last executing test programs: 14m2.000419788s ago: executing program 32 (id=296): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40040d0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000007200)=[{{&(0x7f0000000400)=@alg, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000640)=""/100}, {&(0x7f0000000580)=""/5}, {&(0x7f0000000780)=""/16}, {&(0x7f00000007c0)=""/134}, {&(0x7f0000000880)=""/221}, {&(0x7f0000000980)=""/190}], 0x0, &(0x7f0000000ac0)=""/130}, 0x1}, {{&(0x7f0000000bc0)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000c40)=""/137}, {&(0x7f0000000d00)=""/26}, {&(0x7f0000000e00)=""/174}, {&(0x7f0000000d40)=""/3}], 0x0, &(0x7f0000000ec0)=""/112}, 0x3}, {{&(0x7f0000000f40)=@phonet, 0x0, &(0x7f0000007180)=[{&(0x7f0000000fc0)}, {&(0x7f0000001000)=""/99}, {&(0x7f0000001080)=""/159}, {&(0x7f0000001140)=""/205}, {&(0x7f0000001240)=""/130}, {&(0x7f00000060c0)=""/4096}, {&(0x7f00000070c0)=""/152}]}, 0x7fffffff}], 0x4000183, 0x40000022, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdir(0x0, 0x0) r3 = socket$caif_seqpacket(0x25, 0x5, 0x5) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0x40000, 0x0, 0xfffffffc, 0x238}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}) io_uring_enter(r4, 0x3f70, 0x0, 0x0, 0x0, 0x0) 5m49.327663464s ago: executing program 3 (id=2296): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYRES16=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 5m49.248419032s ago: executing program 3 (id=2297): socket(0x1e, 0x4, 0x0) r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x4e6f, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{0x0, 0xdd12}], 0x1, 0x0, 0x0, 0x448c0}, 0x1) 5m49.156607971s ago: executing program 3 (id=2298): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x1a000}}, 0x0) 5m48.812355381s ago: executing program 3 (id=2299): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() pipe(0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r2, r1, 0x4}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(&(0x7f0000000000)='fuseblk\x00', 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) symlink(&(0x7f0000000180)='.\x00', 0x0) lsetxattr$security_capability(&(0x7f0000000280)='./file0\x00', &(0x7f0000000140), &(0x7f0000000380)=@v3={0x3000000, [{0xff, 0x9}, {0xffffffff, 0x3}]}, 0x18, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x8090, &(0x7f0000000400)) chdir(&(0x7f00000001c0)='./bus\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x9}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000280)={r6, r6, 0x1, 0x0, 0x0, 0x48, 0x41, 0x1000, 0x8, 0x8, 0x1, 0x0, 'syz0\x00'}) 5m47.73214482s ago: executing program 3 (id=2300): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) fallocate(r0, 0x0, 0x3, 0x800000) write$FUSE_CREATE_OPEN(r0, 0x0, 0x0) 5m47.498054128s ago: executing program 3 (id=2301): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x1b) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000780)=0x2) setsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'lo\x00', &(0x7f0000006280)=@ethtool_gstrings={0x1b, 0x5}}) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) 5m46.34216019s ago: executing program 33 (id=2278): syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, 0x0, 0x0) io_setup(0x8f0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2008880) r4 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r4, 0x0, 0x0) 5m44.35664567s ago: executing program 34 (id=2283): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x1b) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000780)=0x2) setsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'lo\x00', &(0x7f0000006280)=@ethtool_gstrings={0x1b, 0x5}}) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="000000000000000066080000000001b30d56f000009500000000000000360a000000030000180100bcc3c32ce1d2bd7bba7e0cde0d4989002020782500000000002020207b64c3ff"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) 5m44.251663422s ago: executing program 35 (id=2282): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000080)=0x1) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000440)=0x91) r4 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r4, &(0x7f0000ff1000/0x3000)=nil, 0x400c) mremap(&(0x7f0000ff1000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) 5m38.340661515s ago: executing program 36 (id=2290): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_getscheduler(r0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r3, 0x4b41, &(0x7f00000000c0)) r4 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r5 = add_key(&(0x7f0000000080)='keyring\x00', &(0x7f0000001380)={'syz', 0x1}, 0x0, 0x0, r4) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@chain={'key_or_keyring:', r5}) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x28) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = syz_io_uring_setup(0x1e1e, 0x0, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r7, r8, 0x0) io_uring_enter(r6, 0x48e9, 0x0, 0x2, 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r9) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}}], 0x1, 0x20000054) mount$9p_fd(0x0, 0x0, &(0x7f0000000480), 0x84, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r9}}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x193042, 0x0) 5m32.268450566s ago: executing program 37 (id=2301): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x1b) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000780)=0x2) setsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'lo\x00', &(0x7f0000006280)=@ethtool_gstrings={0x1b, 0x5}}) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) 4m23.916011814s ago: executing program 8 (id=2426): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000100)=@device_b, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x7b) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000002c0)={0x1c, r4, 0x303, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x68, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x68}}, 0x48c0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}]]}, 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 4m22.511796926s ago: executing program 8 (id=2438): socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) socket$packet(0x11, 0x2, 0x300) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="11", 0x1}], 0x1, &(0x7f0000000400)=ANY=[], 0x48}}], 0x1, 0x4) 4m16.629052804s ago: executing program 9 (id=2469): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 4m16.494193831s ago: executing program 8 (id=2470): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x84, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r1, 0x0, &(0x7f00000002c0)='L', 0x1, 0xfffffffffffffff9}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x1, r1, 0x0, 0x80, 0xfffffff7ffffffff}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r1, 0x0, &(0x7f0000000040), 0x0, 0x8}) 4m16.329810727s ago: executing program 8 (id=2473): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=@newtclass={0xc54, 0x28, 0x400, 0x70bd28, 0x8, {0x0, 0x0, 0x0, 0x0, {0x8}, {0x2}, {0xfff2, 0xffff}}, [@c_cbq={{0x8}, {0x80c, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xa4b8, 0x3, 0x4, 0x10001, 0x8, 0x100, 0xd755, 0x7, 0x6, 0xffff, 0x4, 0x0, 0x6, 0x6, 0xb24, 0x80000001, 0xe00, 0x5, 0x1, 0x7, 0x3c, 0x3, 0x5, 0xfffff6cd, 0x4, 0xe5e, 0x1, 0x10000, 0xf, 0x6, 0xa929, 0xf, 0xf, 0x200000, 0x7ff, 0x4, 0xfffffffe, 0x41, 0x2, 0x100, 0x5c, 0x9, 0x4, 0x30, 0x1, 0x3, 0xffffffff, 0x1, 0x6, 0xfc29, 0x6, 0xfffffe3f, 0x7fffffff, 0x0, 0x3, 0x5, 0x9, 0xe18, 0x2, 0x8, 0x8, 0xb0a, 0x9, 0xff, 0x3, 0x7, 0xf, 0x7, 0x5, 0x6, 0x1, 0x101, 0x7, 0x7ff, 0xcd, 0x8, 0x3ee, 0x4b, 0x3, 0x8, 0xa4, 0x7, 0x6, 0x4, 0x89dc, 0x2, 0x76, 0x9, 0x81, 0x9, 0x5, 0x7f, 0x6, 0x6, 0x7, 0x3, 0x5, 0x10, 0xb, 0x1, 0xffff8001, 0xb6d, 0x4, 0x7ff, 0xf61, 0x5, 0x7, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x6, 0x6, 0x91, 0x1, 0x7, 0x8, 0x6, 0x1, 0x1800, 0x6, 0xe, 0x2, 0xd7d96f43, 0x40, 0x800, 0x9, 0xfffffff7, 0x3, 0x637d, 0x1000, 0x54, 0x15512f96, 0x2, 0x1, 0x39, 0x0, 0x3, 0x10, 0x1, 0x10, 0x4, 0x43, 0x8, 0x8001, 0x6, 0x2, 0x0, 0x0, 0xe, 0x0, 0xfff, 0x2, 0x3, 0x80000001, 0x7, 0x2e, 0x9, 0x0, 0x800, 0x6, 0x31, 0x6, 0x6, 0x5, 0x2, 0x3, 0x260df0e7, 0x8, 0x1, 0xb6, 0x4, 0x5, 0x8, 0x8141, 0x20000000, 0x1ff, 0x6, 0xfffffffe, 0x7, 0x3, 0xff, 0xb688, 0x7ff, 0x5, 0xff, 0x39, 0x100, 0x8, 0xd, 0x1, 0x0, 0x9, 0x7, 0x401, 0x8, 0x7, 0x40, 0x1, 0x4, 0x5, 0x0, 0x2f45, 0x40, 0x723, 0x5, 0x7ff, 0x2, 0x8000, 0x46, 0x5, 0x1, 0xac, 0x8001, 0x6, 0xfffffff9, 0x1, 0x73, 0x6, 0x48fbc151, 0x2, 0x6, 0x80000000, 0xff, 0x4, 0xfffffc00, 0x9, 0x8000, 0x6cb, 0x0, 0x80000000, 0x6, 0x6, 0x2, 0x8000, 0x847, 0xfffffff4, 0x7, 0x7, 0x1, 0x0, 0x8, 0x4, 0xb39, 0x9, 0x8, 0x5, 0x3, 0x29b, 0x4, 0x4c4, 0xffffffff, 0x9, 0x3ff]}, @TCA_CBQ_RTAB={0x404, 0x6, [0xffff, 0x3ff, 0x2, 0x800, 0x4, 0x6, 0x7ff, 0xfffffc00, 0x5, 0x6, 0x4, 0x4, 0x5, 0x5f6, 0x4, 0x1, 0x487a, 0x1b, 0x10000, 0xa, 0x4, 0x1, 0x5, 0x8c9, 0x10004, 0x400, 0x0, 0x6, 0x1538, 0x4, 0xff, 0x1000, 0x6, 0x0, 0x9, 0x542d, 0x9, 0xf, 0x4, 0x4, 0x1, 0x1, 0x7, 0x7, 0xd, 0x9, 0x81, 0x4, 0x130000, 0x252c000, 0x7, 0x1, 0x1, 0x4, 0x9f, 0x5, 0xe, 0xae7, 0x5, 0x7, 0x3, 0x8b, 0x0, 0x9, 0x0, 0x8, 0x10, 0x7, 0xfffffc01, 0x4c, 0x5, 0xfffffffb, 0xfffffffa, 0x8, 0x3, 0x2, 0xb42, 0x6, 0xfffffffb, 0x4, 0x9, 0x7f, 0x6, 0x379, 0x10000, 0xcca9, 0xcdd, 0x2, 0x0, 0x3, 0x1, 0x3a04, 0x7fffffff, 0x9, 0x1, 0x35, 0x3, 0xfffffffe, 0x1, 0x4, 0x8, 0x8, 0x1, 0x59be, 0xe5bd, 0xfffffffc, 0x5, 0x4, 0x6, 0x4, 0x1, 0x80, 0x31, 0xfff, 0x9, 0x2, 0x4, 0x9, 0x8, 0x3, 0x0, 0x8, 0xd, 0x7a31, 0x5, 0xffff590f, 0x1, 0x101, 0xc, 0x38, 0x3, 0x80000000, 0x5, 0x8b6, 0xb, 0x8, 0x80000001, 0xffff, 0x1, 0x87bb, 0x7, 0x7, 0x1, 0x40, 0x6, 0x4, 0x7, 0xa, 0x2, 0x2, 0x9, 0xffff, 0x5, 0x2, 0x9, 0x7fff, 0xc56e, 0x1, 0x8, 0x1000, 0x3790, 0x1, 0x3516, 0x1, 0x8, 0x6, 0x1, 0xfffff704, 0x0, 0xfffffbff, 0x5, 0x9, 0xd160, 0x7fffffff, 0x1, 0x2, 0xfffffffa, 0x3, 0x6, 0xe, 0xff, 0x4, 0x3, 0xfffffff9, 0x2, 0x46d, 0x4, 0xfffff957, 0x8, 0x1, 0x7, 0xeff, 0x5, 0xffffffff, 0x1, 0x0, 0xc27a, 0x4, 0x2, 0x1, 0xa, 0x0, 0x401, 0x588a, 0x7985, 0x0, 0x4, 0x3, 0x343e, 0xfffffffe, 0x400, 0x1, 0x0, 0xbd2, 0xfffffff4, 0x7fffffff, 0x1, 0xfffffb0c, 0x5, 0x3, 0xffff, 0x7a, 0x7, 0x8, 0x800, 0xf8000000, 0x3, 0x7, 0x8, 0x3, 0x3fc, 0x13, 0x7ff, 0x1ff, 0xe25e, 0x4648000, 0x3, 0xffff, 0x9ab, 0x5, 0x80, 0x7, 0x551cdd7, 0x1, 0x4, 0x8, 0x5, 0x4dd, 0x4384, 0x9, 0x2, 0x7, 0x80, 0x4e6, 0x5, 0x6]}]}}, @c_cbq={{0x8}, {0x4}}, @c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x8, 0x5, 0x80, 0x4af8, 0x5, 0x1, 0x1, 0x6, 0x7, 0x5, 0x9, 0x0, 0x9, 0x1, 0x5, 0xe, 0x3, 0xff, 0x8, 0x0, 0xfffffe00, 0x9, 0x3, 0x4, 0x9, 0x4, 0x4, 0xf, 0x6, 0x2, 0x4, 0x7, 0x4000, 0xfff, 0xf30a, 0x0, 0x4, 0xf, 0x9, 0x4, 0x7, 0x4961, 0xf, 0x1, 0x7, 0x4, 0x4, 0x0, 0x317, 0x2, 0x0, 0x6, 0x5, 0x40, 0x1, 0xffffffff, 0x847, 0x7d, 0x9, 0xffc00000, 0x613b, 0x7, 0xfffffffa, 0x0, 0x4a4, 0x200, 0xb44, 0x3, 0x9, 0x6, 0x3, 0x0, 0x6c5, 0x2, 0x7fffffff, 0x9, 0x8, 0x1, 0x401, 0x5, 0xfffffffa, 0x6, 0x479d, 0x7, 0xffffffff, 0xa, 0x5, 0x800, 0x8, 0x1, 0x7, 0x5e7b, 0x4, 0x10001, 0x6, 0x4, 0x16ab, 0xffff, 0x40, 0x9, 0x3, 0x6, 0x9, 0x3, 0xfffffff8, 0xfffffffe, 0xfffffff7, 0x8, 0x6, 0x5, 0x6, 0xc, 0x0, 0xa, 0x13b, 0x7fff, 0x9, 0x9132, 0x9, 0x1, 0x9, 0x9, 0xfffffffe, 0x0, 0x8, 0x5, 0x5, 0xe2dd, 0x3fd, 0x80a, 0x1, 0xb, 0xffff0000, 0x80, 0xe, 0x0, 0xa2, 0x400, 0x0, 0x48000000, 0x8, 0x0, 0x4, 0x6, 0x7, 0x80000001, 0x8, 0x97, 0x1, 0xb, 0x3, 0x9, 0x4, 0xb, 0x7fff, 0x100, 0x7ff, 0x100, 0x6, 0x5, 0x1, 0x5, 0x9, 0x400, 0xfd04, 0x3ff, 0xfffffff5, 0x3ff, 0xbfcb, 0x9, 0x1, 0xe329, 0x7, 0xfffffffc, 0x50000000, 0xec, 0x7, 0x1, 0x1000, 0x8000, 0x7, 0x7ffb, 0x3, 0xfffffff9, 0x2, 0x67, 0x1, 0x4, 0xd, 0xff, 0x6, 0x101, 0xcd1a, 0x8, 0x7, 0x5, 0x0, 0x80, 0x1ff, 0x1, 0x1, 0x7, 0xf, 0x1, 0x0, 0xe11, 0x6, 0x3, 0xfffffffc, 0x1ff, 0x1, 0x2, 0x2cae, 0xf3ff, 0x48d, 0x7fff, 0x9, 0x1000, 0xfffffe00, 0x37f4, 0x0, 0x9, 0x2000, 0x5, 0x2, 0xd, 0x6, 0x822, 0x8, 0x0, 0xbec9, 0x9, 0x5, 0x35, 0xc2a, 0x4b, 0xa, 0x80, 0x2000007, 0x1, 0x7, 0x0, 0x12, 0x1c, 0x2, 0x4, 0x8, 0x5704, 0xc975, 0x7, 0x1000, 0x365a8a29, 0x5624, 0x1e9019bc, 0x800, 0xfffffffa]}]}}]}, 0xc54}, 0x1, 0x0, 0x0, 0x40004}, 0x20008000) sendmmsg$alg(r1, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) 4m16.034066578s ago: executing program 9 (id=2475): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(r2, &(0x7f00000003c0), 0x0) getsockname$tipc(r0, &(0x7f0000000200), 0x0) sendmmsg$inet(r0, &(0x7f0000001540), 0x0, 0x0) close(r1) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r6 = add_key(&(0x7f0000000040)='.dead\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) r7 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$reject(0x13, r6, 0x0, 0x7, r7) 4m16.016110129s ago: executing program 7 (id=2476): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x2, @empty, 0xa09c}, {0xa, 0x2, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}}, 0xffffffffffffffff, 0x40099d}}, 0x37) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0xffffffff}, 0x8) writev(r0, 0x0, 0x0) 4m15.035630277s ago: executing program 6 (id=2477): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000001380)) 4m15.034164708s ago: executing program 8 (id=2478): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e78, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x80}}]}, {0x2}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000000)={'\x00', 0x7fff, 0xc86, 0x2, 0x3, 0x8, 0x0}) prlimit64(r0, 0xc, &(0x7f0000000340)={0x101, 0x100}, &(0x7f0000000380)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, 0x0}, 0x94) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) preadv(r6, &(0x7f0000001b00)=[{&(0x7f0000000180)=""/244, 0xf4}], 0x1, 0x10, 0x0) 4m14.113972988s ago: executing program 9 (id=2479): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000100)=@device_b, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x7b) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000380)=ANY=[], 0x2c9) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000002c0)={0x1c, r4, 0x303, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x68, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x68}}, 0x48c0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}]]}, 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 4m12.905248459s ago: executing program 8 (id=2480): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) socket$packet(0x11, 0x2, 0x300) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="11", 0x1}], 0x1, &(0x7f0000000400)=ANY=[], 0x48}}], 0x1, 0x4) 4m12.661883276s ago: executing program 7 (id=2481): ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="0000002ba8", 0x5}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f0000001900)="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", 0x18f}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {0x0}], 0x2}, 0x0) 4m12.523533231s ago: executing program 7 (id=2482): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1}, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_POWER_SAVE(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r3, 0x10, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40080}, 0x1) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x3f}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={0x0, 0x144}}, 0x20000000) r5 = socket(0x1e, 0x4, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(r6, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000480)=""/4085, 0xff5}], 0x1}, 0xbe58}], 0x1, 0x7ffeedc0, 0x0) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000005f00)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="01002dbd0600ffdbdb", @ANYBLOB="0600eb00000800000400ec000a000600080211000001000006"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x20000) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) 4m12.242119671s ago: executing program 9 (id=2483): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() pipe(0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r2, r1, 0x4}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(&(0x7f0000000000)='fuseblk\x00', 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) symlink(&(0x7f0000000180)='.\x00', &(0x7f0000000440)='./file1\x00') lsetxattr$security_capability(&(0x7f0000000280)='./file0\x00', &(0x7f0000000140), &(0x7f0000000380)=@v3={0x3000000, [{0xff, 0x9}, {0xffffffff, 0x3}]}, 0x18, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x8090, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x9}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000280)={r6, r6, 0x1, 0x0, 0x0, 0x48, 0x41, 0x1000, 0x8, 0x8, 0x1, 0x0, 'syz0\x00'}) 4m11.995178391s ago: executing program 7 (id=2484): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x58342, 0x0) io_setup(0x20fe, &(0x7f0000000380)=0x0) io_submit(r1, 0x1, &(0x7f0000000480)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x600}]) 4m11.120941682s ago: executing program 6 (id=2485): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1}, 0x0) socket$inet(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r2, 0x10, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40080}, 0x1) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x3f}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={0x0, 0x144}}, 0x20000000) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg(r5, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000480)=""/4085, 0xff5}], 0x1}, 0xbe58}], 0x1, 0x7ffeedc0, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) 4m10.930137904s ago: executing program 7 (id=2486): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000)={0x4}, 0x10}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, 0x0, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000300)='kmem_cache_free\x00', r3}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r4) sendmsg$DEVLINK_CMD_RATE_SET(r4, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48004}, 0x0) 4m10.312407591s ago: executing program 9 (id=2487): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=@newtclass={0xc54, 0x28, 0x400, 0x70bd28, 0x8, {0x0, 0x0, 0x0, 0x0, {0x8}, {0x2}, {0xfff2, 0xffff}}, [@c_cbq={{0x8}, {0x80c, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xa4b8, 0x3, 0x4, 0x10001, 0x8, 0x100, 0xd755, 0x7, 0x6, 0xffff, 0x4, 0x0, 0x6, 0x6, 0xb24, 0x80000001, 0xe00, 0x5, 0x1, 0x7, 0x3c, 0x3, 0x5, 0xfffff6cd, 0x4, 0xe5e, 0x1, 0x10000, 0xf, 0x6, 0xa929, 0xf, 0xf, 0x200000, 0x7ff, 0x4, 0xfffffffe, 0x41, 0x2, 0x100, 0x5c, 0x9, 0x4, 0x30, 0x1, 0x3, 0xffffffff, 0x1, 0x6, 0xfc29, 0x6, 0xfffffe3f, 0x7fffffff, 0x0, 0x3, 0x5, 0x9, 0xe18, 0x2, 0x8, 0x8, 0xb0a, 0x9, 0xff, 0x3, 0x7, 0xf, 0x7, 0x5, 0x6, 0x1, 0x101, 0x7, 0x7ff, 0xcd, 0x8, 0x3ee, 0x4b, 0x3, 0x8, 0xa4, 0x7, 0x6, 0x4, 0x89dc, 0x2, 0x76, 0x9, 0x81, 0x9, 0x5, 0x7f, 0x6, 0x6, 0x7, 0x3, 0x5, 0x10, 0xb, 0x1, 0xffff8001, 0xb6d, 0x4, 0x7ff, 0xf61, 0x5, 0x7, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x6, 0x6, 0x91, 0x1, 0x7, 0x8, 0x6, 0x1, 0x1800, 0x6, 0xe, 0x2, 0xd7d96f43, 0x40, 0x800, 0x9, 0xfffffff7, 0x3, 0x637d, 0x1000, 0x54, 0x15512f96, 0x2, 0x1, 0x39, 0x0, 0x3, 0x10, 0x1, 0x10, 0x4, 0x43, 0x8, 0x8001, 0x6, 0x2, 0x0, 0x0, 0xe, 0x0, 0xfff, 0x2, 0x3, 0x80000001, 0x7, 0x2e, 0x9, 0x0, 0x800, 0x6, 0x31, 0x6, 0x6, 0x5, 0x2, 0x3, 0x260df0e7, 0x8, 0x1, 0xb6, 0x4, 0x5, 0x8, 0x8141, 0x20000000, 0x1ff, 0x6, 0xfffffffe, 0x7, 0x3, 0xff, 0xb688, 0x7ff, 0x5, 0xff, 0x39, 0x100, 0x8, 0xd, 0x1, 0x0, 0x9, 0x7, 0x401, 0x8, 0x7, 0x40, 0x1, 0x4, 0x5, 0x0, 0x2f45, 0x40, 0x723, 0x5, 0x7ff, 0x2, 0x8000, 0x46, 0x5, 0x1, 0xac, 0x8001, 0x6, 0xfffffff9, 0x1, 0x73, 0x6, 0x48fbc151, 0x2, 0x6, 0x80000000, 0xff, 0x4, 0xfffffc00, 0x9, 0x8000, 0x6cb, 0x0, 0x80000000, 0x6, 0x6, 0x2, 0x8000, 0x847, 0xfffffff4, 0x7, 0x7, 0x1, 0x0, 