last executing test programs: 22m18.831041025s ago: executing program 3 (id=49): linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 22m16.305893564s ago: executing program 3 (id=55): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0x5, &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000500)=""/194, &(0x7f0000000300)=0xc2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000001e0000850000008200000095000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$BLKPG(r5, 0x1269, &(0x7f00000000c0)={0xf7c8561671f7aa05, 0x0, 0x98, &(0x7f0000000000)={0x0, 0x200, 0x801000e}}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r6, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) recvmsg(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r6, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) socket$kcm(0x29, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x8, 0x63b2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x20000, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$int_in(r7, 0x5421, &(0x7f0000001100)=0x2000000009) connect$bt_sco(r7, &(0x7f0000000040)={0x1f, @fixed}, 0x8) close(r7) 22m11.672631188s ago: executing program 3 (id=61): linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 22m10.196224131s ago: executing program 3 (id=63): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000340)=@usbdevfs_connect) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000180)=@urb_type_control={0x2, {0x8, 0x1}, 0x9, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x9, 0x4, 0x0}) 22m7.533224584s ago: executing program 3 (id=67): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) getrusage(0x0, &(0x7f0000000180)) unshare(0x4a050800) socket$inet_tcp(0x2, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) r0 = getpid() ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'erspan0\x00', 0x0}) futex(0x0, 0x4, 0xffffffba, 0x0, 0x0, 0x4000000) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x1010, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x1, 0xfffffff8, @loopback}, 0x1c) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000080)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r3, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00051400000000000000000000000800120000000200c06b6e000000000006000000000000000000000000000000e00000020000000000000000000000000000000000000000000000000000000105000500008000000a0000000000000000000000000000000000000000000001000000000000000005000600ff4700000a"], 0xa0}}, 0x0) 22m2.590725481s ago: executing program 3 (id=74): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0x5, &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000500)=""/194, &(0x7f0000000300)=0xc2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000001e0000850000008200000095000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$BLKPG(r5, 0x1269, &(0x7f00000000c0)={0xf7c8561671f7aa05, 0x0, 0x98, &(0x7f0000000000)={0x0, 0x200, 0x801000e}}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r6, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) recvmsg(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r6, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) socket$kcm(0x29, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x8, 0x63b2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x20000, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x3ff}, 0x8) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000001100)=0x2000000009) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000040)={0x1f, @fixed}, 0x8) close(0xffffffffffffffff) 21m45.32289039s ago: executing program 32 (id=74): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0x5, &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000500)=""/194, &(0x7f0000000300)=0xc2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000001e0000850000008200000095000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$BLKPG(r5, 0x1269, &(0x7f00000000c0)={0xf7c8561671f7aa05, 0x0, 0x98, &(0x7f0000000000)={0x0, 0x200, 0x801000e}}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r6, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) recvmsg(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r6, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) socket$kcm(0x29, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x8, 0x63b2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x20000, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x3ff}, 0x8) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000001100)=0x2000000009) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000040)={0x1f, @fixed}, 0x8) close(0xffffffffffffffff) 21m39.126073195s ago: executing program 5 (id=108): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b708000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 21m35.978012878s ago: executing program 5 (id=111): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) write(r0, &(0x7f0000000580)="2a65c9e610", 0x5) 21m34.520962254s ago: executing program 5 (id=115): ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0xbfe000, 0x3, 0x1, 0x0, 0xffffffffffffffff, 0x4d2a, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x0, 0x9, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@map_fd, @generic, @initr0, @exit, @alu, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0xc, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x0) set_mempolicy(0x61c399abd8359a1c, &(0x7f00000001c0)=0xfff, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac141417000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c2900"/218], 0x154}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000759, &(0x7f00000002c0)={[{@noload}, {@noblock_validity}, {@discard}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xff}, 0x0}, {@noauto_da_alloc}, {@norecovery}, {@jqfmt_vfsv1}, {@nombcache}, {@lazytime}, {@resuid}, {@resuid}, {@errors_continue}, {@norecovery}, {@nobarrier}, {@data_writeback}, {@noblock_validity}], [], 0x2c}, 0x6, 0x51b, &(0x7f0000001300)="$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") 21m30.753018212s ago: executing program 5 (id=122): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs$userns(0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setreuid(0x0, 0xee00) bind$bt_hci(r5, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x5, &(0x7f00000002c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000340)=[0x0]) 21m25.408613625s ago: executing program 2 (id=126): linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3000) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 21m25.01964182s ago: executing program 5 (id=128): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0001}]}) getrusage(0x0, &(0x7f0000000180)) unshare(0x4a050800) socket$inet_tcp(0x2, 0x1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) r0 = getpid() ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'erspan0\x00', 0x0}) futex(0x0, 0x4, 0xffffffba, 0x0, 0x0, 0x4000000) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x1010, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x1, 0xfffffff8, @loopback}, 0x1c) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000080)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r3, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00051400000000000000000000000800120000000200c06b6e000000000006000000000000000000000000000000e00000020000000000000000000000000000000000000000000000000000000105000500008000000a0000000000000000000000000000000000000000000001000000000000000005000600ff4700000a"], 0xa0}}, 0x0) 21m23.770372456s ago: executing program 2 (id=129): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) fsetxattr$security_evm(r1, &(0x7f0000000240), &(0x7f0000000280)=@md5={0x1, "74461721923f92430347cb0595dbdfdc"}, 0x11, 0x1) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000300)={'\x00', 0x0, 0x7, 0xffc, 0x7c, 0x1}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @sack_perm, @window, @mss, @timestamp, @window], 0x6) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='sched_process_wait\x00', r3}, 0x18) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) close(r5) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x16, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="85000000080000004e000000000000850000007d00000095000000000000007ab9e683b171b4b09980aa71a9ab17e14e1b1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68ae00000000dc3d53c200000000000000000071c0b0731ee58764b3545b8ea0f38755abae8429fbbd017e51c99f372e9c6e5a30dc01eed2aa3fc2850ce28e16476ff4cc105287c26530c45c35829af4438bc166ac888f0bfeb118ea585670fc7a81f4783b"], &(0x7f0000000140)='GPL\x00', 0x0, 0xa9, &(0x7f0000000640)=""/169, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r6, 0x0, 0x11, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a26e9b722780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getpriority(0x1, 0x0) r7 = socket$inet(0x2, 0x2, 0x1) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x0, 0x3ff, 0xfffffffd, 0x0, 0x80000000}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000e40)={'sit0\x00', &(0x7f0000000d80)={'gretap0\x00', 0x0, 0x80, 0x7800, 0x7ff, 0x7, {{0x5, 0x4, 0x1, 0x2e, 0x14, 0x66, 0x0, 0x9, 0x2f, 0x0, @multicast1, @local}}}}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex, 0x11, 0x0, 0x0, &(0x7f0000000040)=[0x0, 0x0], 0x2, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$SIOCNRDECOBS(r2, 0x89e2) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) accept$phonet_pipe(r0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x700, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r8, &(0x7f00000002c0)={0xa, 0x4e20, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) 21m23.465213177s ago: executing program 5 (id=130): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0001}]}) getrusage(0x0, &(0x7f0000000180)) unshare(0x4a050800) socket$inet_tcp(0x2, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) r0 = getpid() ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'erspan0\x00', 0x0}) futex(0x0, 0x4, 0xffffffba, 0x0, 0x0, 0x4000000) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x1010, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x1, 0xfffffff8, @loopback}, 0x1c) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000080)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r3, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00051400000000000000000000000800120000000200c06b6e000000000006000000000000000000000000000000e00000020000000000000000000000000000000000000000000000000000000105000500008000000a0000000000000000000000000000000000000000000001000000000000000005000600ff4700000a"], 0xa0}}, 0x0) 21m21.840238985s ago: executing program 2 (id=133): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000000)=0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r1], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) creat(0x0, 0x41) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xd, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000009c3c62f452000000000000000000000000000000573530dad3493a32018ce03d5183fc31c227a8b8e93939564f825e124332a4f4e5efadf00e15daf0a8d8b49df3387268f8fda891cf0d5181e201804c6be78628b814ee8ec3e7c09b8bace6f6122cb13613b6683a6cb73af0b123f7d427b8074ce46104b3baf99b67c05807caef17a81530f9adf73019a2170126dd40255a4e34d325f7389be76fe35d6b765155b97010000000493432a9ce5e0a867ba3635842731538568e1401dd1f8b3d8787aa554f9662f6d23ec530058c352a2a0ca54de4f4eca5a5b8383307dfc5698cca4b6a8a6ccbb184799e0ebce127"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000082f177", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="020000000100"/25], 0x48) 21m18.615001265s ago: executing program 2 (id=136): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = getpgrp(0x0) r6 = syz_pidfd_open(r5, 0x0) r7 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000180)) r8 = gettid() kcmp$KCMP_EPOLL_TFD(r5, r8, 0x7, r6, &(0x7f0000000040)={r7, r6}) 21m16.082236337s ago: executing program 2 (id=141): ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0xbfe000, 0x3, 0x1, 0x0, 0xffffffffffffffff, 0x4d2a, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x0, 0x9, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@map_fd, @generic, @initr0, @exit, @alu, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0xc, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x0) set_mempolicy(0x61c399abd8359a1c, &(0x7f00000001c0)=0xfff, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac141417000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c2900"/218], 0x154}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000759, &(0x7f00000002c0)={[{@noload}, {@noblock_validity}, {@discard}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xff}, 0x0}, {@noauto_da_alloc}, {@norecovery}, {@jqfmt_vfsv1}, {@nombcache}, {@lazytime}, {@resuid}, {@resuid}, {@errors_continue}, {@norecovery}, {@nobarrier}, {@data_writeback}, {@noblock_validity}], [], 0x2c}, 0x6, 0x51b, &(0x7f0000001300)="$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") 21m11.60792004s ago: executing program 2 (id=148): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) fsetxattr$security_evm(r1, &(0x7f0000000240), &(0x7f0000000280)=@md5={0x1, "74461721923f92430347cb0595dbdfdc"}, 0x11, 0x1) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000300)={'\x00', 0x0, 0x7, 0xffc, 0x7c, 0x1}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @sack_perm, @window, @mss, @timestamp, @window], 0x6) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='sched_process_wait\x00', r3}, 0x18) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) close(r5) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x16, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="85000000080000004e000000000000850000007d00000095000000000000007ab9e683b171b4b09980aa71a9ab17e14e1b1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68ae00000000dc3d53c200000000000000000071c0b0731ee58764b3545b8ea0f38755abae8429fbbd017e51c99f372e9c6e5a30dc01eed2aa3fc2850ce28e16476ff4cc105287c26530c45c35829af4438bc166ac888f0bfeb118ea585670fc7a81f4783b"], &(0x7f0000000140)='GPL\x00', 0x0, 0xa9, &(0x7f0000000640)=""/169, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r6, 0x0, 0x11, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a26e9b722780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getpriority(0x1, 0x0) r7 = socket$inet(0x2, 0x2, 0x1) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x0, 0x3ff, 0xfffffffd, 0x0, 0x80000000}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000e40)={'sit0\x00', &(0x7f0000000d80)={'gretap0\x00', 0x0, 0x80, 0x7800, 0x7ff, 0x7, {{0x5, 0x4, 0x1, 0x2e, 0x14, 0x66, 0x0, 0x9, 0x2f, 0x0, @multicast1, @local}}}}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex, 0x11, 0x0, 0x0, &(0x7f0000000040)=[0x0, 0x0], 0x2, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$SIOCNRDECOBS(r2, 0x89e2) accept$phonet_pipe(r0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x700, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r8, &(0x7f00000002c0)={0xa, 0x4e20, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) 21m7.185536451s ago: executing program 33 (id=130): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0001}]}) getrusage(0x0, &(0x7f0000000180)) unshare(0x4a050800) socket$inet_tcp(0x2, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) r0 = getpid() ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'erspan0\x00', 0x0}) futex(0x0, 0x4, 0xffffffba, 0x0, 0x0, 0x4000000) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x1010, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x1, 0xfffffff8, @loopback}, 0x1c) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000080)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r3, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00051400000000000000000000000800120000000200c06b6e000000000006000000000000000000000000000000e00000020000000000000000000000000000000000000000000000000000000105000500008000000a0000000000000000000000000000000000000000000001000000000000000005000600ff4700000a"], 0xa0}}, 0x0) 20m56.129239404s ago: executing program 34 (id=148): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) fsetxattr$security_evm(r1, &(0x7f0000000240), &(0x7f0000000280)=@md5={0x1, "74461721923f92430347cb0595dbdfdc"}, 0x11, 0x1) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000300)={'\x00', 0x0, 0x7, 0xffc, 0x7c, 0x1}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @sack_perm, @window, @mss, @timestamp, @window], 0x6) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='sched_process_wait\x00', r3}, 0x18) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) close(r5) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x16, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="85000000080000004e000000000000850000007d00000095000000000000007ab9e683b171b4b09980aa71a9ab17e14e1b1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68ae00000000dc3d53c200000000000000000071c0b0731ee58764b3545b8ea0f38755abae8429fbbd017e51c99f372e9c6e5a30dc01eed2aa3fc2850ce28e16476ff4cc105287c26530c45c35829af4438bc166ac888f0bfeb118ea585670fc7a81f4783b"], &(0x7f0000000140)='GPL\x00', 0x0, 0xa9, &(0x7f0000000640)=""/169, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r6, 0x0, 0x11, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a26e9b722780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getpriority(0x1, 0x0) r7 = socket$inet(0x2, 0x2, 0x1) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x0, 0x3ff, 0xfffffffd, 0x0, 0x80000000}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000e40)={'sit0\x00', &(0x7f0000000d80)={'gretap0\x00', 0x0, 0x80, 0x7800, 0x7ff, 0x7, {{0x5, 0x4, 0x1, 0x2e, 0x14, 0x66, 0x0, 0x9, 0x2f, 0x0, @multicast1, @local}}}}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex, 0x11, 0x0, 0x0, &(0x7f0000000040)=[0x0, 0x0], 0x2, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$SIOCNRDECOBS(r2, 0x89e2) accept$phonet_pipe(r0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x700, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r8, &(0x7f00000002c0)={0xa, 0x4e20, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) 6m34.632485017s ago: executing program 1 (id=1363): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0x5, &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000500)=""/194, &(0x7f0000000300)=0xc2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$BLKPG(r4, 0x1269, &(0x7f00000000c0)={0xf7c8561671f7aa05, 0x0, 0x98, &(0x7f0000000000)={0x0, 0x200, 0x801000e}}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) recvmsg(r3, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r5, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) socket$kcm(0x29, 0x2, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x3ff}, 0x8) ioctl$int_in(r6, 0x5421, &(0x7f0000001100)=0x2000000009) connect$bt_sco(r6, &(0x7f0000000040)={0x1f, @fixed}, 0x8) close(r6) 6m31.012052355s ago: executing program 1 (id=1367): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0001}]}) getrusage(0x0, &(0x7f0000000180)) unshare(0x4a050800) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) r0 = getpid() ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'erspan0\x00', 0x0}) sched_setscheduler(r0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r2) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000080)=0x400000001, 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 6m29.055643631s ago: executing program 1 (id=1371): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0x5, &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000001e0000850000008200000095000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f00000000c0)={0xf7c8561671f7aa05, 0x0, 0x98, &(0x7f0000000000)={0x0, 0x200, 0x801000e}}) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) recvmsg(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x8, 0x63b2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x20000, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f0000000040)={0x1f, @fixed}, 0x8) close(r3) 6m25.342224879s ago: executing program 1 (id=1378): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b0000000000000000000000018000000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) r4 = semget$private(0x0, 0x4, 0x30) semctl$IPC_STAT(r4, 0x0, 0x2, 0x0) getresuid(&(0x7f0000000140), 0x0, &(0x7f0000000300)=0x0) semctl$IPC_SET(r4, 0x0, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8814}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, r3]}}, @rights={{0x20, 0x1, 