19!\x86~\xa9\x01\xda\x020\xe7\xc0\x9b\xf8NtV\xf5\xe7\xb2\xc6\x16A\xa9\xe8\xea\x95?I\xf9}\a\xc66}a)\xb4\xa9C\xc4\xfa\xf9L\x8d}\xf2>\xc5p4\x16\x91G\xe3\x9ef\xe7\xdc9;\x1c|\x1b.q\xb2\xc7\xed\xa8{\xac\x0e\xe5\xb7\x9d\xa4\xa6\xdd\xe4\x16\a\x13+\'\x05i\x7f\xd2\xc0\xd0f&\xbc\xd0M\xe9\x0e\x819\x02\x9b\xe6\xef\xe0\x1fD=A\xdf\x10\xd5]\xcbL|-\xe8\xf4Q\xd1\x0e\x81v]\xb9\xfc\xf0\x89\"\xc2]{\xa7\xe6:\x87\r\xf2-\xd1Z\xbd\xef\xe04\xa2\'\xca\x92\xe1\x91uy\xe1\x1d\xa7\x00\x00\x00\x00\x00\x00\xbeE\a\xd2\x96\xb3_)*\x1c\xf8Z\xbd\xfaI\xe4\x9c\xc93f\xe5\xd8\xdeXh\x9a\xd5\xd9n\x80\x00\x02\xc0 =W\xbcq\x19\x90\xd9\xdb\x87!\xees\xcajZ^\x94\"k\xaeqg\x92\x90\xa3!Z\xb5\xac\x8f\x9e\x8c8\x83 DI\x8c5\x9cwX\xb1_\xb0S\x15\x0f{\x1fa\x92 \xfa\xfa\x16izQ\xeaw\x967V\'\x11=\xac\xd1V*\xfeUt\xf9`\xb1+\xcc\x7f&j\x15T\xe5r\x8a{#\xf3\x8f\x8c/:\xb8\xf7\xad\xdc1\xd1U)\x9e\xa1\xad|\xf3\x83\xe3%\xc0\xbc\x91\xeaZox \xac\xfa}A\xb5\"B\xe6\x7f\xe9\xf0\xfc\xf2\\S\x1c\xc8\xe1\xa5\x8c\x84p]\xa9C\x13D\x1fa\xb8\xb7&(\xe9\xfcqx\xf4\xfe\xec\xd7\x99Fa\xf8\xee\xb1\xc3\xbb\x04PO\x91)G\xa0\x9a\x8e\x89h\xd3lE\x03\x1eJ\xc2\xa8N\xcd\x1a\\o\xb6\xef\xa2q$\xbdu\xa9\xd2', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_clone(0x103480, &(0x7f0000000680), 0x0, &(0x7f0000000100), 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48004}, 0x20000040) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r1, 0x1, 0x6, @broadcast}, 0x10) 3m54.693136339s ago: executing program 7 (id=647): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x541b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r4, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) write$UHID_SET_REPORT_REPLY(r4, &(0x7f00000007c0)=ANY=[], 0xffe0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r6, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x971}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004015}, 0x448d0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00042cbd7000fedbdf257900000008000300", @ANYRES32, @ANYBLOB="0c00000400f4000400f400"/24], 0x34}, 0x1, 0x0, 0x0, 0x885}, 0x0) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, 0x0, 0x0) 3m51.386466514s ago: executing program 7 (id=651): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c00028008000140000000080800034000000110"], 0xc4}}, 0x20050890) 3m47.958121162s ago: executing program 7 (id=656): openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0x193, 0x1, 0x3, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x4, 0x4}, {0x2, 0x9}}}}, 0x11) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000805000100070000000900020073797a30000000001400078008001240001500000500150020000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x60300, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x2c, 0x0, 0x8, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88fb}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0441}, 0x4008000) r6 = openat$random(0xffffffffffffff9c, &(0x7f00000001c0), 0x20a40, 0x0) read(r6, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x8000, r4, 0x0, 0x0, 0x0, 0x0, 0x2}]) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x1, 0x1, 0x0, 0x2000, &(0x7f0000b07000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r7, 0x4048aecb, &(0x7f0000000000)) 3m42.27228696s ago: executing program 7 (id=664): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}]}], {0x14}}, 0x90}, 0x1, 0x0, 0x0, 0x24040840}, 0x0) 3m39.792063514s ago: executing program 7 (id=669): r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000640)={0x8, r0}) io_submit(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0) 3m37.086268692s ago: executing program 7 (id=673): openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0x193, 0x1, 0x3, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x4, 0x4}, {0x2, 0x9}}}}, 0x11) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000805000100070000000900020073797a30000000001400078008001240001500000500150020000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x60300, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x2c, 0x0, 0x8, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88fb}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0441}, 0x4008000) r6 = openat$random(0xffffffffffffff9c, &(0x7f00000001c0), 0x20a40, 0x0) read(r6, 0x0, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r7, 0x1, &(0x7f00000000c0)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x8000, r4, 0x0, 0x0, 0x0, 0x0, 0x2}]) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r8, 0x4048aecb, &(0x7f0000000000)) 3m21.137710575s ago: executing program 35 (id=673): openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0x193, 0x1, 0x3, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x4, 0x4}, {0x2, 0x9}}}}, 0x11) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000805000100070000000900020073797a30000000001400078008001240001500000500150020000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x60300, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x2c, 0x0, 0x8, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88fb}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0441}, 0x4008000) r6 = openat$random(0xffffffffffffff9c, &(0x7f00000001c0), 0x20a40, 0x0) read(r6, 0x0, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r7, 0x1, &(0x7f00000000c0)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x8000, r4, 0x0, 0x0, 0x0, 0x0, 0x2}]) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r8, 0x4048aecb, &(0x7f0000000000)) 2m41.316030149s ago: executing program 6 (id=761): mkdir(&(0x7f0000000140)='./control\x00', 0x8) r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000180)='./control\x00', 0xa4000960) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) inotify_init1(0x0) rmdir(&(0x7f0000000280)='./control\x00') 2m39.015690593s ago: executing program 6 (id=764): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) socket$packet(0x11, 0x3, 0x300) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$vim2m(0x0, 0x8004, 0x2) socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20) recvmsg$unix(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}, 0x10040) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 2m36.386518699s ago: executing program 6 (id=770): r0 = fsopen(&(0x7f0000000300)='jfs\x00', 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, 0x0, 0x0) mkdir(&(0x7f0000000380)='./file1\x00', 0xa) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') openat$autofs(0xffffffffffffff9c, 0x0, 0x100, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r1, 0x1) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 2m34.759666758s ago: executing program 6 (id=771): openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0x193, 0x1, 0x3, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x4, 0x4}, {0x2, 0x9}}}}, 0x11) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000805000100070000000900020073797a30000000001400078008001240001500000500150020000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x60300, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x2c, 0x0, 0x8, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88fb}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0441}, 0x4008000) r6 = openat$random(0xffffffffffffff9c, &(0x7f00000001c0), 0x20a40, 0x0) read(r6, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x8000, r4, 0x0, 0x0, 0x0, 0x0, 0x2}]) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x1, 0x1, 0x0, 0x2000, &(0x7f0000b07000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r7, 0x4048aecb, &(0x7f0000000000)) 2m27.584451348s ago: executing program 6 (id=784): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000009c0)=@bridge_getlink={0x28, 0x12, 0x101, 0x0, 0xffffffe0, {0x7, 0x0, 0x0, 0x0, 0x84f8, 0x4000}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xfffffffd}]}, 0x28}, 0x1, 0x0, 0x0, 0x4050}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000200)={0x0, 0x0, 0x3, 0x1fd}) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) clock_nanosleep(0x9, 0x64, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) listen(r2, 0x3) syz_emit_ethernet(0x42, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3, 0x28, 0xda1c, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4, 0x0, 0x0, 0x1000}}}}}}, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100)='befs\x00', 0x214003, 0x0) 2m23.736185151s ago: executing program 6 (id=790): r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f00000000c0)={0x1, 0x0, 0x1000, 0x20, &(0x7f0000000000)="6c507fb73e8f8e641d43a4cd0e2d066d110f1339b76b46fd6541c8ff0a69b5c1", 0x40, 0x0, &(0x7f0000000040)="064254f54f0a325733423951b89e8c92e8656dc170f495b8a8f92f208621cbb95ffb3a1fbccfd26a2696baf20c4d7963215cc6ffe19645e825d26d5dfe04b19f"}) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r2 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_delroute={0x44, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_ID={0xc, 0x1, 0x4}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}]}, 0x44}}, 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000040)=0x1) r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) write$snddsp(r5, 0x0, 0x0) 2m8.279965358s ago: executing program 36 (id=790): r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f00000000c0)={0x1, 0x0, 0x1000, 0x20, &(0x7f0000000000)="6c507fb73e8f8e641d43a4cd0e2d066d110f1339b76b46fd6541c8ff0a69b5c1", 0x40, 0x0, &(0x7f0000000040)="064254f54f0a325733423951b89e8c92e8656dc170f495b8a8f92f208621cbb95ffb3a1fbccfd26a2696baf20c4d7963215cc6ffe19645e825d26d5dfe04b19f"}) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r2 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_delroute={0x44, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_ID={0xc, 0x1, 0x4}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}]}, 0x44}}, 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000040)=0x1) r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) write$snddsp(r5, 0x0, 0x0) 6.192757723s ago: executing program 5 (id=979): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0x40, r1, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x54, &(0x7f0000001080)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x1a, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x1a, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "7e581ba68817f0697afa"}}}}}}}, 0x0) 5.982553972s ago: executing program 5 (id=981): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x0, 0x82, 0x0, 0x0) 5.766461099s ago: executing program 5 (id=982): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000380)='xprt_reserve\x00', r1, 0x0, 0xfb2}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000280)='contention_end\x00', r2}, 0x18) poll(0x0, 0x0, 0x80000201) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 5.112809395s ago: executing program 5 (id=983): socket(0x8, 0x5, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x1000000, 0x482, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FRA_FLOW={0x8, 0xb, 0xe}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @multicast1}, {0x0, 0x17c1, 0x8}}}}}, 0x0) 5.017177062s ago: executing program 5 (id=984): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) getsockopt$inet_buf(r0, 0x0, 0x29, 0x0, &(0x7f0000695ffc)) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, 0x0, 0x4040) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) 2.254648398s ago: executing program 1 (id=991): socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.166960787s ago: executing program 3 (id=992): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x2, {{0x134a539c4b5cc019}, 0x3}}, 0x10, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x118}}, 0x0) 2.05860031s ago: executing program 3 (id=993): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) write(r0, &(0x7f0000000000)="9882e7", 0x3) 1.947850579s ago: executing program 3 (id=994): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x20) 1.787175879s ago: executing program 3 (id=995): syz_emit_ethernet(0xf3, &(0x7f00000010c0)=ANY=[@ANYBLOB="f1a2610faca20180c20000000011d20643a58c60ea469dbf8183284fca05e00b925072d08b13449aa5b89d45882edfddf235d69a1cb5691fde336702b6649467afb2952c1cd16803dac1b17a8d086e54230586c39f818016a1cb38e4d20c8e3e702a2a78496a8864d592a39d30e15afd0c28d39ccc08bf6a3d82c29f967fb2086684ce8255d7102e4d46d8cfab632d2ff6f15ca139c858860ee8eafc757159aa70372231"], 0x0) 1.723514553s ago: executing program 1 (id=996): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000040)=0xfffffffc, 0x21) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x45833af92e4b38ff, 0x0) 1.333072933s ago: executing program 3 (id=997): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) 926.521416ms ago: executing program 1 (id=998): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @default, 0x2}, [@null, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast]}, 0x48) socket(0x2a, 0x2, 0x0) 670.620873ms ago: executing program 3 (id=999): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) recvmmsg(r0, &(0x7f0000005880)=[{{0x0, 0x4500, 0x0}, 0xe}], 0x1, 0x10123, 0x0) 546.791232ms ago: executing program 1 (id=1000): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r0, 0x0, 0xb9b}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000380)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x2}, 0x94) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r1, 0x0, 0xb9b}, 0x18) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 342.222283ms ago: executing program 5 (id=1001): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) close(r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff}, [@jmp={0x5, 0x0, 0x849aee721dcc84be, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffe, 0xd1}]}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r0}, 0x18) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) 13.03344ms ago: executing program 1 (id=1002): sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, 0x0, 0x40000) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040084) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x4, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x44000) syz_emit_ethernet(0x3e, &(0x7f0000000300)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x24, 0x0, 0x9, 0x2, 0x0, 0x0, @local, @rand_addr=0xe0000000}}}}}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 0s ago: executing program 1 (id=1003): sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x18, 0x140c, 0x4, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x20000056) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x50, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' @\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fbdbdf25050000000c000980080002000300000004"], 0x24}}, 0x4004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x100003}}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e0001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) kernel console output (not intermixed with test programs): +0x10/0x10 [ 139.378872][ T5116] ? __pfx__printk+0x10/0x10 [ 139.378906][ T5116] ? kernfs_path_from_node+0x2c/0x280 [ 139.378927][ T5116] ? kernfs_path_from_node+0x243/0x280 [ 139.378947][ T5116] ? kernfs_path_from_node+0x2c/0x280 [ 139.378973][ T5116] sysfs_create_dir_ns+0x259/0x280 [ 139.378995][ T5116] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 139.379030][ T5116] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 139.379056][ T5116] ? rt_spin_unlock+0x161/0x200 [ 139.379091][ T5116] kobject_add_internal+0x5a5/0xb50 [ 139.379130][ T5116] kobject_add+0x155/0x220 [ 139.379163][ T5116] ? __pfx_kobject_add+0x10/0x10 [ 139.379210][ T5116] ? get_device_parent+0x370/0x3a0 [ 139.379250][ T5116] device_add+0x408/0xb50 [ 139.379289][ T5116] hci_conn_add_sysfs+0xd5/0x1e0 [ 139.379326][ T5116] le_conn_complete_evt+0xf39/0x1500 [ 139.379364][ T5116] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 139.379390][ T5116] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 139.379415][ T5116] ? lockdep_hardirqs_on+0x9c/0x150 [ 139.379444][ T5116] ? skb_pull_data+0xfb/0x200 [ 139.379478][ T5116] hci_le_enh_conn_complete_evt+0x189/0x470 [ 139.379505][ T5116] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 139.379535][ T5116] hci_event_packet+0x78f/0x1200 [ 139.379571][ T5116] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 139.379597][ T5116] ? __pfx_hci_event_packet+0x10/0x10 [ 139.379641][ T5116] ? hci_send_to_monitor+0xe2/0x570 [ 139.379671][ T5116] hci_rx_work+0x46a/0xe80 [ 139.379713][ T5116] ? process_scheduled_works+0x9ef/0x17b0 [ 139.379743][ T5116] process_scheduled_works+0xade/0x17b0 [ 139.379803][ T5116] ? __pfx_process_scheduled_works+0x10/0x10 [ 139.379851][ T5116] worker_thread+0x8a0/0xda0 [ 139.379882][ T5116] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 139.379917][ T5116] ? __kthread_parkme+0x7b/0x200 [ 139.379957][ T5116] kthread+0x711/0x8a0 [ 139.379992][ T5116] ? __pfx_worker_thread+0x10/0x10 [ 139.380020][ T5116] ? __pfx_kthread+0x10/0x10 [ 139.380050][ T5116] ? rt_spin_unlock+0x150/0x200 [ 139.380086][ T5116] ? rt_spin_unlock+0x161/0x200 [ 139.380115][ T5116] ? __pfx_kthread+0x10/0x10 [ 139.380155][ T5116] ret_from_fork+0x4b9/0x870 [ 139.380190][ T5116] ? __pfx_ret_from_fork+0x10/0x10 [ 139.380225][ T5116] ? __switch_to_asm+0x39/0x70 [ 139.380254][ T5116] ? __switch_to_asm+0x33/0x70 [ 139.380282][ T5116] ? __pfx_kthread+0x10/0x10 [ 139.380317][ T5116] ret_from_fork_asm+0x1a/0x30 [ 139.380368][ T5116] [ 139.381925][ T5116] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 139.382052][ T5116] Bluetooth: hci2: failed to register connection device [ 140.014202][ T5116] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 140.024507][ T5116] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 140.032358][ T5116] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 140.033584][ T5116] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 140.034519][ T5116] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 140.639834][ T61] Bluetooth: hci2: ACL packet for unknown connection handle 403 [ 141.105391][ T6088] befs: (nullb0): invalid magic header [ 142.211809][ T61] Bluetooth: hci5: command tx timeout [ 144.268666][ T61] Bluetooth: hci5: command tx timeout [ 146.347679][ T61] Bluetooth: hci5: command tx timeout [ 147.413475][ T6101] overlayfs: failed to resolve './file1': -2 [ 148.088644][ T61] Bluetooth: hci1: ACL packet for unknown connection handle 403 [ 150.202179][ T61] Bluetooth: hci5: command tx timeout [ 150.581471][ T69] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.564125][ T61] Bluetooth: hci3: ACL packet for unknown connection handle 403 [ 152.539544][ T6126] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 152.563125][ T69] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.214846][ T5116] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 153.278001][ T5116] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 153.279107][ T5116] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 153.280211][ T5116] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 153.280961][ T5116] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 153.399982][ T69] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.506525][ T6076] chnl_net:caif_netlink_parms(): no params data found [ 153.904946][ T69] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.411408][ C1] vkms_vblank_simulate: vblank timer overrun [ 154.758879][ C1] vkms_vblank_simulate: vblank timer overrun [ 155.407856][ T5116] Bluetooth: hci0: command tx timeout [ 155.530102][ C1] vkms_vblank_simulate: vblank timer overrun [ 155.967285][ C1] vkms_vblank_simulate: vblank timer overrun [ 156.031277][ T6148] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 156.253180][ C1] vkms_vblank_simulate: vblank timer overrun [ 156.992950][ C1] vkms_vblank_simulate: vblank timer overrun [ 157.595892][ T5116] Bluetooth: hci0: command tx timeout [ 157.754040][ C1] vkms_vblank_simulate: vblank timer overrun [ 157.826326][ T5116] Bluetooth: hci3: ACL packet for unknown connection handle 403 [ 157.998073][ T6076] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.001102][ T6076] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.001356][ T6076] bridge_slave_0: entered allmulticast mode [ 158.004298][ T6076] bridge_slave_0: entered promiscuous mode [ 158.274033][ C1] vkms_vblank_simulate: vblank timer overrun [ 158.337908][ T6076] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.338052][ T6076] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.338292][ T6076] bridge_slave_1: entered allmulticast mode [ 158.476683][ T6076] bridge_slave_1: entered promiscuous mode [ 158.477786][ T6164] batadv_slave_1: entered promiscuous mode [ 158.979573][ T6158] batadv_slave_1: left promiscuous mode [ 159.242176][ T6163] orangefs_mount: mount request failed with -4 [ 159.627869][ T5116] Bluetooth: hci0: command tx timeout [ 160.651697][ T6076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.724732][ T6175] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 161.210040][ T6076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.462453][ T5116] Bluetooth: hci3: ACL packet for unknown connection handle 403 [ 161.770698][ T5116] Bluetooth: hci0: command tx timeout [ 163.377324][ T6188] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 163.441007][ T5116] Bluetooth: hci2: ACL packet for unknown connection handle 403 [ 163.494845][ T6076] team0: Port device team_slave_0 added [ 163.516256][ T6076] team0: Port device team_slave_1 added [ 163.770173][ T69] bridge_slave_1: left allmulticast mode [ 163.770407][ T69] bridge_slave_1: left promiscuous mode [ 163.772836][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.803860][ T6196] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 163.959279][ T69] bridge_slave_0: left allmulticast mode [ 163.959303][ T69] bridge_slave_0: left promiscuous mode [ 163.959505][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.168948][ C1] vkms_vblank_simulate: vblank timer overrun [ 165.035438][ C1] vkms_vblank_simulate: vblank timer overrun [ 166.010227][ T6210] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 167.624855][ T5116] Bluetooth: hci3: ACL packet for unknown connection handle 403 [ 170.008549][ T5116] Bluetooth: hci1: ACL packet for unknown connection handle 403 [ 170.235902][ C0] vkms_vblank_simulate: vblank timer overrun [ 170.590040][ C0] vkms_vblank_simulate: vblank timer overrun [ 171.645942][ C0] vkms_vblank_simulate: vblank timer overrun [ 171.824155][ C0] vkms_vblank_simulate: vblank timer overrun [ 171.829304][ T6230] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 172.041777][ C0] vkms_vblank_simulate: vblank timer overrun [ 172.426510][ C0] vkms_vblank_simulate: vblank timer overrun [ 173.086250][ T6239] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 173.162797][ C0] vkms_vblank_simulate: vblank timer overrun [ 173.382801][ C0] vkms_vblank_simulate: vblank timer overrun [ 173.506022][ C0] vkms_vblank_simulate: vblank timer overrun [ 173.798144][ C0] vkms_vblank_simulate: vblank timer overrun [ 174.098535][ C0] vkms_vblank_simulate: vblank timer overrun [ 175.024540][ T6251] syz.3.93 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 175.026587][ C0] vkms_vblank_simulate: vblank timer overrun [ 175.401995][ T5116] Bluetooth: hci3: ACL packet for unknown connection handle 403 [ 176.172485][ T5116] Bluetooth: hci2: ACL packet for unknown connection handle 403 [ 185.216907][ T6273] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 185.434960][ T6272] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 186.845408][ T6283] No control pipe specified [ 187.691392][ T6295] befs: (nullb0): invalid magic header [ 188.607815][ T6301] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 190.012814][ T6306] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 191.092132][ T5116] Bluetooth: hci3: ACL packet for unknown connection handle 403 [ 198.730211][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.979893][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.271767][ T69] bond0 (unregistering): Released all slaves [ 199.529749][ T61] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 199.536306][ T61] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 199.547734][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 199.570327][ T61] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 199.573308][ T61] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 199.592433][ T61] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 199.646089][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.646168][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.757678][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 199.841806][ T10] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 199.841837][ T10] usb 1-1: config 0 has no interface number 0 [ 199.843684][ T10] usb 1-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 199.843730][ T10] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 199.843750][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.940063][ T10] usb 1-1: config 0 descriptor?? [ 200.016546][ T10] usbhid 1-1:0.1: couldn't find an input interrupt endpoint [ 200.297465][ T61] Bluetooth: hci1: ACL packet for unknown connection handle 403 [ 201.707874][ T61] Bluetooth: hci4: command tx timeout [ 202.954750][ T6338] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 203.787682][ T61] Bluetooth: hci4: command tx timeout [ 203.823531][ T6346] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 203.868336][ T5964] usb 1-1: USB disconnect, device number 2 [ 205.867862][ T61] Bluetooth: hci4: command tx timeout [ 208.131898][ T61] Bluetooth: hci4: command tx timeout [ 208.500268][ T6131] chnl_net:caif_netlink_parms(): no params data found [ 208.707849][ T69] hsr_slave_0: left promiscuous mode [ 208.751414][ T69] hsr_slave_1: left promiscuous mode [ 208.752406][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.752560][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.909028][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.909057][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.426303][ T6383] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 210.334464][ T69] veth1_macvtap: left promiscuous mode [ 210.334716][ T69] veth0_macvtap: left promiscuous mode [ 210.335035][ T69] veth1_vlan: left promiscuous mode [ 210.335366][ T69] veth0_vlan: left promiscuous mode [ 210.631841][ T6378] No control pipe specified [ 211.667909][ T5913] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 211.817764][ T5913] usb 4-1: Using ep0 maxpacket: 16 [ 211.820116][ T5913] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 211.820143][ T5913] usb 4-1: config 0 has no interface number 0 [ 211.820193][ T5913] usb 4-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 211.820237][ T5913] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 211.820261][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.825843][ T5913] usb 4-1: config 0 descriptor?? [ 211.891144][ T5913] usbhid 4-1:0.1: couldn't find an input interrupt endpoint [ 212.187740][ T5913] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 212.351949][ T5913] usb 1-1: config 0 interface 0 has no altsetting 0 [ 212.351990][ T5913] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 212.352015][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.867706][ T5913] usb 1-1: config 0 descriptor?? [ 212.975074][ T5116] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 212.986827][ T5116] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 212.996318][ T5116] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 213.007426][ T5116] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 213.022394][ T5116] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 213.928309][ T6408] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 214.810996][ T31] usb 4-1: USB disconnect, device number 2 [ 215.380855][ T5116] Bluetooth: hci5: command tx timeout [ 215.772706][ T31] usb 1-1: USB disconnect, device number 3 [ 216.290669][ T6424] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 216.577763][ T31] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 216.758766][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 216.760138][ T31] usb 1-1: not running at top speed; connect to a high speed hub [ 216.764325][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 216.764350][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 216.767891][ T31] usb 1-1: string descriptor 0 read error: -22 [ 216.768021][ T31] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 216.768039][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.870653][ T31] usb 1-1: 0:2 : does not exist [ 217.068379][ T5116] Bluetooth: hci3: command 0x0406 tx timeout [ 217.069923][ T5116] Bluetooth: hci2: command 0x0406 tx timeout [ 217.076254][ T5116] Bluetooth: hci1: command 0x0406 tx timeout [ 217.496154][ C0] vkms_vblank_simulate: vblank timer overrun [ 217.734511][ T5807] Bluetooth: hci5: command tx timeout [ 218.237103][ C0] vkms_vblank_simulate: vblank timer overrun [ 218.681167][ C0] vkms_vblank_simulate: vblank timer overrun [ 218.763825][ C0] vkms_vblank_simulate: vblank timer overrun [ 219.866700][ C0] vkms_vblank_simulate: vblank timer overrun [ 221.068812][ T61] Bluetooth: hci5: command tx timeout [ 221.213958][ T31] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 221.245936][ T31] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 221.262888][ T31] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 221.507911][ T31] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 221.545069][ T31] usb 1-1: USB disconnect, device number 4 [ 221.762737][ C0] vkms_vblank_simulate: vblank timer overrun [ 221.886272][ T6455] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 222.037672][ T31] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 222.100000][ T69] team0 (unregistering): Port device team_slave_1 removed [ 222.223011][ T31] usb 1-1: config 0 interface 0 has no altsetting 0 [ 222.223055][ T31] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 222.223079][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.254213][ T31] usb 1-1: config 0 descriptor?? [ 222.508222][ T69] team0 (unregistering): Port device team_slave_0 removed [ 223.051579][ C0] vkms_vblank_simulate: vblank timer overrun [ 223.254152][ C0] vkms_vblank_simulate: vblank timer overrun [ 223.256488][ T61] Bluetooth: hci5: command tx timeout [ 224.269380][ C0] vkms_vblank_simulate: vblank timer overrun [ 224.522321][ T31] usb 1-1: USB disconnect, device number 5 [ 224.847672][ T10] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 225.005189][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 225.005943][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 225.031732][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 225.031757][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 225.061933][ T10] usb 4-1: string descriptor 0 read error: -22 [ 225.062086][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 225.062103][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.278209][ C0] vkms_vblank_simulate: vblank timer overrun [ 225.984308][ T10] usb 4-1: 0:2 : does not exist [ 226.463555][ T6491] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 226.994355][ T10] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 227.018453][ T10] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 227.033661][ T10] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 227.123960][ T10] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 227.160817][ T10] usb 4-1: USB disconnect, device number 3 [ 227.420934][ C0] vkms_vblank_simulate: vblank timer overrun [ 228.804875][ C0] vkms_vblank_simulate: vblank timer overrun [ 229.687594][ T6517] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 230.446478][ C0] vkms_vblank_simulate: vblank timer overrun [ 231.426159][ T6529] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 231.662049][ C0] vkms_vblank_simulate: vblank timer overrun [ 232.931031][ T6544] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 233.204346][ C1] vkms_vblank_simulate: vblank timer overrun [ 233.422507][ C1] vkms_vblank_simulate: vblank timer overrun [ 233.749524][ C1] vkms_vblank_simulate: vblank timer overrun [ 234.219411][ C1] vkms_vblank_simulate: vblank timer overrun [ 234.825089][ C1] vkms_vblank_simulate: vblank timer overrun [ 234.835760][ T6559] batadv_slave_1: entered promiscuous mode [ 235.117893][ T6549] batadv_slave_1: left promiscuous mode [ 235.351008][ C1] vkms_vblank_simulate: vblank timer overrun [ 235.373745][ T6330] chnl_net:caif_netlink_parms(): no params data found [ 235.385358][ T6558] orangefs_mount: mount request failed with -4 [ 235.540435][ C1] vkms_vblank_simulate: vblank timer overrun [ 235.757478][ C1] vkms_vblank_simulate: vblank timer overrun [ 235.999590][ C1] vkms_vblank_simulate: vblank timer overrun [ 236.937932][ C1] vkms_vblank_simulate: vblank timer overrun [ 237.293260][ T6576] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 237.342952][ C1] vkms_vblank_simulate: vblank timer overrun [ 238.326036][ T6582] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 240.353050][ T6592] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 240.839566][ T6596] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 242.437203][ C1] vkms_vblank_simulate: vblank timer overrun [ 243.363116][ C1] vkms_vblank_simulate: vblank timer overrun [ 243.578139][ T6619] befs: (nullb0): invalid magic header [ 243.588597][ C1] vkms_vblank_simulate: vblank timer overrun [ 243.995153][ C1] vkms_vblank_simulate: vblank timer overrun [ 244.401486][ C1] vkms_vblank_simulate: vblank timer overrun [ 244.441608][ C1] vkms_vblank_simulate: vblank timer overrun [ 244.739398][ C1] vkms_vblank_simulate: vblank timer overrun [ 244.761496][ C1] vkms_vblank_simulate: vblank timer overrun [ 245.004461][ C1] vkms_vblank_simulate: vblank timer overrun [ 245.395721][ T61] Bluetooth: hci1: ACL packet for unknown connection handle 403 [ 245.497891][ T6330] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.498046][ T6330] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.498297][ T6330] bridge_slave_0: entered allmulticast mode [ 245.507070][ T6330] bridge_slave_0: entered promiscuous mode [ 245.570503][ T6330] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.570667][ T6330] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.570923][ T6330] bridge_slave_1: entered allmulticast mode [ 245.597817][ T6330] bridge_slave_1: entered promiscuous mode [ 246.001582][ C1] vkms_vblank_simulate: vblank timer overrun [ 246.904130][ C1] vkms_vblank_simulate: vblank timer overrun [ 247.250262][ T6397] chnl_net:caif_netlink_parms(): no params data found [ 247.290641][ T6330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.351140][ T6330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.601321][ T6330] team0: Port device team_slave_0 added [ 251.689965][ T6659] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 253.605253][ T61] Bluetooth: hci1: ACL packet for unknown connection handle 403 [ 255.394274][ T6330] team0: Port device team_slave_1 added [ 256.973473][ T69] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.889043][ T6330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.889060][ T6330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 257.889088][ T6330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.430909][ T6705] orangefs_mount: mount request failed with -4 [ 258.749788][ T69] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.818176][ T6706] batadv_slave_1: entered promiscuous mode [ 258.818449][ T6706] batadv_slave_1: left promiscuous mode [ 259.220163][ T6330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.220182][ T6330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 259.220215][ T6330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.287263][ T61] Bluetooth: hci3: ACL packet for unknown connection handle 403 [ 260.518844][ T69] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.809353][ T5807] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 260.817213][ T5807] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 260.818498][ T5807] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 260.819980][ T5807] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 260.827459][ T5807] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 260.947742][ T6397] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.947874][ T6397] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.948126][ T6397] bridge_slave_0: entered allmulticast mode [ 260.983823][ T6397] bridge_slave_0: entered promiscuous mode [ 261.003498][ T6397] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.003674][ T6397] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.003915][ T6397] bridge_slave_1: entered allmulticast mode [ 261.053032][ T6397] bridge_slave_1: entered promiscuous mode [ 261.077791][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.077868][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.384855][ T6736] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 262.605465][ T6740] Can't find ip_set type has [ 262.907770][ T5807] Bluetooth: hci0: command tx timeout [ 264.987817][ T5807] Bluetooth: hci0: command tx timeout [ 267.068218][ T5807] Bluetooth: hci0: command tx timeout [ 267.824049][ T69] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.661133][ T5807] Bluetooth: hci0: command tx timeout [ 271.380760][ T6781] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 272.829490][ T6397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.494735][ T61] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 276.506404][ T61] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 276.528503][ T61] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 276.529750][ T61] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 276.530540][ T61] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 276.533786][ T69] bridge_slave_1: left allmulticast mode [ 276.533808][ T69] bridge_slave_1: left promiscuous mode [ 276.534035][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.949914][ T69] bridge_slave_0: left allmulticast mode [ 276.949947][ T69] bridge_slave_0: left promiscuous mode [ 276.950224][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.308029][ T6826] befs: (nullb0): invalid magic header [ 278.390973][ T69] bridge_slave_1: left allmulticast mode [ 278.391003][ T69] bridge_slave_1: left promiscuous mode [ 278.391254][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.667708][ T5807] Bluetooth: hci4: command tx timeout [ 278.669463][ T69] bridge_slave_0: left allmulticast mode [ 278.669491][ T69] bridge_slave_0: left promiscuous mode [ 278.669737][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.933129][ T5807] Bluetooth: hci4: command tx timeout [ 281.087052][ T6850] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 282.430194][ T6855] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 283.063623][ T61] Bluetooth: hci4: command tx timeout [ 285.070931][ T61] Bluetooth: hci4: command tx timeout [ 288.637937][ T69] bond0 (unregistering): Released all slaves [ 289.098657][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 289.200843][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.284533][ T69] bond0 (unregistering): Released all slaves [ 294.664146][ T6911] Zero length message leads to an empty skb [ 295.012859][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 295.160064][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 295.163951][ T10] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 295.163979][ T10] usb 2-1: config 0 has no interface number 0 [ 295.164033][ T10] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.164061][ T10] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.164103][ T10] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 295.164127][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.317140][ T10] usb 2-1: config 0 descriptor?? [ 296.291048][ T10] usbhid 2-1:0.1: can't add hid device: -71 [ 296.291148][ T10] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 296.340262][ T10] usb 2-1: USB disconnect, device number 2 [ 296.638401][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 298.741243][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 299.562378][ T69] bond0 (unregistering): Released all slaves [ 302.085205][ T6732] chnl_net:caif_netlink_parms(): no params data found [ 302.940147][ T6962] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 305.397612][ T5885] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 305.547656][ T5885] usb 1-1: Using ep0 maxpacket: 16 [ 305.553144][ T5885] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 305.553171][ T5885] usb 1-1: config 0 has no interface number 0 [ 305.553221][ T5885] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.553249][ T5885] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.553289][ T5885] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 305.553312][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.622670][ T5885] usb 1-1: config 0 descriptor?? [ 306.814525][ T5885] usbhid 1-1:0.1: can't add hid device: -71 [ 306.814658][ T5885] usbhid 1-1:0.1: probe with driver usbhid failed with error -71 [ 306.851148][ T5885] usb 1-1: USB disconnect, device number 6 [ 310.503091][ T61] Bluetooth: hci3: ACL packet for unknown connection handle 403 [ 312.245666][ T7030] befs: (nullb0): invalid magic header [ 316.680965][ T6732] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.681108][ T6732] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.681366][ T6732] bridge_slave_0: entered allmulticast mode [ 316.684169][ T6732] bridge_slave_0: entered promiscuous mode [ 316.723193][ T6732] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.723340][ T6732] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.723588][ T6732] bridge_slave_1: entered allmulticast mode [ 316.726519][ T6732] bridge_slave_1: entered promiscuous mode [ 319.066612][ T6732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.226504][ T69] hsr_slave_0: left promiscuous mode [ 319.273595][ T69] hsr_slave_1: left promiscuous mode [ 319.275169][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.275205][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.658676][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.658706][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 320.151274][ T7078] orangefs_mount: mount request failed with -4 [ 320.249833][ T5807] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 320.254582][ T5807] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 320.255985][ T5807] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 320.257416][ T5807] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 320.293227][ T5807] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 320.422838][ T69] veth1_macvtap: left promiscuous mode [ 320.422941][ T69] veth0_macvtap: left promiscuous mode [ 320.423212][ T69] veth1_vlan: left promiscuous mode [ 320.423397][ T69] veth0_vlan: left promiscuous mode [ 320.905802][ T7085] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 322.360242][ T61] Bluetooth: hci5: command tx timeout [ 322.513638][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.513717][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.810969][ T69] team0 (unregistering): Port device team_slave_1 removed [ 323.008169][ T7097] befs: (nullb0): invalid magic header [ 323.928261][ T69] team0 (unregistering): Port device team_slave_0 removed [ 324.435147][ T61] Bluetooth: hci5: command tx timeout [ 326.507715][ T61] Bluetooth: hci5: command tx timeout [ 327.937928][ T7121] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 328.771636][ T61] Bluetooth: hci5: command tx timeout [ 329.270252][ T7128] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 333.979857][ T7157] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 335.237440][ T7162] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 336.378370][ T69] team0 (unregistering): Port device team_slave_1 removed [ 336.427626][ T5872] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 336.536429][ T5807] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 336.569808][ T5807] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 336.571530][ T5807] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 336.575273][ T5807] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 336.577113][ T5807] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 336.627760][ T5872] usb 2-1: Using ep0 maxpacket: 16 [ 336.630184][ T5872] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 336.630210][ T5872] usb 2-1: config 0 has no interface number 0 [ 336.630263][ T5872] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.630290][ T5872] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.630332][ T5872] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 336.630355][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.702910][ T5872] usb 2-1: config 0 descriptor?? [ 336.713867][ T69] team0 (unregistering): Port device team_slave_0 removed [ 336.835382][ T61] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 336.846643][ T61] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 336.858002][ T61] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 336.877780][ T61] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 336.879812][ T61] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 337.386580][ T5872] usbhid 2-1:0.1: can't add hid device: -71 [ 337.386701][ T5872] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 337.424926][ T5872] usb 2-1: USB disconnect, device number 3 [ 338.667810][ T61] Bluetooth: hci6: command tx timeout [ 338.917626][ T61] Bluetooth: hci7: command tx timeout [ 339.637691][ T5885] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 339.787695][ T5885] usb 4-1: Using ep0 maxpacket: 16 [ 339.790141][ T5885] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.790175][ T5885] usb 4-1: config 0 interface 0 has no altsetting 0 [ 339.790210][ T5885] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 339.790236][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.800508][ T5885] usb 4-1: config 0 descriptor?? [ 340.757705][ T61] Bluetooth: hci6: command tx timeout [ 340.804967][ T5885] usbhid 4-1:0.0: can't add hid device: -71 [ 340.805103][ T5885] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 340.823360][ T5885] usb 4-1: USB disconnect, device number 4 [ 340.987615][ T61] Bluetooth: hci7: command tx timeout [ 341.798981][ T7193] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 342.292395][ T7079] batadv_slave_1: entered promiscuous mode [ 342.292814][ T7079] batadv_slave_1: left promiscuous mode [ 342.296031][ T6732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.827697][ T61] Bluetooth: hci6: command tx timeout [ 343.067705][ T61] Bluetooth: hci7: command tx timeout [ 344.907689][ T61] Bluetooth: hci6: command tx timeout [ 345.147695][ T61] Bluetooth: hci7: command tx timeout [ 347.540390][ T7168] chnl_net:caif_netlink_parms(): no params data found [ 347.560513][ T7080] chnl_net:caif_netlink_parms(): no params data found [ 349.286108][ T7171] chnl_net:caif_netlink_parms(): no params data found [ 351.159372][ T7285] evm: overlay not supported [ 353.269860][ T7168] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.270008][ T7168] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.270282][ T7168] bridge_slave_0: entered allmulticast mode [ 353.324255][ T7168] bridge_slave_0: entered promiscuous mode [ 353.354199][ T7080] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.354362][ T7080] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.354612][ T7080] bridge_slave_0: entered allmulticast mode [ 353.397159][ T7080] bridge_slave_0: entered promiscuous mode [ 353.623431][ T7168] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.623586][ T7168] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.623826][ T7168] bridge_slave_1: entered allmulticast mode [ 353.627183][ T7168] bridge_slave_1: entered promiscuous mode [ 354.541336][ T7080] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.541475][ T7080] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.541737][ T7080] bridge_slave_1: entered allmulticast mode [ 354.544648][ T7080] bridge_slave_1: entered promiscuous mode [ 355.031360][ T7309] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 355.425265][ T7168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 355.509973][ T7080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 355.515944][ T7168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 355.516185][ T7171] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.516319][ T7171] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.516510][ T7171] bridge_slave_0: entered allmulticast mode [ 355.521185][ T7171] bridge_slave_0: entered promiscuous mode [ 355.536043][ T7080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 355.766340][ T7171] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.766484][ T7171] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.766763][ T7171] bridge_slave_1: entered allmulticast mode [ 355.780025][ T7171] bridge_slave_1: entered promiscuous mode [ 357.580090][ T7322] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 357.820591][ T7168] team0: Port device team_slave_0 added [ 358.000602][ T7080] team0: Port device team_slave_0 added [ 358.003390][ T7168] team0: Port device team_slave_1 added [ 358.013051][ T7171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.020486][ T7080] team0: Port device team_slave_1 added [ 358.113768][ T7171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.610284][ T7328] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 361.605052][ T7351] befs: (nullb0): invalid magic header [ 363.179893][ T7168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.179911][ T7168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.179939][ T7168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.386735][ T7080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.386749][ T7080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.386768][ T7080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.395161][ T7168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.395183][ T7168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.395215][ T7168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.400476][ T7171] team0: Port device team_slave_0 added [ 363.446384][ T7080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.446404][ T7080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.446437][ T7080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.513188][ T7171] team0: Port device team_slave_1 added [ 363.856477][ T69] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.942320][ T69] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.020933][ T7171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 369.020951][ T7171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 369.020980][ T7171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.041207][ T7171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.041225][ T7171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.041253][ T7171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.176453][ T7168] hsr_slave_0: entered promiscuous mode [ 371.185996][ T7168] hsr_slave_1: entered promiscuous mode [ 371.186895][ T7168] debugfs: 'hsr0' already exists in 'hsr' [ 371.186922][ T7168] Cannot create hsr debugfs directory [ 371.920261][ T69] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.010121][ T7080] hsr_slave_0: entered promiscuous mode [ 372.011645][ T7080] hsr_slave_1: entered promiscuous mode [ 372.012654][ T7080] debugfs: 'hsr0' already exists in 'hsr' [ 372.012679][ T7080] Cannot create hsr debugfs directory [ 372.399154][ T7429] befs: (nullb0): invalid magic header [ 376.217993][ T69] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.140416][ T7459] syz.3.386 (7459) used greatest stack depth: 17368 bytes left [ 377.620373][ T7465] befs: (nullb0): invalid magic header [ 378.715324][ T7171] hsr_slave_0: entered promiscuous mode [ 378.716970][ T7171] hsr_slave_1: entered promiscuous mode [ 378.729701][ T7171] debugfs: 'hsr0' already exists in 'hsr' [ 378.729724][ T7171] Cannot create hsr debugfs directory [ 380.070506][ T69] bridge_slave_1: left allmulticast mode [ 380.070536][ T69] bridge_slave_1: left promiscuous mode [ 380.070801][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.182438][ T69] bridge_slave_0: left allmulticast mode [ 380.182470][ T69] bridge_slave_0: left promiscuous mode [ 380.182751][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.280157][ T69] bridge_slave_1: left allmulticast mode [ 380.280189][ T69] bridge_slave_1: left promiscuous mode [ 380.280480][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.415765][ T69] bridge_slave_0: left allmulticast mode [ 380.415797][ T69] bridge_slave_0: left promiscuous mode [ 380.416090][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.453621][ T5807] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 380.465228][ T5807] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 380.466651][ T5807] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 380.469264][ T5807] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 380.470309][ T5807] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 380.562924][ T69] bridge_slave_1: left allmulticast mode [ 380.562953][ T69] bridge_slave_1: left promiscuous mode [ 380.563192][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.599939][ T69] bridge_slave_0: left allmulticast mode [ 380.599969][ T69] bridge_slave_0: left promiscuous mode [ 380.600227][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.882665][ T5872] IPVS: starting estimator thread 0... [ 380.953478][ T69] bridge_slave_1: left allmulticast mode [ 380.953510][ T69] bridge_slave_1: left promiscuous mode [ 380.953768][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.002347][ T7486] IPVS: using max 7 ests per chain, 16800 per kthread [ 382.139165][ T69] bridge_slave_0: left allmulticast mode [ 382.139197][ T69] bridge_slave_0: left promiscuous mode [ 382.139465][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.100826][ T61] Bluetooth: hci0: command tx timeout [ 384.316611][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.316688][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.685511][ T61] Bluetooth: hci2: ACL packet for unknown connection handle 403 [ 385.038458][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 385.138367][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 385.148025][ T61] Bluetooth: hci0: command tx timeout [ 385.941237][ T69] bond0 (unregistering): Released all slaves [ 387.229653][ T61] Bluetooth: hci0: command tx timeout [ 387.320680][ T7522] orangefs_mount: mount request failed with -4 [ 388.227696][ T7532] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 389.839772][ T61] Bluetooth: hci0: command tx timeout [ 389.965029][ T61] Bluetooth: hci1: ACL packet for unknown connection handle 403 [ 392.078531][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 392.118687][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 392.161080][ T69] bond0 (unregistering): Released all slaves [ 392.348233][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 393.231127][ T69] bond0 (unregistering): Released all slaves [ 393.381847][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 393.458565][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 393.500456][ T69] bond0 (unregistering): Released all slaves [ 393.528149][ T7525] batadv_slave_1: entered promiscuous mode [ 393.529250][ T7523] batadv_slave_1: left promiscuous mode [ 395.863106][ T5807] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 395.882636][ T5807] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 395.885820][ T5807] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 395.899523][ T5807] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 395.902472][ T5807] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 396.824665][ T7580] befs: (nullb0): invalid magic header [ 398.453636][ T61] Bluetooth: hci3: command tx timeout [ 398.808622][ T5807] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 398.838626][ T5807] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 398.843615][ T5807] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 398.845630][ T5807] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 398.846623][ T5807] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 400.076431][ T7480] chnl_net:caif_netlink_parms(): no params data found [ 400.445055][ T7621] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 400.563874][ T61] Bluetooth: hci3: command tx timeout [ 400.987637][ T61] Bluetooth: hci4: command tx timeout [ 402.594202][ T61] Bluetooth: hci3: command tx timeout [ 403.068029][ T61] Bluetooth: hci4: command tx timeout [ 404.104590][ T7480] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.104813][ T7480] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.105007][ T7480] bridge_slave_0: entered allmulticast mode [ 404.139193][ T7480] bridge_slave_0: entered promiscuous mode [ 404.225131][ T7480] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.225268][ T7480] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.225516][ T7480] bridge_slave_1: entered allmulticast mode [ 404.229836][ T7480] bridge_slave_1: entered promiscuous mode [ 404.618127][ T69] hsr_slave_0: left promiscuous mode [ 404.637696][ T69] hsr_slave_1: left promiscuous mode [ 404.638837][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 404.638864][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 404.679676][ T61] Bluetooth: hci3: command tx timeout [ 404.729974][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 404.730003][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 404.753352][ T7651] overlayfs: failed to clone upperpath [ 404.764250][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 404.799682][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 405.088398][ T69] veth1_macvtap: left promiscuous mode [ 405.088516][ T69] veth0_macvtap: left promiscuous mode [ 405.088786][ T69] veth1_vlan: left promiscuous mode [ 405.088984][ T69] veth0_vlan: left promiscuous mode [ 405.148028][ T61] Bluetooth: hci4: command tx timeout [ 407.227611][ T61] Bluetooth: hci4: command tx timeout [ 410.545344][ T7683] No control pipe specified [ 413.048261][ T5913] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 414.490717][ T5913] usb 2-1: unable to get BOS descriptor or descriptor too short [ 414.493489][ T5913] usb 2-1: not running at top speed; connect to a high speed hub [ 414.495005][ T5913] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 414.495030][ T5913] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 414.543798][ T5913] usb 2-1: string descriptor 0 read error: -22 [ 414.544003][ T5913] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 414.544030][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.595630][ T5913] usb 2-1: 0:2 : does not exist [ 415.789651][ T69] team0 (unregistering): Port device team_slave_1 removed [ 416.046646][ T5913] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 416.087073][ T5913] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 416.118619][ T69] team0 (unregistering): Port device team_slave_0 removed [ 416.151162][ T5913] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 416.316712][ T5913] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 416.380835][ T5913] usb 2-1: USB disconnect, device number 4 [ 420.578199][ T69] team0 (unregistering): Port device team_slave_1 removed [ 420.699560][ T69] team0 (unregistering): Port device team_slave_0 removed [ 421.092812][ T7564] chnl_net:caif_netlink_parms(): no params data found [ 423.255866][ T7755] befs: (nullb0): invalid magic header [ 423.843725][ T7480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.154376][ T7480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.412717][ T7762] ptrace attach of "./syz-executor exec"[5802] was attempted by "./syz-executor exec"[7762] [ 424.485487][ T7480] team0: Port device team_slave_0 added [ 424.703795][ T7480] team0: Port device team_slave_1 added [ 425.556017][ T7785] befs: (nullb0): invalid magic header [ 426.869312][ T7564] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.869459][ T7564] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.869732][ T7564] bridge_slave_0: entered allmulticast mode [ 426.872725][ T7564] bridge_slave_0: entered promiscuous mode [ 427.046116][ T7564] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.046257][ T7564] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.046513][ T7564] bridge_slave_1: entered allmulticast mode [ 427.055886][ T7564] bridge_slave_1: entered promiscuous mode [ 427.066106][ T7480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 427.066126][ T7480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 427.066157][ T7480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 427.341057][ T7480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 427.341070][ T7480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 427.341091][ T7480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 427.786061][ T7564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.876523][ T7799] befs: (nullb0): invalid magic header [ 428.685040][ T7564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 430.421919][ T7564] team0: Port device team_slave_0 added [ 430.422922][ T7597] chnl_net:caif_netlink_parms(): no params data found [ 430.458989][ T7480] hsr_slave_0: entered promiscuous mode [ 430.471563][ T7480] hsr_slave_1: entered promiscuous mode [ 430.472687][ T7480] debugfs: 'hsr0' already exists in 'hsr' [ 430.472712][ T7480] Cannot create hsr debugfs directory [ 430.504061][ T7564] team0: Port device team_slave_1 added [ 430.984593][ T7819] overlayfs: failed to clone upperpath [ 431.654419][ T7564] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 431.654432][ T7564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 431.654451][ T7564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 431.912569][ T7564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 431.912587][ T7564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 431.912615][ T7564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 432.103267][ T7829] ptrace attach of "./syz-executor exec"[5799] was attempted by "./syz-executor exec"[7829] [ 432.251176][ T7831] befs: (nbd1): No write support. Marking filesystem read-only [ 432.254405][ T7831] befs: (nbd1): unable to read superblock [ 433.724880][ T7597] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.724997][ T7597] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.725184][ T7597] bridge_slave_0: entered allmulticast mode [ 433.727810][ T7597] bridge_slave_0: entered promiscuous mode [ 433.976367][ T7597] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.976507][ T7597] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.976733][ T7597] bridge_slave_1: entered allmulticast mode [ 433.992068][ T7597] bridge_slave_1: entered promiscuous mode [ 434.535840][ T7564] hsr_slave_0: entered promiscuous mode [ 434.539009][ T7564] hsr_slave_1: entered promiscuous mode [ 434.541413][ T7564] debugfs: 'hsr0' already exists in 'hsr' [ 434.541443][ T7564] Cannot create hsr debugfs directory [ 437.138319][ T7597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.167706][ T7597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.039687][ T61] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 439.144267][ T7597] team0: Port device team_slave_0 added [ 439.210536][ T7597] team0: Port device team_slave_1 added [ 441.337081][ T7597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 441.337095][ T7597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 441.337114][ T7597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 441.396545][ T7597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 441.396558][ T7597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 441.396577][ T7597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.211750][ T5807] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 442.220464][ T5807] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 442.221583][ T5807] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 442.222816][ T5807] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 442.223627][ T5807] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 442.913230][ T7597] hsr_slave_0: entered promiscuous mode [ 442.914825][ T7597] hsr_slave_1: entered promiscuous mode [ 442.915895][ T7597] debugfs: 'hsr0' already exists in 'hsr' [ 442.915920][ T7597] Cannot create hsr debugfs directory [ 444.268432][ T61] Bluetooth: hci5: command tx timeout [ 445.394035][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.394112][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.365079][ T61] Bluetooth: hci5: command tx timeout [ 448.427621][ T61] Bluetooth: hci5: command tx timeout [ 449.082609][ T7965] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 450.673714][ T61] Bluetooth: hci5: command tx timeout [ 452.926464][ T7995] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 454.913608][ T7914] chnl_net:caif_netlink_parms(): no params data found [ 454.963514][ T7597] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 458.506575][ T5807] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 458.522746][ T5807] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 458.537726][ T5807] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 458.590397][ T5807] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 458.594172][ T5807] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 459.928846][ T61] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 459.932180][ T61] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 459.933855][ T61] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 459.935462][ T61] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 459.949584][ T61] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 460.026531][ T8041] l2tp_ppp: sess 2/0: no socket in recv [ 460.188858][ T69] bridge_slave_1: left allmulticast mode [ 460.188889][ T69] bridge_slave_1: left promiscuous mode [ 460.189521][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.284183][ T69] bridge_slave_0: left allmulticast mode [ 460.284216][ T69] bridge_slave_0: left promiscuous