last executing test programs: 40m50.818878904s ago: executing program 32 (id=1841): mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000480be940c95f610047cd0102030109021b00010000600009046405276aa3c0fc09051ed000024e0703"], 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r2 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='afs\x00', 0x0, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, r1}, './file0\x00'}) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000040)={0x2, 0x8001}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x5a0803, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000140)=0x4) 39m57.661103s ago: executing program 33 (id=2116): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x24, r1, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) 39m36.867949618s ago: executing program 34 (id=2194): r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x3ff, 0x2a6200) pidfd_getfd(r0, r0, 0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f00000000c0)) socket$xdp(0x2c, 0x3, 0x0) 39m0.760996871s ago: executing program 35 (id=2338): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x80) 38m31.473625442s ago: executing program 36 (id=2484): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x17) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0xfc70, 0x1000, 0x0, 0x376}) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="38010000fe0000", @ANYRES64], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_loose}]}}) (async) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000007600110d0300000000000000030000000000000008000500", @ANYRES32], 0x20}}, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r0}, 0x4) (async) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/time\x00') fremovexattr(r6, &(0x7f0000000340)=@known='system.posix_acl_default\x00') (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x1, 0x3, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 37m54.149965744s ago: executing program 37 (id=2655): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2d, 0x8, &(0x7f0000002ac0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc8734c295cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f244a3c307145452ce64dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c65070020d7df0abc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3593], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fchown(r0, 0x0, 0x0) 36m4.114623337s ago: executing program 38 (id=3212): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000000000008500000072"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 35m20.100165861s ago: executing program 39 (id=3510): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) membarrier(0x6, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) readahead(r1, 0x0, 0xfffffffffffffff9) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000006bc0), 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x7040, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000640)={{@my=0x1}, @hyper, 0x0, 0x2925, 0x0, 0x20000000, 0x4}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r4, 0x7a4, &(0x7f0000000040)={{@my=0x1}}) r5 = socket$inet(0x2, 0x3, 0x10) setsockopt$sock_int(r5, 0x1, 0x5, &(0x7f0000000440)=0x200, 0x4) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000080)='wg0\x00', 0x4) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0xe0}, 0x1, 0x0, 0x0, 0x4c000}, 0x4008004) 33m5.892232379s ago: executing program 40 (id=3969): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) mmap(&(0x7f000009b000/0x3000)=nil, 0x3000, 0x1000005, 0x11012, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1200000005090000080000000800000004000000fcc69f42d7892385d3dd75b5e14a313cd5befeb95f744f5d50b6945e1f5561dc48d2bec89621fe1347b623b49993a678f06fadd34ba62e33f53e592919e826244df913a8cda75641bbc54d3b6e72bc18651c5d84405c273b3b6e098f40cd90c68c37a22852594682d126aef701041990436e91a38b7f68ff44e8779390feef06500e", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r2, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r1}, 0x20) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000140)={0xc}) ioctl$PPPIOCSACTIVE(r4, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) 31m11.763993678s ago: executing program 41 (id=4361): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@ipv6_getnexthop={0x1c, 0x6a, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NHA_FDB={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40088d4}, 0x0) r1 = accept(r0, &(0x7f0000000040)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) socket$kcm(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) open(&(0x7f0000001180)='./bus\x00', 0x400101042, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x101202, 0x0) read$nci(r4, &(0x7f00000002c0)=""/110, 0x1) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0xa002, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r5, 0x40096101, &(0x7f0000000340)={{}, 0x7}) sendmsg$nl_crypto(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@delrng={0x10, 0x14, 0x200, 0x70bd26, 0x25dfdbfd, "", ["", ""]}, 0x10}}, 0x20000000) 26m53.041695564s ago: executing program 42 (id=5304): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x53b, 0x70bd2b, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x300, 0xfffffffd, 0xffffffffffffffff}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x4}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xc}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x70}}, 0x0) 25m41.328832489s ago: executing program 43 (id=6132): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, 0x0, 0xfdef) write$cgroup_subtree(r2, &(0x7f0000000000), 0xfdef) 23m58.731133048s ago: executing program 44 (id=7160): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r3}, &(0x7f0000001c00), &(0x7f0000001c40)=r4}, 0x20) 19m57.608285786s ago: executing program 9 (id=9271): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x2}, 0x18) sendmsg$nl_route(r0, 0x0, 0x4801) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r0) 19m56.385047708s ago: executing program 9 (id=9275): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x59346000) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000400)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}}) 19m56.335471685s ago: executing program 9 (id=9276): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000040)={0x1, 0x2, 0x3}) 19m54.665683418s ago: executing program 9 (id=9283): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) 19m54.65667999s ago: executing program 9 (id=9284): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) socket$packet(0x11, 0x3, 0x300) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, r1}, 0x10) bpf$ITER_CREATE(0x1d, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000000)) fcntl$lock(r4, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x4, 0x4000007fffffff}) 19m53.921444466s ago: executing program 9 (id=9287): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x75) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000480)=""/138, 0x0}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000600)=""/81}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000900)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup3(r4, r3, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000880)={0x1c, &(0x7f0000000700)={0x0, 0x8, 0x6, "130e30e44dbd"}, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000840)=[@acquire, @acquire_done, @request_death], 0x0, 0x0, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000540)={0x1, 0x0, [{0x0, 0x80, &(0x7f0000000680)=""/128}]}) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x28011, r2, 0x0) 19m53.872965486s ago: executing program 45 (id=9287): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x75) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000480)=""/138, 0x0}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000600)=""/81}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000900)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup3(r4, r3, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000880)={0x1c, &(0x7f0000000700)={0x0, 0x8, 0x6, "130e30e44dbd"}, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000840)=[@acquire, @acquire_done, @request_death], 0x0, 0x0, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000540)={0x1, 0x0, [{0x0, 0x80, &(0x7f0000000680)=""/128}]}) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x28011, r2, 0x0) 16m58.917682783s ago: executing program 2 (id=10052): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r0, 0x0, 0x0) 16m58.561085349s ago: executing program 2 (id=10053): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r5 = userfaultfd(0x1) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000004c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x3}) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa04, &(0x7f00000002c0)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101301) bpf$MAP_CREATE(0x0, 0x0, 0x48) 16m51.840298148s ago: executing program 2 (id=10078): syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) capset(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='setgroups\x00') write$binfmt_script(r3, &(0x7f0000000400)={'#! ', './file0'}, 0xb) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x401, 0x0) write$tcp_mem(r4, &(0x7f0000000100), 0x6a) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r5, 0x4b52, &(0x7f0000000000)=""/116) ioctl$BINDER_GET_FROZEN_INFO(r4, 0xc00c620f, &(0x7f00000000c0)={r0}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27}, 0x74) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000002c0)={0x4c, r7, 0xb97534d5fe9704cf, 0x0, 0x0, {{0x12}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_WME={0x24, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xf9}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x4}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}]}, 0x4c}}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003600), 0x0, 0x0) 16m50.85251656s ago: executing program 4 (id=10081): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x3, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x200}}}}}}, 0x0) 16m50.677539681s ago: executing program 4 (id=10082): r0 = socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004200)=ANY=[@ANYBLOB="340000003d0007010080002000000000027c00001c004580180009801100d1805926334f8305b045e8849cfe2d00000004000180"], 0x34}}, 0x4040040) 16m50.508523726s ago: executing program 2 (id=10084): syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) socket$alg(0x26, 0x5, 0x0) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$rds(0x15, 0x5, 0x0) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 16m48.479032223s ago: executing program 2 (id=10088): syz_usb_connect(0x0, 0x2d, &(0x7f0000001580)=ANY=[@ANYBLOB="12010000686b26204f0801008c0b0102030109021b"], 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_dev$tty1(0xc, 0x4, 0x3) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}}, 0x0) 16m44.980441283s ago: executing program 4 (id=10091): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = getpgrp(0x0) r4 = syz_pidfd_open(r3, 0x0) r5 = syz_clone(0x20002000, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r3, r5, 0x7, r4, &(0x7f0000000040)={0xffffffffffffffff, r4}) 16m43.969649209s ago: executing program 5 (id=10092): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20e20, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, 0x0) 16m43.006060524s ago: executing program 4 (id=10094): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000780)={0x18, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000006c0)={0x2c, &(0x7f00000007c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 16m40.769493155s ago: executing program 5 (id=10095): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) r2 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r2, 0x0, 0x0) 16m40.618142767s ago: executing program 5 (id=10096): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioprio_set$pid(0x2, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) acct(0x0) acct(0x0) 16m40.565920387s ago: executing program 5 (id=10097): syz_init_net_socket$ax25(0x3, 0x2, 0x1) r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000180)={{0xa, 0x4e22, 0x4, @private2, 0x80000000}, {0xa, 0x4e20, 0x7ff, @rand_addr=' \x01\x00', 0x3}, 0x1, {[0x5, 0x632, 0xbf2a0, 0xffffffff, 0x3, 0x8001, 0x3, 0x5]}}, 0x5c) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x301, 0x0, 0x2, 0x0, 0x0}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x8, 0x3, 0x458, 0x220, 0x43, 0xa0, 0x220, 0x98, 0x3c0, 0x178, 0x178, 0x3c0, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'syzkaller0\x00'}, 0x12a, 0x200, 0x220, 0x0, {0x0, 0x7a010000}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@mcast1, [0xffffffff, 0xff, 0xff000000, 0xff], @ipv4=@loopback, [0x0, 0xffffffff, 0x0, 0xffffff00], 0x4d2, 0x3505, 0x2f, 0x0, 0x10, 0xd}, {@ipv4=@rand_addr=0x64010100, [0xff000000, 0xffffffff, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x1f}, [0xffffff00, 0xffffffff, 0xff, 0xffffff00], 0x4d3, 0x3505, 0x3a, 0x1, 0x2, 0x8}, {@ipv6=@ipv4={'\x00', '\xff\xff', @empty}, [0xffffffff, 0xffffffff, 0x0, 0x807fffff], @ipv4=@private=0xa010101, [0xfffefe, 0xffffff00, 0xffffffff, 0xff], 0x4d6, 0x3504, 0x6, 0x1, 0x2, 0x8}, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0xffffffff, 0xffffff00, 0xff000000], @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff000000, 0x0, 0xffffffff], 0x4d5, 0x3504, 0x0, 0x0, 0xa, 0x1a}], 0x9, 0x1}}, @common=@unspec=@connbytes={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x168, 0x1a0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@multicast1, [], @ipv6=@loopback, [0x0, 0x0, 0xff000000], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [], @ipv4=@multicast1, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c0}}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4b8) 16m39.897627746s ago: executing program 4 (id=10098): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) syz_io_uring_setup(0xae, 0x0, 0x0, 0x0) 16m39.827012159s ago: executing program 4 (id=10099): syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)=@o_path={0x0, r1, 0x4000, r1}, 0x18) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) r3 = socket$inet6_udp(0xa, 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) setreuid(0x0, r4) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000440)=@ethtool_ringparam={0xe, 0x0, 0x0, 0xfffffffe, 0x0, 0x1002, 0x80000000}}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000340)={'wlan1\x00', &(0x7f00000003c0)=@ethtool_ringparam={0x11, 0x0, 0x0, 0x0, 0x0, 0x3}}) r6 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x20801, 0x0) write$rfkill(r6, &(0x7f0000000100)={0x5, 0x2, 0x83, 0x1}, 0x8) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1f, &(0x7f0000000b40)=""/4096, &(0x7f00000002c0)=0x1000) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) 16m38.741285932s ago: executing program 5 (id=10100): r0 = socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004200)=ANY=[@ANYBLOB="340000003d0007010080002000000000027c00001c004580180009801100d1805926334f8305b045e8849cfe2d00000004000180"], 0x34}}, 0x4040040) 16m37.605614714s ago: executing program 2 (id=10101): r0 = openat$binfmt_format(0xffffff9c, &(0x7f0000000380)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) writev(r0, &(0x7f0000000080), 0x0) socket$packet(0x11, 0x2, 0x300) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x6, 0xc8}}}, 0x6) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r1, 0x28, 0x8, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000000c0), 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, 0x0, 0x0) recvmmsg(r4, &(0x7f0000004a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=""/136, 0x88}, 0x8}], 0x1, 0x832b, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) sendto$inet6(r2, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x13}, 0x1c) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) 16m37.441620544s ago: executing program 5 (id=10103): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = getpgrp(0x0) r4 = syz_pidfd_open(r3, 0x0) r5 = syz_clone(0x20002000, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r3, r5, 0x7, r4, &(0x7f0000000040)={0xffffffffffffffff, r4}) 16m24.049630974s ago: executing program 46 (id=10099): syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)=@o_path={0x0, r1, 0x4000, r1}, 0x18) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) r3 = socket$inet6_udp(0xa, 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) setreuid(0x0, r4) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000440)=@ethtool_ringparam={0xe, 0x0, 0x0, 0xfffffffe, 0x0, 0x1002, 0x80000000}}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000340)={'wlan1\x00', &(0x7f00000003c0)=@ethtool_ringparam={0x11, 0x0, 0x0, 0x0, 0x0, 0x3}}) r6 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x20801, 0x0) write$rfkill(r6, &(0x7f0000000100)={0x5, 0x2, 0x83, 0x1}, 0x8) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1f, &(0x7f0000000b40)=""/4096, &(0x7f00000002c0)=0x1000) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) 16m18.144026314s ago: executing program 47 (id=10102): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) shutdown(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) 16m13.325985067s ago: executing program 48 (id=10103): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = getpgrp(0x0) r4 = syz_pidfd_open(r3, 0x0) r5 = syz_clone(0x20002000, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r3, r5, 0x7, r4, &(0x7f0000000040)={0xffffffffffffffff, r4}) 16m12.860808319s ago: executing program 49 (id=10101): r0 = openat$binfmt_format(0xffffff9c, &(0x7f0000000380)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) writev(r0, &(0x7f0000000080), 0x0) socket$packet(0x11, 0x2, 0x300) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x6, 0xc8}}}, 0x6) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r1, 0x28, 0x8, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000000c0), 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, 0x0, 0x0) recvmmsg(r4, &(0x7f0000004a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=""/136, 0x88}, 0x8}], 0x1, 0x832b, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) sendto$inet6(r2, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x13}, 0x1c) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) 9m7.597880207s ago: executing program 3 (id=11737): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) socket(0x2, 0x80805, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = socket$inet6(0xa, 0x3, 0xb6) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f0000000080)={0x5c}, 0x8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0xe0, 0x4, @loopback}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}], 0x62, 0x0) 9m5.408374127s ago: executing program 3 (id=11747): r0 = io_uring_setup(0x79af, &(0x7f0000000100)={0x0, 0xaa00, 0x2}) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xa2, &(0x7f0000000140)=""/162, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18b14ebaedf53ee4bf3ad88fe2f78919c282218b0360852fe71d2e41f10705330d20194b81ae89a15278de0000000000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='snd_soc_jack_report\x00', r2, 0x0, 0x100}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'}) ioctl(r6, 0x8b22, &(0x7f0000000040)) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, 0x0, 0x0) 9m3.884172576s ago: executing program 3 (id=11756): seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000103c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$tcp_congestion(r5, 0x0, 0x0) dup2(r5, r3) 9m0.087709667s ago: executing program 3 (id=11770): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, &(0x7f0000000340)) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000001200)={0x1d, r3}, 0x18) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40041271, 0x0) setsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, &(0x7f0000000280)=0x1, 0x4) connect$can_j1939(r2, &(0x7f0000000080)={0x1d, r3}, 0x18) writev(r2, &(0x7f0000000240)=[{&(0x7f0000000000)='h', 0xfdef}], 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan0\x00', 0x0}) write$char_usb(r2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) 8m58.387649616s ago: executing program 3 (id=11780): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) msgget(0x2, 0x9) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a1400"], 0x64}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bind$inet(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000740)={'dummy0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r5], 0x20}}, 0x0) 8m57.927934796s ago: executing program 3 (id=11785): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) openat$sndseq(0xffffffffffffff9c, 0x0, 0x800) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = syz_io_uring_setup(0x10d, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x1, 0x9}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) io_uring_enter(r2, 0x20003d16, 0x80000, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000540)=0x0) io_pgetevents(r5, 0x6, 0x6, &(0x7f0000000bc0)=[{}, {}, {}, {}, {}, {}], 0x0, 0x0) 8m42.126231169s ago: executing program 50 (id=11785): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) openat$sndseq(0xffffffffffffff9c, 0x0, 0x800) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = syz_io_uring_setup(0x10d, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x1, 0x9}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) io_uring_enter(r2, 0x20003d16, 0x80000, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000540)=0x0) io_pgetevents(r5, 0x6, 0x6, &(0x7f0000000bc0)=[{}, {}, {}, {}, {}, {}], 0x0, 0x0) 8m36.144058797s ago: executing program 8 (id=11842): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') mkdir(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0x45cd1261, 0x2, 0x7a109, 0xffffffffffffffff, 0x5133, '\x00', 0x0, r3, 0x3, 0x3, 0x0, 0x3, @value=r3, @void, @value=r3}, 0x50) rmdir(0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_INPUT(r4, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/connector\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000100)) r6 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001700)={0x50, 0x0, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac08}]}]}, 0x50}}, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r6, 0x80045017, 0x0) 8m32.857297032s ago: executing program 1 (id=11844): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180), 0x1}, 0x40) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40048c0}, 0x8000) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_open_dev$ndb(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/vmstat\x00', 0x0, 0x0) preadv(r4, 0x0, 0x0, 0x59dc, 0x0) read$hiddev(r1, &(0x7f00000000c0)=""/4092, 0xffc) preadv(r1, &(0x7f00000010c0)=[{&(0x7f0000001800)=""/250, 0xfa}], 0x1, 0x40000004, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12d, 0x0, 0x0, 0x10, &(0x7f00000003c0), &(0x7f0000000080), 0x8, 0xce, 0x8, 0x0, 0x0}}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) read$hiddev(r1, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x38b982, 0x0) 8m32.642006461s ago: executing program 8 (id=11845): syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='setgroups\x00') write$binfmt_script(r3, &(0x7f0000000400)={'#! ', './file0'}, 0xb) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x401, 0x0) write$tcp_mem(r4, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r5, 0x4b52, &(0x7f0000000000)=""/116) ioctl$BINDER_GET_FROZEN_INFO(r4, 0xc00c620f, &(0x7f00000000c0)={r0}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27}, 0x74) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003600), 0x0, 0x0) 8m32.614902521s ago: executing program 1 (id=11846): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblcr\x00'}, 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0cc5605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) process_vm_readv(0x0, 0x0, 0x0, &(0x7f00000019c0), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) socket$can_bcm(0x1d, 0x2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$sysctl(0xffffffffffffffff, &(0x7f0000000000)='1\x00', 0x2) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) 8m31.216958018s ago: executing program 1 (id=11847): r0 = io_uring_setup(0x79af, &(0x7f0000000100)={0x0, 0xaa00, 0x2}) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xa2, &(0x7f0000000140)=""/162, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18b14ebaedf53ee4bf3ad88fe2f78919c282218b0360852fe71d2e41f10705330d20194b81ae89a15278de0000000000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='snd_soc_jack_report\x00', r2, 0x0, 0x100}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'}) ioctl(r5, 0x8b22, &(0x7f0000000040)) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, 0x0, 0x0) 8m28.280971827s ago: executing program 8 (id=11848): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000005880)='zonefs\x00', 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = dup(r8) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0x0, 0x0, @mcast2}, r5}}, 0x48) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r10, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000580)=0x1, r11, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r10, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}, r11}}, 0x48) close_range(r3, r9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7, 0xc9, 0x3}}}, 0x8) getpid() 8m27.903713181s ago: executing program 1 (id=11850): pipe2$9p(&(0x7f0000001900), 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x100fff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) mknod(&(0x7f0000001500)='./file1\x00', 0x0, 0x0) bind$alg(r4, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) r6 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, &(0x7f0000001b40)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r4}}) r7 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000080), 0x12) 8m27.596483539s ago: executing program 1 (id=11851): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000200)=@polexpire={0xd8, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@remote, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {}, {}, 0x0, 0x6e6bb7}}, [@policy_type={0xa}, @mark={0xc}]}, 0xd8}}, 0x0) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000080)='./bus\x00') open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0xf, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 8m26.224476707s ago: executing program 8 (id=11855): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, 0x0) ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') 8m26.023773307s ago: executing program 8 (id=11856): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101102) read(r1, &(0x7f0000000200)=""/213, 0xd5) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) 8m25.614729864s ago: executing program 1 (id=11857): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000055000000080003", @ANYRES32=r4], 0x28}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x84}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 8m25.066367293s ago: executing program 8 (id=11858): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000020000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000003c0)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x25, 0x24, 0x67, 0x0, 0x2, 0x21, 0x0, @dev={0xac, 0x14, 0x14, 0x35}, @rand_addr=0x64010101}, {{0x4e23, 0x4e24, 0x4, 0x1, 0x8, 0x0, 0x0, 0x3, 0x4, "1ddbeb", 0x4, "066263"}}}}}, 0x32) 8m10.166195819s ago: executing program 51 (id=11857): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000055000000080003", @ANYRES32=r4], 0x28}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x84}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 8m9.160107694s ago: executing program 52 (id=11858): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000020000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000003c0)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x25, 0x24, 0x67, 0x0, 0x2, 0x21, 0x0, @dev={0xac, 0x14, 0x14, 0x35}, @rand_addr=0x64010101}, {{0x4e23, 0x4e24, 0x4, 0x1, 0x8, 0x0, 0x0, 0x3, 0x4, "1ddbeb", 0x4, "066263"}}}}}, 0x32) 7m50.742602536s ago: executing program 7 (id=11882): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x1, &(0x7f0000000100)) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001880)={0x4c, r4, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x4c}}, 0x0) 7m49.187218111s ago: executing program 7 (id=11883): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) ioctl$DMA_BUF_SET_NAME_A(r2, 0x40086203, 0x0) 7m49.101699061s ago: executing program 7 (id=11884): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x28, r1, 0x5, 0xfffffffd, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x5f09}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000004}, 0x48000) 7m46.123595005s ago: executing program 7 (id=11886): socket$inet6_sctp(0xa, 0x1, 0x84) dup(0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @private0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x150042}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r3, 0x100) accept4(r3, 0x0, 0x0, 0x0) 7m43.400583703s ago: executing program 7 (id=11889): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x189802) r2 = syz_io_uring_setup(0xeec, &(0x7f0000000780)={0x0, 0x0, 0x10100, 0x0, 0x2}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_WRITEV={0x2, 0x0, 0x6003, @fd=r1, 0xff, &(0x7f00000004c0)=[{0x0}, {0x0}], 0x2, 0x4, 0x1, {0x3}}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) 7m43.361597864s ago: executing program 7 (id=11890): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SENDCALLACCPT(r1, 0x89e9) r2 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000000, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x12, 0x0, @fd, 0x4, {}, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) r7 = dup(r3) listen(r3, 0x9) accept4$vsock_stream(r7, 0x0, 0x0, 0x80000) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, 0x0) unshare(0x40000000) 7m28.102177129s ago: executing program 53 (id=11890): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SENDCALLACCPT(r1, 0x89e9) r2 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000000, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x12, 0x0, @fd, 0x4, {}, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) r7 = dup(r3) listen(r3, 0x9) accept4$vsock_stream(r7, 0x0, 0x0, 0x80000) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, 0x0) unshare(0x40000000) 7m18.310041291s ago: executing program 6 (id=11903): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@empty, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x0, 0x2}, {}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x3507}}, 0xe8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r8, 0x325, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x28) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r9 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r9, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00'}, 0x10) fcntl$getownex(r0, 0x10, &(0x7f00000003c0)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), 0xd0, 0x0, &(0x7f0000000140)="9cf183e705f850563d5a5ef7e902aca1e897a1688fb9f958966a146ab6c67a05a4331b64934776699f991f1fbe80c3abb502516885cd071cdbfefda2a352470f1721b4b861ca5af59cd481979f01a6676f9e22f2a1860e55fb3a81609b7a065910fd2a5a5babc6a7ab40ebbe13d181cf145f679c18ea162644e093edf4938157feff2f349e43f9c838d97cee35d0830b5d0009fbd8abde4e226ac93e0d75414772a4a83eefce62ce0e24ff31590cebff51acb463bca4910b442daf5d5989b8e2ee54bc9cf005dc6e50d24589b385e0b7"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) add_key(&(0x7f0000000340)='encrypted\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f0000000480)="921524a6aae6b17980fb8687a650bec3c3ba81637dd7ac2016bd9dcd327237ca1b296f15d38cda36b9d2d5f2e9f38e572a187922ac271eaf4638ede8822e238beb669b1e15ebdb1b07de17cb8aaefd30b88905b0d32f8c67f827ed9ac49188718e440261abf568a881a2348fc49ed6b225f01d11c1dd654e4b6ffaaa6a4791eb107465a0dba1042c173cb467687e681490d264d98594e2e8eca07a160cdcd601cfd7906420426d3a6953d1e11faaed60286d35ac905a726499d323b649467fd9cba2e8b377ad63ca00109ab89f5a4298ef7524495e", 0xd5, 0xfffffffffffffffb) 7m16.318039421s ago: executing program 6 (id=11904): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2d1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0xc3f3, 0x1, 0x0, 0x0, 0x9, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x3, 0x0, 0x0, 0x0, 0xc0000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x7}}]}}]}, 0x45c}}, 0x0) 7m11.179703326s ago: executing program 6 (id=11905): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_opts(r0, 0x0, 0xf, &(0x7f00000001c0)="00aa", 0x2) 7m11.068735337s ago: executing program 6 (id=11906): r0 = syz_open_dev$usbfs(&(0x7f0000000340), 0x800000001fe, 0x2) dup(r0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x18) fcntl$addseals(r1, 0x409, 0x8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x8}}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 7m10.526513625s ago: executing program 6 (id=11907): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='erofs_destroy_inode\x00', r1, 0x0, 0xfffffffffffffca3}, 0x18) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x44b, 0x70bd2c, 0x0, {0x7a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xe}]}}}]}, 0x44}}, 0x0) 7m9.135920019s ago: executing program 6 (id=11908): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x20, r1, 0x5, 0xfffffffd, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000004}, 0x48000) 6m53.612915921s ago: executing program 54 (id=11908): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x20, r1, 0x5, 0xfffffffd, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000004}, 0x48000) 5.836284813s ago: executing program 0 (id=11977): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r3], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, r4, 0x40083, 0x715cb}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x4}, @IFLA_IPTUN_PROTO={0x5}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) 5.203974997s ago: executing program 0 (id=11978): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newtaction={0x74, 0x30, 0xb, 0x0, 0x0, {}, [{0x60, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) 3.520598871s ago: executing program 0 (id=11979): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1, 0x0, 0xfffffffffffffca3}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x44b, 0x70bd2c, 0x0, {0x7a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xe}]}}}]}, 0x44}}, 0x0) 343.067395ms ago: executing program 0 (id=11980): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SIOCX25SENDCALLACCPT(0xffffffffffffffff, 0x89e9) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000000, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140), 