0x1, [r3, 0xffffffffffffffff, r2, r2]}}, @cred={{0x1c}}], 0x58, 0x20000801}}, {{&(0x7f0000000d00)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x2b, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r5}}}], 0x58, 0x20004040}}, {{&(0x7f0000001480)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001580)=[{0x0}], 0x1, 0x0, 0xfffffffffffffe8d, 0x40010}}], 0x4, 0x24048880) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) accept4(r6, 0x0, 0x0, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101000) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f0000000080)=0x4) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f}}, 0x20) 6m23.149947511s ago: executing program 1 (id=1383): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0x5, &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000500)=""/194, &(0x7f0000000300)=0xc2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000001e0000850000008200000095000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$BLKPG(r5, 0x1269, &(0x7f00000000c0)={0xf7c8561671f7aa05, 0x0, 0x98, &(0x7f0000000000)={0x0, 0x200, 0x801000e}}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r6, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) recvmsg(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r6, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x8, 0x63b2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x20000, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x3ff}, 0x8) ioctl$int_in(r7, 0x5421, &(0x7f0000001100)=0x2000000009) connect$bt_sco(r7, &(0x7f0000000040)={0x1f, @fixed}, 0x8) 6m19.400776716s ago: executing program 1 (id=1387): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000500)=""/194, &(0x7f0000000300)=0xc2) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$BLKPG(r3, 0x1269, &(0x7f00000000c0)={0xf7c8561671f7aa05, 0x0, 0x98, &(0x7f0000000000)={0x0, 0x200, 0x801000e}}) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x3ff}, 0x8) ioctl$int_in(r4, 0x5421, &(0x7f0000001100)=0x2000000009) connect$bt_sco(r4, &(0x7f0000000040)={0x1f, @fixed}, 0x8) close(r4) 6m2.900579062s ago: executing program 35 (id=1387): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000500)=""/194, &(0x7f0000000300)=0xc2) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$BLKPG(r3, 0x1269, &(0x7f00000000c0)={0xf7c8561671f7aa05, 0x0, 0x98, &(0x7f0000000000)={0x0, 0x200, 0x801000e}}) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x3ff}, 0x8) ioctl$int_in(r4, 0x5421, &(0x7f0000001100)=0x2000000009) connect$bt_sco(r4, &(0x7f0000000040)={0x1f, @fixed}, 0x8) close(r4) 5m57.825768181s ago: executing program 4 (id=1424): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0x5, &(0x7f0000000000)) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) close(r3) 5m55.058967244s ago: executing program 4 (id=1428): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0001}]}) getrusage(0x0, &(0x7f0000000180)) unshare(0x4a050800) socket$inet_tcp(0x2, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) getpid() ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'erspan0\x00', 0x0}) futex(0x0, 0x4, 0xffffffba, 0x0, 0x0, 0x4000000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r1) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x400000001, 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 5m52.442622998s ago: executing program 4 (id=1430): epoll_create(0x2a) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/12], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) read$FUSE(r4, &(0x7f0000001740)={0x2020}, 0x2020) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0xdd218) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) prlimit64(0x0, 0xb, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000280), 0x120008, &(0x7f00000002c0)={'trans=virtio,', {[{@msize={'msize', 0x3d, 0x4}}, {@loose}]}}) gettid() r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 5m50.44638361s ago: executing program 4 (id=1433): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0xf, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='\x00'/15, @ANYBLOB], 0x50) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000200)={0x15}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) write(r3, &(0x7f0000000040), 0x0) 5m49.606837125s ago: executing program 4 (id=1434): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b0000000000000000000000018000000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) semget$private(0x0, 0x4, 0x30) getresuid(&(0x7f0000000140), 0x0, &(0x7f0000000300)=0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8814}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, r2]}}, @rights={{0x20, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58, 0x20000801}}, {{&(0x7f0000000d00)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x2b, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r3}}}], 0x58, 0x20004040}}, {{&(0x7f0000001480)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001580)=[{0x0}], 0x1, 0x0, 0xfffffffffffffe8d, 0x40010}}], 0x4, 0x24048880) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001a00)="e8", 0x3f}], 0x1}, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101000) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000080)=0x4) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) 5m46.928796115s ago: executing program 4 (id=1439): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0001}]}) getrusage(0x0, &(0x7f0000000180)) unshare(0x4a050800) socket$inet_tcp(0x2, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) r0 = getpid() ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'erspan0\x00', 0x0}) futex(0x0, 0x4, 0xffffffba, 0x0, 0x0, 0x4000000) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x1010, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r2) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000080)=0x400000001, 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 5m31.514779248s ago: executing program 36 (id=1439): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0001}]}) getrusage(0x0, &(0x7f0000000180)) unshare(0x4a050800) socket$inet_tcp(0x2, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) r0 = getpid() ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'erspan0\x00', 0x0}) futex(0x0, 0x4, 0xffffffba, 0x0, 0x0, 0x4000000) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x1010, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r2) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000080)=0x400000001, 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 23.468753126s ago: executing program 7 (id=1906): getrusage(0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) r0 = getpid() ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) sched_setscheduler(r0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r2) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000080)=0x400000001, 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 22.321397028s ago: executing program 7 (id=1907): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b0000000000000000000000018000000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) semget$private(0x0, 0x4, 0x30) getresuid(&(0x7f0000000140), 0x0, &(0x7f0000000300)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001a00)="e8", 0x3f}], 0x1}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101000) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) 22.088693996s ago: executing program 0 (id=1908): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b0000000000000000000000018000000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) r3 = semget$private(0x0, 0x4, 0x30) semctl$IPC_STAT(r3, 0x0, 0x2, 0x0) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8814}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, r2]}}, @rights={{0x20, 0x1, 0x1, [r2, 0xffffffffffffffff, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r4}}}], 0x58, 0x20000801}}, {{&(0x7f0000000d00)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x2b}}, @cred={{0x1c}}], 0x58, 0x20004040}}, {{&(0x7f0000001480)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001580)=[{0x0}], 0x1, 0x0, 0xfffffffffffffe8d, 0x40010}}], 0x4, 0x24048880) r5 = socket$alg(0x26, 0x5, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001a00)="e8", 0x3f}], 0x1}, 0x0) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f}}, 0x20) 20.51467772s ago: executing program 7 (id=1909): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x80000) sendmmsg$inet(r1, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000003c0)="d9a4", 0x2}], 0x1}}], 0x1, 0x80c5) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010003b15feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="05200100000600001400128009000100766502800800200001000000"], 0x3c}}, 0x22008096) 18.852945138s ago: executing program 0 (id=1912): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b0000000000000000000000018000000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) r4 = semget$private(0x0, 0x4, 0x30) semctl$IPC_STAT(r4, 0x0, 0x2, 0x0) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8814}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, r3]}}, @rights={{0x20, 0x1, 0x1, [r3, 0xffffffffffffffff, r2, r2]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r5}}}], 0x58, 0x20000801}}, {{&(0x7f0000000d00)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x2b, 0x1, 0x2, {r0}}}, @cred={{0x1c}}], 0x58, 0x20004040}}, {{&(0x7f0000001480)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001580)=[{0x0}], 0x1, 0x0, 0xfffffffffffffe8d, 0x40010}}], 0x4, 0x24048880) r6 = socket$alg(0x26, 0x5, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$kcm(r7, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001a00)="e8", 0x3f}], 0x1}, 0x0) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f}}, 0x20) 15.905794079s ago: executing program 0 (id=1914): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b0000000000000000000000018000000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) r4 = semget$private(0x0, 0x4, 0x30) semctl$IPC_STAT(r4, 0x0, 0x2, 0x0) getresuid(&(0x7f0000000140), 0x0, &(0x7f0000000300)=0x0) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r4, 0x0, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8814}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, r3]}}, @rights={{0x20, 0x1, 0x1, [r3, 0xffffffffffffffff, r2, r2]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r6}}}], 0x58, 0x20000801}}, {{&(0x7f0000000d00)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x2b, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r5}}}], 0x58, 0x20004040}}, {{&(0x7f0000001480)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001580)=[{0x0}], 0x1, 0x0, 0xfffffffffffffe8d, 0x40010}}], 0x4, 0x24048880) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) accept4(r7, 0x0, 0x0, 0x0) r8 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101000) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r8, 0x40045532, &(0x7f0000000080)=0x4) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f}}, 0x20) 15.671215585s ago: executing program 7 (id=1916): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b0000000000000000000000018000000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) r4 = semget$private(0x0, 0x4, 0x30) semctl$IPC_STAT(r4, 0x0, 0x2, 0x0) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8814}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, r3]}}, @rights={{0x20, 0x1, 0x1, [r3, 0xffffffffffffffff, r2, r2]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r5}}}], 0x58, 0x20000801}}, {{&(0x7f0000000d00)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x2b, 0x1, 0x2, {r0}}}, @cred={{0x1c}}], 0x58, 0x20004040}}, {{&(0x7f0000001480)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001580)=[{0x0}], 0x1, 0x0, 0xfffffffffffffe8d, 0x40010}}], 0x4, 0x24048880) r6 = socket$alg(0x26, 0x5, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$kcm(r7, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001a00)="e8", 0x3f}], 0x1}, 0x0) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f}}, 0x20) 12.796176664s ago: executing program 8 (id=1919): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) getrlimit(0x5, &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000500)=""/194, &(0x7f0000000300)=0xc2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000001e0000850000008200000095000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$BLKPG(r5, 0x1269, &(0x7f00000000c0)={0xf7c8561671f7aa05, 0x0, 0x98, &(0x7f0000000000)={0x0, 0x200, 0x801000e}}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r6, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) recvmsg(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r6, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x8, 0x63b2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x20000, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x3ff}, 0x8) ioctl$int_in(r7, 0x5421, &(0x7f0000001100)=0x2000000009) connect$bt_sco(r7, &(0x7f0000000040)={0x1f, @fixed}, 0x8) close(r7) 11.38995315s ago: executing program 0 (id=1921): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x0, &(0x7f0000000100)}) getrusage(0x0, &(0x7f0000000180)) unshare(0x4a050800) socket$inet_tcp(0x2, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'erspan0\x00', 0x0}) futex(0x0, 0x4, 0xffffffba, 0x0, 0x0, 0x4000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x1010, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r1) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00051400000000000000000000000800120000000200c06b6e000000000006000000000000000000000000000000e00000020000000000000000000000000000000000000000000000000000000105000500008000000a0000000000000000000000000000000000000000000001000000000000000005000600ff4700000a"], 0xa0}}, 0x0) 8.644933224s ago: executing program 6 (id=1922): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0xf, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='\x00'/15, @ANYBLOB], 0x50) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f00000002c0)={0xc, r3}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r2, 0x3b72, &(0x7f0000000300)={0x18, 0x2, 0xfdfd}) r4 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0) sendmsg$inet(r4, &(0x7f00000004c0)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe0000000}, 0x40) r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0x80045505, &(0x7f0000000340)=@usbdevfs_connect) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000180)=@urb_type_control={0x2, {0x8, 0x1}, 0x9, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x9, 0x4, 0x0}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000006c0)='net/route\x00') preadv(r6, &(0x7f00000025c0)=[{&(0x7f0000002500)=""/79, 0x4f}], 0x1, 0x10006c, 0x0) 7.889935114s ago: executing program 6 (id=1923): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b0000000000000000000000018000000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) r3 = semget$private(0x0, 0x4, 0x30) semctl$IPC_STAT(r3, 0x0, 0x2, 0x0) getresuid(&(0x7f0000000140), 0x0, &(0x7f0000000300)=0x0) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r3, 0x0, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8814}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, r2]}}, @rights={{0x20, 0x1, 0x1, [r2, 0xffffffffffffffff, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r5}}}], 0x58, 0x20000801}}, {{&(0x7f0000000d00)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x2b}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}], 0x58, 0x20004040}}, {{&(0x7f0000001480)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001580)=[{0x0}], 0x1, 0x0, 0xfffffffffffffe8d, 0x40010}}], 0x4, 0x24048880) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001a00)="e8", 0x3f}], 0x1}, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101000) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f0000000080)=0x4) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f}}, 0x20) 7.739472617s ago: executing program 0 (id=1924): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b0000000000000000000000018000000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) r4 = semget$private(0x0, 0x4, 0x30) semctl$IPC_STAT(r4, 0x0, 0x2, 0x0) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8814}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, r3]}}, @rights={{0x20, 0x1, 0x1, [r3, 0xffffffffffffffff, r2, r2]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r5}}}], 0x58, 0x20000801}}, {{&(0x7f0000000d00)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x2b, 0x1, 0x2, {r0}}}, @cred={{0x1c}}], 0x58, 0x20004040}}, {{&(0x7f0000001480)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001580)=[{0x0}], 0x1, 0x0, 0xfffffffffffffe8d, 0x40010}}], 0x4, 0x24048880) r6 = socket$alg(0x26, 0x5, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$kcm(r7, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001a00)="e8", 0x3f}], 0x1}, 0x0) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f}}, 0x20) 7.134930054s ago: executing program 8 (id=1925): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x40000000015, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0xa, 0x801, 0x40000084) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) request_key(0x0, 0x0, &(0x7f0000001fee)='y\xa9rust\xe3c*s\xb8dn::e\x00\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r4 = dup(r3) ioctl$TCSETSF(r4, 0x5404, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7c, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000140)={0x2, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000040)=0x1) 6.98562834s ago: executing program 7 (id=1926): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x3, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}}, &(0x7f0000000080)='GPL\x00', 0xf, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(0xffffffffffffffff, 0x3b88, &(0x7f00000002c0)={0xc, r1}) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000180)=@urb_type_control={0x2, {0x8, 0x1}, 0x9, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x9, 0x4, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000006c0)='net/route\x00') preadv(r2, &(0x7f00000025c0)=[{&(0x7f0000002500)=""/79, 0x4f}], 0x1, 0x10006c, 0x0) 5.395512973s ago: executing program 8 (id=1927): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) setsockopt$ax25_int(r1, 0x101, 0x6, &(0x7f0000000640)=0x26a, 0x4) 5.239473742s ago: executing program 6 (id=1928): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) 5.073260285s ago: executing program 8 (id=1929): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[], 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) r2 = semget$private(0x0, 0x4, 0x30) semctl$IPC_STAT(r2, 0x0, 0x2, 0x0) getresuid(&(0x7f0000000140), 0x0, &(0x7f0000000300)) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000480)) semctl$IPC_SET(r2, 0x0, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003a40), 0x0, 0x24048880) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001a00)="e8", 0x3f}], 0x1}, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101000) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000080)=0x4) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r7 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f}}, 0x20) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r7, 0xc0884113, &(0x7f00000005c0)={0x1, 0xc0000000, 0xffffffff, 0xff, 0x0, 0x7, 0x6, 0x3, 0xe, 0x2c, 0xfffffffe, 0x1}) 4.662896035s ago: executing program 6 (id=1930): epoll_create(0x2a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) read$FUSE(r3, &(0x7f0000001740)={0x2020}, 0x2020) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0xdd218) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xb, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000280), 0x120008, &(0x7f00000002c0)={'trans=virtio,', {[{@msize={'msize', 0x3d, 0x4}}, {@loose}]}}) gettid() r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r4, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 3.753555609s ago: executing program 0 (id=1931): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0x5, &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000500)=""/194, &(0x7f0000000300)=0xc2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000001e0000850000008200000095000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$BLKPG(r5, 0x1269, &(0x7f00000000c0)={0xf7c8561671f7aa05, 0x0, 0x98, &(0x7f0000000000)={0x0, 0x200, 