0x8, 0x4, 0xb39, 0x9, 0x8, 0x5, 0x3, 0x29b, 0x4, 0x4c4, 0xffffffff, 0x9, 0x3ff]}, @TCA_CBQ_RTAB={0x404, 0x6, [0xffff, 0x3ff, 0x2, 0x800, 0x4, 0x6, 0x7ff, 0xfffffc00, 0x5, 0x6, 0x4, 0x4, 0x5, 0x5f6, 0x4, 0x1, 0x487a, 0x1b, 0x10000, 0xa, 0x4, 0x1, 0x5, 0x8c9, 0x10004, 0x400, 0x0, 0x6, 0x1538, 0x4, 0xff, 0x1000, 0x6, 0x0, 0x9, 0x542d, 0x9, 0xf, 0x4, 0x4, 0x1, 0x1, 0x7, 0x7, 0xd, 0x9, 0x81, 0x4, 0x130000, 0x252c000, 0x7, 0x1, 0x1, 0x4, 0x9f, 0x5, 0xe, 0xae7, 0x5, 0x7, 0x3, 0x8b, 0x0, 0x9, 0x0, 0x8, 0x10, 0x7, 0xfffffc01, 0x4c, 0x5, 0xfffffffb, 0xfffffffa, 0x8, 0x3, 0x2, 0xb42, 0x6, 0xfffffffb, 0x4, 0x9, 0x7f, 0x6, 0x379, 0x10000, 0xcca9, 0xcdd, 0x2, 0x0, 0x3, 0x1, 0x3a04, 0x7fffffff, 0x9, 0x1, 0x35, 0x3, 0xfffffffe, 0x1, 0x4, 0x8, 0x8, 0x1, 0x59be, 0xe5bd, 0xfffffffc, 0x5, 0x4, 0x6, 0x4, 0x1, 0x80, 0x31, 0xfff, 0x9, 0x2, 0x4, 0x9, 0x8, 0x3, 0x0, 0x8, 0xd, 0x7a31, 0x5, 0xffff590f, 0x1, 0x101, 0xc, 0x38, 0x3, 0x80000000, 0x5, 0x8b6, 0xb, 0x8, 0x80000001, 0xffff, 0x1, 0x87bb, 0x7, 0x7, 0x1, 0x40, 0x6, 0x4, 0x7, 0xa, 0x2, 0x2, 0x9, 0xffff, 0x5, 0x2, 0x9, 0x7fff, 0xc56e, 0x1, 0x8, 0x1000, 0x3790, 0x1, 0x3516, 0x1, 0x8, 0x6, 0x1, 0xfffff704, 0x0, 0xfffffbff, 0x5, 0x9, 0xd160, 0x7fffffff, 0x1, 0x2, 0xfffffffa, 0x3, 0x6, 0xe, 0xff, 0x4, 0x3, 0xfffffff9, 0x2, 0x46d, 0x4, 0xfffff957, 0x8, 0x1, 0x7, 0xeff, 0x5, 0xffffffff, 0x1, 0x0, 0xc27a, 0x4, 0x2, 0x1, 0xa, 0x0, 0x401, 0x588a, 0x7985, 0x0, 0x4, 0x3, 0x343e, 0xfffffffe, 0x400, 0x1, 0x0, 0xbd2, 0xfffffff4, 0x7fffffff, 0x1, 0xfffffb0c, 0x5, 0x3, 0xffff, 0x7a, 0x7, 0x8, 0x800, 0xf8000000, 0x3, 0x7, 0x8, 0x3, 0x3fc, 0x13, 0x7ff, 0x1ff, 0xe25e, 0x4648000, 0x3, 0xffff, 0x9ab, 0x5, 0x80, 0x7, 0x551cdd7, 0x1, 0x4, 0x8, 0x5, 0x4dd, 0x4384, 0x9, 0x2, 0x7, 0x80, 0x4e6, 0x5, 0x6]}]}}, @c_cbq={{0x8}, {0x4}}, @c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x8, 0x5, 0x80, 0x4af8, 0x5, 0x1, 0x1, 0x6, 0x7, 0x5, 0x9, 0x0, 0x9, 0x1, 0x5, 0xe, 0x3, 0xff, 0x8, 0x0, 0xfffffe00, 0x9, 0x3, 0x4, 0x9, 0x4, 0x4, 0xf, 0x6, 0x2, 0x4, 0x7, 0x4000, 0xfff, 0xf30a, 0x0, 0x4, 0xf, 0x9, 0x4, 0x7, 0x4961, 0xf, 0x1, 0x7, 0x4, 0x4, 0x0, 0x317, 0x2, 0x0, 0x6, 0x5, 0x40, 0x1, 0xffffffff, 0x847, 0x7d, 0x9, 0xffc00000, 0x613b, 0x7, 0xfffffffa, 0x0, 0x4a4, 0x200, 0xb44, 0x3, 0x9, 0x6, 0x3, 0x0, 0x6c5, 0x2, 0x7fffffff, 0x9, 0x8, 0x1, 0x401, 0x5, 0xfffffffa, 0x6, 0x479d, 0x7, 0xffffffff, 0xa, 0x5, 0x800, 0x8, 0x1, 0x7, 0x5e7b, 0x4, 0x10001, 0x6, 0x4, 0x16ab, 0xffff, 0x40, 0x9, 0x3, 0x6, 0x9, 0x3, 0xfffffff8, 0xfffffffe, 0xfffffff7, 0x8, 0x6, 0x5, 0x6, 0xc, 0x0, 0xa, 0x13b, 0x7fff, 0x9, 0x9132, 0x9, 0x1, 0x9, 0x9, 0xfffffffe, 0x0, 0x8, 0x5, 0x5, 0xe2dd, 0x3fd, 0x80a, 0x1, 0xb, 0xffff0000, 0x80, 0xe, 0x0, 0xa2, 0x400, 0x0, 0x48000000, 0x8, 0x0, 0x4, 0x6, 0x7, 0x80000001, 0x8, 0x97, 0x1, 0xb, 0x3, 0x9, 0x4, 0xb, 0x7fff, 0x100, 0x7ff, 0x100, 0x6, 0x5, 0x1, 0x5, 0x9, 0x400, 0xfd04, 0x3ff, 0xfffffff5, 0x3ff, 0xbfcb, 0x9, 0x1, 0xe329, 0x7, 0xfffffffc, 0x50000000, 0xec, 0x7, 0x1, 0x1000, 0x8000, 0x7, 0x7ffb, 0x3, 0xfffffff9, 0x2, 0x67, 0x1, 0x4, 0xd, 0xff, 0x6, 0x101, 0xcd1a, 0x8, 0x7, 0x5, 0x0, 0x80, 0x1ff, 0x1, 0x1, 0x7, 0xf, 0x1, 0x0, 0xe11, 0x6, 0x3, 0xfffffffc, 0x1ff, 0x1, 0x2, 0x2cae, 0xf3ff, 0x48d, 0x7fff, 0x9, 0x1000, 0xfffffe00, 0x37f4, 0x0, 0x9, 0x2000, 0x5, 0x2, 0xd, 0x6, 0x822, 0x8, 0x0, 0xbec9, 0x9, 0x5, 0x35, 0xc2a, 0x4b, 0xa, 0x80, 0x2000007, 0x1, 0x7, 0x0, 0x12, 0x1c, 0x2, 0x4, 0x8, 0x5704, 0xc975, 0x7, 0x1000, 0x365a8a29, 0x5624, 0x1e9019bc, 0x800, 0xfffffffa]}]}}]}, 0xc54}, 0x1, 0x0, 0x0, 0x40004}, 0x20008000) sendmmsg$alg(r1, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) 4m9.74572226s ago: executing program 6 (id=2488): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(r2, &(0x7f00000003c0), 0x0) getsockname$tipc(r0, &(0x7f0000000200), 0x0) sendmmsg$inet(r0, &(0x7f0000001540), 0x0, 0x0) close(r1) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r6 = add_key(&(0x7f0000000040)='.dead\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) r7 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$reject(0x13, r6, 0x0, 0x7, r7) 4m9.581580033s ago: executing program 9 (id=2489): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$packet(r0, &(0x7f0000000900)="05d936277c6f54e522007f83477ca1b278e3e4018a34cc0000000000000000000017bdf040013d4e752c941c9ddd1f99ec2f92", 0x33, 0x8c1, &(0x7f0000000040)={0x11, 0x86dd, r3, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 4m9.526112993s ago: executing program 7 (id=2490): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x2, @empty, 0xa09c}, {0xa, 0x2, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}}, 0xffffffffffffffff, 0x40099d}}, 0x37) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0xffffffff}, 0x8) writev(r0, &(0x7f0000000040), 0x0) 4m8.485938397s ago: executing program 6 (id=2491): ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="0000002ba8", 0x5}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f0000001900)="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", 0x18f}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) 4m8.321885488s ago: executing program 6 (id=2492): r0 = socket$kcm(0xa, 0x922000000003, 0x11) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f", 0x46}], 0x1}, 0x0) 4m8.052627783s ago: executing program 6 (id=2493): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e00010000000000fcdbdf25070000", @ANYRES32=r1, @ANYBLOB="000000000a000200aaaaaaaaaa0c"], 0x28}, 0x1, 0x0, 0x0, 0x4880}, 0x0) 3m57.638141741s ago: executing program 38 (id=2480): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) socket$packet(0x11, 0x2, 0x300) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="11", 0x1}], 0x1, &(0x7f0000000400)=ANY=[], 0x48}}], 0x1, 0x4) 3m53.646787429s ago: executing program 39 (id=2489): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$packet(r0, &(0x7f0000000900)="05d936277c6f54e522007f83477ca1b278e3e4018a34cc0000000000000000000017bdf040013d4e752c941c9ddd1f99ec2f92", 0x33, 0x8c1, &(0x7f0000000040)={0x11, 0x86dd, r3, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 3m53.554804868s ago: executing program 40 (id=2490): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x2, @empty, 0xa09c}, {0xa, 0x2, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}}, 0xffffffffffffffff, 0x40099d}}, 0x37) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0xffffffff}, 0x8) writev(r0, &(0x7f0000000040), 0x0) 3m52.643515621s ago: executing program 41 (id=2493): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001e00010000000000fcdbdf25070000", @ANYRES32=r1, @ANYBLOB="000000000a000200aaaaaaaaaa0c"], 0x28}, 0x1, 0x0, 0x0, 0x4880}, 0x0) 5.196789482s ago: executing program 5 (id=3325): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300", 0x42}], 0x1) 5.00622771s ago: executing program 5 (id=3330): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="030000f143bd5234f0874cea45efced10d0004d564ca75ef7131d0da25d20e5a68a5fc00", @ANYBLOB='\t'], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x17, 0x8, 0x40, 0x42, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000940), &(0x7f0000000640), 0x1004, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r0, &(0x7f0000000580), 0x0}, 0x20) 4.609837054s ago: executing program 5 (id=3337): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x15) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(r2, &(0x7f00000003c0), 0x0) getsockname$tipc(r0, &(0x7f0000000200), 0x0) close(r1) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, 0x0, 0x0) r7 = add_key(&(0x7f0000000040)='.dead\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) r8 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$reject(0x13, r7, 0x0, 0x7, r8) 2.900017532s ago: executing program 0 (id=3353): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c25000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.654139164s ago: executing program 0 (id=3356): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x78, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0x14, 0x16, 0x1, 0x0, [0x9, 0x2, 0x8, 0x7]}]}, 0x78}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004881}, 0x200088a0) 2.592453167s ago: executing program 1 (id=3357): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)}, 0x4008804) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote, 0xfffffffe}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000840)="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", 0x3d9}, {&(0x7f0000002b40)="da752f575198baaac222d34e85893d37a6bd281687872ed9151c56f415698f3fecf56eebf5edb42ed5d54e0419b2a13128d3ad19b6eed6b450aad46baaa57203e0d4f567d8d79fe07e7b3142de43e55cf69c65db2469175cf60c82f49d0f9dc4c4dde733a14d57f4117ed2f46aea5950ff0176d73349c2808eee62ce1c7d846ffdf65211f3192dabe5b3ac1516ad90e618d0ca9e4ac2778acabeac244f2f90af2616647e5cf8ab5e2ac404ebf2a866c8a73f68ae2cc4523e63e3a1aa5ab60a23e4c47534bda546042120c5333d91fefc68226bc9149d282937797a2fe036a58c9ecd19e54bcfb85d3f75ec7c74d86be94ef6b9191e0fa86d2a9330af3f592e24bc30b84632e5121bf04abc0e12f4073f6678ad97b786cc73b8175e35eda542e3631d283a3ca6fef91607ec7dee1b4a62bae169cc8fb64e8bdef95474f0b3c526f69ce55281e18016a4785875ba99e313fd63f66cfd36234bcc6048f25bce8cce39cf709eb10e1ea88497ff7401aae0d4a7e07f14691b6c4b75dc16e2586744317ffbb9966d8bfb16efcdf6ab308426e5c1aec6a6636122ffaca89af3b03834612b93989d0bbb251a42c1b48b86ac7162ad8d5cbf3d6cfccdc590724ff6caa85320f9d5beea2370b8c0533c19422c9097a7164651ad9d8f9cca4ea781", 0x1dc}], 0x2}, 0x8400) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000100)="fb589e82b3", 0x5}], 0x1}, 0x0) 2.483568867s ago: executing program 0 (id=3358): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in6=@loopback, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001000000000000000000"], 0xb8}}, 0x0) 2.441221728s ago: executing program 4 (id=3359): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5}, {0x2, 0x0, 0x0, 0x8}]}, 0x94) sendmsg$inet(r0, 0x0, 0x4000040) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="d7", 0x1}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0xfffffffc, 0x1, 0x200000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000)=r3, 0x8) 2.350362869s ago: executing program 1 (id=3360): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={0xffffffffffffffff, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000780)=[0x0], 0x0, 0xbb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x87, 0x8, 0x0, 0x0}}, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000632f77fbac141416ac14141683089ffe4d2f87e5446a6aab845013f2325f1a39010703038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) 2.2435017s ago: executing program 0 (id=3362): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 2.072295324s ago: executing program 1 (id=3363): sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000200008385000000710000001801000002696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x18) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) 1.944368992s ago: executing program 5 (id=3365): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000100)=@device_b, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x7b) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000380)=ANY=[], 0x2c9) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000002c0)={0x1c, r4, 0x303, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x68, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x68}}, 0x48c0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}]]}, 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 1.754251333s ago: executing program 2 (id=3366): r0 = socket(0xa, 0x3, 0x2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000340)={'sit0\x00', 0x0}) 1.406058412s ago: executing program 4 (id=3367): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) vmsplice(r0, &(0x7f0000000800)=[{&(0x7f00000003c0)="c2fe", 0x2}, {&(0x7f0000000480)="dd90a34580fe9c3d8d327eb11a9ab570c30ac038d1016479f570cb9b066ef2a87ead4c52360fa8adf05c26a8987894873e216cfdd005bd219d887d3a10f3d9b5", 0x40}, {&(0x7f0000000580)="46a635608ee8833ff8ab13c83fd8fe35b94dddc58e158cf4ba818d18858e173a169cae2c77f93c0c2a091ec99ae34ac1f318a7f1a7d5dd2bd52991818cd312936a598374fcb0253de7", 0x49}, {0x0}], 0x4, 0x4) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.256466298s ago: executing program 2 (id=3368): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x78, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0x14, 0x16, 0x1, 0x0, [0x9, 0x2, 0x8, 0x7]}]}, 0x78}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004881}, 0x200088a0) 1.163010889s ago: executing program 4 (id=3369): connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x2, @empty, 0xc}, 0x1c) r1 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f00000001c0)=[{0x30, 0x3, 0x51, 0xfffff034}, {0x6, 0x4, 0x6, 0x6}]}, 0x10) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 998.18459ms ago: executing program 2 (id=3370): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000940)={0x1, 0x0, [{0x40000001, 0x0, 0x6}]}) 949.256878ms ago: executing program 5 (id=3371): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) pipe2$9p(0x0, 0x80000) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000300)={0x18, 0x0, 0x0, {0xfffffffffffffffe}}, 0x18) socket(0x9, 0x4, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r1, 0x8914, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x5, @bcast, @bpq0, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r3, &(0x7f0000000200)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) connect$rose(r3, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) 888.00855ms ago: executing program 4 (id=3372): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) 868.659781ms ago: executing program 0 (id=3373): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, 0x0, 0x0) 760.187482ms ago: executing program 2 (id=3374): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000000700000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05400000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a01040000000000000000010000002400048020000180080001006f736600140002800500020000000000080001400000001408000b40000000000900010073797a300000000014000000110001"], 0xd4}}, 0x0) 690.042523ms ago: executing program 0 (id=3375): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x15) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(r2, &(0x7f00000003c0), 0x0) getsockname$tipc(r0, &(0x7f0000000200), 0x0) close(r1) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, 0x0, 0x0) r7 = add_key(&(0x7f0000000040)='.dead\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) r8 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$reject(0x13, r7, 0x0, 0x7, r8) 659.902562ms ago: executing program 4 (id=3376): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)="f4000900062b2c25fe80000000000000dc8b850f2323fcb11ea3548466cc00007a000000ad", 0x25}, {&(0x7f0000000600)="efbfb31d5ea1bb", 0x7}], 0x2}, 0x0) 553.651203ms ago: executing program 2 (id=3377): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r1, &(0x7f0000002440), 0x0, &(0x7f0000002540), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x800003}}, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0xb}, 0x94) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r2, &(0x7f0000000080)=@file={0x1}, 0x6e) close(r0) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, 0x0) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 446.700942ms ago: executing program 4 (id=3378): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r1 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = fanotify_init(0xf00, 0x1000) fanotify_mark(r5, 0x105, 0x5000003a, 0xffffffffffffffff, 0x0) r6 = syz_pidfd_open(r1, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendfile(r0, r0, 0x0, 0x3) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) setns(r6, 0x24020000) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) 445.51883ms ago: executing program 1 (id=3379): sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="10000000141448858a558b0cb502798ebfc4e3f8188a14c7"], 0x10}, 0x1, 0x0, 0x0, 0x41}, 0x20000004) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f00000004c0)=""/120, 0x0, 0x80a0000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000440)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4028af11, &(0x7f00000001c0)) 259.254861ms ago: executing program 1 (id=3380): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) recvmsg(r0, 0x0, 0x40010040) 26.332061ms ago: executing program 2 (id=3381): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000080)=0xffffbffa) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 25.575087ms ago: executing program 1 (id=3382): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) socket$unix(0x1, 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001940)=@newtfilter={0x884, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x9, 0x800, 0x4, 0x38, 0x2a5, 0x6, 0xff, 0x6, 0x5, 0x6430, 0x5, 0x7f, 0x0, 0x4, 0x7, 0x4, 0x8, 0x0, 0x8, 0x3, 0x2, 0x10001, 0x6, 0x2, 0x7, 0x0, 0x5, 0x81, 0x5, 0xfffff800, 0x9, 0xb, 0x9, 0x0, 0x6, 0xd6, 0x4000006, 0xfffffffc, 0x10000008, 0x9, 0x7c, 0x6, 0x8, 0x0, 0x200004, 0x7, 0xfff, 0x9, 0x7d, 0x8, 0x732, 0x7, 0x5, 0x7, 0x4, 0x4, 0x6, 0x1, 0x3, 0x100, 0x7, 0x3ff, 0x8, 0x4f, 0x5, 0x8, 0x1ff, 0xffffff00, 0x800, 0x7, 0x5, 0x5, 0x989, 0xffffffff, 0x0, 0xa60a, 0x3, 0x5, 0x8, 0xff, 0x0, 0x0, 0x7, 0x4, 0xe9a, 0x6, 0x4, 0x2, 0x2, 0x5, 0x4, 0x3, 0x7fff, 0x4, 0x5, 0x9, 0x100, 0x4, 0xfffffffe, 0x3, 0x8, 0x7, 0x4, 0x70, 0x2, 0x5, 0x3602cab7, 0x1, 0x7, 0x5, 0x107, 0x0, 0x800, 0x4, 0x2, 0x9, 0x7, 0x2, 0xb979, 0x0, 0x8, 0x0, 0x7, 0xfffffffc, 0x5, 0x0, 0x3c8, 0x10000, 0xfe4, 0xffff, 0x7, 0x4, 0x401, 0x8, 0x101, 0x4, 0x40000, 0x9, 0x2, 0x7, 0x80000001, 0x1, 0x7fff, 0x9d, 0x9, 0xbbe, 0x0, 0x1ff, 0x5, 0x6, 0x0, 0x90, 0x5, 0x9, 0x8, 0x6, 0x9, 0x400, 0x0, 0x8, 0xb9, 0xfffffffd, 0x5, 0xffffffff, 0x1, 0x100, 0x2, 0x8, 0x1000, 0xc, 0x1, 0x3ff, 0x5, 0x68, 0x0, 0xfffffffe, 0x10000, 0x4, 0x2, 0x0, 0x6, 0x6, 0x9, 0x100, 0x6, 0x7, 0x7, 0x0, 0x3, 0x9, 0xa, 0x16, 0x2, 0x3, 0x7, 0x1ff, 0x3, 0xbf, 0x5, 0x7, 0x5, 0x4cc9, 0x7fffffff, 0xfffffff6, 0x3ff, 0x3, 0x9, 0x80000000, 0xcf8, 0x5b8, 0x4, 0x7fff, 0x5fa6, 0x5, 0x4, 0x1, 0x2, 0x0, 0x9, 0xa90a, 0x40, 0x400, 0x8, 0x0, 0x0, 0xe00, 0x1, 0x20a, 0xfffffff9, 0x3, 0x2, 0x8, 0x7ff, 0x9, 0x2, 0xd, 0xa1b, 0x6, 0xc, 0xcda, 0x2, 0xa6, 0x5, 0xec93, 0x1, 0x1eb, 0xdea, 0x9, 0x5, 0xff, 0x0, 0xfff, 0x7, 0x61, 0x40]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x20000000, 0x6, 0x2, 0x2, {0xa, 0x0, 0x7fff, 0x100, 0x4, 0x1ff}, {0x4, 0x1, 0xa, 0x6, 0x7, 0x7d}, 0xb, 0xfffffffc, 0x68c}}, @TCA_POLICE_RATE={0x404, 0x2, [0x695, 0xfff, 0x146b, 0x6, 0x3d8d, 0x200, 0x6, 0xfffffffa, 0x1, 0x4, 0x0, 0x80000000, 0x7f, 0x5, 0xe7, 0xf, 0x782b, 0xa7, 0x80, 0xffffffe0, 0xe, 0x401, 0x0, 0x3cc8, 0x0, 0x1, 0xa, 0xc860, 0x7, 0x0, 0x3, 0x7fff, 0x101, 0x3, 0x80000000, 0x8, 0x8004, 0x9, 0x80000001, 0x200, 0x4, 0x6, 0xffffffff, 0x7, 0x0, 0xda, 0x1, 0x200, 0x4, 0x80, 0xfffffff9, 0x0, 0x3, 0x2, 0x200006, 0xf, 0x7, 0x2, 0x7, 0xffff, 0x9, 0x6, 0x9, 0x3352ecb4, 0x5, 0xfa33, 0x72, 0x1ff, 0x6, 0x2, 0x6, 0x6, 0x6c, 0x7, 0x9, 0x92d6, 0xffffffff, 0xfffffffc, 0x101, 0x1, 0x5, 0x9, 0x495e, 0x80000000, 0xfffffff0, 0x1, 0x6362, 0x2400, 0x2, 0x8, 0x9, 0x3, 0x317, 0x80, 0x9, 0x3, 0x9, 0xaea8, 0xbf, 0xe, 0x9, 0x8, 0x5, 0xee, 0x5, 0x5, 0x400, 0x1ba9, 0x15400, 0xbd43, 0x8, 0x7f, 0xffff6e64, 0xfffffff7, 0x401, 0x40000, 0x8d7, 0x2, 0x200, 0x4, 0x5, 0xb5d, 0xfea, 0x8, 0xb2, 0x2, 0x2, 0x2, 0x200, 0x800, 0x3f28, 0x6, 0xbb, 0xfffffffe, 0xd73, 0x5, 0x8, 0x3, 0x5, 0xfb27, 0x6, 0x7, 0x8, 0x2, 0x0, 0x1ff, 0x3, 0xd5, 0x477, 0xffff1be9, 0x10001, 0x0, 0x0, 0x0, 0x8000, 0x8000, 0x7, 0xff, 0x9, 0x8, 0x938e, 0x41, 0x7ff, 0x5, 0x0, 0xe793, 0xa1d, 0xfffffff9, 0xffff, 0x8, 0x1, 0x4, 0x2, 0x400, 0x3, 0x1, 0x8000, 0x6, 