0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x12, 0x0, @fd, 0x4, {}, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 77.491908ms ago: executing program 0 (id=11981): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000580)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = syz_io_uring_setup(0x1f8, 0x0, &(0x7f0000000440), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x5e9, &(0x7f00000017c0), &(0x7f0000000040)=0x0, &(0x7f0000000840)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0xb15, 0x0, 0x0, 0x0, 0x0) r4 = dup2(r0, r0) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f00000003c0)=0x5) 0s ago: executing program 0 (id=11982): syz_usbip_server_init(0x4) syz_usbip_server_init(0x3) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$alg(r0, 0x0, 0x0) syz_usbip_server_init(0x2) syz_usbip_server_init(0x0) syz_usbip_server_init(0x3) syz_usbip_server_init(0x4) syz_usbip_server_init(0x2) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x0, 0x100, 0x4, 0x2, 0x5, 0x3, 0x8, 0x8}) clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0xe, 0xe, 0x0, 0xf, 0xa, 0x0, 0x2, 0x9, 0x2, 0x4, 0x8000000000000000, 0xc, 0x9, 0x7, 0x9, 0x7, 0x3, 0x8, 0xfffffffffffffffa, 0x0, 0x5, 0x8, 0x7, 0x3, 0x7ff}) syz_usbip_server_init(0x2) kernel console output (not intermixed with test programs): gistering): Port device team_slave_1 removed [ 3086.134496][T12446] team0 (unregistering): Port device team_slave_0 removed [ 3086.399763][T10966] Bluetooth: hci0: command tx timeout [ 3086.555853][T12446] team0 (unregistering): Port device team_slave_1 removed [ 3086.603428][T12446] team0 (unregistering): Port device team_slave_0 removed [ 3087.278104][T10966] Bluetooth: hci5: command tx timeout [ 3088.477283][T10966] Bluetooth: hci0: command tx timeout [ 3089.357648][T10966] Bluetooth: hci5: command tx timeout [ 3091.529328][T11361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3091.595112][T11361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3091.689699][T11361] team0: Port device team_slave_0 added [ 3091.701767][T11361] team0: Port device team_slave_1 added [ 3091.861728][T11361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3091.874482][T11361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3091.912835][T11361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3091.934550][T11310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3091.963030][T11361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3091.979229][T11361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3092.018383][T11361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3092.121207][T11337] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 3092.142133][T11337] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 3092.183187][T11361] hsr_slave_0: entered promiscuous mode [ 3092.201539][T11361] hsr_slave_1: entered promiscuous mode [ 3092.273672][T11337] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 3092.334935][T11337] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 3092.450671][T11310] veth0_vlan: entered promiscuous mode [ 3092.554868][T11310] veth1_vlan: entered promiscuous mode [ 3092.566206][T11379] chnl_net:caif_netlink_parms(): no params data found [ 3092.752554][T11382] chnl_net:caif_netlink_parms(): no params data found [ 3095.058640][T12446] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3095.240708][T12446] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3096.500730][T11429] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 3096.513190][T11429] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 3096.522721][T11429] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 3096.535420][T11429] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 3096.546594][T11429] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 3096.557490][T11429] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 3098.637487][T11429] Bluetooth: hci4: command tx timeout [ 3098.936278][T12446] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3099.201607][T12446] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3099.318691][T11379] bridge0: port 1(bridge_slave_0) entered blocking state [ 3099.333422][T11379] bridge0: port 1(bridge_slave_0) entered disabled state [ 3099.354555][T11379] bridge_slave_0: entered allmulticast mode [ 3099.393398][T11379] bridge_slave_0: entered promiscuous mode [ 3099.500888][T11379] bridge0: port 2(bridge_slave_1) entered blocking state [ 3099.529045][T11379] bridge0: port 2(bridge_slave_1) entered disabled state [ 3099.546005][T11379] bridge_slave_1: entered allmulticast mode [ 3099.554976][T11379] bridge_slave_1: entered promiscuous mode [ 3099.713102][T11379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3099.786411][T11379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3099.809360][T11337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3099.849643][T11382] bridge0: port 1(bridge_slave_0) entered blocking state [ 3099.856863][T11382] bridge0: port 1(bridge_slave_0) entered disabled state [ 3099.871830][T11382] bridge_slave_0: entered allmulticast mode [ 3099.882321][T11382] bridge_slave_0: entered promiscuous mode [ 3099.955082][T11382] bridge0: port 2(bridge_slave_1) entered blocking state [ 3099.963843][T11382] bridge0: port 2(bridge_slave_1) entered disabled state [ 3099.977997][T11382] bridge_slave_1: entered allmulticast mode [ 3099.993296][T11382] bridge_slave_1: entered promiscuous mode [ 3100.724263][T11429] Bluetooth: hci4: command tx timeout [ 3102.797274][T11429] Bluetooth: hci4: command tx timeout [ 3102.941141][T11379] team0: Port device team_slave_0 added [ 3102.957355][T11379] team0: Port device team_slave_1 added [ 3103.016404][T11382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3104.877309][T11429] Bluetooth: hci4: command tx timeout [ 3108.195488][T11382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3108.216409][T11337] 8021q: adding VLAN 0 to HW filter on device team0 [ 3108.277623][T11379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3108.284647][T11379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3108.326333][T11379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3108.388354][ T5572] bridge0: port 1(bridge_slave_0) entered blocking state [ 3108.395493][ T5572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3111.534685][T10966] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 3111.547711][T10966] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 3111.556623][T10966] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 3111.564849][T10966] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 3111.572418][T10966] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 3111.579910][T10966] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 3113.597434][T10966] Bluetooth: hci1: command tx timeout [ 3115.677678][T10966] Bluetooth: hci1: command tx timeout [ 3116.966717][T11379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3116.981884][T11379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3117.021690][T11379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3117.042393][T11382] team0: Port device team_slave_0 added [ 3117.075347][ T5572] bridge0: port 2(bridge_slave_1) entered blocking state [ 3117.082515][ T5572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3117.106833][T11361] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 3117.180828][T11382] team0: Port device team_slave_1 added [ 3117.223891][T11361] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 3117.268862][T11361] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 3117.366818][T11361] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 3117.436955][T11379] hsr_slave_0: entered promiscuous mode [ 3117.459787][T11379] hsr_slave_1: entered promiscuous mode [ 3117.486567][T11379] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3117.527695][T11379] Cannot create hsr debugfs directory [ 3117.547353][T11382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3117.554350][T11382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3117.622872][T11382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3117.652742][T11398] chnl_net:caif_netlink_parms(): no params data found [ 3117.703972][T11382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3117.711773][T11382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3117.745261][T11382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3117.774454][T10966] Bluetooth: hci1: command tx timeout [ 3119.837238][T10966] Bluetooth: hci1: command tx timeout [ 3120.525199][T12446] bridge_slave_1: left allmulticast mode [ 3120.537253][T12446] bridge_slave_1: left promiscuous mode [ 3120.542983][T12446] bridge0: port 