0x801000e}}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r6, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) recvmsg(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r6, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) socket$kcm(0x29, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x8, 0x63b2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x20000, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x3ff}, 0x8) ioctl$int_in(r7, 0x5421, &(0x7f0000001100)=0x2000000009) connect$bt_sco(r7, &(0x7f0000000040)={0x1f, @fixed}, 0x8) 3.697589441s ago: executing program 7 (id=1932): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0001}]}) getrusage(0x0, &(0x7f0000000180)) socket$inet_tcp(0x2, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) r0 = getpid() ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'erspan0\x00', 0x0}) futex(0x0, 0x4, 0xffffffba, 0x0, 0x0, 0x4000000) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) close(0xffffffffffffffff) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xa0}}, 0x0) 1.528875819s ago: executing program 8 (id=1933): socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) unlink(&(0x7f0000000100)='./file0\x00') write$USERIO_CMD_REGISTER(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, 0x0, 0x8, 0xba, &(0x7f0000000140)=""/186, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000121000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r4, &(0x7f0000000340)={0x230, 0x7d, 0x40, {{0x500, 0xef, 0x0, 0xb000000, {0x0, 0x2, 0x7}, 0x0, 0x0, 0x0, 0x5, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x14, '\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e<]\xb4Z', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1h\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\b\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x230) 1.147748548s ago: executing program 6 (id=1934): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0xf, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='\x00'/15, @ANYBLOB], 0x50) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f00000002c0)={0xc, r3}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r2, 0x3b72, &(0x7f0000000300)={0x18, 0x2, 0xfdfd}) r4 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0) sendmsg$inet(r4, &(0x7f00000004c0)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe0000000}, 0x40) r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0x80045505, &(0x7f0000000340)=@usbdevfs_connect) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000180)=@urb_type_control={0x2, {0x8, 0x1}, 0x9, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x9, 0x4, 0x0}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000006c0)='net/route\x00') preadv(r6, &(0x7f00000025c0)=[{&(0x7f0000002500)=""/79, 0x4f}], 0x1, 0x10006c, 0x0) 54.138903ms ago: executing program 8 (id=1935): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0x5, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000500)=""/194, &(0x7f0000000300)=0xc2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000001e0000850000008200000095000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$BLKPG(r5, 0x1269, &(0x7f00000000c0)={0xf7c8561671f7aa05, 0x0, 0x98, &(0x7f0000000000)={0x0, 0x200, 0x801000e}}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r6, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) recvmsg(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r6, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x8, 0x63b2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x20000, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x3ff}, 0x8) ioctl$int_in(r7, 0x5421, &(0x7f0000001100)=0x2000000009) connect$bt_sco(r7, &(0x7f0000000040)={0x1f, @fixed}, 0x8) close(r7) 0s ago: executing program 6 (id=1936): socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) unlink(&(0x7f0000000100)='./file0\x00') write$USERIO_CMD_REGISTER(r1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, 0x0, 0x8, 0xba, &(0x7f0000000140)=""/186, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000121000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r5, &(0x7f0000000340)={0x230, 0x7d, 0x40, {{0x500, 0xef, 0x0, 0xb000000, {0x0, 0x2, 0x7}, 0x0, 0x0, 0x0, 0x5, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x14, '\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e<]\xb4Z', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1h\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\b\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x230) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="940000001000010000000000000000000000000afbff0000090a010400000000000000000700000008000a4000e4ffff0800020073797a3100000000080005400000000d140000001000010000000000000000000084000a"], 0x58}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002640), 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r6, 0x5404) kernel console output (not intermixed with test programs): disabled state [ 900.739257][T10990] bridge_slave_1: entered allmulticast mode [ 900.871028][T10990] bridge_slave_1: entered promiscuous mode [ 902.037715][T10990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 902.116050][T10990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 902.385029][ T8958] bridge_slave_1: left allmulticast mode [ 902.421745][ T8958] bridge_slave_1: left promiscuous mode [ 902.459959][ T8958] bridge0: port 2(bridge_slave_1) entered disabled state [ 902.642355][ T8958] bridge_slave_0: left allmulticast mode [ 902.758801][ T8958] bridge_slave_0: left promiscuous mode [ 902.864688][ T8958] bridge0: port 1(bridge_slave_0) entered disabled state [ 903.139292][ T8958] bridge_slave_1: left allmulticast mode [ 903.191579][ T8958] bridge_slave_1: left promiscuous mode [ 903.226504][ T8958] bridge0: port 2(bridge_slave_1) entered disabled state [ 903.265595][ T8958] bridge_slave_0: left allmulticast mode [ 903.287798][ T8958] bridge_slave_0: left promiscuous mode [ 903.359735][ T8958] bridge0: port 1(bridge_slave_0) entered disabled state [ 904.360875][ T8958] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 904.420035][ T8958] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 904.435959][T11163] loop4: detected capacity change from 0 to 164 [ 904.446896][T11163] Unable to read rock-ridge attributes [ 904.515178][T11158] loop0: detected capacity change from 0 to 32768 [ 904.590881][ T8958] bond0 (unregistering): Released all slaves [ 904.613590][T11158] [ 904.613590][T11158] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 904.613590][T11158] [ 904.925163][T11167] Unable to read rock-ridge attributes [ 904.945113][T11167] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 905.047276][T11169] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1144'. [ 905.877187][T11169] read_mapping_page failed! [ 906.337679][ T5839] [ 906.337679][ T5839] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 906.337679][ T5839] [ 906.352008][ T5839] [ 906.352008][ T5839] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 906.352008][ T5839] [ 912.980018][ T8958] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 914.280594][ T8958] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 914.375735][ T8958] bond0 (unregistering): Released all slaves [ 916.570958][T10990] team0: Port device team_slave_0 added [ 916.826712][ T8958] hsr_slave_0: left promiscuous mode [ 917.649896][ T8958] hsr_slave_1: left promiscuous mode [ 917.931804][ T8958] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 918.013710][ T8958] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 918.083346][ T8958] hsr_slave_0: left promiscuous mode [ 918.139939][ T8958] hsr_slave_1: left promiscuous mode [ 918.166268][ T8958] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 918.188431][ T8958] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 921.369737][ T8958] team0 (unregistering): Port device team_slave_1 removed [ 921.955123][ T8958] team0 (unregistering): Port device team_slave_0 removed [ 922.393111][ T5842] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 922.403824][ T5842] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 922.413829][ T5842] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 922.426138][ T5842] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 922.639574][ T5842] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 922.654588][ T5842] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 924.791207][ T5842] Bluetooth: hci5: command tx timeout [ 926.832314][ T5842] Bluetooth: hci5: command tx timeout [ 928.631485][ T8958] team0 (unregistering): Port device team_slave_1 removed [ 928.917599][T10003] Bluetooth: hci5: command tx timeout [ 928.985435][ T8958] team0 (unregistering): Port device team_slave_0 removed [ 930.201568][T10990] team0: Port device team_slave_1 added [ 931.046812][T10003] Bluetooth: hci5: command 0x0419 tx timeout [ 931.057564][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.067839][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.587047][T10990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 931.613616][T10990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 932.388433][T10990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 932.483103][T10990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 932.547153][T10990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 932.679176][T10990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 932.837967][ T5850] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 932.850014][ T5850] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 932.864497][ T5850] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 932.874769][ T5850] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 932.883483][ T5850] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 932.891326][ T5850] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 933.069473][ T5842] Bluetooth: hci5: command 0x0419 tx timeout [ 934.168098][T10990] hsr_slave_0: entered promiscuous mode [ 934.240320][T10990] hsr_slave_1: entered promiscuous mode [ 934.268669][T10990] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 934.305554][T10990] Cannot create hsr debugfs directory [ 934.991502][ T5842] Bluetooth: hci7: command tx timeout [ 937.079620][ T5842] Bluetooth: hci7: command tx timeout [ 939.399499][ T5842] Bluetooth: hci7: command tx timeout [ 941.469489][ T5842] Bluetooth: hci7: command tx timeout [ 941.980227][T11274] chnl_net:caif_netlink_parms(): no params data found [ 943.996440][T11343] chnl_net:caif_netlink_parms(): no params data found [ 944.517257][ T5850] Bluetooth: hci7: command 0x0405 tx timeout [ 945.451351][T11274] bridge0: port 1(bridge_slave_0) entered blocking state [ 945.480989][T11274] bridge0: port 1(bridge_slave_0) entered disabled state [ 945.488512][T11274] bridge_slave_0: entered allmulticast mode [ 945.502163][T11274] bridge_slave_0: entered promiscuous mode [ 945.732267][ T8958] bridge_slave_1: left allmulticast mode [ 945.771951][ T8958] bridge_slave_1: left promiscuous mode [ 945.815783][ T8958] bridge0: port 2(bridge_slave_1) entered disabled state [ 945.906944][ T8958] bridge_slave_0: left allmulticast mode [ 945.955322][ T8958] bridge_slave_0: left promiscuous mode [ 945.999624][ T8958] bridge0: port 1(bridge_slave_0) entered disabled state [ 946.182859][ T8958] bridge_slave_1: left allmulticast mode [ 946.188649][ T8958] bridge_slave_1: left promiscuous mode [ 946.235427][ T8958] bridge0: port 2(bridge_slave_1) entered disabled state [ 946.370227][ T8958] bridge_slave_0: left allmulticast mode [ 946.376109][ T8958] bridge_slave_0: left promiscuous mode [ 946.402960][ T8958] bridge0: port 1(bridge_slave_0) entered disabled state [ 946.429520][T10003] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 946.439389][T10003] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 946.448015][T10003] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 946.460537][T10003] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 946.471510][T10003] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 946.479115][T10003] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 946.485940][ T8958] bridge_slave_1: left allmulticast mode [ 946.496325][ T8958] bridge_slave_1: left promiscuous mode [ 946.510168][ T8958] bridge0: port 2(bridge_slave_1) entered disabled state [ 946.562722][ T8958] bridge_slave_0: left allmulticast mode [ 946.599511][ T8958] bridge_slave_0: left promiscuous mode [ 946.638138][ T8958] bridge0: port 1(bridge_slave_0) entered disabled state [ 947.371269][ T8958] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 947.407066][ T8958] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 947.621106][ T8958] bond0 (unregistering): Released all slaves [ 947.653016][ T8958] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 948.723313][T10003] Bluetooth: hci3: command tx timeout [ 948.730229][ T8958] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 948.780578][ T8958] bond0 (unregistering): Released all slaves [ 949.905700][ T8958] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 950.151872][ T8958] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 950.162284][ T8958] bond0 (unregistering): Released all slaves [ 950.189501][T11274] bridge0: port 2(bridge_slave_1) entered blocking state [ 950.409555][T11274] bridge0: port 2(bridge_slave_1) entered disabled state [ 950.418322][T11483] vivid-001: kernel_thread() failed [ 950.519850][T11274] bridge_slave_1: entered allmulticast mode [ 950.567275][T11274] bridge_slave_1: entered promiscuous mode [ 950.756402][T10003] Bluetooth: hci3: command tx timeout [ 951.067711][ T8958] hsr_slave_0: left promiscuous mode [ 951.089057][ T8958] hsr_slave_1: left promiscuous mode [ 951.095461][ T8958] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 951.103369][ T8958] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 951.229032][ T8958] hsr_slave_0: left promiscuous mode [ 951.242857][ T8958] hsr_slave_1: left promiscuous mode [ 951.262349][ T8958] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 952.320657][ T8958] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 953.280201][T10003] Bluetooth: hci3: command tx timeout [ 953.887494][ T8958] hsr_slave_0: left promiscuous mode [ 953.894220][ T8958] hsr_slave_1: left promiscuous mode [ 953.938267][ T8958] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 953.968864][ T8958] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 954.854652][ T8958] team0 (unregistering): Port device team_slave_1 removed [ 954.949788][ T8958] team0 (unregistering): Port device team_slave_0 removed [ 955.309750][T10003] Bluetooth: hci3: command tx timeout [ 956.206812][ T8958] team0 (unregistering): Port device team_slave_1 removed [ 956.410086][ T8958] team0 (unregistering): Port device team_slave_0 removed [ 958.529822][ T5842] Bluetooth: hci3: command 0x0405 tx timeout [ 958.814934][ T8958] team0 (unregistering): Port device team_slave_1 removed [ 959.045393][ T8958] team0 (unregistering): Port device team_slave_0 removed [ 960.642348][T11274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 960.821631][T11343] bridge0: port 1(bridge_slave_0) entered blocking state [ 960.844068][T11343] bridge0: port 1(bridge_slave_0) entered disabled state [ 961.041794][T11343] bridge_slave_0: entered allmulticast mode [ 961.335157][T11343] bridge_slave_0: entered promiscuous mode [ 961.378070][T11343] bridge0: port 2(bridge_slave_1) entered blocking state [ 961.429570][T11343] bridge0: port 2(bridge_slave_1) entered disabled state [ 961.436908][T11343] bridge_slave_1: entered allmulticast mode [ 961.511118][T11343] bridge_slave_1: entered promiscuous mode [ 962.085415][T11274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 962.934683][T11343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 962.996252][T11343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 963.076396][T11274] team0: Port device team_slave_0 added [ 963.977131][T11274] team0: Port device team_slave_1 added [ 965.505685][T11343] team0: Port device team_slave_0 added [ 965.571114][T11343] team0: Port device team_slave_1 added [ 965.788975][T11274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 965.850498][T11274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 965.958361][T11274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 966.316790][T11343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 966.324676][T11343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 966.948440][T11343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 967.102082][T11274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 967.109071][T11274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 967.449703][T11274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 967.551052][T11343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 967.688630][T11343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 967.805861][T11343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 968.470540][T11274] hsr_slave_0: entered promiscuous mode [ 968.517882][T11274] hsr_slave_1: entered promiscuous mode [ 968.538863][T11274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 968.564027][T11274] Cannot create hsr debugfs directory [ 968.796215][T11343] hsr_slave_0: entered promiscuous mode [ 968.912670][T11343] hsr_slave_1: entered promiscuous mode [ 968.973904][T11343] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 969.066528][T11343] Cannot create hsr debugfs directory [ 969.465010][T11467] chnl_net:caif_netlink_parms(): no params data found [ 970.930807][T11467] bridge0: port 1(bridge_slave_0) entered blocking state [ 970.938053][T11467] bridge0: port 1(bridge_slave_0) entered disabled state [ 971.021817][T11467] bridge_slave_0: entered allmulticast mode [ 971.065798][T11467] bridge_slave_0: entered promiscuous mode [ 971.588403][ T8958] bridge_slave_1: left allmulticast mode [ 972.169565][ T8958] bridge_slave_1: left promiscuous mode [ 972.175559][ T8958] bridge0: port 2(bridge_slave_1) entered disabled state [ 972.260288][ T8958] bridge_slave_0: left allmulticast mode [ 972.266097][ T8958] bridge_slave_0: left promiscuous mode [ 972.319605][ T8958] bridge0: port 1(bridge_slave_0) entered disabled state [ 973.654568][ T8958] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 974.668901][ T8958] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 974.807545][ T8958] bond0 (unregistering): Released all slaves [ 974.819957][T11467] bridge0: port 2(bridge_slave_1) entered blocking state [ 974.827426][T11467] bridge0: port 2(bridge_slave_1) entered disabled state [ 974.837608][T11467] bridge_slave_1: entered allmulticast mode [ 974.879600][T11467] bridge_slave_1: entered promiscuous mode [ 975.568585][ T8958] hsr_slave_0: left promiscuous mode [ 975.729810][ T8958] hsr_slave_1: left promiscuous mode [ 976.719644][ T8958] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 976.779997][ T8958] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 979.364126][ T8958] team0 (unregistering): Port device team_slave_1 removed [ 979.655181][ T8958] team0 (unregistering): Port device team_slave_0 removed [ 980.352093][T11467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 980.389684][T11467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 980.431939][T11343] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 980.979099][T11467] team0: Port device team_slave_0 added [ 981.076202][T11343] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 981.290769][T11467] team0: Port device team_slave_1 added [ 982.981104][T10003] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 982.994920][T10003] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 983.010169][T10003] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 983.020102][T10003] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 983.031062][T10003] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 983.038504][T10003] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 983.089929][T11343] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 983.763888][T11343] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 984.410995][T11467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 984.499472][T11467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 984.661283][T11467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 984.728462][T11467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 985.649478][T10003] Bluetooth: hci0: command tx