0xefee, 0xffffffff, 0xaa, 0x8, 0x8, 0xe, 0x6c, 0x61e1, 0x1, 0xcf0, 0x68, 0xed, 0x4, 0x82, 0x230, 0x7, 0x4, 0xfff, 0x637c5d46, 0x9, 0x97cb, 0x1, 0x1, 0x4, 0x9, 0x9, 0x3ff, 0x8, 0x3, 0x1, 0x405, 0x6, 0x3dc9, 0xfffff503, 0x0, 0x4001, 0x9d, 0xd686, 0xc65, 0x8, 0x10000, 0x1, 0x7, 0x4, 0x10001, 0xb, 0x0, 0xf515, 0x2, 0x7d8, 0x5, 0x8000, 0x8000, 0x1, 0x5, 0xa, 0x9, 0x4, 0xd6, 0x8, 0x80000001, 0x2, 0x0, 0x8, 0xb9, 0xd9e, 0x9, 0x5, 0x9, 0x1, 0x2, 0x2, 0x9, 0x9, 0x7, 0x0, 0x8, 0x8]}]}]}}, @TCA_CHAIN={0x8, 0xb, 0xde80}]}, 0x884}, 0x1, 0x0, 0x0, 0x90}, 0x0) close(r0) 0s ago: executing program 5 (id=3383): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) kernel console output (not intermixed with test programs): 709.552873][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.553096][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.553320][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.553543][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.553777][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.554026][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.554261][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.554514][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.554737][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.554960][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.555182][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.555406][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.555635][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.555866][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.556089][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.556312][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.556534][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.556761][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.556988][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.557212][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.557433][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.557655][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.557880][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.558133][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.558358][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.558590][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.558809][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.559030][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.559255][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.559479][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.559705][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.559928][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.560152][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.560376][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.560591][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.560813][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.561035][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.561260][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.561481][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.561757][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.561981][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.562206][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.562430][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.562650][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.562908][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.563134][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.563356][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.563577][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.563810][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.564021][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.564244][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.564489][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.564715][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.564937][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.565159][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.565415][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.565647][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.565869][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.566097][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.566320][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.566543][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.566770][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.566992][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.567213][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.567439][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.567663][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.567889][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.568109][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.568331][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.568554][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.568785][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.569036][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.569260][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.569482][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.569704][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.569938][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.570161][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.570383][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.570610][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.570832][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.571055][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.571271][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.571492][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.571718][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.571939][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.572162][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.572385][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.572646][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.573125][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.573353][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.573590][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.573813][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.574036][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.574260][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.574481][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.574710][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.574938][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.575158][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.575387][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.575631][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.575857][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.576081][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.576304][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.576554][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.576786][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.577011][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.577235][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.577459][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.577679][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.577900][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.578123][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.578344][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.578572][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.578803][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.579024][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.579247][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.579473][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.579697][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.579920][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.580173][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.580394][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.580625][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.580849][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.581072][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.581294][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.581530][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.581753][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.581979][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.582201][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.582422][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.582648][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.582907][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.583133][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.583357][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.583619][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.583831][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.584052][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.584293][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.584530][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.584753][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.584978][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.585202][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.585422][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.585644][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.585867][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.586098][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.586319][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.586535][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.586757][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.586981][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.587230][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.587452][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.587676][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.587897][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.588119][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.588337][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.588558][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.588780][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.588995][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.589205][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.589414][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.589629][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.589832][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.590038][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.590243][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.590453][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.590687][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.590892][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.591099][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.591312][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.591532][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.591742][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.591956][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.592174][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.592392][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.593527][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.594643][ C1] usb 6-1: hanwang_irq - nonzero urb status received: -71 [ 709.594708][ C1] usb 6-1: hanwang_irq - usb_submit_urb failed with result -1 [ 709.630602][ T10] usb 6-1: USB disconnect, device number 29 [ 720.967068][T12702] tipc: Enabled bearer , priority 0 [ 720.967949][T12702] syzkaller0: entered promiscuous mode [ 720.967971][T12702] syzkaller0: entered allmulticast mode [ 721.082232][T12702] tipc: Resetting bearer [ 721.113888][T12701] tipc: Resetting bearer [ 721.217157][T12701] tipc: Disabling bearer [ 724.868316][T10379] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 724.880845][T10379] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 724.882262][T10379] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 724.892169][T10379] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 724.902744][T10379] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 725.350459][T12726] chnl_net:caif_netlink_parms(): no params data found [ 725.686048][T12726] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.686270][T12726] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.686484][T12726] bridge_slave_0: entered allmulticast mode [ 725.689134][T12726] bridge_slave_0: entered promiscuous mode [ 725.694606][T12726] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.694805][T12726] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.695020][T12726] bridge_slave_1: entered allmulticast mode [ 725.698017][T12726] bridge_slave_1: entered promiscuous mode [ 726.697899][T12726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 726.702067][T12726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 726.927937][T10379] Bluetooth: hci0: command tx timeout [ 726.996521][T12726] team0: Port device team_slave_0 added [ 727.001075][T12726] team0: Port device team_slave_1 added [ 727.290365][T12726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 727.290382][T12726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 727.290406][T12726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 727.304570][T12726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 727.304589][T12726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 727.304613][T12726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 727.498593][ T5809] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 727.511057][ T5809] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 727.513389][ T5809] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 727.516473][ T5809] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 727.521613][ T5809] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 728.071844][T10379] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 728.078608][T10379] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 728.080391][T10379] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 728.097994][T10379] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 728.099612][T10379] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 728.277043][T12726] hsr_slave_0: entered promiscuous mode [ 728.278453][T12726] hsr_slave_1: entered promiscuous mode [ 728.279400][T12726] debugfs: 'hsr0' already exists in 'hsr' [ 728.279425][T12726] Cannot create hsr debugfs directory [ 729.002883][ T5809] Bluetooth: hci0: command tx timeout [ 729.607948][T12726] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 729.694554][T12726] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 729.719928][T12740] chnl_net:caif_netlink_parms(): no params data found [ 729.735652][T12742] chnl_net:caif_netlink_parms(): no params data found [ 729.748445][T12726] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 729.803145][T12726] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 730.043016][T10379] Bluetooth: hci6: command tx timeout [ 730.202954][T10379] Bluetooth: hci7: command tx timeout [ 730.510816][T12740] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.511005][T12740] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.511234][T12740] bridge_slave_0: entered allmulticast mode [ 730.517577][T12740] bridge_slave_0: entered promiscuous mode [ 730.522470][T12742] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.522602][T12742] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.523625][T12742] bridge_slave_0: entered allmulticast mode [ 730.526863][T12742] bridge_slave_0: entered promiscuous mode [ 730.540449][T12740] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.540608][T12740] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.541176][T12740] bridge_slave_1: entered allmulticast mode [ 730.549430][T12740] bridge_slave_1: entered promiscuous mode [ 730.550913][T12742] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.551048][T12742] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.551238][T12742] bridge_slave_1: entered allmulticast mode [ 730.555107][T12742] bridge_slave_1: entered promiscuous mode [ 730.908199][T12740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 730.917713][T12742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 730.926357][T12740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 730.931754][T12742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 731.092867][T10379] Bluetooth: hci0: command tx timeout [ 731.368315][T12740] team0: Port device team_slave_0 added [ 731.373685][T12742] team0: Port device team_slave_0 added [ 731.380459][T12740] team0: Port device team_slave_1 added [ 731.385212][T12742] team0: Port device team_slave_1 added [ 731.703537][T12740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 731.703556][T12740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 731.703581][T12740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 731.706699][T12742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 731.706714][T12742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 731.706738][T12742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 731.710811][T12740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 731.710826][T12740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 731.710852][T12740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 731.712275][T12742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 731.712288][T12742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 731.712312][T12742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 732.122842][T10379] Bluetooth: hci6: command tx timeout [ 732.194820][T12740] hsr_slave_0: entered promiscuous mode [ 732.196255][T12740] hsr_slave_1: entered promiscuous mode [ 732.197363][T12740] debugfs: 'hsr0' already exists in 'hsr' [ 732.197388][T12740] Cannot create hsr debugfs directory [ 732.209862][T12742] hsr_slave_0: entered promiscuous mode [ 732.211232][T12742] hsr_slave_1: entered promiscuous mode [ 732.212228][T12742] debugfs: 'hsr0' already exists in 'hsr' [ 732.212251][T12742] Cannot create hsr debugfs directory [ 732.282966][T10379] Bluetooth: hci7: command tx timeout [ 733.163458][T10379] Bluetooth: hci0: command tx timeout [ 733.244934][ T5809] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 733.262116][ T5809] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 733.269341][ T5809] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 733.271394][ T5809] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 733.272183][ T5809] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 733.319964][T12726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 733.651541][T12726] 8021q: adding VLAN 0 to HW filter on device team0 [ 733.746714][ T8789] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.746952][ T8789] bridge0: port 1(bridge_slave_0) entered forwarding state [ 733.829725][ T5952] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.829937][ T5952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 733.981906][T12740] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 734.046863][T12740] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 734.108981][T12740] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 734.203208][ T5809] Bluetooth: hci6: command tx timeout [ 734.212044][T12740] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 734.367495][ T5809] Bluetooth: hci7: command tx timeout [ 734.516625][T12742] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 734.580420][T12742] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 734.646926][T12742] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 734.698964][T12742] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 735.067321][T12763] chnl_net:caif_netlink_parms(): no params data found [ 735.323177][ T5809] Bluetooth: hci8: command tx timeout [ 735.679499][T12763] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.679711][T12763] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.679920][T12763] bridge_slave_0: entered allmulticast mode [ 735.684380][T12763] bridge_slave_0: entered promiscuous mode [ 735.697937][T12763] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.698065][T12763] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.698333][T12763] bridge_slave_1: entered allmulticast mode [ 735.702494][T12763] bridge_slave_1: entered promiscuous mode [ 735.826739][T12740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 735.943710][T12763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 735.967403][T12763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 736.228919][T12763] team0: Port device team_slave_0 added [ 736.267484][T12763] team0: Port device team_slave_1 added [ 736.282428][T12726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 736.282963][ T5809] Bluetooth: hci6: command tx timeout [ 736.424075][T12740] 8021q: adding VLAN 0 to HW filter on device team0 [ 736.443536][ T5809] Bluetooth: hci7: command tx timeout [ 736.543136][T12763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 736.543153][T12763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 736.543177][T12763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 736.563756][T12742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 736.569272][T12763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 736.569288][T12763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 736.569315][T12763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 736.609910][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state [ 736.610103][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 737.270343][ T1179] bridge0: port 2(bridge_slave_1) entered blocking state [ 737.270518][ T1179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 737.386704][T12763] hsr_slave_0: entered promiscuous mode [ 737.388214][T12763] hsr_slave_1: entered promiscuous mode [ 737.389178][T12763] debugfs: 'hsr0' already exists in 'hsr' [ 737.389203][T12763] Cannot create hsr debugfs directory [ 737.403214][ T5809] Bluetooth: hci8: command tx timeout [ 737.413640][T12742] 8021q: adding VLAN 0 to HW filter on device team0 [ 737.619859][ T1179] bridge0: port 1(bridge_slave_0) entered blocking state [ 737.620066][ T1179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 737.765293][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 737.765493][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 738.143392][T12726] veth0_vlan: entered promiscuous mode [ 738.298166][T12726] veth1_vlan: entered promiscuous mode [ 738.642885][T12763] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 738.692946][T12763] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 738.783301][T12763] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 738.841648][T12763] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 738.991289][T12726] veth0_macvtap: entered promiscuous mode [ 739.049023][T12726] veth1_macvtap: entered promiscuous mode [ 739.156538][T12740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 739.198363][T12726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 739.306797][T12726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 739.390079][ T1152] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.390290][ T1152] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.390479][ T1152] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.390659][ T1152] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.498852][ T5809] Bluetooth: hci8: command tx timeout [ 739.654019][T12645] tty tty1: ldisc open failed (-12), clearing slot 0 [ 739.659717][T12673] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 739.671483][T12691] tty tty1: ldisc open failed (-12), clearing slot 0 [ 739.740307][T12723] ptm ptm2: ldisc open failed (-12), clearing slot 2 [ 739.744752][T12661] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 740.572234][T10379] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 740.601007][T10379] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 740.602550][T10379] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 740.604511][T10379] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 740.605384][T10379] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 741.562831][T10379] Bluetooth: hci8: command tx timeout [ 742.500910][ T1152] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.781538][ T1152] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.822869][ T5952] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 742.822888][ T5952] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 742.842815][T10379] Bluetooth: hci3: command tx timeout [ 743.045425][ T1152] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.095505][T12742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 743.189375][T12763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 743.190648][ T5955] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 743.190665][ T5955] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 743.415300][ T1152] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.530305][T12740] veth0_vlan: entered promiscuous mode [ 743.577356][T12763] 8021q: adding VLAN 0 to HW filter on device team0 [ 743.662616][T12740] veth1_vlan: entered promiscuous mode [ 743.743664][T12831] netlink: 'syz.6.2302': attribute type 1 has an invalid length. [ 743.777045][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 743.777133][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 743.957501][ T5952] bridge0: port 2(bridge_slave_1) entered blocking state [ 743.958419][ T5952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 744.053363][T12813] chnl_net:caif_netlink_parms(): no params data found [ 744.743073][T12845] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input35 [ 744.926060][T10379] Bluetooth: hci3: command tx timeout [ 745.227073][ T1152] bridge_slave_1: left allmulticast mode [ 745.227104][ T1152] bridge_slave_1: left promiscuous mode [ 745.227364][ T1152] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.334434][ T1152] bridge_slave_0: left allmulticast mode [ 745.334465][ T1152] bridge_slave_0: left promiscuous mode [ 745.334742][ T1152] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.848998][T12848] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2311'. [ 747.002936][T10379] Bluetooth: hci3: command tx timeout [ 748.906464][ T1152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 748.963432][ T1152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 749.024945][ T1152] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 749.084443][T10379] Bluetooth: hci3: command tx timeout [ 749.141585][ T1152] bond0 (unregistering): Released all slaves [ 749.309726][T12813] bridge0: port 1(bridge_slave_0) entered blocking state [ 749.309891][T12813] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.310085][T12813] bridge_slave_0: entered allmulticast mode [ 749.333503][T12813] bridge_slave_0: entered promiscuous mode [ 749.393037][T12813] bridge0: port 2(bridge_slave_1) entered blocking state [ 749.393186][T12813] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.393456][T12813] bridge_slave_1: entered allmulticast mode [ 749.401509][T12813] bridge_slave_1: entered promiscuous mode [ 749.431543][T12740] veth0_macvtap: entered promiscuous mode [ 749.821185][T12813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 749.868886][T12740] veth1_macvtap: entered promiscuous mode [ 749.876659][T12813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 750.138323][T12742] veth0_vlan: entered promiscuous mode [ 750.599116][T12813] team0: Port device team_slave_0 added [ 750.630592][T12813] team0: Port device team_slave_1 added [ 751.769609][ T1152] hsr_slave_0: left promiscuous mode [ 751.803319][ T1152] hsr_slave_1: left promiscuous mode [ 751.804282][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 751.804307][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 751.853928][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 751.853957][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 751.939552][ T1152] veth1_macvtap: left promiscuous mode [ 751.939620][ T1152] veth0_macvtap: left promiscuous mode [ 751.939813][ T1152] veth1_vlan: left promiscuous mode [ 751.939859][ T1152] veth0_vlan: left promiscuous mode [ 752.501947][ C1] vkms_vblank_simulate: vblank timer overrun [ 752.703518][ C1] vkms_vblank_simulate: vblank timer overrun [ 755.072422][ C1] vkms_vblank_simulate: vblank timer overrun [ 755.137503][ C1] vkms_vblank_simulate: vblank timer overrun [ 755.212147][ C1] vkms_vblank_simulate: vblank timer overrun [ 755.272122][ C1] vkms_vblank_simulate: vblank timer overrun [ 755.337110][ C1] vkms_vblank_simulate: vblank timer overrun [ 755.391711][ C1] vkms_vblank_simulate: vblank timer overrun [ 755.452419][ C1] vkms_vblank_simulate: vblank timer overrun [ 755.513057][ C1] vkms_vblank_simulate: vblank timer overrun [ 755.585571][ C1] vkms_vblank_simulate: vblank timer overrun [ 755.976902][ C1] vkms_vblank_simulate: vblank timer overrun [ 756.023472][ T1152] team0 (unregistering): Port device team_slave_1 removed [ 756.284503][ T1152] team0 (unregistering): Port device team_slave_0 removed [ 756.321728][ C1] vkms_vblank_simulate: vblank timer overrun [ 756.397822][ C1] vkms_vblank_simulate: vblank timer overrun [ 756.444105][ C1] vkms_vblank_simulate: vblank timer overrun [ 756.500971][ C1] vkms_vblank_simulate: vblank timer overrun [ 756.597090][ C1] vkms_vblank_simulate: vblank timer overrun [ 756.945449][ C1] vkms_vblank_simulate: vblank timer overrun [ 759.345123][T12742] veth1_vlan: entered promiscuous mode [ 759.350685][T12813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 759.350702][T12813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 759.350728][T12813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 759.429835][T12813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 759.429852][T12813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 759.429876][T12813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 759.476777][T12740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 759.551122][T12740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 759.577135][ T1514] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.663995][ T1514] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.835020][ T1514] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.846415][T12813] hsr_slave_0: entered promiscuous mode [ 759.848072][T12813] hsr_slave_1: entered promiscuous mode [ 759.849147][T12813] debugfs: 'hsr0' already exists in 'hsr' [ 759.849172][T12813] Cannot create hsr debugfs directory [ 759.849911][ T1514] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.611984][T12763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 761.650693][T12742] veth0_macvtap: entered promiscuous mode [ 761.920567][T12742] veth1_macvtap: entered promiscuous mode [ 762.135143][T12921] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2326'. [ 762.200800][ T6460] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 762.200824][ T6460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 762.316316][ C0] vkms_vblank_simulate: vblank timer overrun [ 764.121308][ T1152] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.454144][ T1321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 764.454165][ T1321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 764.545940][T12936] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2332'. [ 764.652256][ T1152] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.700733][T12742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 764.811428][T10379] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 764.811454][T10379] CPU: 1 UID: 0 PID: 10379 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 764.811476][T10379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 764.811490][T10379] Workqueue: hci0 hci_rx_work [ 764.811520][T10379] Call Trace: [ 764.811529][T10379] [ 764.811538][T10379] dump_stack_lvl+0x189/0x250 [ 764.811570][T10379] ? __pfx_dump_stack_lvl+0x10/0x10 [ 764.811593][T10379] ? __pfx__printk+0x10/0x10 [ 764.811622][T10379] ? kernfs_path_from_node+0x2c/0x280 [ 764.811646][T10379] ? kernfs_path_from_node+0x243/0x280 [ 764.811668][T10379] ? kernfs_path_from_node+0x2c/0x280 [ 764.811704][T10379] sysfs_create_dir_ns+0x259/0x280 [ 764.811728][T10379] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 764.811752][T10379] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 764.811780][T10379] ? rt_spin_unlock+0x161/0x200 [ 764.811802][T10379] kobject_add_internal+0x5a5/0xb50 [ 764.811840][T10379] kobject_add+0x155/0x220 [ 764.811890][T10379] ? __pfx_kobject_add+0x10/0x10 [ 764.811924][T10379] ? get_device_parent+0x370/0x3a0 [ 764.811955][T10379] device_add+0x408/0xb50 [ 764.811983][T10379] hci_conn_add_sysfs+0xd5/0x1e0 [ 764.812014][T10379] le_conn_complete_evt+0xf39/0x1500 [ 764.812053][T10379] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 764.812078][T10379] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 764.812100][T10379] ? lockdep_hardirqs_on+0x9c/0x150 [ 764.812127][T10379] ? skb_pull_data+0xfb/0x200 [ 764.812157][T10379] hci_le_conn_complete_evt+0x187/0x450 [ 764.812189][T10379] hci_event_packet+0x78f/0x1200 [ 764.812213][T10379] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 764.812238][T10379] ? __pfx_hci_event_packet+0x10/0x10 [ 764.812268][T10379] ? hci_send_to_monitor+0xe2/0x570 [ 764.812295][T10379] hci_rx_work+0x46a/0xe80 [ 764.812324][T10379] ? process_scheduled_works+0x9ef/0x17b0 [ 764.812354][T10379] process_scheduled_works+0xae1/0x17b0 [ 764.812414][T10379] ? __pfx_process_scheduled_works+0x10/0x10 [ 764.812460][T10379] worker_thread+0x8a0/0xda0 [ 764.812482][T10379] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 764.812515][T10379] ? __kthread_parkme+0x7b/0x200 [ 764.812545][T10379] kthread+0x711/0x8a0 [ 764.812571][T10379] ? __pfx_worker_thread+0x10/0x10 [ 764.812590][T10379] ? __pfx_kthread+0x10/0x10 [ 764.812608][T10379] ? rt_spin_unlock+0x150/0x200 [ 764.812632][T10379] ? rt_spin_unlock+0x161/0x200 [ 764.812652][T10379] ? __pfx_kthread+0x10/0x10 [ 764.812673][T10379] ret_from_fork+0x4bc/0x870 [ 764.812709][T10379] ? __pfx_ret_from_fork+0x10/0x10 [ 764.812740][T10379] ? __switch_to_asm+0x39/0x70 [ 764.812760][T10379] ? __switch_to_asm+0x33/0x70 [ 764.812780][T10379] ? __pfx_kthread+0x10/0x10 [ 764.812800][T10379] ret_from_fork_asm+0x1a/0x30 [ 764.812839][T10379] [ 764.822882][T10379] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 764.822930][T10379] Bluetooth: hci0: failed to register connection device [ 765.941064][T12945] netlink: 'syz.6.2335': attribute type 1 has an invalid length. [ 765.959957][T12742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 766.078710][ C0] vkms_vblank_simulate: vblank timer overrun [ 766.160503][ T1152] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.293300][ C0] vkms_vblank_simulate: vblank timer overrun [ 766.505209][ C0] vkms_vblank_simulate: vblank timer overrun [ 767.295006][ T5809] Bluetooth: hci0: command tx timeout [ 767.683261][T12960] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2340'. [ 767.799127][ T1321] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.118603][ T1152] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.186103][ T1321] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.216228][ T1321] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.240372][ T1321] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.334319][T12969] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2344'. [ 769.391008][T12763] veth0_vlan: entered promiscuous mode [ 769.511398][T12763] veth1_vlan: entered promiscuous mode [ 771.371139][T12996] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 771.433356][ T1514] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 771.434221][ T1514] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 771.450463][T12996] picdev_read: 3 callbacks suppressed [ 771.450482][T12996] kvm: pic: non byte read [ 771.451558][T12996] kvm: pic: single mode not supported [ 771.454824][T12996] kvm: pic: level sensitive irq not supported [ 771.462139][T12996] kvm: pic: non byte read [ 771.464270][T12996] kvm: pic: single mode not supported [ 771.464692][T12996] kvm: pic: non byte read [ 771.466129][T12996] kvm: pic: single mode not supported [ 771.466140][T12996] kvm: pic: level sensitive irq not supported [ 771.466838][T12996] kvm: pic: non byte read [ 771.467513][T12996] kvm: pic: non byte read [ 771.468838][T12996] kvm: pic: non byte read [ 771.469887][T12996] kvm: pic: non byte read [ 771.470532][T12996] kvm: pic: non byte read [ 771.471357][T12996] kvm: pic: single mode not supported [ 771.472049][T12996] kvm: pic: level sensitive irq not supported [ 771.510749][T12996] kvm: pic: non byte read [ 771.511066][T12996] kvm: pic: level sensitive irq not supported [ 771.511135][T12996] kvm: pic: non byte read [ 771.511670][T12996] kvm: pic: level sensitive irq not supported [ 771.512242][T12996] kvm: pic: single mode not supported [ 771.512252][T12996] kvm: pic: level sensitive irq not supported [ 771.530706][T12996] kvm: pic: single mode not supported [ 771.530722][T12996] kvm: pic: level sensitive irq not supported [ 771.988088][ T8789] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 771.988109][ T8789] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 771.993619][T12813] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 772.057474][T12763] veth0_macvtap: entered promiscuous mode [ 772.065448][T12813] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 772.408127][ C1] vkms_vblank_simulate: vblank timer overrun [ 772.490047][ T1152] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.572052][T12813] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 772.673491][T12813] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 772.724769][T12763] veth1_macvtap: entered promiscuous mode [ 772.744116][T13017] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2354'. [ 772.917474][ C1] vkms_vblank_simulate: vblank timer overrun [ 772.976798][ T1152] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.319894][ C1] vkms_vblank_simulate: vblank timer overrun [ 774.136774][ C1] vkms_vblank_simulate: vblank timer overrun [ 774.190838][ C1] vkms_vblank_simulate: vblank timer overrun [ 774.299276][ T1152] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.481988][T12763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 779.884915][ T1152] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.947713][T12763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 781.018153][ T1169] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.018512][ T1169] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.018730][ T1169] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.018914][ T1169] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.212737][ T5955] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 783.212758][ T5955] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 784.040804][ T1152] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.185508][T12813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 784.218328][ T5955] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 784.218347][ T5955] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 784.337526][T13129] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 784.431172][T13132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 784.648750][ T1152] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.950762][ T1152] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.086449][T12813] 8021q: adding VLAN 0 to HW filter on device team0 [ 787.114009][ T5993] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 787.190096][ T1152] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.229821][ T1514] bridge0: port 1(bridge_slave_0) entered blocking state [ 787.230057][ T1514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 787.262894][ T5993] usb 10-1: Using ep0 maxpacket: 16 [ 787.265174][ T5993] usb 10-1: config 4 has an invalid interface number: 9 but max is 0 [ 787.265198][ T5993] usb 10-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 787.265216][ T5993] usb 10-1: config 4 has no interface number 0 [ 787.265266][ T5993] usb 10-1: config 4 interface 9 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 787.265287][ T5993] usb 10-1: config 4 interface 9 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 787.265311][ T5993] usb 10-1: config 4 interface 9 has no altsetting 0 [ 787.268492][ T5993] usb 10-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 787.268518][ T5993] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.268537][ T5993] usb 10-1: Product: syz [ 787.268550][ T5993] usb 10-1: Manufacturer: syz [ 787.268563][ T5993] usb 10-1: SerialNumber: syz [ 787.368192][ T5993] usb 10-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 787.518792][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 787.518934][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 787.566133][ T1179] usb 10-1: Failed to submit usb control message: -71 [ 787.566173][ T1179] usb 10-1: unable to send the bmi data to the device: -71 [ 787.566191][ T1179] usb 10-1: unable to get target info from device [ 787.566205][ T1179] usb 10-1: could not get target info (-71) [ 787.566221][ T1179] usb 10-1: could not probe fw (-71) [ 787.568110][ T992] usb 10-1: USB disconnect, device number 2 [ 787.718615][T13169] syz.7.2393 (13169) used obsolete PPPIOCDETACH ioctl [ 789.677939][T13204] netlink: 'syz.9.2402': attribute type 24 has an invalid length. [ 789.851477][T13208] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2403'. [ 790.834441][ T1152] bridge_slave_1: left allmulticast mode [ 790.834472][ T1152] bridge_slave_1: left promiscuous mode [ 790.834737][ T1152] bridge0: port 2(bridge_slave_1) entered disabled state [ 791.019875][ T1152] bridge_slave_0: left allmulticast mode [ 791.019904][ T1152] bridge_slave_0: left promiscuous mode [ 791.020162][ T1152] bridge0: port 1(bridge_slave_0) entered disabled state [ 791.117281][ T1152] bridge_slave_1: left allmulticast mode [ 791.117311][ T1152] bridge_slave_1: left promiscuous mode [ 791.117557][ T1152] bridge0: port 2(bridge_slave_1) entered disabled state [ 791.185658][ T1152] bridge_slave_0: left allmulticast mode [ 791.185688][ T1152] bridge_slave_0: left promiscuous mode [ 791.185949][ T1152] bridge0: port 1(bridge_slave_0) entered disabled state [ 791.247697][ T1152] bridge_slave_1: left allmulticast mode [ 791.247727][ T1152] bridge_slave_1: left promiscuous mode [ 791.247979][ T1152] bridge0: port 2(bridge_slave_1) entered disabled state [ 791.252785][ T992] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 791.326839][ T1152] bridge_slave_0: left allmulticast mode [ 791.326871][ T1152] bridge_slave_0: left promiscuous mode [ 791.327128][ T1152] bridge0: port 1(bridge_slave_0) entered disabled state [ 791.407935][ T992] usb 9-1: Using ep0 maxpacket: 16 [ 791.411631][ T992] usb 9-1: config 4 has an invalid interface number: 9 but max is 0 [ 791.411656][ T992] usb 9-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 791.411674][ T992] usb 9-1: config 4 has no interface number 0 [ 791.411724][ T992] usb 9-1: config 4 interface 9 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 791.411746][ T992] usb 9-1: config 4 interface 9 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 791.411770][ T992] usb 9-1: config 4 interface 9 has no altsetting 0 [ 791.417821][ T992] usb 9-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 791.417848][ T992] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.417866][ T992] usb 9-1: Product: syz [ 791.417879][ T992] usb 9-1: Manufacturer: syz [ 791.417892][ T992] usb 9-1: SerialNumber: syz [ 791.486898][ T992] usb 9-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 792.532143][ T5955] usb 9-1: Failed to submit usb control message: -110 [ 792.532166][ T5955] usb 9-1: unable to send the bmi data to the device: -110 [ 792.532176][ T5955] usb 9-1: unable to get target info from device [ 792.532184][ T5955] usb 9-1: could not get target info (-110) [ 792.532194][ T5955] usb 9-1: could not probe fw (-110) [ 794.355442][ T1152] bond0 (unregistering): left allmulticast mode [ 794.355459][ T1152] bond_slave_0: left allmulticast mode [ 794.355470][ T1152] bond_slave_1: left allmulticast mode [ 794.355483][ T1152] bond0 (unregistering): left promiscuous mode [ 794.355489][ T1152] bond_slave_0: left promiscuous mode [ 794.355636][ T1152] bond_slave_1: left promiscuous mode [ 794.495970][ T1152] bond1 (unregistering): (slave macvlan2): Releasing active interface [ 794.495997][ T1152] macvlan2 (unregistering): left promiscuous mode [ 794.496011][ T1152] macvlan2 (unregistering): left allmulticast mode [ 794.634599][ T1152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 794.693617][ T1152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 794.717494][ T1152] bond0 (unregistering): Released all slaves [ 795.806332][ T1152] bond1 (unregistering): Released all slaves [ 797.673654][ T1152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 797.738105][ T1152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 797.775349][ T1152] bond0 (unregistering): Released all slaves [ 798.646205][ T1152] bond1 (unregistering): Released all slaves [ 799.316677][T10379] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 799.320698][T10379] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 799.322042][T10379] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 799.374530][T10379] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 799.375352][T10379] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 799.845217][ T1152] bond2 (unregistering): Released all slaves [ 801.402905][T10379] Bluetooth: hci1: command tx timeout [ 801.663436][ T1152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 801.733771][ T1152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 801.775347][ T1152] bond0 (unregistering): Released all slaves [ 801.836404][T13208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 801.993392][ T992] usb 9-1: USB disconnect, device number 2 [ 802.289753][ T1152] tipc: Left network mode [ 803.294054][ T1152] tipc: Left network mode [ 803.603236][T10379] Bluetooth: hci1: command tx timeout [ 803.752807][T13265] netlink: 'syz.9.2414': attribute type 1 has an invalid length. [ 804.307347][ T1152] tipc: Disabling bearer [ 804.307964][ T1152] tipc: Left network mode [ 804.544922][T13285] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2417'. [ 805.643305][T10379] Bluetooth: hci1: command tx timeout [ 805.909207][T13230] chnl_net:caif_netlink_parms(): no params data found [ 807.011818][T13328] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 807.454562][T13339] netlink: 'syz.9.2427': attribute type 1 has an invalid length. [ 807.605914][T13343] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2428'. [ 807.723493][ T5809] Bluetooth: hci1: command tx timeout [ 809.376924][T13368] vlan2: entered promiscuous mode [ 809.376946][T13368] veth0_virt_wifi: entered promiscuous mode [ 809.377163][T13368] vlan2: entered allmulticast mode [ 809.377175][T13368] veth0_virt_wifi: entered allmulticast mode [ 809.613839][T13230] bridge0: port 1(bridge_slave_0) entered blocking state [ 809.613966][T13230] bridge0: port 1(bridge_slave_0) entered disabled state [ 809.614221][T13230] bridge_slave_0: entered allmulticast mode [ 809.698008][T13230] bridge_slave_0: entered promiscuous mode [ 809.743707][T13230] bridge0: port 2(bridge_slave_1) entered blocking state [ 809.743815][T13230] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.744075][T13230] bridge_slave_1: entered allmulticast mode [ 809.790261][T13230] bridge_slave_1: entered promiscuous mode [ 810.462615][T13406] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2449'. [ 811.176832][T13230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 811.262433][T13230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 813.111795][T13472] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2466'. [ 813.560281][T13230] team0: Port device team_slave_0 added [ 814.108024][T13230] team0: Port device team_slave_1 added [ 816.845387][T13519] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 816.875546][T13519] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 818.283990][T13230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 818.284007][T13230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 818.284032][T13230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 818.300287][T13230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 818.300305][T13230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 818.300332][T13230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 818.602819][ T1152] hsr_slave_0: left promiscuous mode [ 818.764469][ T1152] hsr_slave_1: left promiscuous mode [ 818.766159][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 818.766185][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 818.944206][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 818.944235][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 819.069003][T13546] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input36 [ 819.803936][ T1152] hsr_slave_0: left promiscuous mode [ 819.833690][ T1152] hsr_slave_1: left promiscuous mode [ 819.834654][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 819.834678][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 819.876804][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 819.876832][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 821.572074][ T1152] hsr_slave_0: left promiscuous mode [ 822.274288][ T1152] hsr_slave_1: left promiscuous mode [ 822.275143][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 822.275165][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 822.343927][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 822.343954][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 822.572084][ T1152] veth1_macvtap: left promiscuous mode [ 822.572200][ T1152] veth0_macvtap: left promiscuous mode [ 822.572474][ T1152] veth1_vlan: left promiscuous mode [ 822.572551][ T1152] veth0_vlan: left promiscuous mode [ 822.754770][ T1152] veth1_macvtap: left promiscuous mode [ 822.754894][ T1152] veth0_macvtap: left promiscuous mode [ 822.755141][ T1152] veth1_vlan: left promiscuous mode [ 822.755350][ T1152] veth0_vlan: left promiscuous mode [ 822.912993][ T1152] veth1_macvtap: left promiscuous mode [ 822.913058][ T1152] veth0_macvtap: left promiscuous mode [ 822.913209][ T1152] veth1_vlan: left promiscuous mode [ 822.913254][ T1152] veth0_vlan: left promiscuous mode [ 825.770672][ T1152] team0 (unregistering): Port device team_slave_1 removed [ 826.064685][ T1152] team0 (unregistering): Port device team_slave_0 removed [ 831.353605][ T1152] team0 (unregistering): Port device team_slave_1 removed [ 831.633908][ T1152] team0 (unregistering): Port device team_slave_0 removed [ 833.451041][T10379] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 833.461980][T10379] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 833.465182][T10379] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 833.511868][T10379] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 833.514657][T10379] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 835.562892][T10379] Bluetooth: hci2: command tx timeout [ 836.823388][ T1152] team0 (unregistering): Port device team_slave_1 removed [ 837.134223][ T1152] team0 (unregistering): Port device team_slave_0 removed [ 837.568139][ T5809] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 837.590500][ T5809] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 837.591907][ T5809] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 837.607573][ T5809] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 837.608404][ T5809] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 837.654683][ T5809] Bluetooth: hci2: command tx timeout [ 837.748550][T10379] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 837.751404][T10379] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 837.754998][T10379] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 837.760642][T10379] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 837.778796][T10379] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 838.486552][T10379] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 838.489984][T10379] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 838.491525][T10379] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 838.493577][T10379] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 838.494776][T10379] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 839.722960][T13606] Bluetooth: hci3: command tx timeout [ 839.735018][T13606] Bluetooth: hci2: command tx timeout [ 839.882996][T13606] Bluetooth: hci4: command tx timeout [ 840.605595][T13606] Bluetooth: hci5: command tx timeout [ 841.031872][T13230] hsr_slave_0: entered promiscuous mode [ 841.083676][T13230] hsr_slave_1: entered promiscuous mode [ 841.084644][T13230] debugfs: 'hsr0' already exists in 'hsr' [ 841.084675][T13230] Cannot create hsr debugfs directory [ 841.817245][T13606] Bluetooth: hci2: command tx timeout [ 841.817280][T13606] Bluetooth: hci3: command tx timeout [ 841.962770][T10379] Bluetooth: hci4: command tx timeout [ 842.682827][T10379] Bluetooth: hci5: command tx timeout [ 843.882800][T10379] Bluetooth: hci3: command tx timeout [ 844.047376][T13606] Bluetooth: hci4: command tx timeout [ 844.765674][T10379] Bluetooth: hci5: command tx timeout [ 844.968795][T13602] chnl_net:caif_netlink_parms(): no params data found [ 845.008473][T13609] chnl_net:caif_netlink_parms(): no params data found [ 845.603899][T13612] chnl_net:caif_netlink_parms(): no params data found [ 845.721522][T13597] chnl_net:caif_netlink_parms(): no params data found [ 845.962903][T10379] Bluetooth: hci3: command tx timeout [ 846.122770][T10379] Bluetooth: hci4: command tx timeout [ 846.518812][T13602] bridge0: port 1(bridge_slave_0) entered blocking state [ 846.519020][T13602] bridge0: port 1(bridge_slave_0) entered disabled state [ 846.519216][T13602] bridge_slave_0: entered allmulticast mode [ 846.521148][T13602] bridge_slave_0: entered promiscuous mode [ 846.557802][T13609] bridge0: port 1(bridge_slave_0) entered blocking state [ 846.557880][T13609] bridge0: port 1(bridge_slave_0) entered disabled state [ 846.558048][T13609] bridge_slave_0: entered allmulticast mode [ 846.559616][T13609] bridge_slave_0: entered promiscuous mode [ 846.664302][T13602] bridge0: port 2(bridge_slave_1) entered blocking state [ 846.664380][T13602] bridge0: port 2(bridge_slave_1) entered disabled state [ 846.664538][T13602] bridge_slave_1: entered allmulticast mode [ 846.667324][T13602] bridge_slave_1: entered promiscuous mode [ 846.693154][T13609] bridge0: port 2(bridge_slave_1) entered blocking state [ 846.693321][T13609] bridge0: port 2(bridge_slave_1) entered disabled state [ 846.693612][T13609] bridge_slave_1: entered allmulticast mode [ 846.696405][T13609] bridge_slave_1: entered promiscuous mode [ 846.842850][T10379] Bluetooth: hci5: command tx timeout [ 847.013995][T13612] bridge0: port 1(bridge_slave_0) entered blocking state [ 847.014101][T13612] bridge0: port 1(bridge_slave_0) entered disabled state [ 847.014332][T13612] bridge_slave_0: entered allmulticast mode [ 847.016635][T13612] bridge_slave_0: entered promiscuous mode [ 847.266372][T13612] bridge0: port 2(bridge_slave_1) entered blocking state [ 847.266480][T13612] bridge0: port 2(bridge_slave_1) entered disabled state [ 847.266671][T13612] bridge_slave_1: entered allmulticast mode [ 847.268266][T13612] bridge_slave_1: entered promiscuous mode [ 847.272910][T13602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 847.280536][T13597] bridge0: port 1(bridge_slave_0) entered blocking state [ 847.280667][T13597] bridge0: port 1(bridge_slave_0) entered disabled state [ 847.280951][T13597] bridge_slave_0: entered allmulticast mode [ 847.284499][T13597] bridge_slave_0: entered promiscuous mode [ 847.298934][T13609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 847.377612][T13602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 847.377941][T13597] bridge0: port 2(bridge_slave_1) entered blocking state [ 847.378057][T13597] bridge0: port 2(bridge_slave_1) entered disabled state [ 847.378191][T13597] bridge_slave_1: entered allmulticast mode [ 847.379690][T13597] bridge_slave_1: entered promiscuous mode [ 847.394298][T13609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 847.712023][T13612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 847.904565][T13230] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 847.948465][T13612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 848.206405][T13602] team0: Port device team_slave_0 added [ 848.209983][T13597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 848.214163][T13609] team0: Port device team_slave_0 added [ 848.214612][T13230] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 848.776413][T13602] team0: Port device team_slave_1 added [ 848.778875][T13597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 848.780719][T13609] team0: Port device team_slave_1 added [ 848.781037][T13230] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 849.373772][T13230] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 849.421053][T13612] team0: Port device team_slave_0 added [ 849.702212][T13612] team0: Port device team_slave_1 added [ 849.707988][T13602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 849.708004][T13602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 849.708029][T13602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 849.715110][T13597] team0: Port device team_slave_0 added [ 849.716332][T13609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 849.716352][T13609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 849.716376][T13609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 849.855044][T13602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 849.855058][T13602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 849.855072][T13602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 850.059849][ T1152] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.117198][T13609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 850.117214][T13609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 850.117237][T13609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 