mode [ 460.284491][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.384819][ T69] bridge_slave_1: left allmulticast mode [ 460.384852][ T69] bridge_slave_1: left promiscuous mode [ 460.385100][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.520047][ T69] bridge_slave_0: left allmulticast mode [ 460.520077][ T69] bridge_slave_0: left promiscuous mode [ 460.520337][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.613724][ T69] bridge_slave_1: left allmulticast mode [ 460.613756][ T69] bridge_slave_1: left promiscuous mode [ 460.615364][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.697509][ T61] Bluetooth: hci0: command tx timeout [ 460.940516][ T69] bridge_slave_0: left allmulticast mode [ 460.940540][ T69] bridge_slave_0: left promiscuous mode [ 460.945864][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.269948][ T69] bridge_slave_1: left allmulticast mode [ 461.269972][ T69] bridge_slave_1: left promiscuous mode [ 461.270154][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.329595][ T69] bridge_slave_0: left allmulticast mode [ 461.329626][ T69] bridge_slave_0: left promiscuous mode [ 461.329896][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.027679][ T61] Bluetooth: hci3: command tx timeout [ 462.178375][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 462.800677][ T61] Bluetooth: hci0: command tx timeout [ 463.198417][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 463.232771][ T8067] l2tp_ppp: sess 2/0: no socket in recv [ 463.300725][ T69] bond0 (unregistering): Released all slaves [ 464.376476][ T5807] Bluetooth: hci3: command tx timeout [ 465.065000][ T5807] Bluetooth: hci0: command tx timeout [ 465.279130][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 465.413602][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 466.427728][ T5807] Bluetooth: hci3: command tx timeout [ 466.473907][ T69] bond0 (unregistering): Released all slaves [ 468.492573][ T5807] Bluetooth: hci0: command tx timeout [ 468.507566][ T5807] Bluetooth: hci3: command tx timeout [ 468.844468][ T5807] Bluetooth: hci1: ACL packet for unknown connection handle 403 [ 469.170713][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 469.314412][ T8103] l2tp_ppp: sess 2/0: no socket in recv [ 469.379665][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 469.568935][ T69] bond0 (unregistering): Released all slaves [ 471.573354][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 471.698268][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 472.018477][ T69] bond0 (unregistering): Released all slaves [ 472.973545][ T7914] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.973679][ T7914] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.973907][ T7914] bridge_slave_0: entered allmulticast mode [ 472.976680][ T7914] bridge_slave_0: entered promiscuous mode [ 473.050683][ T7914] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.050839][ T7914] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.051085][ T7914] bridge_slave_1: entered allmulticast mode [ 473.117113][ T7914] bridge_slave_1: entered promiscuous mode [ 473.686072][ T5807] Bluetooth: hci1: ACL packet for unknown connection handle 403 [ 474.613976][ T7914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 474.760830][ T7914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.135038][ T7914] team0: Port device team_slave_0 added [ 476.417650][ T69] hsr_slave_0: left promiscuous mode [ 477.321898][ T69] hsr_slave_1: left promiscuous mode [ 477.323132][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 477.434968][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 477.639625][ T69] hsr_slave_0: left promiscuous mode [ 477.687773][ T69] hsr_slave_1: left promiscuous mode [ 477.688853][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 478.055811][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 478.929098][ T69] hsr_slave_0: left promiscuous mode [ 478.968099][ T69] hsr_slave_1: left promiscuous mode [ 478.969102][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 479.022784][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 479.187625][ T69] hsr_slave_0: left promiscuous mode [ 479.277685][ T5807] Bluetooth: hci2: ACL packet for unknown connection handle 403 [ 479.437141][ T69] hsr_slave_1: left promiscuous mode [ 479.438130][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 479.468586][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 481.276022][ T5807] Bluetooth: hci2: ACL packet for unknown connection handle 403 [ 481.681377][ T8179] ptrace attach of "./syz-executor exec"[5802] was attempted by "./syz-executor exec"[8179] [ 481.895539][ T8182] ptrace attach of "./syz-executor exec"[5802] was attempted by "./syz-executor exec"[8182] [ 483.768633][ T69] team0 (unregistering): Port device team_slave_1 removed [ 483.972763][ T69] team0 (unregistering): Port device team_slave_0 removed [ 484.098914][ T5807] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 485.346321][ T8211] ptrace attach of "./syz-executor exec"[5799] was attempted by "./syz-executor exec"[8211] [ 485.758465][ T8214] befs: (nbd1): No write support. Marking filesystem read-only [ 485.758666][ T8214] befs: (nbd1): unable to read superblock [ 488.892956][ T31] IPVS: starting estimator thread 0... [ 488.999858][ T69] team0 (unregistering): Port device team_slave_1 removed [ 490.938569][ T8236] IPVS: using max 7 ests per chain, 16800 per kthread [ 491.826273][ T69] team0 (unregistering): Port device team_slave_0 removed [ 494.355987][ T5807] Bluetooth: hci1: ACL packet for unknown connection handle 403 [ 497.504901][ T8279] ptrace attach of "./syz-executor exec"[5802] was attempted by "./syz-executor exec"[8279] [ 498.742289][ T5807] Bluetooth: hci2: ACL packet for unknown connection handle 403 [ 498.868180][ T69] team0 (unregistering): Port device team_slave_1 removed [ 499.029998][ T69] team0 (unregistering): Port device team_slave_0 removed [ 500.948560][ T69] team0 (unregistering): Port device team_slave_1 removed [ 501.128222][ T69] team0 (unregistering): Port device team_slave_0 removed [ 502.394432][ T7914] team0: Port device team_slave_1 added [ 504.093791][ T5807] Bluetooth: hci2: ACL packet for unknown connection handle 403 [ 504.204712][ T61] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 504.208076][ T61] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 504.209211][ T61] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 504.210779][ T61] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 504.259345][ T61] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 505.847566][ T5885] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 506.019469][ T5885] usb 2-1: Using ep0 maxpacket: 16 [ 506.024377][ T5885] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 506.024410][ T5885] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 506.024450][ T5885] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 506.024474][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.095980][ T5885] usb 2-1: config 0 descriptor?? [ 506.347672][ T5807] Bluetooth: hci4: command tx timeout [ 506.414047][ T8023] chnl_net:caif_netlink_parms(): no params data found [ 506.870985][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.871069][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.903919][ T8037] chnl_net:caif_netlink_parms(): no params data found [ 508.427557][ T5807] Bluetooth: hci4: command tx timeout [ 508.573321][ T8315] usb 2-1: USB disconnect, device number 5 [ 508.669200][ T8023] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.673097][ T8023] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.673367][ T8023] bridge_slave_0: entered allmulticast mode [ 508.676315][ T8023] bridge_slave_0: entered promiscuous mode [ 508.746651][ T8023] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.747866][ T8023] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.748095][ T8023] bridge_slave_1: entered allmulticast mode [ 508.780188][ T8023] bridge_slave_1: entered promiscuous mode [ 509.604665][ T5807] Bluetooth: hci2: ACL packet for unknown connection handle 403 [ 509.722809][ T8386] l2tp_ppp: sess 2/0: no socket in recv [ 509.880171][ T8037] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.880313][ T8037] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.880549][ T8037] bridge_slave_0: entered allmulticast mode [ 509.883449][ T8037] bridge_slave_0: entered promiscuous mode [ 509.901687][ T8023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 509.902151][ T8037] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.902348][ T8037] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.902566][ T8037] bridge_slave_1: entered allmulticast mode [ 509.907131][ T8037] bridge_slave_1: entered promiscuous mode [ 509.916767][ T8023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 510.402803][ T8037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 510.434838][ T8023] team0: Port device team_slave_0 added [ 510.446278][ T8037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 510.466613][ T8023] team0: Port device team_slave_1 added [ 510.507705][ T5807] Bluetooth: hci4: command tx timeout [ 510.969357][ T8037] team0: Port device team_slave_0 added [ 511.200593][ T8023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 511.200612][ T8023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 511.200641][ T8023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 511.211024][ T8037] team0: Port device team_slave_1 added [ 511.215074][ T8023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 511.215093][ T8023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 511.215126][ T8023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 511.481663][ T8037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 511.481677][ T8037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 511.481696][ T8037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 511.482480][ T8321] chnl_net:caif_netlink_parms(): no params data found [ 511.493874][ T8037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 511.493894][ T8037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 511.493926][ T8037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 511.816001][ T8023] hsr_slave_0: entered promiscuous mode [ 511.817056][ T8023] hsr_slave_1: entered promiscuous mode [ 511.819039][ T8023] debugfs: 'hsr0' already exists in 'hsr' [ 511.819071][ T8023] Cannot create hsr debugfs directory [ 512.265696][ T8037] hsr_slave_0: entered promiscuous mode [ 512.266767][ T8037] hsr_slave_1: entered promiscuous mode [ 512.269625][ T8037] debugfs: 'hsr0' already exists in 'hsr' [ 512.269655][ T8037] Cannot create hsr debugfs directory [ 512.540756][ T8321] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.540973][ T8321] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.541189][ T8321] bridge_slave_0: entered allmulticast mode [ 512.544035][ T8321] bridge_slave_0: entered promiscuous mode [ 512.587701][ T5807] Bluetooth: hci4: command tx timeout [ 512.649712][ T8321] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.649839][ T8321] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.650019][ T8321] bridge_slave_1: entered allmulticast mode [ 512.651936][ T8321] bridge_slave_1: entered promiscuous mode [ 512.928298][ T8321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 512.958373][ T8321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 513.560089][ T8321] team0: Port device team_slave_0 added [ 513.680841][ T8321] team0: Port device team_slave_1 added [ 514.028382][ T8321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 514.028401][ T8321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 514.028428][ T8321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 514.211684][ T8321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 514.211698][ T8321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 514.211718][ T8321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 514.835582][ T8321] hsr_slave_0: entered promiscuous mode [ 514.836641][ T8321] hsr_slave_1: entered promiscuous mode [ 514.837325][ T8321] debugfs: 'hsr0' already exists in 'hsr' [ 514.837347][ T8321] Cannot create hsr debugfs directory [ 515.632573][ T69] bridge_slave_1: left allmulticast mode [ 515.632603][ T69] bridge_slave_1: left promiscuous mode [ 515.632866][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.679640][ T69] bridge_slave_0: left allmulticast mode [ 515.679675][ T69] bridge_slave_0: left promiscuous mode [ 515.679944][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.771462][ T69] bridge_slave_1: left allmulticast mode [ 515.771487][ T69] bridge_slave_1: left promiscuous mode [ 515.771670][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.848704][ T69] bridge_slave_0: left allmulticast mode [ 515.848728][ T69] bridge_slave_0: left promiscuous mode [ 515.848923][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.921446][ T69] bridge_slave_1: left allmulticast mode [ 515.921470][ T69] bridge_slave_1: left promiscuous mode [ 515.921646][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.998830][ T69] bridge_slave_0: left allmulticast mode [ 515.998854][ T69] bridge_slave_0: left promiscuous mode [ 515.999050][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.338427][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 516.430026][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 516.432262][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 516.433297][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 516.434652][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 516.435921][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 516.453980][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 516.529873][ T69] bond0 (unregistering): Released all slaves [ 516.738408][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 516.820916][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 516.879959][ T69] bond0 (unregistering): Released all slaves [ 517.129682][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 517.228335][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 517.321181][ T69] bond0 (unregistering): Released all slaves [ 517.625457][ T5807] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 517.649143][ T5807] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 517.650537][ T5807] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 517.654154][ T5807] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 517.655299][ T5807] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 518.237682][ T69] hsr_slave_0: left promiscuous mode [ 518.282707][ T69] hsr_slave_1: left promiscuous mode [ 518.283728][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 518.329286][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 518.507789][ T61] Bluetooth: hci5: command tx timeout [ 518.537630][ T69] hsr_slave_0: left promiscuous mode [ 518.577602][ T69] hsr_slave_1: left promiscuous mode [ 518.579019][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 518.628409][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 518.898500][ T69] team0 (unregistering): Port device team_slave_1 removed [ 519.018370][ T69] team0 (unregistering): Port device team_slave_0 removed [ 519.712211][ T61] Bluetooth: hci6: command tx timeout [ 519.879090][ T69] team0 (unregistering): Port device team_slave_1 removed [ 520.018330][ T69] team0 (unregistering): Port device team_slave_0 removed [ 520.587737][ T61] Bluetooth: hci5: command tx timeout [ 521.148333][ T69] team0 (unregistering): Port device team_slave_1 removed [ 521.278615][ T69] team0 (unregistering): Port device team_slave_0 removed [ 521.797552][ T61] Bluetooth: hci6: command tx timeout [ 522.329123][ T8442] chnl_net:caif_netlink_parms(): no params data found [ 522.667641][ T61] Bluetooth: hci5: command tx timeout [ 523.599687][ T8445] chnl_net:caif_netlink_parms(): no params data found [ 523.867623][ T61] Bluetooth: hci6: command tx timeout [ 524.118333][ T8442] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.118487][ T8442] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.118687][ T8442] bridge_slave_0: entered allmulticast mode [ 524.120600][ T8442] bridge_slave_0: entered promiscuous mode [ 524.155640][ T8442] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.155758][ T8442] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.155959][ T8442] bridge_slave_1: entered allmulticast mode [ 524.159071][ T8442] bridge_slave_1: entered promiscuous mode [ 524.712104][ T8442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 524.712792][ T8445] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.713033][ T8445] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.713233][ T8445] bridge_slave_0: entered allmulticast mode [ 524.715172][ T8445] bridge_slave_0: entered promiscuous mode [ 524.725552][ T8442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 524.726403][ T8445] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.726550][ T8445] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.726769][ T8445] bridge_slave_1: entered allmulticast mode [ 524.731341][ T8445] bridge_slave_1: entered promiscuous mode [ 524.747586][ T61] Bluetooth: hci5: command tx timeout [ 525.073684][ T8442] team0: Port device team_slave_0 added [ 525.116491][ T8445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 525.121391][ T8442] team0: Port device team_slave_1 added [ 525.146612][ T8445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 525.451433][ T8442] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 525.451452][ T8442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 525.451480][ T8442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 525.461290][ T8445] team0: Port device team_slave_0 added [ 525.464139][ T8442] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 525.464156][ T8442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 525.464187][ T8442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 525.515414][ T8445] team0: Port device team_slave_1 added [ 525.733590][ T8445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 525.733608][ T8445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 525.733637][ T8445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 525.829800][ T8445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 525.829814][ T8445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 525.829833][ T8445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 525.947568][ T61] Bluetooth: hci6: command tx timeout [ 526.123032][ T8442] hsr_slave_0: entered promiscuous mode [ 526.124058][ T8442] hsr_slave_1: entered promiscuous mode [ 526.124781][ T8442] debugfs: 'hsr0' already exists in 'hsr' [ 526.124799][ T8442] Cannot create hsr debugfs directory [ 526.279132][ T8321] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 526.479265][ T8321] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 526.609082][ T8445] hsr_slave_0: entered promiscuous mode [ 526.610164][ T8445] hsr_slave_1: entered promiscuous mode [ 526.610864][ T8445] debugfs: 'hsr0' already exists in 'hsr' [ 526.610884][ T8445] Cannot create hsr debugfs directory [ 526.678804][ T8321] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 526.732435][ T8321] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 527.915021][ T8321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 528.029413][ T69] bridge_slave_1: left allmulticast mode [ 528.029442][ T69] bridge_slave_1: left promiscuous mode [ 528.029674][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.089527][ T69] bridge_slave_0: left allmulticast mode [ 528.089550][ T69] bridge_slave_0: left promiscuous mode [ 528.089739][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.150825][ T69] bridge_slave_1: left allmulticast mode [ 528.150848][ T69] bridge_slave_1: left promiscuous mode [ 528.151023][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.210114][ T69] bridge_slave_0: left allmulticast mode [ 528.210138][ T69] bridge_slave_0: left promiscuous mode [ 528.210337][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.529481][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 528.608867][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 528.671071][ T69] bond0 (unregistering): Released all slaves [ 528.881057][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 528.979004][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 529.070284][ T69] bond0 (unregistering): Released all slaves [ 529.251428][ T8321] 8021q: adding VLAN 0 to HW filter on device team0 [ 529.271587][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.271811][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 529.387268][ T3504] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.389465][ T3504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 529.697801][ T69] hsr_slave_0: left promiscuous mode [ 529.748038][ T69] hsr_slave_1: left promiscuous mode [ 529.749786][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 529.779234][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 529.957642][ T69] hsr_slave_0: left promiscuous mode [ 529.999249][ T69] hsr_slave_1: left promiscuous mode [ 530.000181][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 530.049057][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 530.659272][ T69] team0 (unregistering): Port device team_slave_1 removed [ 530.788444][ T69] team0 (unregistering): Port device team_slave_0 removed [ 531.799766][ T69] team0 (unregistering): Port device team_slave_1 removed [ 531.930128][ T69] team0 (unregistering): Port device team_slave_0 removed [ 532.800842][ T8445] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 532.863100][ T8445] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 532.906683][ T8445] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 532.986210][ T8445] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 533.126180][ T8321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 533.145158][ T8442] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 533.202939][ T8442] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 533.238262][ T8442] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 533.291975][ T8442] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 533.736811][ T8321] veth0_vlan: entered promiscuous mode [ 533.786173][ T8445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 533.806974][ T8321] veth1_vlan: entered promiscuous mode [ 533.860606][ T8445] 8021q: adding VLAN 0 to HW filter on device team0 [ 533.866821][ T8442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 533.889940][ T6208] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.890077][ T6208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 533.921711][ T6208] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.921833][ T6208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 533.963870][ T8321] veth0_macvtap: entered promiscuous mode [ 533.973698][ T8442] 8021q: adding VLAN 0 to HW filter on device team0 [ 533.992363][ T8321] veth1_macvtap: entered promiscuous mode [ 534.012798][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.012952][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 534.046433][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.046606][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 534.092467][ T8321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 534.119508][ T8321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 534.160699][ T6208] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.163210][ T6208] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.165242][ T6208] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.166727][ T6208] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.571434][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 534.571472][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.631353][ T8445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 534.731897][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 534.731921][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.846904][ T8442] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 535.365083][ T8526] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 537.229609][ T8445] veth0_vlan: entered promiscuous mode [ 537.331851][ T8445] veth1_vlan: entered promiscuous mode [ 537.435157][ T8442] veth0_vlan: entered promiscuous mode [ 537.512086][ T8442] veth1_vlan: entered promiscuous mode [ 537.615935][ T8445] veth0_macvtap: entered promiscuous mode [ 537.720206][ T8445] veth1_macvtap: entered promiscuous mode [ 537.902219][ T8442] veth0_macvtap: entered promiscuous mode [ 537.927032][ T8442] veth1_macvtap: entered promiscuous mode [ 537.941649][ T8445] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 537.987153][ T8445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 538.023124][ T37] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.024459][ T37] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.050011][ T8442] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 538.051168][ T37] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.069816][ T37] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.098815][ T8442] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 538.154289][ T69] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.158399][ T69] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.170683][ T69] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.173670][ T69] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.358397][ T5952] IPVS: starting estimator thread 0... [ 541.613165][ T8558] IPVS: using max 6 ests per chain, 14400 per kthread [ 541.773273][ C0] Dead loop on virtual device wlan0, fix it urgently! [ 542.491293][ T8567] ptrace attach of "./syz-executor exec"[8321] was attempted by "./syz-executor exec"[8567] [ 542.807314][ T6176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 542.807339][ T6176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.689979][ T8571] befs: (nbd5): No write support. Marking filesystem read-only [ 543.715279][ T8571] befs: (nbd5): unable to read superblock [ 550.939311][ T61] Bluetooth: hci2: ACL packet for unknown connection handle 403 [ 550.969749][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 550.969772][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.193821][ T3604] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.193844][ T3604] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.284537][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.284560][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 554.047272][ T5952] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 555.917751][ T5952] usb 6-1: Using ep0 maxpacket: 8 [ 555.925347][ T5952] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 555.925380][ T5952] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.925402][ T5952] usb 6-1: Product: syz [ 555.925417][ T5952] usb 6-1: Manufacturer: syz [ 555.925432][ T5952] usb 6-1: SerialNumber: syz [ 556.010647][ T5952] usb 6-1: config 0 descriptor?? [ 556.030304][ T5952] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 556.030796][ T61] Bluetooth: hci5: ACL packet for unknown connection handle 403 [ 556.338586][ T5952] gspca_sonixj: reg_w1 err -71 [ 556.338708][ T5952] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 556.382233][ T5952] usb 6-1: USB disconnect, device number 2 [ 557.266832][ T8626] netlink: 12 bytes leftover after parsing attributes in process `syz.5.644'. [ 557.780230][ T8633] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 568.638228][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.638306][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.143071][ T61] Bluetooth: hci6: ACL packet for unknown connection handle 403 [ 571.973192][ T8713] befs: (nullb0): invalid magic header [ 575.927577][ T5913] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 576.087704][ T5913] usb 7-1: Using ep0 maxpacket: 32 [ 576.090405][ T5913] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 576.090479][ T5913] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 576.090504][ T5913] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 576.090533][ T5913] usb 7-1: config 0 interface 0 has no altsetting 0 [ 576.090568][ T5913] usb 7-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 576.090592][ T5913] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.639500][ T5913] usb 7-1: config 0 descriptor?? [ 578.503383][ T5913] hid-thrustmaster 0003:044F:B65D.0002: unknown main item tag 0x0 [ 578.503427][ T5913] hid-thrustmaster 0003:044F:B65D.0002: unknown main item tag 0x0 [ 578.503457][ T5913] hid-thrustmaster 0003:044F:B65D.0002: unknown main item tag 0x0 [ 578.503486][ T5913] hid-thrustmaster 0003:044F:B65D.0002: unknown main item tag 0x0 [ 578.503515][ T5913] hid-thrustmaster 0003:044F:B65D.0002: unknown main item tag 0x0 [ 578.607182][ T5913] hid-thrustmaster 0003:044F:B65D.0002: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.6-1/input0 [ 578.609604][ T5913] hid-thrustmaster 0003:044F:B65D.0002: Wrong number of endpoints? [ 578.673811][ C0] hid-thrustmaster 0003:044F:B65D.0002: URB to get model id failed with error -71 [ 578.727725][ T5913] usb 7-1: USB disconnect, device number 2 [ 578.839222][ T8766] befs: (nullb0): invalid magic header [ 579.053350][ T61] Bluetooth: hci6: ACL packet for unknown connection handle 403 [ 580.230686][ T8768] fido_id[8768]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 588.110862][ T8818] befs: (nullb0): invalid magic header [ 588.171285][ T61] Bluetooth: hci2: ACL packet for unknown connection handle 403 [ 595.557680][ T8856] netlink: 4 bytes leftover after parsing attributes in process `syz.3.696'. [ 595.557696][ T8856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.696'. [ 595.847553][ T8861] overlayfs: failed to resolve './file1': -2 [ 596.461674][ T5807] Bluetooth: hci4: ACL packet for unknown connection handle 403 [ 596.566529][ T5807] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 596.598665][ T5807] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 596.603880][ T5807] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 596.609572][ T5807] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 596.615465][ T5807] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 598.783345][ T8892] overlayfs: failed to clone upperpath [ 599.637614][ T61] Bluetooth: hci0: command tx timeout [ 600.776169][ T8905] netlink: 12 bytes leftover after parsing attributes in process `syz.5.705'. [ 601.905244][ T61] Bluetooth: hci0: command tx timeout [ 602.176291][ T3557] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.418121][ T8923] netlink: 4 bytes leftover after parsing attributes in process `syz.5.708'. [ 602.418184][ T8923] netlink: 8 bytes leftover after parsing attributes in process `syz.5.708'. [ 602.455848][ T61] Bluetooth: hci5: ACL packet for unknown connection handle 403 [ 603.954040][ T61] Bluetooth: hci0: command tx timeout [ 606.286710][ T8947] overlayfs: failed to resolve './file1': -2 [ 606.677915][ T61] Bluetooth: hci0: command tx timeout [ 606.888012][ T3557] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.001425][ T8864] chnl_net:caif_netlink_parms(): no params data found [ 607.474236][ T3557] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.697817][ T8960] netlink: 12 bytes leftover after parsing attributes in process `syz.5.715'. [ 609.600006][ T8966] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 611.132971][ T3557] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.754234][ T61] Bluetooth: hci4: ACL packet for unknown connection handle 403 [ 614.884435][ T8864] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.884577][ T8864] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.884817][ T8864] bridge_slave_0: entered allmulticast mode [ 614.891388][ T8864] bridge_slave_0: entered promiscuous mode [ 614.895542][ T8864] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.895803][ T8864] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.896031][ T8864] bridge_slave_1: entered allmulticast mode [ 615.022532][ T8864] bridge_slave_1: entered promiscuous mode [ 615.989000][ T9003] befs: (nullb0): invalid magic header [ 617.570849][ T8864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 617.610753][ T8864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 618.256675][ T8864] team0: Port device team_slave_0 added [ 618.290542][ T8864] team0: Port device team_slave_1 added [ 618.939716][ T3557] bridge_slave_1: left allmulticast mode [ 618.939738][ T3557] bridge_slave_1: left promiscuous mode [ 618.939924][ T3557] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.128920][ T3557] bridge_slave_0: left allmulticast mode [ 619.128952][ T3557] bridge_slave_0: left promiscuous mode [ 619.138826][ T3557] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.077631][ T5913] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 621.439803][ T5913] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 621.439865][ T5913] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 621.439883][ T5913] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 621.442654][ T5913] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 