timeout [ 985.699371][T11467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 985.749701][T11467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 987.823637][T10003] Bluetooth: hci0: command tx timeout [ 987.832579][ T8958] bridge_slave_1: left allmulticast mode [ 987.838447][ T8958] bridge_slave_1: left promiscuous mode [ 987.846958][ T8958] bridge0: port 2(bridge_slave_1) entered disabled state [ 988.191698][ T8958] bridge_slave_0: left allmulticast mode [ 988.197429][ T8958] bridge_slave_0: left promiscuous mode [ 988.209117][ T8958] bridge0: port 1(bridge_slave_0) entered disabled state [ 989.970966][T10003] Bluetooth: hci0: command tx timeout [ 990.525262][ T8958] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 990.585743][ T8958] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 990.632734][ T8958] bond0 (unregistering): Released all slaves [ 990.906111][T11467] hsr_slave_0: entered promiscuous mode [ 990.931800][T11467] hsr_slave_1: entered promiscuous mode [ 990.945540][T11467] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 990.959633][T11467] Cannot create hsr debugfs directory [ 990.995184][ T8958] hsr_slave_0: left promiscuous mode [ 991.010357][ T8958] hsr_slave_1: left promiscuous mode [ 991.040001][ T8958] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 991.058050][ T8958] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 991.335097][ T8958] team0 (unregistering): Port device team_slave_1 removed [ 991.377303][ T8958] team0 (unregistering): Port device team_slave_0 removed [ 992.081454][T10003] Bluetooth: hci0: command tx timeout [ 993.101883][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.132309][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 995.251477][ T5842] Bluetooth: hci0: command 0x0405 tx timeout [ 995.709290][ T5842] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 995.723082][T11467] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 995.731949][ T5842] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 995.779477][ T5842] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 995.782714][T11467] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 995.810750][ T5842] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 995.819655][ T5842] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 995.829220][ T5842] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 995.996209][T11467] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 996.063325][T11704] chnl_net:caif_netlink_parms(): no params data found [ 996.173126][T11467] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 997.441925][T11704] bridge0: port 1(bridge_slave_0) entered blocking state [ 997.470376][T11704] bridge0: port 1(bridge_slave_0) entered disabled state [ 997.478106][T11704] bridge_slave_0: entered allmulticast mode [ 997.516473][T11704] bridge_slave_0: entered promiscuous mode [ 997.531761][T11704] bridge0: port 2(bridge_slave_1) entered blocking state [ 997.555195][T11704] bridge0: port 2(bridge_slave_1) entered disabled state [ 997.573420][T11704] bridge_slave_1: entered allmulticast mode [ 997.590544][T11704] bridge_slave_1: entered promiscuous mode [ 997.802675][T11704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 997.842519][T11704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 997.949816][T10003] Bluetooth: hci5: command tx timeout [ 997.986959][T11704] team0: Port device team_slave_0 added [ 998.057161][T11704] team0: Port device team_slave_1 added [ 998.233577][T11704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 998.241162][T11704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 998.276616][T11704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 998.400423][T11704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 998.407688][T11704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 998.479557][T11704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 998.754809][T11790] loop0: detected capacity change from 0 to 32768 [ 999.531943][T11790] [ 999.531943][T11790] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 999.531943][T11790] [ 1000.050901][T10003] Bluetooth: hci5: command tx timeout [ 1000.060130][T11467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1001.659744][T11810] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1275'. [ 1001.796128][T11812] find_entry called with index = 0 [ 1001.802230][T11812] read_mapping_page failed! [ 1001.806843][T11812] ERROR: (device loop0): txCommit: [ 1001.806843][T11812] [ 1002.119773][ T5842] Bluetooth: hci5: command tx timeout [ 1002.792965][ T5839] [ 1002.792965][ T5839] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1002.792965][ T5839] [ 1002.874800][ T5839] [ 1002.874800][ T5839] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1002.874800][ T5839] [ 1003.228647][ T8958] bridge_slave_1: left allmulticast mode [ 1003.719415][ T8958] bridge_slave_1: left promiscuous mode [ 1003.726874][ T8958] bridge0: port 2(bridge_slave_1) entered disabled state [ 1003.820461][ T8958] bridge_slave_0: left allmulticast mode [ 1003.846517][ T8958] bridge_slave_0: left promiscuous mode [ 1003.866388][ T8958] bridge0: port 1(bridge_slave_0) entered disabled state [ 1004.197070][ T5842] Bluetooth: hci5: command 0x0419 tx timeout [ 1005.000140][ T8958] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1005.059286][ T8958] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1005.082573][ T8958] bond0 (unregistering): Released all slaves [ 1005.137608][T11704] hsr_slave_0: entered promiscuous mode [ 1005.169981][T11704] hsr_slave_1: entered promiscuous mode [ 1005.191608][T11704] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1005.209556][T11704] Cannot create hsr debugfs directory [ 1005.288113][ T8958] hsr_slave_0: left promiscuous mode [ 1005.330927][ T8958] hsr_slave_1: left promiscuous mode [ 1005.353944][ T8958] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1005.384233][ T8958] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1005.814416][ T8958] team0 (unregistering): Port device team_slave_1 removed [ 1005.845555][ T8958] team0 (unregistering): Port device team_slave_0 removed [ 1006.128794][T11775] chnl_net:caif_netlink_parms(): no params data found [ 1006.250218][T11775] bridge0: port 1(bridge_slave_0) entered blocking state [ 1006.259550][T11775] bridge0: port 1(bridge_slave_0) entered disabled state [ 1006.266840][T11775] bridge_slave_0: entered allmulticast mode [ 1006.273147][ T5842] Bluetooth: hci5: command 0x0419 tx timeout [ 1006.281074][T11775] bridge_slave_0: entered promiscuous mode [ 1006.288953][T11775] bridge0: port 2(bridge_slave_1) entered blocking state [ 1006.299522][T11775] bridge0: port 2(bridge_slave_1) entered disabled state [ 1006.306709][T11775] bridge_slave_1: entered allmulticast mode [ 1006.313793][T11775] bridge_slave_1: entered promiscuous mode [ 1006.371920][T11775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1006.385987][T11775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1006.429472][T11704] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1006.450509][T11704] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1006.520834][T11775] team0: Port device team_slave_0 added [ 1006.605404][T11775] team0: Port device team_slave_1 added [ 1006.759417][T11704] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1006.823590][T11704] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1007.371471][T11775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1007.378550][T11775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1007.615485][T11775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1007.724157][T11775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1007.779809][T11775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1007.955111][T11775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1008.259118][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1008.275969][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1008.276360][T11775] hsr_slave_0: entered promiscuous mode [ 1008.303659][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1008.317825][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1008.327119][T11775] hsr_slave_1: entered promiscuous mode [ 1008.338784][ T5842] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1008.348608][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1008.356129][ T5850] Bluetooth: hci5: command 0x0419 tx timeout [ 1008.364056][T11775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1008.396736][T11775] Cannot create hsr debugfs directory [ 1009.347449][T11704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1009.650472][T11704] 8021q: adding VLAN 0 to HW filter on device team0 [ 1009.716198][T11704] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1009.726741][T11704] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1009.775611][ T8958] bridge_slave_1: left allmulticast mode [ 1009.784540][ T8958] bridge_slave_1: left promiscuous mode [ 1009.828010][ T8958] bridge0: port 2(bridge_slave_1) entered disabled state [ 1009.847280][ T8958] bridge_slave_0: left allmulticast mode [ 1009.855335][ T8958] bridge_slave_0: left promiscuous mode [ 1009.873801][ T8958] bridge0: port 1(bridge_slave_0) entered disabled state [ 1010.457522][T10003] Bluetooth: hci3: command tx timeout [ 1012.933082][ T5842] Bluetooth: hci3: command tx timeout [ 1013.993465][ T8958] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1015.049489][ T5842] Bluetooth: hci3: command 0x040f tx timeout [ 1015.396843][ T8958] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1015.424068][ T8958] bond0 (unregistering): Released all slaves [ 1015.782185][T11658] bridge0: port 1(bridge_slave_0) entered blocking state [ 1015.789415][T11658] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1015.871749][T11658] bridge0: port 2(bridge_slave_1) entered blocking state [ 1015.878934][T11658] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1016.315186][ T8958] hsr_slave_0: left promiscuous mode [ 1016.369759][ T8958] hsr_slave_1: left promiscuous mode [ 1016.422910][ T8958] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1016.467847][ T8958] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1017.046963][ T8958] team0 (unregistering): Port device team_slave_1 removed [ 1017.070030][T10003] Bluetooth: hci3: command 0x040f tx timeout [ 1017.386807][ T8958] team0 (unregistering): Port device team_slave_0 removed [ 1018.762139][T11704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1019.150007][T10003] Bluetooth: hci3: command 0x040f tx timeout [ 1019.622604][T11845] chnl_net:caif_netlink_parms(): no params data found [ 1021.120938][T11845] bridge0: port 1(bridge_slave_0) entered blocking state [ 1021.128188][T11845] bridge0: port 1(bridge_slave_0) entered disabled state [ 1021.166975][T11845] bridge_slave_0: entered allmulticast mode [ 1021.189159][T11845] bridge_slave_0: entered promiscuous mode [ 1021.308242][T11775] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1021.341887][T11911] loop1: detected capacity change from 0 to 32768 [ 1021.363118][T11911] [ 1021.363118][T11911] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1021.363118][T11911] [ 1021.602089][T11704] veth0_vlan: entered promiscuous mode [ 1021.639025][T11845] bridge0: port 2(bridge_slave_1) entered blocking state [ 1021.646377][T11845] bridge0: port 2(bridge_slave_1) entered disabled state [ 1021.654166][T11845] bridge_slave_1: entered allmulticast mode [ 1021.661549][T11845] bridge_slave_1: entered promiscuous mode [ 1021.669062][T11775] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1021.743979][T11936] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1301'. [ 1021.970346][T11936] find_entry called with index = 0 [ 1021.976665][T11936] read_mapping_page failed! [ 1021.981367][T11936] ERROR: (device loop1): txCommit: [ 1021.981367][T11936] [ 1022.252523][T11704] veth1_vlan: entered promiscuous mode [ 1022.282254][T11775] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1022.302696][T11775] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1022.389568][T11845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1022.435011][T11845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1022.462851][ T5843] [ 1022.462851][ T5843] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1022.462851][ T5843] [ 1022.496647][ T5843] [ 1022.496647][ T5843] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1022.496647][ T5843] [ 1022.687840][T11845] team0: Port device team_slave_0 added [ 1022.723424][T11845] team0: Port device team_slave_1 added [ 1022.817428][T11704] veth0_macvtap: entered promiscuous mode [ 1022.828327][T11704] veth1_macvtap: entered promiscuous mode [ 1023.369930][T11845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1023.392960][T11845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1023.487970][T11845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1024.988212][T11845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1024.995494][T11845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1025.084094][T11845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1025.172366][T11704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1025.195256][T11704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.281035][T11704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1025.310115][ T5842] Bluetooth: hci3: command 0x040f tx timeout [ 1025.317942][T11704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.339381][T11704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1025.364508][T11704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.382285][T11704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1025.548220][T11704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1025.596611][T11704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.614295][T11704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1025.671446][T11704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.732876][T11704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1026.008570][T11704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1026.216259][T11704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1026.403967][T11775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1026.545673][T11845] hsr_slave_0: entered promiscuous mode [ 1026.858603][T11845] hsr_slave_1: entered promiscuous mode [ 1026.987410][T11845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1027.199379][T11845] Cannot create hsr debugfs directory [ 1027.231626][T11704] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.299907][T11704] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.347368][T11704] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.398172][T11704] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.919858][T11775] 8021q: adding VLAN 0 to HW filter on device team0 [ 1028.142396][ T961] bridge0: port 1(bridge_slave_0) entered blocking state [ 1028.149579][ T961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1028.240079][ T961] bridge0: port 2(bridge_slave_1) entered blocking state [ 1028.247354][ T961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1029.918411][T11977] loop4: detected capacity change from 0 to 32768 [ 1030.128250][T11977] [ 1030.128250][T11977] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1030.128250][T11977] [ 1030.224591][ T961] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1030.271367][ T961] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1030.433229][ T961] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1030.466645][ T961] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1030.797446][T11999] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1315'. [ 1031.127799][T12000] find_entry called with index = 0 [ 1031.134005][T12000] read_mapping_page failed! [ 1031.138641][T12000] ERROR: (device loop4): txCommit: [ 1031.138641][T12000] [ 1031.431061][T11845] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1031.592672][T11845] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1031.623873][ T5830] [ 1031.623873][ T5830] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1031.623873][ T5830] [ 1031.657046][ T5830] [ 1031.657046][ T5830] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1031.657046][ T5830] [ 1031.717884][T11845] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1031.750814][T11845] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1031.776895][T11775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1031.853188][T11845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1031.905083][T11845] 8021q: adding VLAN 0 to HW filter on device team0 [ 1031.938395][T11845] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1031.948934][T11845] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1031.967224][ T8788] bridge0: port 1(bridge_slave_0) entered blocking state [ 1031.974413][ T8788] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1031.984344][ T8788] bridge0: port 2(bridge_slave_1) entered blocking state [ 1031.991508][ T8788] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1032.280640][ T5842] Bluetooth: hci3: command 0x040f tx timeout [ 1034.193501][T11845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1034.348087][T11775] veth0_vlan: entered promiscuous mode [ 1034.359973][T11775] veth1_vlan: entered promiscuous mode [ 1034.381751][T11775] veth0_macvtap: entered promiscuous mode [ 1034.390846][T11775] veth1_macvtap: entered promiscuous mode [ 1034.407618][T11775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1034.418191][T11775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1034.428121][T11775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1034.438953][T11775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1034.448955][T11775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1034.459709][T11775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1034.469859][T11775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1034.480729][T11775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1034.491855][T11775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1034.502672][T11775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1034.513382][T11775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1034.523350][T11775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1034.533888][T11775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1034.543939][T11775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1034.554613][T11775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1034.564762][T11775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1034.575474][T11775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1034.586461][T11775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1034.622607][T11775] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.631492][ T5842] Bluetooth: hci3: command 0x040f tx timeout [ 1034.637541][T11775] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.646324][T11775] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.656159][T11775] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.928278][ T8788] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1036.979597][ T8788] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1037.146209][ T961] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1037.156047][ T961] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1038.974230][ T5842] Bluetooth: hci3: command 0x040f tx timeout [ 1040.931350][T11845] veth0_vlan: entered promiscuous mode [ 1041.256443][T11845] veth1_vlan: entered promiscuous mode [ 1042.204868][T12103] loop4: detected capacity change from 0 to 8 [ 1042.243690][ T5850] Bluetooth: hci3: command 0x040f tx timeout [ 1042.392557][T11845] veth0_macvtap: entered promiscuous mode [ 1042.451731][T11845] veth1_macvtap: entered promiscuous mode [ 