2(bridge_slave_1) entered disabled state [ 3120.570249][T12446] bridge_slave_0: left allmulticast mode [ 3120.575947][T12446] bridge_slave_0: left promiscuous mode [ 3120.590243][T12446] bridge0: port 1(bridge_slave_0) entered disabled state [ 3120.616007][T12446] bridge_slave_1: left allmulticast mode [ 3120.625528][T12446] bridge_slave_1: left promiscuous mode [ 3120.635043][T12446] bridge0: port 2(bridge_slave_1) entered disabled state [ 3120.665458][T12446] bridge_slave_0: left allmulticast mode [ 3120.675303][T12446] bridge_slave_0: left promiscuous mode [ 3120.686553][T12446] bridge0: port 1(bridge_slave_0) entered disabled state [ 3121.155298][T12446] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3121.178949][T12446] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3121.199903][T12446] bond0 (unregistering): Released all slaves [ 3121.281987][T12446] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3121.305458][T12446] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3121.326277][T12446] bond0 (unregistering): Released all slaves [ 3121.409427][T11382] hsr_slave_0: entered promiscuous mode [ 3121.426523][T11382] hsr_slave_1: entered promiscuous mode [ 3121.436872][T11382] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3121.457253][T11382] Cannot create hsr debugfs directory [ 3121.806753][T11398] bridge0: port 1(bridge_slave_0) entered blocking state [ 3121.814197][T11398] bridge0: port 1(bridge_slave_0) entered disabled state [ 3121.829965][T11398] bridge_slave_0: entered allmulticast mode [ 3121.847334][T11398] bridge_slave_0: entered promiscuous mode [ 3121.855184][T11398] bridge0: port 2(bridge_slave_1) entered blocking state [ 3121.871468][T11398] bridge0: port 2(bridge_slave_1) entered disabled state [ 3121.882155][T11398] bridge_slave_1: entered allmulticast mode [ 3121.901722][T11398] bridge_slave_1: entered promiscuous mode [ 3121.969364][T12446] hsr_slave_0: left promiscuous mode [ 3121.984174][T12446] hsr_slave_1: left promiscuous mode [ 3122.006841][T12446] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3122.015558][T12446] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3122.032421][T12446] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3122.044065][T12446] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3122.069802][T12446] hsr_slave_0: left promiscuous mode [ 3122.082073][T12446] hsr_slave_1: left promiscuous mode [ 3122.097657][T12446] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3122.118579][T12446] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3122.139135][T12446] veth1_macvtap: left promiscuous mode [ 3122.144723][T12446] veth0_macvtap: left promiscuous mode [ 3122.150561][T12446] veth1_vlan: left promiscuous mode [ 3122.155870][T12446] veth0_vlan: left promiscuous mode [ 3122.806161][T11429] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 3122.816678][T11429] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 3122.824732][T11429] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 3122.834796][T11429] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 3122.843074][T11429] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 3122.853844][T11429] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 3122.893950][T12446] team0 (unregistering): Port device team_slave_1 removed [ 3122.936788][T12446] team0 (unregistering): Port device team_slave_0 removed [ 3123.355560][T12446] team0 (unregistering): Port device team_slave_1 removed [ 3123.396585][T12446] team0 (unregistering): Port device team_slave_0 removed [ 3123.773400][T11398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3123.952288][T11398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3124.125409][T11398] team0: Port device team_slave_0 added [ 3124.877647][T11429] Bluetooth: hci2: command tx timeout [ 3125.883785][T11398] team0: Port device team_slave_1 added [ 3125.909895][T11406] chnl_net:caif_netlink_parms(): no params data found [ 3126.034565][T11398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3126.049399][T11398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3126.084730][T11398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3126.115682][T11398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3126.130030][T11398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3126.162976][T11398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3126.355200][T11398] hsr_slave_0: entered promiscuous mode [ 3126.370883][T11398] hsr_slave_1: entered promiscuous mode [ 3126.385791][T11398] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3126.399480][T11398] Cannot create hsr debugfs directory [ 3126.505230][T11406] bridge0: port 1(bridge_slave_0) entered blocking state [ 3126.524680][T11406] bridge0: port 1(bridge_slave_0) entered disabled state [ 3126.534253][T11406] bridge_slave_0: entered allmulticast mode [ 3126.552338][T11406] bridge_slave_0: entered promiscuous mode [ 3126.610770][T11406] bridge0: port 2(bridge_slave_1) entered blocking state [ 3126.622367][T11406] bridge0: port 2(bridge_slave_1) entered disabled state [ 3126.634420][T11406] bridge_slave_1: entered allmulticast mode [ 3126.645427][T11406] bridge_slave_1: entered promiscuous mode [ 3126.786498][T11406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3126.833406][T11406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3126.967371][T11429] Bluetooth: hci2: command tx timeout [ 3127.006786][T11406] team0: Port device team_slave_0 added [ 3127.036182][T11414] chnl_net:caif_netlink_parms(): no params data found [ 3127.100258][T11406] team0: Port device team_slave_1 added [ 3127.118525][T11382] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 3127.207286][T11382] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 3127.254795][T11406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3127.266586][T11406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3127.301813][T11406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3127.318977][T11382] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 3127.357611][T11406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3127.365392][T11406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3127.397663][T11406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3127.423332][T11382] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 3129.037411][T11429] Bluetooth: hci2: command tx timeout [ 3130.035397][T11414] bridge0: port 1(bridge_slave_0) entered blocking state [ 3130.046284][T11414] bridge0: port 1(bridge_slave_0) entered disabled state [ 3130.060374][T11414] bridge_slave_0: entered allmulticast mode [ 3130.071452][T11414] bridge_slave_0: entered promiscuous mode [ 3130.085988][T11379] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 3130.133610][T11406] hsr_slave_0: entered promiscuous mode [ 3130.148286][T11406] hsr_slave_1: entered promiscuous mode [ 3130.159820][T11406] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3130.174202][T11406] Cannot create hsr debugfs directory [ 3131.117268][T11429] Bluetooth: hci2: command tx timeout [ 3139.473134][T11414] bridge0: port 2(bridge_slave_1) entered blocking state [ 3139.483310][T11414] bridge0: port 2(bridge_slave_1) entered disabled state [ 3139.494761][T11414] bridge_slave_1: entered allmulticast mode [ 3139.604996][T11414] bridge_slave_1: entered promiscuous mode [ 3139.650961][T11379] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 3139.952157][T11379] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 3140.974297][T10966] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 3140.982820][T10966] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 3140.996506][T10966] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 3141.006194][T10966] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 3141.021173][T10966] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 3141.032293][T10966] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 3141.482783][T11429] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 3141.490284][T11429] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 3141.497750][T11429] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 3141.506438][T11429] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 3141.513983][T11429] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 3141.521459][T11429] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 3143.117675][T11429] Bluetooth: hci3: command tx timeout [ 3143.217595][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 3143.597959][T11429] Bluetooth: hci6: command tx timeout [ 3145.197478][T11429] Bluetooth: hci3: command tx timeout [ 3145.677391][T11429] Bluetooth: hci6: command tx timeout [ 3145.788721][T11379] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 