850.119830][T13597] team0: Port device team_slave_1 added [ 850.296125][T13612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 850.296137][T13612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 850.296151][T13612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 850.536499][ T1152] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.587183][T13612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 850.587202][T13612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 850.587216][T13612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 850.589954][T13597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 850.589964][T13597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 850.589978][T13597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 850.785273][T13597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 850.785291][T13597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 850.785317][T13597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 851.118666][ T1152] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.168175][T13602] hsr_slave_0: entered promiscuous mode [ 851.169653][T13602] hsr_slave_1: entered promiscuous mode [ 851.174369][T13602] debugfs: 'hsr0' already exists in 'hsr' [ 851.174395][T13602] Cannot create hsr debugfs directory [ 851.183904][T13609] hsr_slave_0: entered promiscuous mode [ 851.185300][T13609] hsr_slave_1: entered promiscuous mode [ 851.186338][T13609] debugfs: 'hsr0' already exists in 'hsr' [ 851.186362][T13609] Cannot create hsr debugfs directory [ 851.756375][ T1152] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.790178][T13612] hsr_slave_0: entered promiscuous mode [ 851.791055][T13612] hsr_slave_1: entered promiscuous mode [ 851.791655][T13612] debugfs: 'hsr0' already exists in 'hsr' [ 851.791671][T13612] Cannot create hsr debugfs directory [ 852.146613][T13597] hsr_slave_0: entered promiscuous mode [ 852.147494][T13597] hsr_slave_1: entered promiscuous mode [ 852.148075][T13597] debugfs: 'hsr0' already exists in 'hsr' [ 852.148092][T13597] Cannot create hsr debugfs directory [ 853.461979][ T1152] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.730101][T13602] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.976448][ T1152] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.162766][T13602] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.351038][ T1152] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.541940][T13602] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.736350][ T1152] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.938441][T13602] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.008327][T13230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 855.228068][T13230] 8021q: adding VLAN 0 to HW filter on device team0 [ 855.588491][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 855.588741][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 855.690163][ T8789] bridge0: port 2(bridge_slave_1) entered blocking state [ 855.690442][ T8789] bridge0: port 2(bridge_slave_1) entered forwarding state [ 856.092588][ T1152] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.464919][ T1152] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.910352][ T1152] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.177660][ T1152] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.417367][T13230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 857.994604][ T1152] bridge_slave_1: left allmulticast mode [ 857.994629][ T1152] bridge_slave_1: left promiscuous mode [ 857.994884][ T1152] bridge0: port 2(bridge_slave_1) entered disabled state [ 858.084413][ T1152] bridge_slave_0: left allmulticast mode [ 858.084434][ T1152] bridge_slave_0: left promiscuous mode [ 858.084608][ T1152] bridge0: port 1(bridge_slave_0) entered disabled state [ 858.165827][ T1152] bridge_slave_1: left allmulticast mode [ 858.165848][ T1152] bridge_slave_1: left promiscuous mode [ 858.165994][ T1152] bridge0: port 2(bridge_slave_1) entered disabled state [ 858.234516][ T1152] bridge_slave_0: left allmulticast mode [ 858.234543][ T1152] bridge_slave_0: left promiscuous mode [ 858.234718][ T1152] bridge0: port 1(bridge_slave_0) entered disabled state [ 858.335425][ T1152] bridge_slave_1: left allmulticast mode [ 858.335452][ T1152] bridge_slave_1: left promiscuous mode [ 858.335611][ T1152] bridge0: port 2(bridge_slave_1) entered disabled state [ 858.405228][ T1152] bridge_slave_0: left allmulticast mode [ 858.405248][ T1152] bridge_slave_0: left promiscuous mode [ 858.405400][ T1152] bridge0: port 1(bridge_slave_0) entered disabled state [ 858.495277][ T1152] bridge_slave_1: left allmulticast mode [ 858.495299][ T1152] bridge_slave_1: left promiscuous mode [ 858.495445][ T1152] bridge0: port 2(bridge_slave_1) entered disabled state [ 858.564269][ T1152] bridge_slave_0: left allmulticast mode [ 858.564299][ T1152] bridge_slave_0: left promiscuous mode [ 858.564557][ T1152] bridge0: port 1(bridge_slave_0) entered disabled state [ 859.467254][T13606] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 859.470614][T13606] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 859.471779][T13606] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 859.474434][T13606] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 859.503925][T13606] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 861.093513][ T1152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 861.153715][ T1152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 861.195433][ T1152] bond0 (unregistering): Released all slaves [ 861.563150][T10379] Bluetooth: hci0: command tx timeout [ 863.133713][ T1152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 863.193491][ T1152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 863.235766][ T1152] bond0 (unregistering): Released all slaves [ 863.644015][T10379] Bluetooth: hci0: command tx timeout [ 865.173872][ T1152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 865.233439][ T1152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 865.276085][ T1152] bond0 (unregistering): Released all slaves [ 865.735409][T10379] Bluetooth: hci0: command tx timeout [ 866.943440][ T1152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 867.009720][ T1152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 867.025371][ T1152] bond0 (unregistering): Released all slaves [ 867.809121][T10379] Bluetooth: hci0: command tx timeout [ 870.012239][T13767] chnl_net:caif_netlink_parms(): no params data found [ 870.968510][T13602] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 871.216391][T13602] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 871.383828][T13602] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 871.518189][T13602] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 871.556496][T13767] bridge0: port 1(bridge_slave_0) entered blocking state [ 871.556697][T13767] bridge0: port 1(bridge_slave_0) entered disabled state [ 871.556918][T13767] bridge_slave_0: entered allmulticast mode [ 871.558908][T13767] bridge_slave_0: entered promiscuous mode [ 871.614656][T13767] bridge0: port 2(bridge_slave_1) entered blocking state [ 871.614785][T13767] bridge0: port 2(bridge_slave_1) entered disabled state [ 871.615074][T13767] bridge_slave_1: entered allmulticast mode [ 871.618010][T13767] bridge_slave_1: entered promiscuous mode [ 871.803328][T13767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 871.943012][ T1152] hsr_slave_0: left promiscuous mode [ 871.963529][ T1152] hsr_slave_1: left promiscuous mode [ 871.964201][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 871.964218][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 872.023756][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 872.023792][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 872.193492][ T1152] hsr_slave_0: left promiscuous mode [ 872.213530][ T1152] hsr_slave_1: left promiscuous mode [ 872.214489][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 872.214506][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 872.273642][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 872.273671][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 872.422900][ T1152] hsr_slave_0: left promiscuous mode [ 872.443029][ T1152] hsr_slave_1: left promiscuous mode [ 872.444083][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 872.444100][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 872.493787][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 872.493816][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 872.653502][ T1152] hsr_slave_0: left promiscuous mode [ 872.672957][ T1152] hsr_slave_1: left promiscuous mode [ 872.673772][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 872.713788][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 872.817710][ T1152] veth1_macvtap: left promiscuous mode [ 872.817788][ T1152] veth0_macvtap: left promiscuous mode [ 872.817942][ T1152] veth1_vlan: left promiscuous mode [ 872.818043][ T1152] veth0_vlan: left promiscuous mode [ 872.943212][ T1152] veth1_macvtap: left promiscuous mode [ 872.943276][ T1152] veth0_macvtap: left promiscuous mode [ 872.943422][ T1152] veth1_vlan: left promiscuous mode [ 872.943533][ T1152] veth0_vlan: left promiscuous mode [ 873.063279][ T1152] veth1_macvtap: left promiscuous mode [ 873.063345][ T1152] veth0_macvtap: left promiscuous mode [ 873.063490][ T1152] veth1_vlan: left promiscuous mode [ 873.064599][ T1152] veth0_vlan: left promiscuous mode [ 875.964050][ T1152] team0 (unregistering): Port device team_slave_1 removed [ 876.233619][ T1152] team0 (unregistering): Port device team_slave_0 removed [ 880.374860][ T1152] team0 (unregistering): Port device team_slave_1 removed [ 880.673499][ T1152] team0 (unregistering): Port device team_slave_0 removed [ 885.513603][ T1152] team0 (unregistering): Port device team_slave_1 removed [ 885.794994][ T1152] team0 (unregistering): Port device team_slave_0 removed [ 889.273356][ T1152] team0 (unregistering): Port device team_slave_1 removed [ 889.556264][ T1152] team0 (unregistering): Port device team_slave_0 removed [ 891.897170][T13767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 891.897377][T13609] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 892.083745][T13609] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 892.205553][T13609] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 892.308315][T13767] team0: Port device team_slave_0 added [ 892.310152][T13609] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 892.371292][T13767] team0: Port device team_slave_1 added [ 892.644270][T13767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 892.644287][T13767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 892.644312][T13767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 892.672284][T13767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 892.672301][T13767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 892.672327][T13767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 892.778643][T13612] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 892.972965][T13612] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 893.085001][T13612] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 893.183453][T13767] hsr_slave_0: entered promiscuous mode [ 893.184892][T13767] hsr_slave_1: entered promiscuous mode [ 893.185902][T13767] debugfs: 'hsr0' already exists in 'hsr' [ 893.185928][T13767] Cannot create hsr debugfs directory [ 893.270686][T13612] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 893.490326][T13606] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 893.538456][T13606] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 893.543112][T13606] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 893.545140][T13606] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 893.546005][T13606] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 895.096870][T13602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 895.521435][T13609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 895.526882][T13602] 8021q: adding VLAN 0 to HW filter on device team0 [ 895.562832][T13606] Bluetooth: hci1: command tx timeout [ 895.797043][T13809] chnl_net:caif_netlink_parms(): no params data found [ 895.803567][ T1179] bridge0: port 1(bridge_slave_0) entered blocking state [ 895.805090][ T1179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 895.857552][ T6460] bridge0: port 2(bridge_slave_1) entered blocking state [ 895.857730][ T6460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 895.996131][T13609] 8021q: adding VLAN 0 to HW filter on device team0 [ 896.249484][ T1179] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.250421][ T1179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 896.290459][T13612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 896.347058][T13809] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.347197][T13809] bridge0: port 1(bridge_slave_0) entered disabled state [ 896.347494][T13809] bridge_slave_0: entered allmulticast mode [ 896.350386][T13809] bridge_slave_0: entered promiscuous mode [ 896.384640][T13809] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.384788][T13809] bridge0: port 2(bridge_slave_1) entered disabled state [ 896.385070][T13809] bridge_slave_1: entered allmulticast mode [ 896.387690][T13809] bridge_slave_1: entered promiscuous mode [ 896.532887][ T1179] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.533062][ T1179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 896.652556][T13809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 896.674369][T13809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 896.959448][T13809] team0: Port device team_slave_0 added [ 896.964641][T13612] 8021q: adding VLAN 0 to HW filter on device team0 [ 897.049880][T13809] team0: Port device team_slave_1 added [ 897.135607][T13767] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 897.352272][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 897.352484][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 897.356700][T13767] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 897.401529][T13809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 897.401545][T13809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 897.401568][T13809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 897.421239][T13767] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 897.506688][T13809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 897.506706][T13809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 897.506730][T13809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 897.517899][T13767] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 897.587974][T10379] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 897.601113][T10379] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 897.604731][T10379] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 897.606223][T10379] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 897.606958][T10379] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 897.643815][T10379] Bluetooth: hci1: command tx timeout [ 897.730976][ T1514] bridge0: port 2(bridge_slave_1) entered blocking state [ 897.754718][ T1514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 898.207120][T13606] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 898.253121][T13606] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 898.255405][T13606] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 898.256551][T13606] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 898.257291][T13606] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 898.547894][T13809] hsr_slave_0: entered promiscuous mode [ 898.548794][T13809] hsr_slave_1: entered promiscuous mode [ 898.549423][T13809] debugfs: 'hsr0' already exists in 'hsr' [ 898.549439][T13809] Cannot create hsr debugfs directory [ 898.980518][T13606] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 898.996254][T13606] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 898.997661][T13606] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 898.998844][T13606] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 899.000026][T13606] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 899.722878][T10379] Bluetooth: hci1: command tx timeout [ 899.723060][T13606] Bluetooth: hci2: command tx timeout [ 900.282975][T10379] Bluetooth: hci3: command tx timeout [ 901.083160][T10379] Bluetooth: hci4: command tx timeout [ 901.208696][T13822] chnl_net:caif_netlink_parms(): no params data found [ 901.541742][T13832] chnl_net:caif_netlink_parms(): no params data found [ 901.802908][T10379] Bluetooth: hci2: command tx timeout [ 901.802943][T10379] Bluetooth: hci1: command tx timeout [ 901.953304][T13822] bridge0: port 1(bridge_slave_0) entered blocking state [ 901.953439][T13822] bridge0: port 1(bridge_slave_0) entered disabled state [ 901.953779][T13822] bridge_slave_0: entered allmulticast mode [ 901.955319][T13822] bridge_slave_0: entered promiscuous mode [ 902.019412][T13835] chnl_net:caif_netlink_parms(): no params data found [ 902.032908][T13822] bridge0: port 2(bridge_slave_1) entered blocking state [ 902.033052][T13822] bridge0: port 2(bridge_slave_1) entered disabled state [ 902.033591][T13822] bridge_slave_1: entered allmulticast mode [ 902.036118][T13822] bridge_slave_1: entered promiscuous mode [ 902.363101][T13606] Bluetooth: hci3: command tx timeout [ 902.396934][T13767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 902.568816][T13822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 902.738247][T13832] bridge0: port 1(bridge_slave_0) entered blocking state [ 902.738459][T13832] bridge0: port 1(bridge_slave_0) entered disabled state [ 902.738771][T13832] bridge_slave_0: entered allmulticast mode [ 902.740873][T13832] bridge_slave_0: entered promiscuous mode [ 902.769408][T13822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 902.801189][T13832] bridge0: port 2(bridge_slave_1) entered blocking state [ 902.801283][T13832] bridge0: port 2(bridge_slave_1) entered disabled state [ 902.801425][T13832] bridge_slave_1: entered allmulticast mode [ 902.805188][T13832] bridge_slave_1: entered promiscuous mode [ 903.162916][T13606] Bluetooth: hci4: command tx timeout [ 903.348310][T13822] team0: Port device team_slave_0 added [ 903.362092][T13832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 903.515864][T13822] team0: Port device team_slave_1 added [ 903.698043][T13832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 903.700591][T13835] bridge0: port 1(bridge_slave_0) entered blocking state [ 903.700716][T13835] bridge0: port 1(bridge_slave_0) entered disabled state [ 903.700853][T13835] bridge_slave_0: entered allmulticast mode [ 903.703624][T13835] bridge_slave_0: entered promiscuous mode [ 903.864708][T13835] bridge0: port 2(bridge_slave_1) entered blocking state [ 903.864882][T13835] bridge0: port 2(bridge_slave_1) entered disabled state [ 903.865116][T13835] bridge_slave_1: entered allmulticast mode [ 903.868044][T13835] bridge_slave_1: entered promiscuous mode [ 903.883008][T13606] Bluetooth: hci2: command tx timeout [ 903.925029][T13809] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 904.294665][T13822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 904.294682][T13822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 904.294706][T13822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 904.297422][T13767] 8021q: adding VLAN 0 to HW filter on device team0 [ 904.297664][T13809] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 904.348052][T13832] team0: Port