1042.539782][T11845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1042.550897][T11845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1042.561143][T11845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1042.571823][T11845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1042.581873][T11845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1042.592991][T11845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1042.603609][T11845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1042.614183][T11845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1042.628107][T11845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1042.638916][T11845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1042.662447][T11845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1042.690227][T11845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1042.701047][T11845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1042.711048][T11845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1042.721648][T11845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1042.731857][T11845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1042.742421][T11845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1042.753018][T11845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1042.764069][T11845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1042.774095][T11845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1042.784672][T11845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1042.796780][T11845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1042.886517][T11845] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.017542][T11845] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.159776][T11845] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.168923][T11845] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.548902][ T3595] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1047.605391][ T3595] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1048.469506][ T3595] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1048.514517][ T3595] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1050.975310][T12154] loop1: detected capacity change from 0 to 32768 [ 1051.060351][T12154] [ 1051.060351][T12154] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1051.060351][T12154] [ 1052.293042][T12178] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1351'. [ 1053.471591][T12163] loop6: detected capacity change from 0 to 40427 [ 1054.204593][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.211055][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.549550][ T5944] IPVS: starting estimator thread 0... [ 1056.329222][T12200] IPVS: using max 18 ests per chain, 43200 per kthread [ 1056.786372][ T5843] [ 1056.786372][ T5843] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1056.786372][ T5843] [ 1056.865281][ T5843] [ 1056.865281][ T5843] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1056.865281][ T5843] [ 1092.042954][T10003] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1092.058596][T10003] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1092.084385][T10003] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1092.124628][T10003] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1092.163031][T10003] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1092.370390][T10003] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1094.656789][T12476] chnl_net:caif_netlink_parms(): no params data found [ 1094.699575][T10003] Bluetooth: hci6: command tx timeout [ 1097.072071][T10003] Bluetooth: hci6: command tx timeout [ 1097.208721][T12476] bridge0: port 1(bridge_slave_0) entered blocking state [ 1097.311883][T12476] bridge0: port 1(bridge_slave_0) entered disabled state [ 1097.363995][T12476] bridge_slave_0: entered allmulticast mode [ 1097.427502][T12476] bridge_slave_0: entered promiscuous mode [ 1097.851519][T12476] bridge0: port 2(bridge_slave_1) entered blocking state [ 1098.197309][T12476] bridge0: port 2(bridge_slave_1) entered disabled state [ 1098.227520][T12476] bridge_slave_1: entered allmulticast mode [ 1098.253106][T12476] bridge_slave_1: entered promiscuous mode [ 1098.695754][ T51] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1098.770648][T12476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1099.205029][T10003] Bluetooth: hci6: command 0x040f tx timeout [ 1099.743859][T12476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1100.721303][ T51] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1101.337870][ T5850] Bluetooth: hci6: command 0x040f tx timeout [ 1103.504355][ T5850] Bluetooth: hci6: command 0x040f tx timeout [ 1103.566240][ T51] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1104.331352][ T51] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1104.371790][T12476] team0: Port device team_slave_0 added [ 1104.385756][T12476] team0: Port device team_slave_1 added [ 1104.909887][T12476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1104.937349][T12476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1105.907133][T12476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1106.270442][T12476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1106.277534][T12476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1106.589398][T12476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1107.166919][T10003] Bluetooth: hci0: command 0x0405 tx timeout [ 1108.845327][T12476] hsr_slave_0: entered promiscuous mode [ 1109.725288][T12476] hsr_slave_1: entered promiscuous mode [ 1111.029538][T12476] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1112.222317][T12476] Cannot create hsr debugfs directory [ 1116.250479][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.256843][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.405776][ T51] bridge_slave_1: left allmulticast mode [ 1116.438233][ T51] bridge_slave_1: left promiscuous mode [ 1116.455749][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 1116.496358][ T51] bridge_slave_0: left allmulticast mode [ 1116.525239][ T51] bridge_slave_0: left promiscuous mode [ 1116.559594][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 1121.873056][T12720] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1122.095823][T12720] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1122.610306][T12720] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1122.620557][T12720] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1122.632001][T12720] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1122.749742][T12720] Bluetooth: hci5: command 0x0419 tx timeout [ 1122.817841][T12720] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1125.395043][T10003] Bluetooth: hci4: command tx timeout [ 1125.521103][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1125.704141][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1125.800849][ T51] bond0 (unregistering): Released all slaves [ 1126.611342][T12476] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1126.692514][T12476] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1126.797342][T12476] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1127.471285][T10003] Bluetooth: hci4: command tx timeout [ 1127.480471][T12476] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1130.279556][ T5850] Bluetooth: hci4: command tx timeout [ 1130.297494][ T51] hsr_slave_0: left promiscuous mode [ 1130.380016][ T51] hsr_slave_1: left promiscuous mode [ 1130.386885][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1130.416152][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1130.536425][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1130.568503][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1130.748630][ T51] veth1_macvtap: left promiscuous mode [ 1130.765247][ T51] veth0_macvtap: left promiscuous mode [ 1130.780289][ T51] veth1_vlan: left promiscuous mode [ 1130.800994][ T51] veth0_vlan: left promiscuous mode [ 1132.359842][T12720] Bluetooth: hci4: command 0x0419 tx timeout [ 1132.759517][T10003] Bluetooth: hci3: command 0x040f tx timeout [ 1133.440280][ T51] team0 (unregistering): Port device team_slave_1 removed [ 1134.057065][ T51] team0 (unregistering): Port device team_slave_0 removed [ 1134.429805][ T5850] Bluetooth: hci4: command 0x0419 tx timeout [ 1138.190830][T10003] Bluetooth: hci4: command 0x0419 tx timeout [ 1138.328216][T12476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1138.359161][T12476] 8021q: adding VLAN 0 to HW filter on device team0 [ 1138.375492][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1138.382927][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1138.670401][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1138.677553][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1139.427745][ T51] IPVS: stop unused estimator thread 0... [ 1139.461454][T12476] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1139.487703][T12476] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1139.574420][T12717] chnl_net:caif_netlink_parms(): no params data found [ 1141.150441][ T51] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.262659][T12717] bridge0: port 1(bridge_slave_0) entered blocking state [ 1141.308881][T12717] bridge0: port 1(bridge_slave_0) entered disabled state [ 1141.386844][T12717] bridge_slave_0: entered allmulticast mode [ 1141.436710][T12717] bridge_slave_0: entered promiscuous mode [ 1141.508643][T12476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1141.676493][ T51] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.744245][T12717] bridge0: port 2(bridge_slave_1) entered blocking state [ 1141.767130][T12717] bridge0: port 2(bridge_slave_1) entered disabled state [ 1141.806531][T12717] bridge_slave_1: entered allmulticast mode [ 1141.836084][T12717] bridge_slave_1: entered promiscuous mode [ 1142.014927][ T51] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.271253][ T51] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.381593][T12717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1142.441037][T12717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1142.667233][T12717] team0: Port device team_slave_0 added [ 1142.737085][T12717] team0: Port device team_slave_1 added [ 1142.914843][T12717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1142.936780][T12717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1143.032325][T12717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1143.111744][T12717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1143.129104][T12717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1143.211509][T12717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1143.443451][T12476] veth0_vlan: entered promiscuous mode [ 1143.457749][T12476] veth1_vlan: entered promiscuous mode [ 1143.480036][ T51] bridge_slave_1: left allmulticast mode [ 1143.485737][ T51] bridge_slave_1: left promiscuous mode [ 1143.523287][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 1143.571215][ T51] bridge_slave_0: left allmulticast mode [ 1143.576927][ T51] bridge_slave_0: left promiscuous mode [ 1143.652110][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 1144.719497][ T5850] Bluetooth: hci4: command 0x0419 tx timeout [ 1151.018052][T12720] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1151.076866][T12720] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1151.086863][T12720] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1151.097986][T12720] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1151.106313][T12720] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1151.147417][T12720] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1153.230014][T10003] Bluetooth: hci1: command tx timeout [ 1156.170511][T10003] Bluetooth: hci1: command tx timeout [ 1156.655989][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1156.738248][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1156.916337][ T51] bond0 (unregistering): Released all slaves [ 1157.733932][T12717] hsr_slave_0: entered promiscuous mode [ 1157.803813][T12717] hsr_slave_1: entered promiscuous mode [ 1158.013255][T12717] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1158.142439][T12717] Cannot create hsr debugfs directory [ 1158.279679][T12720] Bluetooth: hci1: command 0x040f tx timeout [ 1160.359410][T10003] Bluetooth: hci1: command 0x040f tx timeout [ 1162.429391][T10003] Bluetooth: hci1: command 0x040f tx timeout [ 1165.883681][ T51] hsr_slave_0: left promiscuous mode [ 1165.958306][ T51] hsr_slave_1: left promiscuous mode [ 1166.079741][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1166.118038][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1166.314815][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1166.336090][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1167.490644][ T51] veth1_macvtap: left promiscuous mode [ 1167.497155][ T51] veth0_macvtap: left promiscuous mode [ 1167.503176][ T51] veth1_vlan: left promiscuous mode [ 1167.508492][ T51] veth0_vlan: left promiscuous mode [ 1171.973207][ T5850] Bluetooth: hci1: command 0x040f tx timeout [ 1175.946250][ T51] team0 (unregistering): Port device team_slave_1 removed [ 1176.234083][ T51] team0 (unregistering): Port device team_slave_0 removed [ 1176.831225][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.848089][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.667233][T13140] loop6: detected capacity change from 0 to 32768 [ 1179.061145][ T5850] Bluetooth: hci1: command 0x040f tx timeout [ 1179.362048][T13140] [ 1179.362048][T13140] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1179.362048][T13140] [ 1179.750882][T11845] [ 1179.750882][T11845] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1179.750882][T11845] [ 1179.808262][T11845] [ 1179.808262][T11845] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1179.808262][T11845] [ 1182.319440][ T5850] Bluetooth: hci1: command 0x040f tx timeout [ 1182.977188][T12720] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1182.994581][T10003] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1183.034644][T10003] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1183.356712][T10003] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1183.474451][T10003] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1183.505572][T10003] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1186.681851][T10003] Bluetooth: hci6: command tx timeout [ 1188.623487][T13183] chnl_net:caif_netlink_parms(): no params data found [ 1188.755682][T13003] chnl_net:caif_netlink_parms(): no params data found [ 1188.764067][T10003] Bluetooth: hci6: command tx timeout [ 1189.551383][T13183] bridge0: port 1(bridge_slave_0) entered blocking state [ 1189.569001][T13183] bridge0: port 1(bridge_slave_0) entered disabled state [ 1189.600311][T13183] bridge_slave_0: entered allmulticast mode [ 1189.637956][T13183] bridge_slave_0: entered promiscuous mode [ 1189.695056][T13183] bridge0: port 2(bridge_slave_1) entered blocking state [ 1189.737807][T13183] bridge0: port 2(bridge_slave_1) entered disabled state [ 1189.783086][T13183] bridge_slave_1: entered allmulticast mode [ 1189.836738][T13183] bridge_slave_1: entered promiscuous mode [ 1190.652649][T13003] bridge0: port 1(bridge_slave_0) entered blocking state [ 1190.715805][T13003] bridge0: port 1(bridge_slave_0) entered disabled state [ 1190.723764][T13003] bridge_slave_0: entered allmulticast mode [ 1190.735118][T13003] bridge_slave_0: entered promiscuous mode [ 1190.829583][ T5850] Bluetooth: hci6: command tx timeout [ 1190.982462][T13003] bridge0: port 2(bridge_slave_1) entered blocking state [ 1191.037192][T13003] bridge0: port 2(bridge_slave_1) entered disabled state [ 1191.081316][T13003] bridge_slave_1: entered allmulticast mode [ 1191.097261][T13003] bridge_slave_1: entered promiscuous mode [ 1191.180446][T13183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1191.696071][T13183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1192.235059][T13003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1192.301728][T13003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1192.929964][ T5850] Bluetooth: hci6: command 0x0419 tx timeout [ 1193.125001][T13183] team0: Port device team_slave_0 added [ 1193.427162][ T51] IPVS: stop unused estimator thread 0... [ 1193.442743][T13183] team0: Port device team_slave_1 added [ 1193.712609][T13003] team0: Port device team_slave_0 added [ 1194.534915][T13003] team0: Port device team_slave_1 added [ 1194.664434][T13183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1194.689676][T13183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1194.781618][T13183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1194.864061][T13003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1194.881116][T13003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1195.005693][T10003] Bluetooth: hci6: command 0x0419 tx timeout [ 1195.155794][T13003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1195.373269][T13183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1195.437605][T13183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1195.684067][T13183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1196.009662][T13003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1196.016678][T13003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1196.101776][T13273] loop6: detected capacity change from 0 to 32768 [ 1196.159137][T13273] [ 1196.159137][T13273] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1196.159137][T13273] [ 1196.232608][T13003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1196.615355][T13183] hsr_slave_0: entered promiscuous mode [ 1196.644157][T13183] hsr_slave_1: entered promiscuous mode [ 1196.711717][T13313] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1592'. [ 1196.741888][T13313] find_entry called with index = 0 [ 1196.748103][T13313] read_mapping_page failed! [ 1196.752892][T13313] ERROR: (device loop6): txCommit: [ 1196.752892][T13313] [ 1197.559417][T13183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1197.567035][T13183] Cannot create hsr debugfs directory [ 1197.684834][T11845] [ 1197.684834][T11845] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1197.684834][T11845] [ 1197.759925][T11845] [ 1197.759925][T11845] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1197.759925][T11845] [ 1197.937459][T13003] hsr_slave_0: entered promiscuous mode [ 1197.964456][T13003] hsr_slave_1: entered promiscuous mode [ 1197.986168][T13003] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1198.016666][T13003] Cannot create hsr debugfs directory [ 1204.797458][ T961] bridge_slave_1: left allmulticast mode [ 1204.820313][ T961] bridge_slave_1: left promiscuous mode [ 1204.839166][ T961] bridge0: port 2(bridge_slave_1) entered disabled state [ 1205.270346][ T961] bridge_slave_0: left allmulticast mode [ 1205.479453][ T961] bridge_slave_0: left promiscuous mode [ 1205.485336][ T961] bridge0: port 1(bridge_slave_0) entered disabled state [ 1205.578178][T13365] loop6: detected capacity change from 0 to 32768 [ 1205.626863][ T961] bridge_slave_1: left allmulticast mode [ 1205.697597][ T961] bridge_slave_1: left promiscuous mode [ 1205.707416][T13365] [ 1205.707416][T13365] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1205.707416][T13365] [ 1205.809829][ T961] bridge0: port 2(bridge_slave_1) entered disabled state [ 1205.910208][ T961] bridge_slave_0: left allmulticast mode [ 1205.921755][ T961] bridge_slave_0: left promiscuous mode [ 1205.968709][ T961] bridge0: port 1(bridge_slave_0) entered disabled state [ 1206.641485][T13395] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1604'. [ 1206.891441][T13395] find_entry called with index = 0 [ 1206.897762][T13395] read_mapping_page failed! [ 1206.902914][T13395] ERROR: (device loop6): txCommit: [ 1206.902914][T13395] [ 1208.453431][T11845] [ 1208.453431][T11845] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1208.453431][T11845] [ 1208.669827][T11845] [ 1208.669827][T11845] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1208.669827][T11845] [ 1213.770789][ T961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1214.066287][ T961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1214.255377][ T961] bond0 (unregistering): Released all slaves [ 1214.812660][ T5850] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1214.822800][ T5850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1214.831924][ T5850] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1214.840397][ T5850] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1214.853308][ T5850] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1214.868731][ T5850] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1215.956269][ T961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1216.033406][ T961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1216.305445][ T961] bond0 (unregistering): Released all slaves [ 1217.822886][T10003] Bluetooth: hci4: command tx