3147.280998][T11429] Bluetooth: hci3: command tx timeout [ 3147.757219][T11429] Bluetooth: hci6: command tx timeout [ 3149.172884][T11414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3149.262817][T11414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3149.358360][T11429] Bluetooth: hci3: command tx timeout [ 3149.441036][T11414] team0: Port device team_slave_0 added [ 3149.503614][T11414] team0: Port device team_slave_1 added [ 3149.641704][T11414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3149.656688][T11414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3149.687693][T11414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3149.733283][T11398] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 3149.775893][T11414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3149.790011][T11414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3149.825177][T11414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3149.847405][T11429] Bluetooth: hci6: command tx timeout [ 3149.902802][T11398] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 3149.993194][T11398] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 3150.016201][T11398] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 3150.102859][T11414] hsr_slave_0: entered promiscuous mode [ 3150.119795][T11414] hsr_slave_1: entered promiscuous mode [ 3150.127425][T11414] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3150.141312][T11414] Cannot create hsr debugfs directory [ 3150.269471][T11398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3150.284589][T11398] 8021q: adding VLAN 0 to HW filter on device team0 [ 3150.316159][T11398] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3150.327899][T11398] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3150.373372][ T1010] bridge0: port 1(bridge_slave_0) entered blocking state [ 3150.380542][ T1010] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3150.391773][ T1010] bridge0: port 2(bridge_slave_1) entered blocking state [ 3150.398930][ T1010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3150.756803][T11432] chnl_net:caif_netlink_parms(): no params data found [ 3150.823604][T11428] chnl_net:caif_netlink_parms(): no params data found [ 3150.906631][T12446] bridge_slave_1: left allmulticast mode [ 3150.916802][T12446] bridge_slave_1: left promiscuous mode [ 3150.931435][T12446] bridge0: port 2(bridge_slave_1) entered disabled state [ 3150.951578][T12446] bridge_slave_0: left allmulticast mode [ 3150.967707][T12446] bridge_slave_0: left promiscuous mode [ 3150.974566][T12446] bridge0: port 1(bridge_slave_0) entered disabled state [ 3150.994799][T12446] bridge_slave_1: left allmulticast mode [ 3151.003826][T12446] bridge_slave_1: left promiscuous mode [ 3151.014795][T12446] bridge0: port 2(bridge_slave_1) entered disabled state [ 3151.044455][T12446] bridge_slave_0: left allmulticast mode [ 3151.052538][T12446] bridge_slave_0: left promiscuous mode [ 3151.064115][T12446] bridge0: port 1(bridge_slave_0) entered disabled state [ 3151.086739][T12446] bridge_slave_1: left allmulticast mode [ 3151.094626][T12446] bridge_slave_1: left promiscuous mode [ 3151.105697][T12446] bridge0: port 2(bridge_slave_1) entered disabled state [ 3151.124202][T12446] bridge_slave_0: left allmulticast mode [ 3151.135456][T12446] bridge_slave_0: left promiscuous mode [ 3151.145210][T12446] bridge0: port 1(bridge_slave_0) entered disabled state [ 3157.330891][T10966] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 3157.340051][T10966] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 3157.347420][T10966] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 3157.355123][T10966] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 3157.364119][T10966] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 3157.371434][T10966] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 3159.437340][T10966] Bluetooth: hci0: command tx timeout [ 3159.736653][T12446] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3159.764118][T12446] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3159.786530][T12446] bond0 (unregistering): Released all slaves [ 3159.873082][T12446] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3159.905100][T12446] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3159.926731][T12446] bond0 (unregistering): Released all slaves [ 3160.009454][T12446] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3160.032870][T12446] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3160.053518][T12446] bond0 (unregistering): Released all slaves [ 3160.152097][T11398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3161.518192][T10966] Bluetooth: hci0: command tx timeout [ 3163.011443][T12446] hsr_slave_0: left promiscuous mode [ 3163.030704][T12446] hsr_slave_1: left promiscuous mode [ 3163.045046][T12446] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3163.070408][T12446] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3163.112583][T12446] hsr_slave_0: left promiscuous mode [ 3163.135149][T12446] hsr_slave_1: left promiscuous mode [ 3163.159759][T12446] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3163.180478][T12446] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3163.221007][T12446] hsr_slave_0: left promiscuous mode [ 3163.240151][T12446] hsr_slave_1: left promiscuous mode [ 3163.252835][T12446] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3163.266075][T12446] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3163.293502][T12446] veth1_vlan: left promiscuous mode [ 3163.305287][T12446] veth0_vlan: left promiscuous mode [ 3163.597445][T10966] Bluetooth: hci0: command tx timeout [ 3165.677462][T10966] Bluetooth: hci0: command tx timeout [ 3168.594284][T12446] team0 (unregistering): Port device team_slave_1 removed [ 3168.639784][T12446] team0 (unregistering): Port device team_slave_0 removed [ 3169.002230][T12446] team0 (unregistering): Port device team_slave_1 removed [ 3169.078518][T12446] team0 (unregistering): Port device team_slave_0 removed [ 3169.741581][T12446] team0 (unregistering): Port device team_slave_1 removed [ 3169.790270][T12446] team0 (unregistering): Port device team_slave_0 removed [ 3172.196338][T11453] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 3172.211893][T11453] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 3172.226140][T11453] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 3172.234108][T11453] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 3172.242974][T11453] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 3172.250288][T11453] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 3174.318040][T11453] Bluetooth: hci4: command tx timeout [ 3175.393897][T11432] bridge0: port 1(bridge_slave_0) entered blocking state [ 3175.411010][T11432] bridge0: port 1(bridge_slave_0) entered disabled state [ 3175.421873][T11432] bridge_slave_0: entered allmulticast mode [ 3175.436646][T11432] bridge_slave_0: entered promiscuous mode [ 3175.494393][T11432] bridge0: port 2(bridge_slave_1) entered blocking state [ 3175.522879][T11432] bridge0: port 2(bridge_slave_1) entered disabled state [ 3175.537966][T11432] bridge_slave_1: entered allmulticast mode [ 3175.545978][T11432] bridge_slave_1: entered promiscuous mode [ 3175.680604][T11432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3175.695743][T11428] bridge0: port 1(bridge_slave_0) entered blocking state [ 3175.713603][T11428] bridge0: port 1(bridge_slave_0) entered disabled state [ 3175.724416][T11428] bridge_slave_0: entered allmulticast mode [ 3175.743082][T11428] bridge_slave_0: entered promiscuous mode [ 3175.764799][T11428] bridge0: port 2(bridge_slave_1) entered blocking state [ 3175.775850][T11428] bridge0: port 2(bridge_slave_1) entered disabled state [ 3175.794117][T11428] bridge_slave_1: entered allmulticast mode [ 3175.808150][T11428] bridge_slave_1: entered promiscuous mode [ 3175.843662][T11432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3176.062157][T11432] team0: Port device team_slave_0 added [ 3176.128710][T11428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3176.208379][T11432] team0: Port device team_slave_1 added [ 3176.246641][T11428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3176.404557][T11453] Bluetooth: hci4: command tx timeout [ 3178.477302][T11453] Bluetooth: hci4: command tx timeout [ 3180.557340][T11453] Bluetooth: hci4: command tx timeout [ 3183.406541][T10966] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 3183.417295][T10966] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 3183.424562][T10966] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 3183.433903][T10966] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 