device team_slave_0 added [ 904.443183][T13606] Bluetooth: hci3: command tx timeout [ 904.474503][T13822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 904.474521][T13822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 904.474545][T13822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 904.475610][T13809] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 904.541212][T13832] team0: Port device team_slave_1 added [ 904.597991][T13835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 904.611651][T13809] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 904.687697][T13835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 904.827331][ T5955] bridge0: port 1(bridge_slave_0) entered blocking state [ 904.827504][ T5955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 904.841594][T13832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 904.841612][T13832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 904.841644][T13832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 905.032445][T13832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 905.032457][T13832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 905.032472][T13832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 905.037918][T13835] team0: Port device team_slave_0 added [ 905.146182][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 905.146324][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 905.148822][T13835] team0: Port device team_slave_1 added [ 905.157370][T13822] hsr_slave_0: entered promiscuous mode [ 905.158714][T13822] hsr_slave_1: entered promiscuous mode [ 905.159633][T13822] debugfs: 'hsr0' already exists in 'hsr' [ 905.159662][T13822] Cannot create hsr debugfs directory [ 905.243058][T13606] Bluetooth: hci4: command tx timeout [ 905.549603][T13835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 905.549615][T13835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 905.549630][T13835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 905.720211][T13835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 905.720229][T13835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 905.720255][T13835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 905.753491][T13832] hsr_slave_0: entered promiscuous mode [ 905.754878][T13832] hsr_slave_1: entered promiscuous mode [ 905.755792][T13832] debugfs: 'hsr0' already exists in 'hsr' [ 905.755815][T13832] Cannot create hsr debugfs directory [ 905.962837][T13606] Bluetooth: hci2: command tx timeout [ 906.072018][ T1152] bridge_slave_1: left allmulticast mode [ 906.072046][ T1152] bridge_slave_1: left promiscuous mode [ 906.072272][ T1152] bridge0: port 2(bridge_slave_1) entered disabled state [ 906.134685][ T1152] bridge_slave_0: left allmulticast mode [ 906.134717][ T1152] bridge_slave_0: left promiscuous mode [ 906.134977][ T1152] bridge0: port 1(bridge_slave_0) entered disabled state [ 906.196003][ T1152] bridge_slave_1: left allmulticast mode [ 906.196026][ T1152] bridge_slave_1: left promiscuous mode [ 906.196174][ T1152] bridge0: port 2(bridge_slave_1) entered disabled state [ 906.284910][ T1152] bridge_slave_0: left allmulticast mode [ 906.284940][ T1152] bridge_slave_0: left promiscuous mode [ 906.285814][ T1152] bridge0: port 1(bridge_slave_0) entered disabled state [ 906.357306][ T1152] bridge_slave_1: left allmulticast mode [ 906.357343][ T1152] bridge_slave_1: left promiscuous mode [ 906.357631][ T1152] bridge0: port 2(bridge_slave_1) entered disabled state [ 906.413956][ T1152] bridge_slave_0: left allmulticast mode [ 906.413977][ T1152] bridge_slave_0: left promiscuous mode [ 906.414171][ T1152] bridge0: port 1(bridge_slave_0) entered disabled state [ 906.475869][ T1152] bridge_slave_1: left allmulticast mode [ 906.475890][ T1152] bridge_slave_1: left promiscuous mode [ 906.476038][ T1152] bridge0: port 2(bridge_slave_1) entered disabled state [ 906.522927][T13606] Bluetooth: hci3: command tx timeout [ 906.534644][ T1152] bridge_slave_0: left allmulticast mode [ 906.534672][ T1152] bridge_slave_0: left promiscuous mode [ 906.534916][ T1152] bridge0: port 1(bridge_slave_0) entered disabled state [ 907.335428][T13606] Bluetooth: hci4: command tx timeout [ 908.553533][ T1152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 908.613455][ T1152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 908.656131][ T1152] bond0 (unregistering): Released all slaves [ 910.313483][ T1152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 910.375683][ T1152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 910.415310][ T1152] bond0 (unregistering): Released all slaves [ 910.643479][ T1152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 910.723424][ T1152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 910.784923][ T1152] bond0 (unregistering): Released all slaves [ 912.533399][ T1152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 912.633469][ T1152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 912.675426][ T1152] bond0 (unregistering): Released all slaves [ 912.968553][T13835] hsr_slave_0: entered promiscuous mode [ 912.969884][T13835] hsr_slave_1: entered promiscuous mode [ 912.970776][T13835] debugfs: 'hsr0' already exists in 'hsr' [ 912.970799][T13835] Cannot create hsr debugfs directory [ 914.043484][ T1152] hsr_slave_0: left promiscuous mode [ 914.062875][ T1152] hsr_slave_1: left promiscuous mode [ 914.063598][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 914.105879][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 914.242890][ T1152] hsr_slave_0: left promiscuous mode [ 914.263044][ T1152] hsr_slave_1: left promiscuous mode [ 914.263769][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 914.314088][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 914.473010][ T1152] hsr_slave_0: left promiscuous mode [ 914.493933][ T1152] hsr_slave_1: left promiscuous mode [ 914.494634][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 914.535338][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 914.683194][ T1152] hsr_slave_0: left promiscuous mode [ 914.702923][ T1152] hsr_slave_1: left promiscuous mode [ 914.703691][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 914.754681][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 915.613547][ T1152] team0 (unregistering): Port device team_slave_1 removed [ 915.923902][ T1152] team0 (unregistering): Port device team_slave_0 removed [ 919.103322][ T1152] team0 (unregistering): Port device team_slave_1 removed [ 919.373330][ T1152] team0 (unregistering): Port device team_slave_0 removed [ 920.006610][T10379] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 920.061913][T10379] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 920.066417][T10379] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 920.068116][T10379] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 920.069423][T10379] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 922.123070][T13606] Bluetooth: hci5: command tx timeout [ 922.294582][ T1152] team0 (unregistering): Port device team_slave_1 removed [ 922.453840][ T1152] team0 (unregistering): Port device team_slave_0 removed [ 924.202972][T13606] Bluetooth: hci5: command tx timeout [ 924.523698][ T1152] team0 (unregistering): Port device team_slave_1 removed [ 924.794191][ T1152] team0 (unregistering): Port device team_slave_0 removed [ 926.282995][T13606] Bluetooth: hci5: command tx timeout [ 927.839690][T13809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 928.371065][T13606] Bluetooth: hci5: command tx timeout [ 928.399289][T13809] 8021q: adding VLAN 0 to HW filter on device team0 [ 928.524895][ T1179] bridge0: port 1(bridge_slave_0) entered blocking state [ 928.525027][ T1179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 928.581232][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 928.581410][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 928.780419][T13864] chnl_net:caif_netlink_parms(): no params data found [ 929.345293][T13864] bridge0: port 1(bridge_slave_0) entered blocking state [ 929.345443][T13864] bridge0: port 1(bridge_slave_0) entered disabled state [ 929.346040][T13864] bridge_slave_0: entered allmulticast mode [ 929.349252][T13864] bridge_slave_0: entered promiscuous mode [ 929.357180][T13864] bridge0: port 2(bridge_slave_1) entered blocking state [ 929.357894][T13864] bridge0: port 2(bridge_slave_1) entered disabled state [ 929.358103][T13864] bridge_slave_1: entered allmulticast mode [ 929.360701][T13864] bridge_slave_1: entered promiscuous mode [ 929.604397][T13864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 929.637212][T13864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 930.151645][T13864] team0: Port device team_slave_0 added [ 930.170976][T13864] team0: Port device team_slave_1 added [ 930.615963][T13864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 930.615977][T13864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 930.615992][T13864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 930.776974][T13864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 930.776991][T13864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 930.777016][T13864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 931.482520][T13864] hsr_slave_0: entered promiscuous mode [ 931.485275][T13864] hsr_slave_1: entered promiscuous mode [ 931.486253][T13864] debugfs: 'hsr0' already exists in 'hsr' [ 931.486276][T13864] Cannot create hsr debugfs directory [ 931.606279][T13809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 932.431775][T13822] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 932.478578][T13822] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 932.547172][T13822] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 932.639574][T13822] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 932.925499][T13809] veth0_vlan: entered promiscuous mode [ 933.606174][T13809] veth1_vlan: entered promiscuous mode [ 933.609528][T13832] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 933.686582][T13832] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 933.742037][T13832] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 934.003370][T13832] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 934.360972][T13835] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 934.398681][T13835] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 934.419705][T13835] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 934.466379][T13835] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 934.552558][T13809] veth0_macvtap: entered promiscuous mode [ 934.623851][T13809] veth1_macvtap: entered promiscuous mode [ 934.758010][ T1152] bridge_slave_1: left allmulticast mode [ 934.758040][ T1152] bridge_slave_1: left promiscuous mode [ 934.758796][ T1152] bridge0: port 2(bridge_slave_1) entered disabled state [ 934.835980][ T1152] bridge_slave_0: left allmulticast mode [ 934.836010][ T1152] bridge_slave_0: left promiscuous mode [ 934.836249][ T1152] bridge0: port 1(bridge_slave_0) entered disabled state [ 934.937676][ T1152] bridge_slave_1: left allmulticast mode [ 934.937705][ T1152] bridge_slave_1: left promiscuous mode [ 934.937945][ T1152] bridge0: port 2(bridge_slave_1) entered disabled state [ 935.037045][ T1152] bridge_slave_0: left allmulticast mode [ 935.037075][ T1152] bridge_slave_0: left promiscuous mode [ 935.037312][ T1152] bridge0: port 1(bridge_slave_0) entered disabled state [ 936.853709][ T1152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 936.913410][ T1152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 936.956205][ T1152] bond0 (unregistering): Released all slaves [ 938.633591][ T1152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 938.693807][ T1152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 938.715144][ T1152] bond0 (unregistering): Released all slaves [ 939.017520][T13809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 939.083167][T13809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 939.217207][T13822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 939.228048][ T69] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 939.236007][ T69] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 939.248778][ T69] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 939.413690][ T1152] hsr_slave_0: left promiscuous mode [ 939.452813][ T1152] hsr_slave_1: left promiscuous mode [ 939.453530][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 939.483948][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 939.643680][ T1152] hsr_slave_0: left promiscuous mode [ 939.662990][ T1152] hsr_slave_1: left promiscuous mode [ 939.663717][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 939.713869][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 940.704420][ T1152] team0 (unregistering): Port device team_slave_1 removed [ 940.973405][ T1152] team0 (unregistering): Port device team_slave_0 removed [ 943.876135][ T1152] team0 (unregistering): Port device team_slave_1 removed [ 944.023320][ T1152] team0 (unregistering): Port device team_slave_0 removed [ 946.274191][ T69] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.427315][T13822] 8021q: adding VLAN 0 to HW filter on device team0 [ 946.630961][T13832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 946.692256][ T1321] bridge0: port 1(bridge_slave_0) entered blocking state [ 946.692522][ T1321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 946.714093][ T5955] bridge0: port 2(bridge_slave_1) entered blocking state [ 946.714233][ T5955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 946.936839][T13832] 8021q: adding VLAN 0 to HW filter on device team0 [ 946.953385][ T5955] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 946.953403][ T5955] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 947.008311][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 947.008444][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 947.059866][T13835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 947.091948][ T5955] bridge0: port 2(bridge_slave_1) entered blocking state [ 947.092075][ T5955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 947.307522][ T6460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 947.307553][ T6460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 947.420215][T13864] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 947.475086][T13864] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 947.557139][T13835] 8021q: adding VLAN 0 to HW filter on device team0 [ 947.559265][T13864] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 947.690006][T13864] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 947.904860][ T5955] bridge0: port 1(bridge_slave_0) entered blocking state [ 947.905168][ T5955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 948.038434][ T5955] bridge0: port 2(bridge_slave_1) entered blocking state [ 948.045299][ T5955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 949.123674][T13822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 949.215881][T13864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 949.334905][T13832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 949.395495][T13864] 8021q: adding VLAN 0 to HW filter on device team0 [ 949.431760][ T1179] bridge0: port 1(bridge_slave_0) entered blocking state [ 949.432047][ T1179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 949.570622][ T1179] bridge0: port 2(bridge_slave_1) entered blocking state [ 949.570794][ T1179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 949.790638][T13822] veth0_vlan: entered promiscuous mode [ 949.886742][T13822] veth1_vlan: entered promiscuous mode [ 949.957301][T13835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 950.167292][T13822] veth0_macvtap: entered promiscuous mode [ 950.297896][T13822] veth1_macvtap: entered promiscuous mode [ 951.227896][T13822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 951.296586][T13822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 951.332478][T13832] veth0_vlan: entered promiscuous mode [ 951.367663][ T5955] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.383718][ T5955] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.385253][ T5955] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.410322][ T5955] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.493047][T13832] veth1_vlan: entered promiscuous mode [ 952.671947][T13864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 952.817701][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 952.817723][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 952.860220][T13832] veth0_macvtap: entered promiscuous mode [ 952.931195][T13832] veth1_macvtap: entered promiscuous mode [ 952.980979][T13835] veth0_vlan: entered promiscuous mode [ 953.029410][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 953.029431][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 953.091966][T13835] veth1_vlan: entered promiscuous mode [ 953.128222][T13832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 953.196766][T13832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 953.197778][T13864] veth0_vlan: entered promiscuous mode [ 953.243516][ T1179] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.245407][ T1179] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.250014][ T1179] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.250315][ T1179] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.282301][T13864] veth1_vlan: entered promiscuous mode [ 953.656683][T14081] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2503'. [ 953.683229][T13835] veth0_macvtap: entered promiscuous mode [ 953.790839][T13835] veth1_macvtap: entered promiscuous mode [ 953.935753][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 953.935775][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 953.985540][T13864] veth0_macvtap: entered promiscuous mode [ 954.005548][T13835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 954.077204][T13835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 954.081178][T13864] veth1_macvtap: entered promiscuous mode [ 954.207878][ T1321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 954.207900][ T1321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 954.216704][ T1169] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.225722][ T1169] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.242755][ T1169] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.281261][ T1169] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.426977][T13864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 954.565803][T13864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 954.883049][ T1179] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.883546][ T1179] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.884295][ T1179] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.884763][ T1179] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.328090][T14102] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input37 [ 957.424978][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 957.425001][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 957.821429][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 957.821448][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 958.013491][ T1321] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 958.013514][ T1321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 958.172326][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 958.172347][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 958.872543][T14151] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2517'. [ 