timeout [ 1218.012005][ T961] hsr_slave_0: left promiscuous mode [ 1218.079455][ T961] hsr_slave_1: left promiscuous mode [ 1218.087688][ T961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1218.110991][ T961] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1218.160913][ T961] hsr_slave_0: left promiscuous mode [ 1218.183518][ T961] hsr_slave_1: left promiscuous mode [ 1218.190271][ T961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1218.221337][ T961] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1218.274298][ T961] veth1_vlan: left promiscuous mode [ 1218.299253][ T961] veth0_vlan: left promiscuous mode [ 1219.889456][T10003] Bluetooth: hci4: command tx timeout [ 1219.930295][ T961] team0 (unregistering): Port device team_slave_1 removed [ 1221.003035][ T961] team0 (unregistering): Port device team_slave_0 removed [ 1221.967751][T10003] Bluetooth: hci4: command tx timeout [ 1224.069619][T10003] Bluetooth: hci4: command tx timeout [ 1225.905058][ T961] team0 (unregistering): Port device team_slave_1 removed [ 1226.720289][ T961] team0 (unregistering): Port device team_slave_0 removed [ 1227.274436][ T9235] IPVS: starting estimator thread 0... [ 1227.450436][T13506] IPVS: using max 18 ests per chain, 43200 per kthread [ 1231.536838][T13183] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1233.526391][T13543] Zero length message leads to an empty skb [ 1233.943578][T13183] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1233.997618][ T57] IPVS: starting estimator thread 0... [ 1234.003358][T13183] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1234.169584][T13545] IPVS: using max 18 ests per chain, 43200 per kthread [ 1234.471716][T13183] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1234.666725][T13437] chnl_net:caif_netlink_parms(): no params data found [ 1235.859381][T13437] bridge0: port 1(bridge_slave_0) entered blocking state [ 1235.905090][T13437] bridge0: port 1(bridge_slave_0) entered disabled state [ 1236.214865][T13437] bridge_slave_0: entered allmulticast mode [ 1236.483150][T13437] bridge_slave_0: entered promiscuous mode [ 1237.170067][T13437] bridge0: port 2(bridge_slave_1) entered blocking state [ 1237.251147][T13437] bridge0: port 2(bridge_slave_1) entered disabled state [ 1237.258623][T13437] bridge_slave_1: entered allmulticast mode [ 1237.378989][T13437] bridge_slave_1: entered promiscuous mode [ 1237.435652][T13183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1237.676392][T13437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1237.736419][T13437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1238.074871][T13183] 8021q: adding VLAN 0 to HW filter on device team0 [ 1238.139192][T13437] team0: Port device team_slave_0 added [ 1238.171611][T13437] team0: Port device team_slave_1 added [ 1238.195132][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.201602][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.194896][T13437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1239.233336][T13437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1239.317354][T13437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1239.330966][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1239.338210][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1239.539161][ T8788] bridge_slave_1: left allmulticast mode [ 1239.545111][ T8788] bridge_slave_1: left promiscuous mode [ 1240.879540][ T8788] bridge0: port 2(bridge_slave_1) entered disabled state [ 1240.960154][ T8788] bridge_slave_0: left allmulticast mode [ 1241.029717][ T8788] bridge_slave_0: left promiscuous mode [ 1241.052722][ T8788] bridge0: port 1(bridge_slave_0) entered disabled state [ 1242.244910][ T8788] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1242.504378][ T8788] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1242.567274][ T8788] bond0 (unregistering): Released all slaves [ 1242.657438][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 1242.664617][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1242.718174][T13587] loop8: detected capacity change from 0 to 32768 [ 1242.834103][T13437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1242.844138][T13437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1242.866178][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1242.871992][T13437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1242.888469][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1242.896657][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1242.907410][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1242.915609][ T5850] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1242.920453][T13587] [ 1242.920453][T13587] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1242.920453][T13587] [ 1242.924540][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1243.374828][T13605] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1657'. [ 1243.511997][T13606] find_entry called with index = 0 [ 1243.518220][T13606] read_mapping_page failed! [ 1243.523018][T13606] ERROR: (device loop8): txCommit: [ 1243.523018][T13606] [ 1245.072045][T10003] Bluetooth: hci1: command tx timeout [ 1245.095310][T13437] hsr_slave_0: entered promiscuous mode [ 1245.102303][T11775] [ 1245.102303][T11775] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1245.102303][T11775] [ 1245.142028][T11775] [ 1245.142028][T11775] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1245.142028][T11775] [ 1245.240537][T13437] hsr_slave_1: entered promiscuous mode [ 1245.268823][T13437] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1245.278650][T13437] Cannot create hsr debugfs directory [ 1245.433389][ T8788] hsr_slave_0: left promiscuous mode [ 1245.461798][ T8788] hsr_slave_1: left promiscuous mode [ 1245.694158][ T8788] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1245.833453][ T8788] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1247.159828][T10003] Bluetooth: hci1: command tx timeout [ 1249.259461][ T5850] Bluetooth: hci1: command tx timeout [ 1249.807313][ T8788] team0 (unregistering): Port device team_slave_1 removed [ 1250.382934][ T8788] team0 (unregistering): Port device team_slave_0 removed [ 1250.450241][T13649] loop7: detected capacity change from 0 to 32768 [ 1250.474956][T13649] [ 1250.474956][T13649] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1250.474956][T13649] [ 1250.855718][T13652] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1672'. [ 1250.985978][T13653] find_entry called with index = 0 [ 1250.992347][T13653] read_mapping_page failed! [ 1250.996984][T13653] ERROR: (device loop7): txCommit: [ 1250.996984][T13653] [ 1251.559923][ T5850] Bluetooth: hci1: command 0x0419 tx timeout [ 1252.581820][T11704] [ 1252.581820][T11704] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1252.581820][T11704] [ 1252.618931][T11704] [ 1252.618931][T11704] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1252.618931][T11704] [ 1253.629566][T10003] Bluetooth: hci1: command 0x0419 tx timeout [ 1260.605139][T13598] chnl_net:caif_netlink_parms(): no params data found [ 1260.721665][T13437] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1261.286697][T13437] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1261.348023][T13437] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1261.366699][T13437] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1262.731609][T13598] bridge0: port 1(bridge_slave_0) entered blocking state [ 1262.738788][T13598] bridge0: port 1(bridge_slave_0) entered disabled state [ 1262.749720][ T5850] Bluetooth: hci1: command 0x0419 tx timeout [ 1262.841952][T13598] bridge_slave_0: entered allmulticast mode [ 1262.881962][T13598] bridge_slave_0: entered promiscuous mode [ 1262.952065][T13598] bridge0: port 2(bridge_slave_1) entered blocking state [ 1263.005789][T13598] bridge0: port 2(bridge_slave_1) entered disabled state [ 1263.039591][T13598] bridge_slave_1: entered allmulticast mode [ 1263.046801][T13598] bridge_slave_1: entered promiscuous mode [ 1264.474419][ T8788] bridge_slave_1: left allmulticast mode [ 1264.481641][ T8788] bridge_slave_1: left promiscuous mode [ 1264.567807][ T8788] bridge0: port 2(bridge_slave_1) entered disabled state [ 1264.860280][ T8788] bridge_slave_0: left allmulticast mode [ 1264.977153][ T8788] bridge_slave_0: left promiscuous mode [ 1264.993954][ T8788] bridge0: port 1(bridge_slave_0) entered disabled state [ 1267.123760][T13745] loop0: detected capacity change from 0 to 32768 [ 1267.232687][T13745] [ 1267.232687][T13745] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1267.232687][T13745] [ 1268.136428][ T8788] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1268.634637][T13754] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1694'. [ 1268.756587][T13755] read_mapping_page failed! [ 1268.761388][T13755] ERROR: (device loop0): txCommit: [ 1268.761388][T13755] [ 1269.179457][ T5850] Bluetooth: hci1: command 0x0419 tx timeout [ 1270.853655][ T5839] [ 1270.853655][ T5839] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1270.853655][ T5839] [ 1270.873804][ T5839] [ 1270.873804][ T5839] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1270.873804][ T5839] [ 1270.885061][ T8788] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1271.195321][ T8788] bond0 (unregistering): Released all slaves [ 1274.073066][T13598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1274.113745][T13598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1274.155313][ T5842] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1274.295351][T12720] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1274.678404][T12720] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1275.892086][ T5842] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1276.680759][ T5842] Bluetooth: hci1: command 0x0419 tx timeout [ 1277.124384][T13799] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1277.135641][T13799] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1278.009531][ T8788] hsr_slave_0: left promiscuous mode [ 1278.019998][ T8788] hsr_slave_1: left promiscuous mode [ 1278.086105][ T8788] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1278.157978][ T8788] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1279.259651][T10003] Bluetooth: hci6: command tx timeout [ 1281.505609][T10003] Bluetooth: hci6: command tx timeout [ 1283.654195][T13799] Bluetooth: hci6: command tx timeout [ 1285.482004][ T8788] team0 (unregistering): Port device team_slave_1 removed [ 1285.737758][ T8788] team0 (unregistering): Port device team_slave_0 removed [ 1285.761584][T13799] Bluetooth: hci6: command 0x0419 tx timeout [ 1287.830089][T10003] Bluetooth: hci6: command 0x0419 tx timeout [ 1294.872943][T13598] team0: Port device team_slave_0 added [ 1294.910448][T13598] team0: Port device team_slave_1 added [ 1298.095181][T13598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1298.159541][T13598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1298.323408][T13598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1298.384895][T13598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1298.647821][T13598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1298.717200][T13598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1299.667102][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.674115][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.710998][T13598] hsr_slave_0: entered promiscuous mode [ 1300.822716][T13598] hsr_slave_1: entered promiscuous mode [ 1300.849498][T13598] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1300.857138][T13598] Cannot create hsr debugfs directory [ 1304.785688][T13782] chnl_net:caif_netlink_parms(): no params data found [ 1307.218731][T10003] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1307.230183][T10003] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1307.238177][T10003] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1307.247294][T10003] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1307.263059][T10003] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1307.270649][T10003] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1309.318465][T10003] Bluetooth: hci4: command tx timeout [ 1311.329813][T13782] bridge0: port 1(bridge_slave_0) entered blocking state [ 1311.389612][T13782] bridge0: port 1(bridge_slave_0) entered disabled state [ 1311.397169][T13782] bridge_slave_0: entered allmulticast mode [ 1311.404925][T13799] Bluetooth: hci4: command tx timeout [ 1311.451110][T13782] bridge_slave_0: entered promiscuous mode [ 1311.485574][T13782] bridge0: port 2(bridge_slave_1) entered blocking state [ 1311.499583][T13782] bridge0: port 2(bridge_slave_1) entered disabled state [ 1311.506840][T13782] bridge_slave_1: entered allmulticast mode [ 1311.514676][T13782] bridge_slave_1: entered promiscuous mode [ 1311.529907][T13967] loop7: detected capacity change from 0 to 32768 [ 1311.572543][T13967] [ 1311.572543][T13967] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1311.572543][T13967] [ 1312.008722][T13981] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1744'. [ 1313.830211][T13799] Bluetooth: hci4: command 0x040f tx timeout [ 1314.428698][T11704] [ 1314.428698][T11704] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1314.428698][T11704] [ 1314.532258][T11704] [ 1314.532258][T11704] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1314.532258][T11704] [ 1316.003016][T13782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1316.044785][T10003] Bluetooth: hci4: command 0x040f tx timeout [ 1316.074704][T13782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1318.121754][T10003] Bluetooth: hci4: command 0x040f tx timeout [ 1318.396979][T13782] team0: Port device team_slave_0 added [ 1318.451249][T13782] team0: Port device team_slave_1 added [ 1323.861500][T13782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1323.874340][T13782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1324.002646][T13782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1324.085387][T13782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1324.110103][T13782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1324.292185][T13782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1324.540566][ T8788] bridge_slave_1: left allmulticast mode [ 1324.546613][ T8788] bridge_slave_1: left promiscuous mode [ 1324.616167][ T8788] bridge0: port 2(bridge_slave_1) entered disabled state [ 1324.950156][ T8788] bridge_slave_0: left allmulticast mode [ 1324.969434][ T8788] bridge_slave_0: left promiscuous mode [ 1324.975235][ T8788] bridge0: port 1(bridge_slave_0) entered disabled state [ 1325.950016][ T8788] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1326.096381][ T8788] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1326.137465][ T8788] bond0 (unregistering): Released all slaves [ 1327.105975][ T8788] hsr_slave_0: left promiscuous mode [ 1327.429483][ T8788] hsr_slave_1: left promiscuous mode [ 1327.602945][ T8788] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1327.670553][ T8788] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1332.239893][ T8788] team0 (unregistering): Port device team_slave_1 removed [ 1333.080067][ T8788] team0 (unregistering): Port device team_slave_0 removed [ 1334.762574][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1334.780577][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1334.824271][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1334.863371][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1334.886861][ T5850] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1334.904387][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1335.595265][T13957] chnl_net:caif_netlink_parms(): no params data found [ 1336.341069][T13957] bridge0: port 1(bridge_slave_0) entered blocking state [ 1336.348852][T13957] bridge0: port 1(bridge_slave_0) entered disabled state [ 1336.374415][T13957] bridge_slave_0: entered allmulticast mode [ 1336.410815][T13957] bridge_slave_0: entered promiscuous mode [ 1336.450199][T13957] bridge0: port 2(bridge_slave_1) entered blocking state [ 1336.457856][T13957] bridge0: port 2(bridge_slave_1) entered disabled state [ 1336.500009][T13957] bridge_slave_1: entered allmulticast mode [ 1336.507540][T13957] bridge_slave_1: entered promiscuous mode [ 1336.913380][T13957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1336.948572][T13957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1336.989878][ T5850] Bluetooth: hci1: command tx timeout [ 1337.898227][T13957] team0: Port device team_slave_0 added [ 1337.959812][T13957] team0: Port device team_slave_1 added [ 1338.656738][T13957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1338.734363][T13957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1339.079858][T10003] Bluetooth: hci1: command tx timeout [ 1339.169557][T13957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1339.196709][T13957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1339.297515][T13957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1339.443025][T13957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1339.537149][ T8958] bridge_slave_1: left allmulticast mode [ 1339.543084][ T8958] bridge_slave_1: left promiscuous mode [ 1339.569649][ T8958] bridge0: port 2(bridge_slave_1) entered disabled state [ 1339.616781][ T8958] bridge_slave_0: left allmulticast mode [ 1339.629350][ T8958] bridge_slave_0: left promiscuous mode [ 1339.635553][ T8958] bridge0: port 1(bridge_slave_0) entered disabled state [ 1339.722529][ T8958] bridge_slave_1: left allmulticast mode [ 1339.728327][ T8958] bridge_slave_1: left promiscuous mode [ 1339.760704][ T8958] bridge0: port 2(bridge_slave_1) entered disabled state [ 1339.922400][ T8958] bridge_slave_0: left allmulticast mode [ 1339.960887][ T8958] bridge_slave_0: left promiscuous mode [ 1339.995557][ T8958] bridge0: port 1(bridge_slave_0) entered disabled state [ 1340.612571][ T8958] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1340.663543][ T8958] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1340.715746][ T8958] bond0 (unregistering): Released all slaves [ 1340.816019][ T8958] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1340.890054][T14136] loop8: detected capacity change from 0 to 32768 [ 1340.927616][T14136] [ 1340.927616][T14136] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1340.927616][T14136] [ 1340.967770][ T8958] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1341.119637][ T8958] bond0 (unregistering): Released all slaves [ 1341.167226][T10003] Bluetooth: hci1: command 0x040f tx timeout [ 1341.382480][T14158] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1781'. [ 1341.433357][T14158] read_mapping_page failed! [ 1341.438029][T14158] ERROR: (device loop8): txCommit: [ 1341.438029][T14158] [ 1342.214093][T14094] chnl_net:caif_netlink_parms(): no params data found [ 1342.230418][T11775] [ 1342.230418][T11775] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1342.230418][T11775] [ 1342.287351][T11775] [ 1342.287351][T11775] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1342.287351][T11775] [ 1343.088177][T13957] hsr_slave_0: entered promiscuous mode [ 1343.179957][T13957] hsr_slave_1: entered promiscuous mode [ 1343.243021][ T5850] Bluetooth: hci1: command 0x040f tx timeout [ 1343.321991][T13957] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1343.370688][T13957] Cannot create hsr debugfs directory [ 1343.453271][ T8958] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1343.552662][ T8958] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1344.299087][T14170] loop8: detected capacity change from 0 to 32768 [ 1344.389746][ T8958] hsr_slave_0: left promiscuous mode [ 1344.423439][T14170] [ 1344.423439][T14170] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1344.423439][T14170] [ 1344.687876][ T8958] hsr_slave_1: left promiscuous mode [ 1345.128651][ T8958] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1345.309692][ T5850] Bluetooth: hci1: command 0x040f tx timeout [ 1345.518919][ T8958] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1345.621342][T14187] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1783'. [ 1346.488267][T11775] [ 1346.488267][T11775] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1346.488267][T11775] [ 1346.525055][T11775] [ 1346.525055][T11775] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1346.525055][T11775] [ 