621.442676][ T5913] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.442690][ T5913] usb 7-1: Product: syz [ 621.442700][ T5913] usb 7-1: Manufacturer: syz [ 621.442711][ T5913] usb 7-1: SerialNumber: syz [ 621.574996][ T5913] usb 7-1: config 0 descriptor?? [ 621.639295][ T5913] usb 7-1: ucan: probing device on interface #0 [ 621.639328][ T5913] usb 7-1: ucan: invalid EP count (0) [ 621.639345][ T5913] usb 7-1: ucan: probe failed; try to update the device firmware [ 622.317145][ T9051] netlink: 12 bytes leftover after parsing attributes in process `syz.3.740'. [ 622.317168][ T9051] netlink: 8 bytes leftover after parsing attributes in process `syz.3.740'. [ 623.557321][ T9060] netlink: 12 bytes leftover after parsing attributes in process `syz.3.743'. [ 624.077998][ T5913] usb 7-1: USB disconnect, device number 3 [ 624.387853][ T9065] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 626.268677][ T3557] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 627.057527][ T61] Bluetooth: hci4: command 0x0406 tx timeout [ 627.140899][ T3557] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 627.196142][ T3557] bond0 (unregistering): Released all slaves [ 627.502793][ T8864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 627.502812][ T8864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 627.502843][ T8864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 627.687633][ T8864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 627.687652][ T8864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 627.687701][ T8864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 629.040808][ T8864] hsr_slave_0: entered promiscuous mode [ 629.042246][ T8864] hsr_slave_1: entered promiscuous mode [ 629.043228][ T8864] debugfs: 'hsr0' already exists in 'hsr' [ 629.043254][ T8864] Cannot create hsr debugfs directory [ 629.316658][ T9097] netlink: 12 bytes leftover after parsing attributes in process `syz.3.753'. [ 629.316683][ T9097] netlink: 8 bytes leftover after parsing attributes in process `syz.3.753'. [ 629.772838][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.772917][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.443915][ T9108] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 631.013491][ T9111] overlayfs: failed to clone upperpath [ 632.267645][ T5807] Bluetooth: hci4: ACL packet for unknown connection handle 403 [ 634.261288][ T3557] hsr_slave_0: left promiscuous mode [ 634.368782][ T3557] hsr_slave_1: left promiscuous mode [ 634.369494][ T3557] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 634.369512][ T3557] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 634.517601][ T3557] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 634.517635][ T3557] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 634.812758][ T3557] veth1_macvtap: left promiscuous mode [ 634.812875][ T3557] veth0_macvtap: left promiscuous mode [ 634.813150][ T3557] veth1_vlan: left promiscuous mode [ 634.813350][ T3557] veth0_vlan: left promiscuous mode [ 636.258436][ T9130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.763'. [ 636.628887][ T9134] befs: (nullb0): invalid magic header [ 638.388911][ T9148] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 639.765557][ T9157] No control pipe specified [ 640.795869][ T9158] ptrace attach of "./syz-executor exec"[5799] was attempted by "./syz-executor exec"[9158] [ 640.875910][ T9152] befs: (nbd1): No write support. Marking filesystem read-only [ 640.877830][ T9152] befs: (nbd1): unable to read superblock [ 641.245676][ T9161] ptrace attach of "./syz-executor exec"[5802] was attempted by "./syz-executor exec"[9161] [ 641.367077][ T61] Bluetooth: hci5: ACL packet for unknown connection handle 403 [ 643.104549][ T61] Bluetooth: hci5: command 0x0406 tx timeout [ 643.622974][ T9173] netlink: 8 bytes leftover after parsing attributes in process `syz.3.774'. [ 645.503286][ T9190] befs: (nullb0): invalid magic header [ 648.498349][ T9205] befs: (nullb0): invalid magic header [ 650.984929][ T9217] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 651.736281][ T9220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.788'. [ 653.890275][ T9234] befs: (nullb0): invalid magic header [ 655.084829][ T9239] No control pipe specified [ 656.189303][ T9242] ptrace attach of "./syz-executor exec"[5799] was attempted by "./syz-executor exec"[9242] [ 656.245995][ T9241] befs: (nbd1): No write support. Marking filesystem read-only [ 656.246195][ T9241] befs: (nbd1): unable to read superblock [ 658.474967][ T9245] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 659.717259][ T61] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 659.726474][ T61] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 659.727919][ T61] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 659.729227][ T61] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 659.730490][ T61] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 660.306595][ T9259] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 660.779432][ T3557] team0 (unregistering): Port device team_slave_1 removed [ 661.229619][ T3557] team0 (unregistering): Port device team_slave_0 removed [ 661.803908][ T9266] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 661.818053][ T5807] Bluetooth: hci3: command tx timeout [ 663.952158][ T5807] Bluetooth: hci3: command tx timeout [ 666.295744][ T5807] Bluetooth: hci3: command tx timeout [ 666.647897][ T9279] overlayfs: failed to clone upperpath [ 667.721888][ T9294] befs: (nullb0): invalid magic header [ 668.348086][ T5807] Bluetooth: hci3: command tx timeout [ 668.585275][ T5807] Bluetooth: hci4: ACL packet for unknown connection handle 403 [ 670.499498][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 670.544112][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 670.546273][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 670.570733][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 670.571509][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 672.565125][ T9333] befs: (nullb0): invalid magic header [ 672.672635][ T5807] Bluetooth: hci5: command tx timeout [ 674.215397][ T9343] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 674.747666][ T5807] Bluetooth: hci5: command tx timeout [ 676.335665][ T9250] chnl_net:caif_netlink_parms(): no params data found [ 676.829567][ T5807] Bluetooth: hci5: command tx timeout [ 677.302797][ T9375] overlayfs: failed to clone upperpath [ 677.491006][ T5807] Bluetooth: hci4: ACL packet for unknown connection handle 403 [ 678.515370][ T9306] chnl_net:caif_netlink_parms(): no params data found [ 678.925855][ T5807] Bluetooth: hci5: command tx timeout [ 679.436834][ T3557] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.981217][ T3557] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.367759][ T9250] bridge0: port 1(bridge_slave_0) entered blocking state [ 682.367902][ T9250] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.368166][ T9250] bridge_slave_0: entered allmulticast mode [ 682.387632][ T9250] bridge_slave_0: entered promiscuous mode [ 682.436322][ T9250] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.436493][ T9250] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.436702][ T9250] bridge_slave_1: entered allmulticast mode [ 682.497581][ T9250] bridge_slave_1: entered promiscuous mode [ 682.860278][ T3557] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.133784][ T9421] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 683.636678][ T3557] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.730886][ T9250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 683.884591][ T9250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 685.153473][ T9306] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.155468][ T9306] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.119090][ T9306] bridge_slave_0: entered allmulticast mode [ 686.136164][ T9306] bridge_slave_0: entered promiscuous mode [ 687.365106][ T9306] bridge0: port 2(bridge_slave_1) entered blocking state [ 687.366294][ T9306] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.493178][ T9306] bridge_slave_1: entered allmulticast mode [ 687.692875][ T9306] bridge_slave_1: entered promiscuous mode [ 687.952365][ T9250] team0: Port device team_slave_0 added [ 688.187489][ T44] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 688.472804][ T9250] team0: Port device team_slave_1 added [ 688.611172][ T44] usb 2-1: Using ep0 maxpacket: 32 [ 689.447475][ T44] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 689.447509][ T44] usb 2-1: config 0 interface 0 altsetting 16 has an invalid descriptor for endpoint zero, skipping [ 689.447531][ T44] usb 2-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 689.447558][ T44] usb 2-1: config 0 interface 0 has no altsetting 0 [ 689.447595][ T44] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 689.447619][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.453324][ T44] usb 2-1: config 0 descriptor?? [ 689.883909][ T9306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 689.931228][ T44] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0 [ 689.931257][ T44] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0 [ 689.931277][ T44] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0 [ 689.931297][ T44] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0 [ 689.931317][ T44] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0 [ 689.946314][ T44] hid-thrustmaster 0003:044F:B65D.0003: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.1-1/input0 [ 689.946634][ T44] hid-thrustmaster 0003:044F:B65D.0003: Wrong number of endpoints? [ 690.162855][ C1] hid-thrustmaster 0003:044F:B65D.0003: URB to get model id failed with error -71 [ 690.165842][ T9] usb 2-1: USB disconnect, device number 6 [ 690.200601][ T9306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 690.215301][ T9250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 690.215324][ T9250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 690.215359][ T9250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 690.766324][ T9250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 690.766485][ T9250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 690.766563][ T9250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 691.767414][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.767569][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 692.514528][ T9306] team0: Port device team_slave_0 added [ 692.529903][ T9306] team0: Port device team_slave_1 added [ 693.143094][ T9483] befs: (nullb0): invalid magic header [ 693.860392][ T9250] hsr_slave_0: entered promiscuous mode [ 693.861854][ T9250] hsr_slave_1: entered promiscuous mode [ 693.862841][ T9250] debugfs: 'hsr0' already exists in 'hsr' [ 693.862867][ T9250] Cannot create hsr debugfs directory [ 693.895247][ T9306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 693.895266][ T9306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 693.895298][ T9306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 693.896633][ T3557] bridge_slave_1: left allmulticast mode [ 693.896669][ T3557] bridge_slave_1: left promiscuous mode [ 693.896938][ T3557] bridge0: port 2(bridge_slave_1) entered disabled state [ 694.038994][ T3557] bridge_slave_0: left allmulticast mode [ 694.039026][ T3557] bridge_slave_0: left promiscuous mode [ 694.039299][ T3557] bridge0: port 1(bridge_slave_0) entered disabled state [ 694.183574][ T3557] bridge_slave_1: left allmulticast mode [ 694.183610][ T3557] bridge_slave_1: left promiscuous mode [ 694.183887][ T3557] bridge0: port 2(bridge_slave_1) entered disabled state [ 694.204540][ T9490] ptrace attach of "./syz-executor exec"[8321] was attempted by "./syz-executor exec"[9490] [ 694.335147][ T9491] befs: (nbd5): No write support. Marking filesystem read-only [ 694.335422][ T9491] befs: (nbd5): unable to read superblock [ 696.107667][ T5807] Bluetooth: hci1: command 0x0406 tx timeout [ 697.355493][ T3557] bridge_slave_0: left allmulticast mode [ 697.355517][ T3557] bridge_slave_0: left promiscuous mode [ 697.363678][ T3557] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.849006][ T5807] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 698.663048][ T9504] befs: (nullb0): invalid magic header [ 699.393264][ T9515] netlink: 12 bytes leftover after parsing attributes in process `syz.3.850'. [ 701.114960][ T9526] befs: (nullb0): invalid magic header [ 701.210063][ T3557] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 701.246189][ T9528] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 701.323669][ T3557] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 701.523167][ T3557] bond0 (unregistering): Released all slaves [ 706.074772][ T9552] netlink: 12 bytes leftover after parsing attributes in process `syz.3.860'. [ 706.269294][ T3557] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 706.348934][ T3557] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 706.396370][ T3557] bond0 (unregistering): Released all slaves [ 706.786384][ T9306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 706.786403][ T9306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 706.786431][ T9306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 707.986981][ T9567] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 708.682094][ T9306] hsr_slave_0: entered promiscuous mode [ 708.683535][ T9306] hsr_slave_1: entered promiscuous mode [ 708.716760][ T9306] debugfs: 'hsr0' already exists in 'hsr' [ 708.716790][ T9306] Cannot create hsr debugfs directory [ 715.517485][ T3557] hsr_slave_0: left promiscuous mode [ 716.429532][ T3557] hsr_slave_1: left promiscuous mode [ 716.430588][ T3557] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 716.509354][ T3557] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 717.357639][ T3557] hsr_slave_0: left promiscuous mode [ 717.393994][ T3557] hsr_slave_1: left promiscuous mode [ 717.394540][ T5807] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 717.394939][ T3557] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 717.394961][ T3557] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 717.415719][ T5807] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 717.422169][ T5807] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 717.436874][ T5807] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 717.446399][ T5807] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 717.489365][ T3557] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 717.489393][ T3557] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 717.558893][ T3557] veth1_macvtap: left promiscuous mode [ 717.558969][ T3557] veth0_macvtap: left promiscuous mode [ 717.559146][ T3557] veth1_vlan: left promiscuous mode [ 717.559268][ T3557] veth0_vlan: left promiscuous mode [ 718.358331][ T3557] team0 (unregistering): Port device team_slave_1 removed [ 718.468391][ T3557] team0 (unregistering): Port device team_slave_0 removed [ 719.547925][ T5807] Bluetooth: hci0: command tx timeout [ 720.397448][ T9632] overlayfs: failed to clone upperpath [ 721.568157][ T3557] team0 (unregistering): Port device team_slave_1 removed [ 721.647493][ T5807] Bluetooth: hci0: command tx timeout [ 722.018947][ T3557] team0 (unregistering): Port device team_slave_0 removed [ 723.709373][ T5807] Bluetooth: hci0: command tx timeout [ 726.024846][ T5807] Bluetooth: hci0: command tx timeout [ 728.133614][ T9661] overlayfs: failed to clone upperpath [ 728.574909][ T61] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 728.596952][ T61] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 728.606300][ T61] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 728.622158][ T61] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 728.622973][ T61] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 730.747918][ T5807] Bluetooth: hci3: command tx timeout [ 732.827883][ T5807] Bluetooth: hci3: command tx timeout [ 734.928112][ T5807] Bluetooth: hci3: command tx timeout [ 736.358694][ T9730] ptrace attach of "./syz-executor exec"[5799] was attempted by "./syz-executor exec"[9730] [ 738.524250][ T5807] Bluetooth: hci3: command tx timeout [ 738.663879][ T9732] befs: (nbd1): No write support. Marking filesystem read-only [ 738.665554][ T9732] befs: (nbd1): unable to read superblock [ 738.717818][ T9671] chnl_net:caif_netlink_parms(): no params data found [ 739.223099][ T9612] chnl_net:caif_netlink_parms(): no params data found [ 739.637576][ T5952] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 739.767511][ T5952] usb 2-1: device descriptor read/64, error -71 [ 740.047572][ T5952] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 740.177505][ T5952] usb 2-1: device descriptor read/64, error -71 [ 740.291083][ T5952] usb usb2-port1: attempt power cycle [ 740.647655][ T9671] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.659852][ T5952] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 740.688315][ T9671] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.688530][ T9671] bridge_slave_0: entered allmulticast mode [ 740.698276][ T5952] usb 2-1: device descriptor read/8, error -71 [ 740.725746][ T9671] bridge_slave_0: entered promiscuous mode [ 740.816768][ T9671] bridge0: port 2(bridge_slave_1) entered blocking state [ 740.816886][ T9671] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.817049][ T9671] bridge_slave_1: entered allmulticast mode [ 740.843422][ T9774] overlayfs: failed to clone upperpath [ 740.851430][ T9671] bridge_slave_1: entered promiscuous mode [ 741.037546][ T5952] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 741.391347][ T5952] usb 2-1: device descriptor read/8, error -71 [ 741.507659][ T5952] usb usb2-port1: unable to enumerate USB device [ 741.602796][ T9779] ptrace attach of "./syz-executor exec"[8321] was attempted by "./syz-executor exec"[9779] [ 741.670930][ T9780] befs: (nbd5): No write support. Marking filesystem read-only [ 741.673683][ T9780] befs: (nbd5): unable to read superblock [ 743.482744][ T9612] bridge0: port 1(bridge_slave_0) entered blocking state [ 743.482898][ T9612] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.483130][ T9612] bridge_slave_0: entered allmulticast mode [ 743.491177][ T9612] bridge_slave_0: entered promiscuous mode [ 743.510930][ T9671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 743.513779][ T9612] bridge0: port 2(bridge_slave_1) entered blocking state [ 743.514024][ T9612] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.514248][ T9612] bridge_slave_1: entered allmulticast mode [ 743.530660][ T9612] bridge_slave_1: entered promiscuous mode [ 743.550140][ T9671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 746.145506][ T9612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 746.164346][ T9671] team0: Port device team_slave_0 added [ 746.176848][ T9612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 746.181915][ T9671] team0: Port device team_slave_1 added [ 746.762139][ T5807] Bluetooth: hci2: ACL packet for unknown connection handle 403 [ 747.683414][ T9671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 747.683432][ T9671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 747.683460][ T9671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 752.131684][ T9612] team0: Port device team_slave_0 added [ 752.132909][ T9671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 752.132926][ T9671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 752.132957][ T9671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 752.135967][ T9612] team0: Port device team_slave_1 added [ 752.330937][ T5807] Bluetooth: hci2: ACL packet for unknown connection handle 403 [ 752.509877][ T3557] bridge_slave_1: left allmulticast mode [ 752.509907][ T3557] bridge_slave_1: left promiscuous mode [ 752.510159][ T3557] bridge0: port 2(bridge_slave_1) entered disabled state [ 752.715064][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.715161][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.841616][ T9860] befs: (nullb0): invalid magic header [ 754.023159][ T3557] bridge_slave_0: left allmulticast mode [ 754.023191][ T3557] bridge_slave_0: left promiscuous mode [ 754.023451][ T3557] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.210444][ T3557] bridge_slave_1: left allmulticast mode [ 755.210477][ T3557] bridge_slave_1: left promiscuous mode [ 755.210736][ T3557] bridge0: port 2(bridge_slave_1) entered disabled state [ 756.089745][ T9876] netlink: 8 bytes leftover after parsing attributes in process `syz.3.937'. [ 756.119508][ T3557] bridge_slave_0: left allmulticast mode [ 756.119540][ T3557] bridge_slave_0: left promiscuous mode [ 756.119795][ T3557] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.207549][ T5807] Bluetooth: hci2: ACL packet for unknown connection handle 403 [ 760.438587][ T3557] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 761.638658][ T3557] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 761.803058][ T3557] bond0 (unregistering): Released all slaves [ 762.935388][ T9919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.948'. [ 764.623364][ T3557] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 766.170348][ T3557] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 766.542235][ T3557] bond0 (unregistering): Released all slaves [ 766.672372][ T9942] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 767.730894][ T5807] Bluetooth: hci1: ACL packet for unknown connection handle 403 [ 768.903665][ T9612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 768.903698][ T9612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 768.903792][ T9612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 770.439579][ T9612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 770.439598][ T9612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 770.439630][ T9612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 770.599023][ T9962] overlayfs: failed to clone upperpath [ 770.945861][ T9671] hsr_slave_0: entered promiscuous mode [ 770.955877][ T9671] hsr_slave_1: entered promiscuous mode [ 770.956998][ T9671] debugfs: 'hsr0' already exists in 'hsr' [ 770.957024][ T9671] Cannot create hsr debugfs directory [ 772.014213][ T3557] hsr_slave_0: left promiscuous mode [ 772.089856][ T3557] hsr_slave_1: left promiscuous mode [ 772.090848][ T3557] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 772.168350][ T3557] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 777.832318][ T3557] hsr_slave_0: left promiscuous mode [ 778.201494][ T3557] hsr_slave_1: left promiscuous mode [ 778.202361][ T3557] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 778.272623][ T3557] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 779.063472][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 779.090296][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 779.092453][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 779.093958][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 779.094677][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 779.359769][T10024] overlayfs: failed to clone upperpath [ 781.090082][ T3557] team0 (unregistering): Port device team_slave_1 removed [ 782.188279][ T3557] team0 (unregistering): Port device team_slave_0 removed [ 783.410949][ T61] Bluetooth: hci5: command tx timeout [ 785.550295][ T61] Bluetooth: hci5: command tx timeout [ 788.599950][ T61] Bluetooth: hci5: command tx timeout [ 789.530912][ T5807] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 789.533757][ T5807] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 789.536134][ T5807] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 789.547155][ T5807] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 789.558836][ T5807] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 790.338105][ T3557] team0 (unregistering): Port device team_slave_1 removed [ 790.468269][ T3557] team0 (unregistering): Port device team_slave_0 removed [ 790.667450][ T61] Bluetooth: hci5: command tx timeout [ 791.647502][ T61] Bluetooth: hci6: command tx timeout [ 791.725157][T10097] tipc: Enabling of bearer rejected, failed to enable media [ 792.198434][T10108] netlink: 28 bytes leftover after parsing attributes in process `syz.3.988'. [ 793.707548][ T5807] Bluetooth: hci6: command tx timeout [ 794.645024][T10020] chnl_net:caif_netlink_parms(): no params data found [ 794.919539][T10162] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 795.048073][T10067] chnl_net:caif_netlink_parms(): no params data found [ 795.543473][T10172] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 795.543500][T10172] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 10172, name: syz.5.1001 [ 795.543521][T10172] preempt_count: 1, expected: 0 [ 795.543545][T10172] RCU nest depth: 2, expected: 2 [ 795.543563][T10172] 5 locks held by syz.5.1001/10172: [ 795.543577][T10172] #0: ffff88804a028350 (sk_lock-AF_VSOCK){+.+.}-{0:0}, at: vsock_connect+0x152/0xe20 [ 795.543649][T10172] #1: ffffffff8d7aa500 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run9+0x1ec/0x500 [ 795.543706][T10172] #2: ffff8880b8832c88 ((stream_local_lock)){+.+.}-{3:3}, at: __bpf_stream_push_str+0x211/0xbe0 [ 795.543756][T10172] #3: ffffffff8d7aa500 (rcu_read_lock){....}-{1:3}, at: rt_spin_trylock+0x10d/0x2b0 [ 795.543816][T10172] #4: ffff8880b883f6e8 (&s->lock_key#5){+.+.}-{3:3}, at: ___slab_alloc+0x12f/0x1470 [ 795.543868][T10172] Preemption disabled at: [ 795.543874][T10172] [<0000000000000000>] 0x0 [ 795.543914][T10172] CPU: 0 UID: 0 PID: 10172 Comm: syz.5.1001 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 795.543939][T10172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 795.543961][T10172] Call Trace: [ 795.543973][T10172] [ 795.543983][T10172] dump_stack_lvl+0x189/0x250 [ 795.544014][T10172] ? __pfx_dump_stack_lvl+0x10/0x10 [ 795.544042][T10172] ? __pfx__printk+0x10/0x10 [ 795.544073][T10172] ? print_lock_name+0xde/0x100 [ 795.544107][T10172] __might_resched+0x44b/0x5d0 [ 795.544146][T10172] ? __pfx___might_resched+0x10/0x10 [ 795.544170][T10172] ? ___slab_alloc+0x12f/0x1470 [ 795.544195][T10172] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 795.544221][T10172] ? lockdep_hardirqs_on+0x9c/0x150 [ 795.544250][T10172] rt_spin_lock+0xc7/0x3e0 [ 795.544285][T10172] ? __pfx_rt_spin_lock+0x10/0x10 [ 795.544318][T10172] ? __lock_acquire+0xab9/0xd20 [ 795.544357][T10172] ___slab_alloc+0x12f/0x1470 [ 795.544384][T10172] ? __set_page_owner+0x25c/0x490 [ 795.544418][T10172] __slab_alloc+0xc6/0x1f0 [ 795.544452][T10172] ? __set_page_owner+0x25c/0x490 [ 795.544482][T10172] __kmalloc_cache_noprof+0xec/0x6c0 [ 795.544513][T10172] ? __set_page_owner+0x25c/0x490 [ 795.544546][T10172] __set_page_owner+0x25c/0x490 [ 795.544577][T10172] ? __pfx___set_page_owner+0x10/0x10 [ 795.544605][T10172] ? __pfx_rt_mutex_slowunlock+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 795.544647][T10172] post_alloc_hook+0x240/0x2a0 [ 795.544680][T10172] get_page_from_freelist+0x28c0/0x2960 [ 795.544734][T10172] ? lockdep_unlock+0x89/0x120 [ 795.544767][T10172] ? __lock_acquire+0xab9/0xd20 [ 795.544819][T10172] alloc_frozen_pages_nolock_noprof+0xbc/0x150 [ 795.544855][T10172] alloc_pages_nolock_noprof+0xa/0x30 [ 795.544878][T10172] bpf_stream_page_replace+0x19/0x1e0 [ 795.544903][T10172] __bpf_stream_push_str+0x35c/0xbe0 [ 795.544933][T10172] ? __pfx___bpf_stream_push_str+0x10/0x10 [ 795.544970][T10172] bpf_stream_stage_printk+0x14e/0x1c0 [ 795.544991][T10172] ? __pfx_find_from_stack_cb+0x10/0x10 [ 795.545021][T10172] ? arch_bpf_stack_walk+0x112/0x170 [ 795.545045][T10172] ? __pfx_bpf_stream_stage_printk+0x10/0x10 [ 795.545075][T10172] ? lockdep_hardirqs_on+0x9c/0x150 [ 795.545108][T10172] bpf_prog_report_may_goto_violation+0xc4/0x190 [ 795.545143][T10172] ? __pfx_bpf_prog_report_may_goto_violation+0x10/0x10 [ 795.545170][T10172] ? irqentry_exit+0x74/0x90 [ 795.545196][T10172] ? read_tsc+0x9/0x20 [ 795.545224][T10172] bpf_check_timed_may_goto+0xaa/0xb0 [ 795.545252][T10172] arch_bpf_timed_may_goto+0x21/0x40 [ 795.545281][T10172] bpf_prog_6fd842a53d323cc5+0x53/0x5f [ 795.545303][T10172] bpf_trace_run9+0x2db/0x500 [ 795.545334][T10172] ? bpf_trace_run9+0x1ec/0x500 [ 795.545363][T10172] ? __pfx_bpf_trace_run9+0x10/0x10 [ 795.545440][T10172] __bpf_trace_virtio_transport_alloc_pkt+0x2d7/0x340 [ 795.545485][T10172] ? __pfx___bpf_trace_virtio_transport_alloc_pkt+0x10/0x10 [ 795.545515][T10172] ? kmem_cache_alloc_node_noprof+0x291/0x6e0 [ 795.545543][T10172] ? __alloc_skb+0x112/0x2d0 [ 795.545583][T10172] ? __alloc_skb+0x1bc/0x2d0 [ 795.545616][T10172] ? __local_bh_enable+0x28c/0x410 [ 795.545652][T10172] virtio_transport_alloc_skb+0x10cc/0x1130 [ 795.545696][T10172] ? __pfx_virtio_transport_alloc_skb+0x10/0x10 [ 795.545725][T10172] ? rt_spin_unlock+0x150/0x200 [ 795.545761][T10172] virtio_transport_send_pkt_info+0x6be/0x1100 [ 795.545825][T10172] virtio_transport_connect+0xa7/0x100 [ 795.545859][T10172] ? __pfx_virtio_transport_connect+0x10/0x10 [ 795.545901][T10172] ? __pfx_vsock_auto_bind+0x10/0x10 [ 795.545928][T10172] ? vsock_assign_transport+0x5ed/0x770 [ 795.545970][T10172] vsock_connect+0xb8b/0xe20 [ 795.546007][T10172] ? __might_fault+0xb0/0x130 [ 795.546038][T10172] ? __pfx_vsock_connect+0x10/0x10 [ 795.546066][T10172] ? __pfx_autoremove_wake_function+0x10/0x10 [ 795.546105][T10172] ? bpf_lsm_socket_connect+0x9/0x20 [ 795.546146][T10172] __sys_connect+0x323/0x450 [ 795.546172][T10172] ? __pfx___sys_connect+0x10/0x10 [ 795.546209][T10172] ? rcu_is_watching+0x15/0xb0 [ 795.546256][T10172] __x64_sys_connect+0x7a/0x90 [ 795.546280][T10172] do_syscall_64+0xfa/0xfa0 [ 795.546303][T10172] ? lockdep_hardirqs_on+0x9c/0x150 [ 795.546327][T10172] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.546349][T10172] ? clear_bhb_loop+0x60/0xb0 [ 795.546377][T10172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.546399][T10172] RIP: 0033:0x7f0ccca8eec9 [ 795.546419][T10172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 795.546440][T10172] RSP: 002b:00007f0ccacf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 795.546464][T10172] RAX: ffffffffffffffda RBX: 00007f0cccce5fa0 RCX: 00007f0ccca8eec9 [ 795.546481][T10172] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000005 [ 795.546495][T10172] RBP: 00007f0cccb11f91 R08: 0000000000000000 R09: 0000000000000000 [ 795.546509][T10172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 795.546523][T10172] R13: 00007f0cccce6038 R14: 00007f0cccce5fa0 R15: 00007ffe0ba10318 [ 795.546562][T10172] [ 795.878018][T10178] netlink: 'syz.1.1003': attribute type 1 has an invalid length. [ 795.878048][T10178] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1003'. [ 795.878069][T10178] netlink: 'syz.1.1003': attribute type 2 has an invalid length. [ 795.878085][T10178] netlink: 'syz.1.1003': attribute type 1 has an invalid length. [ 795.885708][ T5807] Bluetooth: hci6: command tx timeout [ 798.540003][ T3557] bridge_slave_1: left allmulticast mode [ 798.540032][ T3557] bridge_slave_1: left promiscuous mode [ 798.543822][ T3557] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.639134][ T3557] bridge_slave_0: left allmulticast mode [ 798.639158][ T3557] bridge_slave_0: left promiscuous mode [ 798.639352][ T3557] bridge0: port 1(bridge_slave_0) entered disabled state [ 798.730403][ T3557] bridge_slave_1: left allmulticast mode [ 798.730426][ T3557] bridge_slave_1: left promiscuous mode [ 798.730600][ T3557] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.809704][ T3557] bridge_slave_0: left allmulticast mode [ 798.809728][ T3557] bridge_slave_0: left promiscuous mode [ 798.809903][ T3557] bridge0: port 1(bridge_slave_0) entered disabled state [ 799.067972][ T3557] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 799.158948][ T3557] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 799.220118][ T3557] bond0 (unregistering): Released all slaves [ 799.428222][ T3557] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 799.528196][ T3557] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 799.589708][ T3557] bond0 (unregistering): Released all slaves [ 799.903135][ T3557] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 799.931536][ T3557] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 799.997500][ T3557] hsr_slave_0: left promiscuous mode [ 800.047503][ T3557] hsr_slave_1: left promiscuous mode [ 800.048501][ T3557] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 800.098311][ T3557] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 800.329188][ T3557] team0 (unregistering): Port device team_slave_1 removed [ 800.459615][ T3557] team0 (unregistering): Port device team_slave_0 removed [ 801.258199][ T3557] team0 (unregistering): Port device team_slave_1 removed [ 801.389122][ T3557] team0 (unregistering): Port device team_slave_0 removed [ 804.066204][ T3557] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.330978][ T3557] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.610739][ T3557] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.842607][ T3557] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.284174][ T3557] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.511854][ T3557] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0