960.456392][T14180] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2526'. [ 960.456414][T14180] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2526'. [ 960.851766][T14181] syz.4.2525 (14181) used greatest stack depth: 16120 bytes left [ 962.257786][T14217] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 962.273315][T14217] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 962.395490][T14220] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2540'. [ 962.395512][T14220] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2540'. [ 963.499503][T14260] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2554'. [ 963.499527][T14260] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2554'. [ 963.685852][T14268] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2556'. [ 965.744175][T14307] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2570'. [ 967.163538][T14327] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 967.163568][T14327] CIFS mount error: No usable UNC path provided in device string! [ 967.163568][T14327] [ 967.163844][T14327] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 967.699145][T14343] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2582'. [ 971.347901][T14393] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2597'. [ 971.348210][T14393] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2597'. [ 972.241130][T14411] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input38 [ 972.803600][T14413] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2602'. [ 973.891274][T14435] CIFS mount error: No usable UNC path provided in device string! [ 973.891274][T14435] [ 973.891343][T14435] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 975.897836][T14478] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input39 [ 977.157614][T14508] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2630'. [ 977.231739][T14511] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2633'. [ 978.429977][T14559] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2648'. [ 980.455998][T14607] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2666'. [ 980.702995][T14618] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2669'. [ 981.218045][T14635] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2677'. [ 981.239556][T14634] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2676'. [ 981.873017][T14656] tipc: Started in network mode [ 981.873046][T14656] tipc: Node identity 2a30ec5a25b6, cluster identity 4711 [ 981.873246][T14656] tipc: Enabled bearer , priority 0 [ 981.880800][T14656] syzkaller0: entered promiscuous mode [ 981.880824][T14656] syzkaller0: entered allmulticast mode [ 983.028323][ T5982] tipc: Node number set to 260500570 [ 983.199506][T14663] tipc: Resetting bearer [ 983.221684][T14669] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2689'. [ 983.299434][T14653] tipc: Resetting bearer [ 983.614095][T14653] tipc: Disabling bearer [ 984.931912][T14698] syzkaller0: entered promiscuous mode [ 984.931943][T14698] syzkaller0: entered allmulticast mode [ 990.161807][ C1] vkms_vblank_simulate: vblank timer overrun [ 990.253790][T14834] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2742'. [ 990.340070][ C1] vkms_vblank_simulate: vblank timer overrun [ 991.098064][ C1] vkms_vblank_simulate: vblank timer overrun [ 993.339833][ C1] vkms_vblank_simulate: vblank timer overrun [ 993.543717][ C1] vkms_vblank_simulate: vblank timer overrun [ 994.295848][ C1] vkms_vblank_simulate: vblank timer overrun [ 995.498862][T14949] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2783'. [ 996.707157][T14968] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2789'. [ 997.351004][T14995] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2798'. [ 998.057471][T15014] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2805'. [ 998.682724][T15035] CIFS mount error: No usable UNC path provided in device string! [ 998.682724][T15035] [ 998.682769][T15035] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1000.208986][T15076] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2826'. [ 1000.501407][T15085] CIFS mount error: No usable UNC path provided in device string! [ 1000.501407][T15085] [ 1000.501476][T15085] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1001.677090][T15108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1001.760067][T15112] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1002.603339][T15128] CIFS mount error: No usable UNC path provided in device string! [ 1002.603339][T15128] [ 1002.603395][T15128] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1004.314933][T15157] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2854'. [ 1005.642035][T15179] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1005.830726][T15188] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1005.861188][T15193] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2865'. [ 1008.983873][T15248] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2880'. [ 1011.167239][T15291] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1011.265987][T15289] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2893'. [ 1011.276213][T15294] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2895'. [ 1011.510507][T15300] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1011.791737][T15311] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 1012.295679][T15327] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2904'. [ 1012.483875][T15334] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2906'. [ 1013.342961][T15363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1013.455952][T15366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1013.456527][T15367] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2919'. [ 1013.765074][T15372] CIFS mount error: No usable UNC path provided in device string! [ 1013.765074][T15372] [ 1013.765096][T15372] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1013.973081][T15375] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2920'. [ 1014.844577][T15389] syzkaller0: entered promiscuous mode [ 1014.844604][T15389] syzkaller0: entered allmulticast mode [ 1015.481773][T15410] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2930'. [ 1015.723345][T10379] Bluetooth: hci1: command 0x0406 tx timeout [ 1016.289073][T15435] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2939'. [ 1017.179691][T15471] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2953'. [ 1020.851824][T13605] Bluetooth: hci3: command 0x0406 tx timeout [ 1020.851865][T13605] Bluetooth: hci2: command 0x0406 tx timeout [ 1021.255531][T15522] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2969'. [ 1024.388550][T15573] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2986'. [ 1025.246211][T15605] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2998'. [ 1025.728337][T15621] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3004'. [ 1026.042914][T10379] Bluetooth: hci4: command 0x0406 tx timeout [ 1027.168592][T15655] ======================================================= [ 1027.168592][T15655] WARNING: The mand mount option has been deprecated and [ 1027.168592][T15655] and is ignored by this kernel. Remove the mand [ 1027.168592][T15655] option from the mount to silence this warning. [ 1027.168592][T15655] ======================================================= [ 1027.686508][T15671] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3027'. [ 1030.252999][T15719] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3045'. [ 1030.365553][T15721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1030.469252][T15730] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1031.607926][T15760] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3059'. [ 1032.575325][T15793] CIFS mount error: No usable UNC path provided in device string! [ 1032.575325][T15793] [ 1032.575348][T15793] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1035.721390][ C1] vkms_vblank_simulate: vblank timer overrun [ 1036.574548][ C1] vkms_vblank_simulate: vblank timer overrun [ 1036.832986][ C1] vkms_vblank_simulate: vblank timer overrun [ 1036.884804][T15875] Driver unsupported XDP return value 0 on prog (id 352) dev N/A, expect packet loss! [ 1037.731838][T15923] netlink: 'syz.4.3118': attribute type 29 has an invalid length. [ 1037.745026][T15923] netlink: 'syz.4.3118': attribute type 29 has an invalid length. [ 1037.751764][T15923] netlink: 500 bytes leftover after parsing attributes in process `syz.4.3118'. [ 1037.752467][T15923] unsupported nla_type 58 [ 1038.047958][ C1] vkms_vblank_simulate: vblank timer overrun [ 1039.022688][ C1] vkms_vblank_simulate: vblank timer overrun [ 1039.270359][ C1] vkms_vblank_simulate: vblank timer overrun [ 1045.904691][T16071] netlink: 'syz.4.3165': attribute type 29 has an invalid length. [ 1045.913485][T16071] netlink: 'syz.4.3165': attribute type 29 has an invalid length. [ 1046.334960][T16082] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3169'. [ 1046.335192][T16082] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3169'. [ 1048.714576][T16143] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3192'. [ 1049.004038][T16148] netlink: 'syz.4.3195': attribute type 1 has an invalid length. [ 1049.863857][T16148] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1050.105238][T16148] gretap1: entered promiscuous mode [ 1050.138960][T16170] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3200'. [ 1050.139347][T16170] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3200'. [ 1050.144427][T16148] bond1: (slave gretap1): making interface the new active one [ 1050.145579][T16148] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1050.458628][T16182] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3205'. [ 1050.590016][T16185] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3206'. [ 1051.211853][T16212] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3215'. [ 1051.726268][T16232] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3222'. [ 1053.582151][T16275] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3238'. [ 1054.015430][T16293] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3242'. [ 1060.672494][T16400] netlink: 596 bytes leftover after parsing attributes in process `syz.2.3271'. [ 1061.027662][T16409] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3273'. [ 1062.035359][T16433] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3280'. [ 1063.836150][T16488] syzkaller0: entered promiscuous mode [ 1063.836188][T16488] syzkaller0: entered allmulticast mode [ 1063.955289][ C0] vkms_vblank_simulate: vblank timer overrun [ 1064.332895][ C0] vkms_vblank_simulate: vblank timer overrun [ 1065.032248][T16537] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1067.051970][T16625] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1068.954755][T16685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1069.071689][T16688] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1071.294711][T16746] ------------[ cut here ]------------ [ 1071.294734][T16746] WARNING: CPU: 0 PID: 16746 at ./include/linux/seqlock.h:221 cgroup_freeze+0x80a/0xf90 [ 1071.294809][T16746] Modules linked in: [ 1071.294831][T16746] CPU: 0 UID: 0 PID: 16746 Comm: syz.5.3383 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1071.294855][T16746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1071.294868][T16746] RIP: 0010:cgroup_freeze+0x80a/0xf90 [ 1071.294887][T16746] Code: 90 e9 9e fb ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c e7 f9 ff ff 4c 89 f7 e8 c1 1f 68 00 e9 da f9 ff ff e8 37 68 06 00 90 <0f> 0b 90 e9 10 fc ff ff 44 89 f9 80 e1 07 38 c1 48 8b 0c 24 0f 8c [ 1071.294905][T16746] RSP: 0018:ffffc900064578e0 EFLAGS: 00010287 [ 1071.294922][T16746] RAX: ffffffff81b8a4d9 RBX: 0000000000000000 RCX: 0000000000080000 [ 1071.294937][T16746] RDX: ffffc90013bb5000 RSI: 00000000000000a8 RDI: 00000000000000a9 [ 1071.294951][T16746] RBP: ffffc90006457a70 R08: 0000000000000000 R09: 0000000000000000 [ 1071.294965][T16746] R10: dffffc0000000000 R11: fffffbfff1deed6f R12: dffffc0000000000 [ 1071.294980][T16746] R13: 0000000000000000 R14: 0000000000000001 R15: ffff88802396a791 [ 1071.294993][T16746] FS: 00007f511fe266c0(0000) GS:ffff888126bc2000(0000) knlGS:0000000000000000 [ 1071.295008][T16746] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1071.295020][T16746] CR2: 000055cb7fe0e950 CR3: 000000007178e000 CR4: 00000000003526f0 [ 1071.295036][T16746] Call Trace: [ 1071.295044][T16746] [ 1071.295060][T16746] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1071.295094][T16746] ? __pfx_cgroup_freeze+0x10/0x10 [ 1071.295110][T16746] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1071.295132][T16746] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1071.295151][T16746] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 1071.295179][T16746] ? mutex_lock_nested+0x154/0x1d0 [ 1071.295196][T16746] ? cgroup_kn_lock_live+0x13c/0x230 [ 1071.295224][T16746] cgroup_freeze_write+0x156/0x1c0 [ 1071.295247][T16746] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 1071.295267][T16746] ? kernfs_root+0x1c/0x230 [ 1071.295289][T16746] ? kernfs_root+0x1c/0x230 [ 1071.295313][T16746] ? kernfs_root+0x1ea/0x230 [ 1071.295333][T16746] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 1071.295355][T16746] cgroup_file_write+0x39e/0x740 [ 1071.295379][T16746] ? __pfx_cgroup_file_write+0x10/0x10 [ 1071.295411][T16746] ? __pfx_cgroup_file_write+0x10/0x10 [ 1071.295427][T16746] kernfs_fop_write_iter+0x3b0/0x540 [ 1071.295456][T16746] vfs_write+0x5d5/0xb40 [ 1071.295512][T16746] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1071.295534][T16746] ? __pfx_vfs_write+0x10/0x10 [ 1071.295550][T16746] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 1071.295580][T16746] ? mutex_lock_nested+0x154/0x1d0 [ 1071.295597][T16746] ? fdget_pos+0x253/0x320 [ 1071.295633][T16746] ksys_write+0x14b/0x260 [ 1071.295653][T16746] ? __pfx_ksys_write+0x10/0x10 [ 1071.295677][T16746] ? do_syscall_64+0xbe/0xfa0 [ 1071.295774][T16746] do_syscall_64+0xfa/0xfa0 [ 1071.295794][T16746] ? lockdep_hardirqs_on+0x9c/0x150 [ 1071.295816][T16746] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1071.295854][T16746] ? clear_bhb_loop+0x60/0xb0 [ 1071.295878][T16746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1071.295896][T16746] RIP: 0033:0x7f5121bbefc9 [ 1071.295916][T16746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1071.295933][T16746] RSP: 002b:00007f511fe26038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1071.295952][T16746] RAX: ffffffffffffffda RBX: 00007f5121e15fa0 RCX: 00007f5121bbefc9 [ 1071.295967][T16746] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 0000000000000007 [ 1071.295980][T16746] RBP: 00007f5121c41f91 R08: 0000000000000000 R09: 0000000000000000 [ 1071.295993][T16746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1071.296006][T16746] R13: 00007f5121e16038 R14: 00007f5121e15fa0 R15: 00007ffdd47b1ed8 [ 1071.296041][T16746] [ 1071.296060][T16746] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1071.296075][T16746] CPU: 0 UID: 0 PID: 16746 Comm: syz.5.3383 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1071.296095][T16746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1071.296106][T16746] Call Trace: [ 1071.296116][T16746] [ 1071.296125][T16746] dump_stack_lvl+0x99/0x250 [ 1071.296148][T16746] ? __asan_memcpy+0x40/0x70 [ 1071.296182][T16746] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1071.296205][T16746] ? __pfx__printk+0x10/0x10 [ 1071.296240][T16746] vpanic+0x237/0x6d0 [ 1071.296266][T16746] ? __pfx_vpanic+0x10/0x10 [ 1071.296294][T16746] panic+0xb9/0xc0 [ 1071.296312][T16746] ? __pfx_panic+0x10/0x10 [ 1071.296349][T16746] __warn+0x31b/0x4b0 [ 1071.296365][T16746] ? cgroup_freeze+0x80a/0xf90 [ 1071.296386][T16746] ? cgroup_freeze+0x80a/0xf90 [ 1071.296404][T16746] report_bug+0x2be/0x4f0 [ 1071.296465][T16746] ? cgroup_freeze+0x80a/0xf90 [ 1071.296483][T16746] ? cgroup_freeze+0x80a/0xf90 [ 1071.296501][T16746] ? cgroup_freeze+0x80c/0xf90 [ 1071.296518][T16746] handle_bug+0x84/0x160 [ 1071.296544][T16746] exc_invalid_op+0x1a/0x50 [ 1071.296567][T16746] asm_exc_invalid_op+0x1a/0x20 [ 1071.296585][T16746] RIP: 0010:cgroup_freeze+0x80a/0xf90 [ 1071.296603][T16746] Code: 90 e9 9e fb ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c e7 f9 ff ff 4c 89 f7 e8 c1 1f 68 00 e9 da f9 ff ff e8 37 68 06 00 90 <0f> 0b 90 e9 10 fc ff ff 44 89 f9 80 e1 07 38 c1 48 8b 0c 24 0f 8c [ 1071.296628][T16746] RSP: 0018:ffffc900064578e0 EFLAGS: 00010287 [ 1071.296643][T16746] RAX: ffffffff81b8a4d9 RBX: 0000000000000000 RCX: 0000000000080000 [ 1071.296657][T16746] RDX: ffffc90013bb5000 RSI: 00000000000000a8 RDI: 00000000000000a9 [ 1071.296670][T16746] RBP: ffffc90006457a70 R08: 0000000000000000 R09: 0000000000000000 [ 1071.296682][T16746] R10: dffffc0000000000 R11: fffffbfff1deed6f R12: dffffc0000000000 [ 1071.296696][T16746] R13: 0000000000000000 R14: 0000000000000001 R15: ffff88802396a791 [ 1071.296717][T16746] ? cgroup_freeze+0x809/0xf90 [ 1071.296748][T16746] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1071.296775][T16746] ? __pfx_cgroup_freeze+0x10/0x10 [ 1071.296791][T16746] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1071.296814][T16746] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1071.296837][T16746] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 1071.296868][T16746] ? mutex_lock_nested+0x154/0x1d0 [ 1071.296886][T16746] ? cgroup_kn_lock_live+0x13c/0x230 [ 1071.296917][T16746] cgroup_freeze_write+0x156/0x1c0 [ 1071.296943][T16746] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 1071.296964][T16746] ? kernfs_root+0x1c/0x230 [ 1071.296985][T16746] ? kernfs_root+0x1c/0x230 [ 1071.297010][T16746] ? kernfs_root+0x1ea/0x230 [ 1071.297032][T16746] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 1071.297057][T16746] cgroup_file_write+0x39e/0x740 [ 1071.297085][T16746] ? __pfx_cgroup_file_write+0x10/0x10 [ 1071.297120][T16746] ? __pfx_cgroup_file_write+0x10/0x10 [ 1071.297137][T16746] kernfs_fop_write_iter+0x3b0/0x540 [ 1071.297166][T16746] vfs_write+0x5d5/0xb40 [ 1071.297191][T16746] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1071.297213][T16746] ? __pfx_vfs_write+0x10/0x10 [ 1071.297228][T16746] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 1071.297260][T16746] ? mutex_lock_nested+0x154/0x1d0 [ 1071.297279][T16746] ? fdget_pos+0x253/0x320 [ 1071.297305][T16746] ksys_write+0x14b/0x260 [ 1071.297326][T16746] ? __pfx_ksys_write+0x10/0x10 [ 1071.297348][T16746] ? do_syscall_64+0xbe/0xfa0 [ 1071.297371][T16746] do_syscall_64+0xfa/0xfa0 [ 1071.297391][T16746] ? lockdep_hardirqs_on+0x9c/0x150 [ 1071.297412][T16746] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1071.297429][T16746] ? clear_bhb_loop+0x60/0xb0 [ 1071.297449][T16746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1071.297465][T16746] RIP: 0033:0x7f5121bbefc9 [ 1071.297479][T16746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1071.297493][T16746] RSP: 002b:00007f511fe26038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1071.297510][T16746] RAX: ffffffffffffffda RBX: 00007f5121e15fa0 RCX: 00007f5121bbefc9 [ 1071.297522][T16746] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 0000000000000007 [ 1071.297533][T16746] RBP: 00007f5121c41f91 R08: 0000000000000000 R09: 0000000000000000 [ 1071.297544][T16746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1071.297555][T16746] R13: 00007f5121e16038 R14: 00007f5121e15fa0 R15: 00007ffdd47b1ed8 [ 1071.297586][T16746] [ 1071.297856][T16746] Kernel Offset: disabled