1346.724243][ T8958] team0 (unregistering): Port device team_slave_1 removed [ 1347.474618][ T8958] team0 (unregistering): Port device team_slave_0 removed [ 1350.466924][ T8958] team0 (unregistering): Port device team_slave_1 removed [ 1350.532021][ T8958] team0 (unregistering): Port device team_slave_0 removed [ 1353.775399][T14094] bridge0: port 1(bridge_slave_0) entered blocking state [ 1353.794356][T14094] bridge0: port 1(bridge_slave_0) entered disabled state [ 1353.825500][T14094] bridge_slave_0: entered allmulticast mode [ 1353.870671][T14094] bridge_slave_0: entered promiscuous mode [ 1353.897054][T14094] bridge0: port 2(bridge_slave_1) entered blocking state [ 1353.930842][T14094] bridge0: port 2(bridge_slave_1) entered disabled state [ 1353.967262][T14094] bridge_slave_1: entered allmulticast mode [ 1353.991345][T14094] bridge_slave_1: entered promiscuous mode [ 1354.333029][T14094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1354.726847][T14094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1356.087683][T14094] team0: Port device team_slave_0 added [ 1356.292566][T14094] team0: Port device team_slave_1 added [ 1356.858750][T14094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1356.889524][T14094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1357.007694][T14094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1357.896343][T14094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1358.019460][T14094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1358.140737][T14094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1360.675548][T14094] hsr_slave_0: entered promiscuous mode [ 1360.837295][T14094] hsr_slave_1: entered promiscuous mode [ 1360.951611][T14094] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1360.959245][T14094] Cannot create hsr debugfs directory [ 1361.072560][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.078920][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.853698][T13957] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1362.996881][T13957] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1363.130248][T13957] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1363.544411][T13957] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1365.340770][T14316] vivid-002: kernel_thread() failed [ 1367.705850][T13799] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1368.393323][T13799] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1368.507384][T13799] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1368.588325][T13799] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1368.615069][T13799] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1368.622693][T13799] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1370.770718][T13799] Bluetooth: hci6: command tx timeout [ 1372.915943][T13799] Bluetooth: hci6: command tx timeout [ 1373.049947][T14371] netlink: 'syz.8.1820': attribute type 3 has an invalid length. [ 1373.100881][T14371] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1820'. [ 1373.315076][T14368] trusted_key: syz.8.1820 sent an empty control message without MSG_MORE. [ 1373.740361][T14318] chnl_net:caif_netlink_parms(): no params data found [ 1373.830945][T14094] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1374.504555][T14094] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1374.694265][T14388] loop8: detected capacity change from 0 to 1024 [ 1374.701440][T14388] EXT4-fs: Ignoring removed orlov option [ 1374.707122][T14388] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1374.851595][T14388] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 1374.869627][T14388] System zones: 0-1, 3-36 [ 1374.900838][T14388] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1375.039167][T10003] Bluetooth: hci6: command tx timeout [ 1375.060022][T14094] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1375.245344][T14370] loop7: detected capacity change from 0 to 32768 [ 1375.275594][T14370] [ 1375.275594][T14370] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1375.275594][T14370] [ 1375.309913][T14094] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1375.679493][T14416] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1821'. [ 1376.106812][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88807dfa9400: rx timeout, send abort [ 1376.417025][T14417] read_mapping_page failed! [ 1376.600421][ T8958] bridge_slave_1: left allmulticast mode [ 1376.606140][ T8958] bridge_slave_1: left promiscuous mode [ 1376.613518][ T8958] bridge0: port 2(bridge_slave_1) entered disabled state [ 1376.621070][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88807dfa9400: abort rx timeout. Force session deactivation [ 1376.667732][T11775] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1376.878908][T11704] [ 1376.878908][T11704] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1376.878908][T11704] [ 1376.908243][ T8958] bridge_slave_0: left allmulticast mode [ 1376.971242][ T8958] bridge_slave_0: left promiscuous mode [ 1377.078307][T11704] [ 1377.078307][T11704] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1377.078307][T11704] [ 1377.119199][ T5850] Bluetooth: hci6: command 0x0419 tx timeout [ 1377.158258][ T8958] bridge0: port 1(bridge_slave_0) entered disabled state [ 1379.368848][ T5850] Bluetooth: hci6: command 0x0419 tx timeout [ 1379.390070][ T8958] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1379.958551][ T8958] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1380.212243][ T8958] bond0 (unregistering): Released all slaves [ 1381.836793][ T8958] hsr_slave_0: left promiscuous mode [ 1381.902625][ T8958] hsr_slave_1: left promiscuous mode [ 1381.967415][ T8958] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1381.999468][ T8958] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1383.953395][ T8958] team0 (unregistering): Port device team_slave_1 removed [ 1384.206837][ T8958] team0 (unregistering): Port device team_slave_0 removed [ 1384.567933][T14477] loop7: detected capacity change from 0 to 32768 [ 1384.628968][T14485] loop0: detected capacity change from 0 to 64 [ 1384.686371][T14485] FAULT_INJECTION: forcing a failure. [ 1384.686371][T14485] name failslab, interval 1, probability 0, space 0, times 1 [ 1384.716805][T14477] [ 1384.716805][T14477] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1384.716805][T14477] [ 1384.738537][T14485] CPU: 0 UID: 0 PID: 14485 Comm: syz.0.1838 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 1384.749383][T14485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1384.759475][T14485] Call Trace: [ 1384.762785][T14485] [ 1384.765740][T14485] dump_stack_lvl+0x241/0x360 [ 1384.770470][T14485] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1384.775718][T14485] ? __pfx__printk+0x10/0x10 [ 1384.780361][T14485] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 1384.786396][T14485] ? __pfx___might_resched+0x10/0x10 [ 1384.791723][T14485] should_fail_ex+0x3b0/0x4e0 [ 1384.796425][T14485] should_failslab+0xac/0x100 [ 1384.801128][T14485] kmem_cache_alloc_node_noprof+0x77/0x380 [ 1384.806967][T14485] ? __alloc_skb+0x1c3/0x440 [ 1384.811580][T14485] __alloc_skb+0x1c3/0x440 [ 1384.816022][T14485] ? __pfx___alloc_skb+0x10/0x10 [ 1384.820977][T14485] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1384.826625][T14485] ? netlink_autobind+0x2b0/0x2f0 [ 1384.831672][T14485] netlink_sendmsg+0x638/0xcb0 [ 1384.836461][T14485] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1384.841765][T14485] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1384.847410][T14485] ? aa_sock_msg_perm+0x91/0x160 [ 1384.852362][T14485] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1384.858010][T14485] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1384.863314][T14485] __sock_sendmsg+0x223/0x270 [ 1384.868021][T14485] ____sys_sendmsg+0x52a/0x7e0 [ 1384.872820][T14485] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1384.878124][T14485] ? __fget_files+0x2a/0x410 [ 1384.882742][T14485] ? __fget_files+0x2a/0x410 [ 1384.887367][T14485] __sys_sendmsg+0x269/0x350 [ 1384.891982][T14485] ? __pfx_lock_release+0x10/0x10 [ 1384.897031][T14485] ? __pfx___sys_sendmsg+0x10/0x10 [ 1384.902175][T14485] ? __pfx_vfs_write+0x10/0x10 [ 1384.906982][T14485] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1384.913335][T14485] ? do_syscall_64+0x100/0x230 [ 1384.918133][T14485] ? do_syscall_64+0xb6/0x230 [ 1384.922842][T14485] do_syscall_64+0xf3/0x230 [ 1384.927377][T14485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1384.933296][T14485] RIP: 0033:0x7fc05f185d19 [ 1384.937722][T14485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1384.957355][T14485] RSP: 002b:00007fc05ff21038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1384.965793][T14485] RAX: ffffffffffffffda RBX: 00007fc05f375fa0 RCX: 00007fc05f185d19 [ 1384.973784][T14485] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000005 [ 1384.981775][T14485] RBP: 00007fc05ff21090 R08: 0000000000000000 R09: 0000000000000000 [ 1384.989760][T14485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1384.997738][T14485] R13: 0000000000000000 R14: 00007fc05f375fa0 R15: 00007ffcf4f3c048 [ 1385.005733][T14485] [ 1385.418702][T14493] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1835'. [ 1385.564743][T14494] read_mapping_page failed! [ 1385.569574][T14494] ERROR: (device loop7): txCommit: [ 1385.569574][T14494] [ 1386.446694][T11704] [ 1386.446694][T11704] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1386.446694][T11704] [ 1386.479451][ T9022] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 1386.485212][T14318] bridge0: port 1(bridge_slave_0) entered blocking state [ 1386.510086][T11704] [ 1386.510086][T11704] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1386.510086][T11704] [ 1386.563847][T14318] bridge0: port 1(bridge_slave_0) entered disabled state [ 1386.618412][T14318] bridge_slave_0: entered allmulticast mode [ 1386.636665][T14318] bridge_slave_0: entered promiscuous mode [ 1386.646555][ T9022] usb 9-1: config 0 has an invalid interface number: 133 but max is 0 [ 1386.647170][T14318] bridge0: port 2(bridge_slave_1) entered blocking state [ 1386.663206][T14318] bridge0: port 2(bridge_slave_1) entered disabled state [ 1386.670645][ T9022] usb 9-1: config 0 has no interface number 0 [ 1386.670841][T14318] bridge_slave_1: entered allmulticast mode [ 1386.692402][T14318] bridge_slave_1: entered promiscuous mode [ 1386.699737][ T9022] usb 9-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1386.743080][ T9022] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1386.793664][ T9022] usb 9-1: Product: syz [ 1386.829817][ T9022] usb 9-1: Manufacturer: syz [ 1386.852496][ T9022] usb 9-1: SerialNumber: syz [ 1387.851170][ T9022] usb 9-1: config 0 descriptor?? [ 1389.819119][ T9022] keyspan 9-1:0.133: Keyspan 1 port adapter converter detected [ 1389.832463][ T9022] keyspan 9-1:0.133: found no endpoint descriptor for endpoint 81 [ 1389.842226][ T9022] keyspan 9-1:0.133: found no endpoint descriptor for endpoint 1 [ 1389.850184][ T9022] keyspan 9-1:0.133: found no endpoint descriptor for endpoint 2 [ 1390.246957][T14318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1390.322419][T14318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1390.769579][ T9022] usb 9-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1390.785194][ T9022] usb 9-1: USB disconnect, device number 2 [ 1390.835614][ T9022] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1390.867410][ T9022] keyspan 9-1:0.133: device disconnected [ 1391.485582][T14532] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1392.163171][T14531] tty tty2: ldisc open failed (-12), clearing slot 1 [ 1392.292401][T14318] team0: Port device team_slave_0 added [ 1392.340647][T14318] team0: Port device team_slave_1 added [ 1392.531428][T14318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1392.548682][T14318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1392.636034][T14318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1392.668452][T14318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1392.712068][T14318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1392.809423][T14318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1392.883311][T14546] loop0: detected capacity change from 0 to 512 [ 1393.601842][T14546] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 1393.631131][T14318] hsr_slave_0: entered promiscuous mode [ 1393.729770][T14546] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1393.760239][T14318] hsr_slave_1: entered promiscuous mode [ 1393.817392][T14318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1393.839785][T14546] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.1851: Failed to acquire dquot type 1 [ 1393.866284][T14318] Cannot create hsr debugfs directory [ 1394.039858][T14546] EXT4-fs (loop0): 1 truncate cleaned up [ 1394.046915][T14546] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1394.209614][T14546] ext4 filesystem being mounted at /549/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1394.429701][T14564] Bluetooth: MGMT ver 1.23 [ 1394.459203][T14562] Bluetooth: hci0: Opcode 0x0c20 failed: -112 [ 1394.742051][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1394.781144][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1395.022522][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1395.035904][ T5842] Bluetooth: hci6: command 0x0419 tx timeout [ 1395.054335][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1395.474485][ T5842] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1395.500545][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1396.136174][ T5839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1396.151461][T14585] loop6: detected capacity change from 0 to 512 [ 1396.204131][T14575] IPv6: Can't replace route, no match found [ 1396.236239][T14585] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 1396.349516][T14585] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1396.440715][T14585] EXT4-fs (loop6): 1 orphan inode deleted [ 1396.446598][T14585] EXT4-fs (loop6): 1 truncate cleaned up [ 1396.509577][ T5850] Bluetooth: hci0: command 0x0405 tx timeout [ 1396.509691][T13799] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1396.603610][T14585] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1397.784012][T13799] Bluetooth: hci1: command tx timeout [ 1398.398388][T14554] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 1398.669792][ T5850] Bluetooth: hci0: command 0x0405 tx timeout [ 1398.722470][T14554] EXT4-fs (loop6): Remounting filesystem read-only [ 1399.449128][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 1399.520823][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 1399.884279][ T5850] Bluetooth: hci1: command tx timeout [ 1400.044822][T11845] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1401.123801][ T3477] bridge_slave_1: left allmulticast mode [ 1401.153647][ T3477] bridge_slave_1: left promiscuous mode [ 1401.428474][ T3477] bridge0: port 2(bridge_slave_1) entered disabled state [ 1401.574677][ T3477] bridge_slave_0: left allmulticast mode [ 1401.580575][ T3477] bridge_slave_0: left promiscuous mode [ 1401.586430][ T3477] bridge0: port 1(bridge_slave_0) entered disabled state [ 1401.961913][ T5850] Bluetooth: hci1: command tx timeout [ 1403.172068][T14660] loop6: detected capacity change from 0 to 1024 [ 1404.062953][ T5850] Bluetooth: hci1: command tx timeout [ 1406.806286][ T3477] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1407.834575][ T3477] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1408.259484][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 1408.460250][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 1408.562753][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 1408.975696][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 1409.177133][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 1409.279608][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 1409.329612][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 1409.791548][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 1410.074989][ T3477] bond0 (unregistering): Released all slaves [ 1411.271325][T14712] FAULT_INJECTION: forcing a failure. [ 1411.271325][T14712] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1411.320033][T14712] CPU: 0 UID: 0 PID: 14712 Comm: syz.6.1878 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 1411.330885][T14712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1411.340978][T14712] Call Trace: [ 1411.344289][T14712] [ 1411.347251][T14712] dump_stack_lvl+0x241/0x360 [ 1411.351995][T14712] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1411.357344][T14712] ? __pfx__printk+0x10/0x10 [ 1411.361992][T14712] ? __pfx_lock_release+0x10/0x10 [ 1411.367065][T14712] should_fail_ex+0x3b0/0x4e0 [ 1411.371790][T14712] _copy_from_user+0x2f/0xc0 [ 1411.376449][T14712] sg_write+0x94c/0xf10 [ 1411.380675][T14712] ? __pfx_sg_write+0x10/0x10 [ 1411.385406][T14712] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1411.391083][T14712] ? mark_lock+0x9a/0x360 [ 1411.395491][T14712] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1411.401169][T14712] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1411.406843][T14712] ? security_file_permission+0x74/0x280 [ 1411.412535][T14712] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1411.418213][T14712] ? rw_verify_area+0x1c3/0x6f0 [ 1411.423109][T14712] ? __pfx_sg_write+0x10/0x10 [ 1411.427841][T14712] vfs_write+0x2a5/0xd30 [ 1411.432137][T14712] ? __pfx_vfs_write+0x10/0x10 [ 1411.436948][T14712] ? __fget_files+0x2a/0x410 [ 1411.441600][T14712] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1411.447273][T14712] ? __fget_files+0x395/0x410 [ 1411.452005][T14712] ? __fget_files+0x2a/0x410 [ 1411.456643][T14712] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1411.462319][T14712] ksys_write+0x18f/0x2b0 [ 1411.466695][T14712] ? __pfx_ksys_write+0x10/0x10 [ 1411.471585][T14712] ? do_syscall_64+0x100/0x230 [ 1411.476405][T14712] ? do_syscall_64+0xb6/0x230 [ 1411.481232][T14712] do_syscall_64+0xf3/0x230 [ 1411.485799][T14712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1411.491748][T14712] RIP: 0033:0x7f497c385d19 [ 1411.496301][T14712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1411.515955][T14712] RSP: 002b:00007f497d1ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1411.524422][T14712] RAX: ffffffffffffffda RBX: 00007f497c575fa0 RCX: 00007f497c385d19 [ 1411.532440][T14712] RDX: 000000000000008c RSI: 0000000020000a40 RDI: 0000000000000004 [ 1411.540538][T14712] RBP: 00007f497d1ce090 R08: 0000000000000000 R09: 0000000000000000 [ 1411.548560][T14712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1411.556577][T14712] R13: 0000000000000000 R14: 00007f497c575fa0 R15: 00007fffcb4c4bf8 [ 1411.564615][T14712] [ 1412.393000][T14563] chnl_net:caif_netlink_parms(): no params data found [ 1414.083642][ T3477] hsr_slave_0: left promiscuous mode [ 1414.219691][ T3477] hsr_slave_1: left promiscuous mode [ 1414.236232][ T3477] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1414.298261][ T3477] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1414.791442][T14749] FAULT_INJECTION: forcing a failure. [ 1414.791442][T14749] name failslab, interval 1, probability 0, space 0, times 0 [ 1414.804262][T14749] CPU: 1 UID: 0 PID: 14749 Comm: syz.8.1883 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 1414.815333][T14749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1414.825419][T14749] Call Trace: [ 1414.828717][T14749] [ 1414.831672][T14749] dump_stack_lvl+0x241/0x360 [ 1414.836400][T14749] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1414.841639][T14749] ? __pfx__printk+0x10/0x10 [ 1414.846441][T14749] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 1414.852460][T14749] ? __pfx___might_resched+0x10/0x10 [ 1414.857777][T14749] should_fail_ex+0x3b0/0x4e0 [ 1414.862494][T14749] should_failslab+0xac/0x100 [ 1414.867207][T14749] kmem_cache_alloc_node_noprof+0x77/0x380 [ 1414.873056][T14749] ? __alloc_skb+0x1c3/0x440 [ 1414.877678][T14749] __alloc_skb+0x1c3/0x440 [ 1414.882139][T14749] ? __pfx___alloc_skb+0x10/0x10 [ 1414.887106][T14749] ? __rcu_read_unlock+0xa1/0x110 [ 1414.892173][T14749] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1414.897847][T14749] ? netlink_autobind+0x2b0/0x2f0 [ 1414.902914][T14749] netlink_sendmsg+0x638/0xcb0 [ 1414.907726][T14749] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1414.913049][T14749] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1414.918739][T14749] ? aa_sock_msg_perm+0x91/0x160 [ 1414.923720][T14749] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1414.929387][T14749] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1414.934695][T14749] __sock_sendmsg+0x223/0x270 [ 1414.939412][T14749] ____sys_sendmsg+0x52a/0x7e0 [ 1414.944220][T14749] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1414.949545][T14749] ? __fget_files+0x2a/0x410 [ 1414.954170][T14749] ? __fget_files+0x2a/0x410 [ 1414.958797][T14749] __sys_sendmsg+0x269/0x350 [ 1414.963412][T14749] ? __pfx_lock_release+0x10/0x10 [ 1414.968466][T14749] ? __pfx___sys_sendmsg+0x10/0x10 [ 1414.973614][T14749] ? __pfx_vfs_write+0x10/0x10 [ 1414.978426][T14749] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1414.984782][T14749] ? do_syscall_64+0x100/0x230 [ 1414.989585][T14749] ? do_syscall_64+0xb6/0x230 [ 1414.994307][T14749] do_syscall_64+0xf3/0x230 [ 1414.998933][T14749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1415.004863][T14749] RIP: 0033:0x7f5dd8785d19 [ 1415.009295][T14749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1415.028930][T14749] RSP: 002b:00007f5dd9533038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1415.037373][T14749] RAX: ffffffffffffffda RBX: 00007f5dd8976160 RCX: 00007f5dd8785d19 [ 1415.045368][T14749] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000006 [ 1415.053363][T14749] RBP: 00007f5dd9533090 R08: 0000000000000000 R09: 0000000000000000 [ 1415.061355][T14749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1415.069342][T14749] R13: 0000000000000000 R14: 00007f5dd8976160 R15: 00007ffe2785ae08 [ 1415.077355][T14749] [ 1415.513262][T14755] loop8: detected capacity change from 0 to 256 [ 1415.714157][T14741] loop0: detected capacity change from 0 to 32768 [ 1415.733078][T14741] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1884 (14741) [ 1415.753300][ T3477] team0 (unregistering): Port device team_slave_1 removed [ 1415.908870][ T3477] team0 (unregistering): Port device team_slave_0 removed [ 1416.057886][T14741] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1416.099774][T14741] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 1416.298495][T14741] BTRFS info (device loop0): rebuilding free space tree [ 1416.502300][T14741] BTRFS info (device loop0): disabling free space tree [ 1416.519669][T14741] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1416.531180][T14741] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1416.657189][T14780] FAULT_INJECTION: forcing a failure. [ 1416.657189][T14780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1416.686800][T14780] CPU: 0 UID: 0 PID: 14780 Comm: syz.8.1887 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 1416.697643][T14780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1416.707750][T14780] Call Trace: [ 1416.711085][T14780] [ 1416.711101][T14780] dump_stack_lvl+0x241/0x360 [ 1416.711148][T14780] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1416.711190][T14780] ? __pfx__printk+0x10/0x10 [ 1416.711230][T14780] ? __pfx_lock_release+0x10/0x10 [ 1416.711280][T14780] should_fail_ex+0x3b0/0x4e0 [ 1416.711313][T14780] _copy_from_user+0x2f/0xc0 [ 1416.711357][T14780] core_sys_select+0x508/0x910 [ 1416.711401][T14780] ? __pfx_core_sys_select+0x10/0x10 [ 1416.711439][T14780] ? ktime_get_ts64+0x9f/0x430 [ 1416.711465][T14780] ? seqcount_lockdep_reader_access+0x157/0x220 [ 1416.711500][T14780] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1416.711561][T14780] ? __pfx_set_user_sigmask+0x10/0x10 [ 1416.711608][T14780] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1416.711650][T14780] ? __fget_files+0x2a/0x410 [ 1416.711695][T14780] __se_sys_pselect6+0x323/0x3f0 [ 1416.711739][T14780] ? __pfx___se_sys_pselect6+0x10/0x10 [ 1416.711774][T14780] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1416.711810][T14780] ? do_syscall_64+0x100/0x230 [ 1416.711860][T14780] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1416.711891][T14780] ? __x64_sys_pselect6+0x21/0xf0 [ 1416.711929][T14780] do_syscall_64+0xf3/0x230 [ 1416.711976][T14780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1416.712019][T14780] RIP: 0033:0x7f5dd8785d19 [ 1416.712044][T14780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1416.712068][T14780] RSP: 002b:00007f5dd9554038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 1416.712100][T14780] RAX: ffffffffffffffda RBX: 00007f5dd8976080 RCX: 00007f5dd8785d19 [ 1416.712122][T14780] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000040 [ 1416.712141][T14780] RBP: 00007f5dd9554090 R08: 0000000020000280 R09: 0000000000000000 [ 1416.712162][T14780] R10: 0000000020000240 R11: 0000000000000246 R12: 0000000000000001 [ 1416.712182][T14780] R13: 0000000000000001 R14: 00007f5dd8976080 R15: 00007ffe2785ae08 [ 1416.712218][T14780] [ 1417.163855][T14786] batadv0: entered promiscuous mode [ 1417.815124][T14785] loop6: detected capacity change from 0 to 4096 [ 1417.910968][T14785] ntfs3: Unknown parameter ' ' [ 1417.940312][T14786] batadv0: left promiscuous mode [ 1418.332992][T14563] bridge0: port 1(bridge_slave_0) entered blocking state [ 1418.385956][T14563] bridge0: port 1(bridge_slave_0) entered disabled state [ 1418.447595][T14563] bridge_slave_0: entered allmulticast mode [ 1418.492427][T14563] bridge_slave_0: entered promiscuous mode [ 1418.706063][T14563] bridge0: port 2(bridge_slave_1) entered blocking state [ 1418.728922][T14563] bridge0: port 2(bridge_slave_1) entered disabled state [ 1418.742975][T14563] bridge_slave_1: entered allmulticast mode [ 1418.790268][T14563] bridge_slave_1: entered promiscuous mode [ 1418.832458][ T5839] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1419.006653][T14802] loop7: detected capacity change from 0 to 32768 [ 1419.048836][T14802] [ 1419.048836][T14802] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1419.048836][T14802] [ 1419.873620][T14818] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1890'. [ 1419.992069][T14819] read_mapping_page failed! [ 1419.996737][T14819] ERROR: (device loop7): txCommit: [ 1419.996737][T14819] [ 1420.927116][T11704] [ 1420.927116][T11704] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1420.927116][T11704] [ 1420.974294][T11704] [ 1420.974294][T11704] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1420.974294][T11704] [ 1421.000197][T14822] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1894'. [ 1421.062736][T14563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1421.188251][T14563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1421.310105][T14318] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1421.980838][T14318] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1422.421396][T14842] loop6: detected capacity change from 0 to 256 [ 1422.512616][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.519152][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1422.907454][T14318] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1423.267647][T14848] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1423.277373][T14848] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1423.286569][T14848] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1423.295381][T14848] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1423.304245][T14848] vxlan0: entered promiscuous mode [ 1423.309758][T14848] vxlan0: entered allmulticast mode [ 1423.419495][T14848] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1423.428471][T14848] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1423.437408][T14848] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1423.446604][T14848] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1423.768843][T14563] team0: Port device team_slave_0 added [ 1423.939768][T14318] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1424.299459][T14563] team0: Port device team_slave_1 added [ 1425.348502][T14318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1426.677651][T14563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1426.771433][T14563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1427.206568][T14873] FAULT_INJECTION: forcing a failure. [ 1427.206568][T14873] name failslab, interval 1, probability 0, space 0, times 0 [ 1427.220129][T14873] CPU: 0 UID: 0 PID: 14873 Comm: syz.7.1903 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 1427.230950][T14873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1427.241053][T14873] Call Trace: [ 1427.244372][T14873] [ 1427.247328][T14873] dump_stack_lvl+0x241/0x360 [ 1427.252068][T14873] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1427.257324][T14873] ? __pfx__printk+0x10/0x10 [ 1427.261971][T14873] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 1427.267428][T14873] ? __pfx___might_resched+0x10/0x10 [ 1427.273041][T14873] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1427.279060][T14873] should_fail_ex+0x3b0/0x4e0 [ 1427.283798][T14873] should_failslab+0xac/0x100 [ 1427.288506][T14873] __kmalloc_node_noprof+0xe1/0x4d0 [ 1427.293739][T14873] ? __kvmalloc_node_noprof+0x72/0x190 [ 1427.299225][T14873] __kvmalloc_node_noprof+0x72/0x190 [ 1427.304534][T14873] seq_read_iter+0x20c/0xd70 [ 1427.309318][T14873] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1427.314976][T14873] ? lockdep_hardirqs_on+0x99/0x150 [ 1427.320226][T14873] ? iov_iter_init+0x4e/0x180 [ 1427.324939][T14873] seq_read+0x3a9/0x4f0 [ 1427.329127][T14873] ? __pfx_seq_read+0x10/0x10 [ 1427.333822][T14873] ? preempt_schedule+0xe1/0xf0 [ 1427.338701][T14873] ? __pfx_preempt_schedule+0x10/0x10 [ 1427.344100][T14873] ? __mutex_trylock_common+0x183/0x2e0 [ 1427.349868][T14873] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1427.355527][T14873] ? __pfx_seq_read+0x10/0x10 [ 1427.360227][T14873] proc_reg_read+0x203/0x2f0 [ 1427.364851][T14873] ? __pfx_proc_reg_read+0x10/0x10 [ 1427.369998][T14873] vfs_read+0x1fe/0xb70 [ 1427.374186][T14873] ? __pfx___mutex_lock+0x10/0x10 [ 1427.379332][T14873] ? __pfx_vfs_read+0x10/0x10 [ 1427.384295][T14873] ? __fget_files+0x2a/0x410 [ 1427.388920][T14873] ? __fget_files+0x395/0x410 [ 1427.393623][T14873] ? __fget_files+0x2a/0x410 [ 1427.398246][T14873] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1427.403907][T14873] ksys_read+0x18f/0x2b0 [ 1427.408176][T14873] ? __pfx_ksys_read+0x10/0x10 [ 1427.412964][T14873] ? do_syscall_64+0x100/0x230 [ 1427.417769][T14873] ? do_syscall_64+0xb6/0x230 [ 1427.422670][T14873] do_syscall_64+0xf3/0x230 [ 1427.427211][T14873] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1427.432871][T14873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1427.438973][T14873] RIP: 0033:0x7f6d8a585d19 [ 1427.443407][T14873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1427.463054][T14873] RSP: 002b:00007f6d8b306038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1427.471508][T14873] RAX: ffffffffffffffda RBX: 00007f6d8a776160 RCX: 00007f6d8a585d19 [ 1427.479505][T14873] RDX: 0000000000002020 RSI: 0000000020004100 RDI: 0000000000000007 [ 1427.487494][T14873] RBP: 00007f6d8b306090 R08: 0000000000000000 R09: 0000000000000000 [ 1427.495481][T14873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1427.503467][T14873] R13: 0000000000000000 R14: 00007f6d8a776160 R15: 00007ffecdafb638 [ 1427.511475][T14873] [ 1427.739570][T14563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1427.791594][T14563] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1427.798598][T14563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1427.867376][T14563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1427.881833][T13799] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1427.892364][T13799] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1427.902166][T13799] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1427.912213][T13799] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1427.920438][T13799] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1427.927858][T13799] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1429.677064][T14563] hsr_slave_0: entered promiscuous mode [ 1429.928424][T14563] hsr_slave_1: entered promiscuous mode [ 1430.307749][T13799] Bluetooth: hci4: command tx timeout [ 1430.787445][T14563] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1430.859556][T14563] Cannot create hsr debugfs directory [ 1430.954083][T14898] loop6: detected capacity change from 0 to 64 [ 1430.961244][T14898] hfs: Bad value for 'creator' [ 1430.973348][T14898] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1432.850177][T13799] Bluetooth: hci4: command tx timeout [ 1434.876057][T14925] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1909'. [ 1434.899459][T14925] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1909'. [ 1434.919088][T13799] Bluetooth: hci4: command tx timeout [ 1436.529108][T14875] chnl_net:caif_netlink_parms(): no params data found [ 1437.416047][T13799] Bluetooth: hci4: command tx timeout [ 1439.866031][T14875] bridge0: port 1(bridge_slave_0) entered blocking state [ 1439.987468][T14875] bridge0: port 1(bridge_slave_0) entered disabled state [ 1440.037337][T14875] bridge_slave_0: entered allmulticast mode [ 1440.671368][T14875] bridge_slave_0: entered promiscuous mode [ 1442.070435][T14875] bridge0: port 2(bridge_slave_1) entered blocking state [ 1442.098829][T14875] bridge0: port 2(bridge_slave_1) entered disabled state [ 1442.330207][T14875] bridge_slave_1: entered allmulticast mode [ 1442.514535][T14875] bridge_slave_1: entered promiscuous mode [ 1442.744236][T14875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1443.199171][T14875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1443.412075][T13799] Bluetooth: hci4: command 0x0405 tx timeout [ 1444.281611][ T75] bridge_slave_1: left allmulticast mode [ 1444.287490][ T75] bridge_slave_1: left promiscuous mode [ 1444.299787][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 1444.427242][ T75] bridge_slave_0: left allmulticast mode [ 1444.436741][ T75] bridge_slave_0: left promiscuous mode [ 1444.447069][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 1444.677429][T14979] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1453.316736][T13799] ------------[ cut here ]------------ [ 1453.322790][T13799] WARNING: CPU: 1 PID: 13799 at net/bluetooth/hci_conn.c:567 hci_conn_timeout+0xfb/0x290 [ 1453.332895][T13799] Modules linked in: [ 1453.336818][T13799] CPU: 1 UID: 0 PID: 13799 Comm: kworker/u9:2 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 1453.348200][T13799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1453.358495][T13799] Workqueue: hci4 hci_conn_timeout [ 1453.364042][T13799] RIP: 0010:hci_conn_timeout+0xfb/0x290 [ 1453.369845][T13799] Code: 4c 89 f7 e8 07 c2 09 00 eb 07 e8 70 55 e5 f6 b0 13 0f b6 f0 4c 89 f7 5b 41 5c 41 5e 41 5f 5d e9 5b b3 fe ff e8 56 55 e5 f6 90 <0f> 0b 90 eb 8f 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 36 ff ff ff 48 [ 1453.389777][T13799] RSP: 0018:ffffc9000411fb90 EFLAGS: 00010293 [ 1453.395881][T13799] RAX: ffffffff8aba1e9a RBX: ffff888042d648e8 RCX: ffff888030321e00 [ 1453.404151][T13799] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 1453.412185][T13799] RBP: 00000000ffffffff R08: ffffffff8aba1e03 R09: 1ffff110085ac802 [ 1453.420564][T13799] R10: dffffc0000000000 R11: ffffed10085ac803 R12: dffffc0000000000 [ 1453.428577][T13799] R13: ffffffff8168ee96 R14: ffff888042d64000 R15: 0000000002400000 [ 1453.436865][T13799] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1453.445897][T13799] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1453.452534][T13799] CR2: 000000110c41e74b CR3: 000000006cabc000 CR4: 0000000000350ef0 [ 1453.460636][T13799] Call Trace: [ 1453.463937][T13799] [ 1453.466881][T13799] ? __warn+0x165/0x4d0 [ 1453.471517][T13799] ? hci_conn_timeout+0xfb/0x290 [ 1453.476520][T13799] ? report_bug+0x2b3/0x500 [ 1453.481373][T13799] ? hci_conn_timeout+0xfb/0x290 [ 1453.486367][T13799] ? handle_bug+0x60/0x90 [ 1453.491105][T13799] ? exc_invalid_op+0x1a/0x50 [ 1453.495812][T13799] ? asm_exc_invalid_op+0x1a/0x20 [ 1453.500914][T13799] ? process_scheduled_works+0x976/0x1840 [ 1453.506664][T13799] ? hci_conn_timeout+0x63/0x290 [ 1453.511668][T13799] ? hci_conn_timeout+0xfa/0x290 [ 1453.516859][T13799] ? hci_conn_timeout+0xfb/0x290 [ 1453.522250][T13799] process_scheduled_works+0xa68/0x1840 [ 1453.528162][T13799] ? __pfx_process_scheduled_works+0x10/0x10 [ 1453.534324][T13799] ? assign_work+0x364/0x3d0 [ 1453.538959][T13799] worker_thread+0x870/0xd30 [ 1453.543902][T13799] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1453.549671][T13799] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1453.555347][T13799] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1453.561364][T13799] ? __kthread_parkme+0x169/0x1d0 [ 1453.566794][T13799] ? __pfx_worker_thread+0x10/0x10 [ 1453.571986][T13799] kthread+0x2f2/0x390 [ 1453.576104][T13799] ? __pfx_worker_thread+0x10/0x10 [ 1453.581521][T13799] ? __pfx_kthread+0x10/0x10 [ 1453.586155][T13799] ret_from_fork+0x4d/0x80 [ 1453.590875][T13799] ? __pfx_kthread+0x10/0x10 [ 1453.595499][T13799] ret_from_fork_asm+0x1a/0x30 [ 1453.600341][T13799] [ 1453.603641][T13799] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1453.610936][T13799] CPU: 1 UID: 0 PID: 13799 Comm: kworker/u9:2 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 1453.621983][T13799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1453.632095][T13799] Workqueue: hci4 hci_conn_timeout [ 1453.637515][T13799] Call Trace: [ 1453.640809][T13799] [ 1453.643751][T13799] dump_stack_lvl+0x241/0x360 [ 1453.648464][T13799] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1453.653696][T13799] ? __pfx__printk+0x10/0x10 [ 1453.658322][T13799] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1453.663980][T13799] ? vscnprintf+0x5d/0x90 [ 1453.668347][T13799] panic+0x349/0x880 [ 1453.672286][T13799] ? __warn+0x174/0x4d0 [ 1453.676475][T13799] ? __pfx_panic+0x10/0x10 [ 1453.680933][T13799] ? ret_from_fork_asm+0x1a/0x30 [ 1453.685894][T13799] __warn+0x344/0x4d0 [ 1453.689901][T13799] ? hci_conn_timeout+0xfb/0x290 [ 1453.694876][T13799] report_bug+0x2b3/0x500 [ 1453.699234][T13799] ? hci_conn_timeout+0xfb/0x290 [ 1453.704207][T13799] handle_bug+0x60/0x90 [ 1453.708385][T13799] exc_invalid_op+0x1a/0x50 [ 1453.712904][T13799] asm_exc_invalid_op+0x1a/0x20 [ 1453.717786][T13799] RIP: 0010:hci_conn_timeout+0xfb/0x290 [ 1453.723460][T13799] Code: 4c 89 f7 e8 07 c2 09 00 eb 07 e8 70 55 e5 f6 b0 13 0f b6 f0 4c 89 f7 5b 41 5c 41 5e 41 5f 5d e9 5b b3 fe ff e8 56 55 e5 f6 90 <0f> 0b 90 eb 8f 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 36 ff ff ff 48 [ 1453.743191][T13799] RSP: 0018:ffffc9000411fb90 EFLAGS: 00010293 [ 1453.749303][T13799] RAX: ffffffff8aba1e9a RBX: ffff888042d648e8 RCX: ffff888030321e00 [ 1453.757305][T13799] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 1453.765300][T13799] RBP: 00000000ffffffff R08: ffffffff8aba1e03 R09: 1ffff110085ac802 [ 1453.773295][T13799] R10: dffffc0000000000 R11: ffffed10085ac803 R12: dffffc0000000000 [ 1453.781282][T13799] R13: ffffffff8168ee96 R14: ffff888042d64000 R15: 0000000002400000 [ 1453.789264][T13799] ? process_scheduled_works+0x976/0x1840 [ 1453.795011][T13799] ? hci_conn_timeout+0x63/0x290 [ 1453.799974][T13799] ? hci_conn_timeout+0xfa/0x290 [ 1453.804946][T13799] process_scheduled_works+0xa68/0x1840 [ 1453.810525][T13799] ? __pfx_process_scheduled_works+0x10/0x10 [ 1453.816520][T13799] ? assign_work+0x364/0x3d0 [ 1453.821124][T13799] worker_thread+0x870/0xd30 [ 1453.825729][T13799] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1453.831380][T13799] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1453.837027][T13799] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1453.842941][T13799] ? __kthread_parkme+0x169/0x1d0 [ 1453.847979][T13799] ? __pfx_worker_thread+0x10/0x10 [ 1453.853110][T13799] kthread+0x2f2/0x390 [ 1453.857197][T13799] ? __pfx_worker_thread+0x10/0x10 [ 1453.862323][T13799] ? __pfx_kthread+0x10/0x10 [ 1453.866930][T13799] ret_from_fork+0x4d/0x80 [ 1453.871357][T13799] ? __pfx_kthread+0x10/0x10 [ 1453.875962][T13799] ret_from_fork_asm+0x1a/0x30 [ 1453.881012][T13799] [ 1453.884479][T13799] Kernel Offset: disabled [ 1453.888857][T13799] Rebooting in 86400 seconds..