3183.443425][T10966] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 3183.450772][T10966] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 3185.517334][T11453] Bluetooth: hci1: command tx timeout [ 3187.597304][T11453] Bluetooth: hci1: command tx timeout [ 3189.677943][T11453] Bluetooth: hci1: command tx timeout [ 3191.757271][T11453] Bluetooth: hci1: command tx timeout [ 3196.298902][T11432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3196.305897][T11432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3196.343548][T11432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3196.388588][T11428] team0: Port device team_slave_0 added [ 3196.396375][T11428] team0: Port device team_slave_1 added [ 3196.444044][T11432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3196.461430][T11432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3196.523873][T11432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3196.779485][T11428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3196.786542][T11428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3196.858686][T11428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3196.901901][T11432] hsr_slave_0: entered promiscuous mode [ 3196.914904][T11432] hsr_slave_1: entered promiscuous mode [ 3201.734120][T10966] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 3201.748718][T10966] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 3201.756190][T10966] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 3201.771829][T10966] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 3201.782152][T10966] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 3201.799539][T10966] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 3202.293151][T11453] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 3202.301667][T11453] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 3202.309424][T11453] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 3202.317129][T11453] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 3202.324587][T11453] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 3202.332828][T11453] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 3203.837368][T11453] Bluetooth: hci2: command tx timeout [ 3204.403220][T11453] Bluetooth: hci5: command tx timeout [ 3204.641852][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 3205.571275][T11428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3205.580841][T11428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3205.613584][T11428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3205.927894][T11453] Bluetooth: hci2: command tx timeout [ 3206.132322][T11452] chnl_net:caif_netlink_parms(): no params data found [ 3206.292871][T11446] chnl_net:caif_netlink_parms(): no params data found [ 3206.477460][T11453] Bluetooth: hci5: command tx timeout [ 3207.997073][T11453] Bluetooth: hci2: command tx timeout [ 3208.557385][T11453] Bluetooth: hci5: command tx timeout [ 3210.077235][T11453] Bluetooth: hci2: command tx timeout [ 3210.644006][T11453] Bluetooth: hci5: command tx timeout [ 3214.440090][T11452] bridge0: port 1(bridge_slave_0) entered blocking state [ 3214.454229][T11452] bridge0: port 1(bridge_slave_0) entered disabled state [ 3214.463617][T11452] bridge_slave_0: entered allmulticast mode [ 3214.478668][T11452] bridge_slave_0: entered promiscuous mode [ 3214.499492][T11452] bridge0: port 2(bridge_slave_1) entered blocking state [ 3214.506626][T11452] bridge0: port 2(bridge_slave_1) entered disabled state [ 3214.545911][T11452] bridge_slave_1: entered allmulticast mode [ 3214.570369][T11452] bridge_slave_1: entered promiscuous mode [ 3218.548111][T10966] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 3218.557847][T10966] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 3218.565870][T10966] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 3218.574523][T10966] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 3218.582115][T10966] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 3218.589406][T10966] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 3220.637766][T10966] Bluetooth: hci0: command tx timeout [ 3222.717476][T10966] Bluetooth: hci0: command tx timeout [ 3223.491343][T11458] chnl_net:caif_netlink_parms(): no params data found [ 3223.702499][T11452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3223.821547][T11452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3224.034259][T11463] chnl_net:caif_netlink_parms(): no params data found [ 3224.063493][T11452] team0: Port device team_slave_0 added [ 3224.169509][T11452] team0: Port device team_slave_1 added [ 3224.304311][T11466] chnl_net:caif_netlink_parms(): no params data found [ 3224.353188][T11458] bridge0: port 1(bridge_slave_0) entered blocking state [ 3224.370429][T11458] bridge0: port 1(bridge_slave_0) entered disabled state [ 3224.383250][T11458] bridge_slave_0: entered allmulticast mode [ 3224.396539][T11458] bridge_slave_0: entered promiscuous mode [ 3224.413117][T11458] bridge0: port 2(bridge_slave_1) entered blocking state [ 3224.424066][T11458] bridge0: port 2(bridge_slave_1) entered disabled state [ 3224.442700][T11458] bridge_slave_1: entered allmulticast mode [ 3224.455335][T11458] bridge_slave_1: entered promiscuous mode [ 3224.584697][T11452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3224.606907][T11452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3224.646765][T11452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3224.716628][T11458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3224.741557][T11458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3224.787243][T11452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3224.797834][T10966] Bluetooth: hci0: command tx timeout [ 3224.810678][T11452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3224.847504][T11452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3224.943944][T11463] bridge0: port 1(bridge_slave_0) entered blocking state [ 3224.956744][T11463] bridge0: port 1(bridge_slave_0) entered disabled state [ 3224.975049][T11463] bridge_slave_0: entered allmulticast mode [ 3224.983507][T11463] bridge_slave_0: entered promiscuous mode [ 3225.000357][T11463] bridge0: port 2(bridge_slave_1) entered blocking state [ 3225.018174][T11463] bridge0: port 2(bridge_slave_1) entered disabled state [ 3225.025586][T11463] bridge_slave_1: entered allmulticast mode [ 3225.035945][T11463] bridge_slave_1: entered promiscuous mode [ 3225.127898][T11458] team0: Port device team_slave_0 added [ 3225.220725][T11452] hsr_slave_0: entered promiscuous mode [ 3225.242526][T11452] hsr_slave_1: entered promiscuous mode [ 3225.259483][T11452] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3225.273133][T11452] Cannot create hsr debugfs directory [ 3225.293358][T11458] team0: Port device team_slave_1 added [ 3225.337590][T11463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3225.465629][T11463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3225.581471][T11466] bridge0: port 1(bridge_slave_0) entered blocking state [ 3225.597643][T11466] bridge0: port 1(bridge_slave_0) entered disabled state [ 3225.605108][T11466] bridge_slave_0: entered allmulticast mode [ 3225.623377][T11466] bridge_slave_0: entered promiscuous mode [ 3225.636919][T11458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3225.654470][T11458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3225.691897][T11458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3225.761287][T11463] team0: Port device team_slave_0 added [ 3225.789509][T11466] bridge0: port 2(bridge_slave_1) entered blocking state [ 3225.806869][T11466] bridge0: port 2(bridge_slave_1) entered disabled state [ 3225.816847][T11466] bridge_slave_1: entered allmulticast mode [ 3225.836826][T11466] bridge_slave_1: entered promiscuous mode [ 3225.854490][T11458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3225.864166][T11458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3225.899757][T11458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3225.940785][T11463] team0: Port device team_slave_1 added [ 3225.950375][T11485] chnl_net:caif_netlink_parms(): no params data found [ 3226.088489][T11466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3226.877288][T10966] Bluetooth: hci0: command tx timeout [ 3227.374063][T11466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3227.429802][T11458] hsr_slave_0: entered promiscuous mode [ 3227.448214][T11458] hsr_slave_1: entered promiscuous mode [ 3227.461214][T11458] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3227.474999][T11458] Cannot create hsr debugfs directory [ 3227.486742][T11463] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3227.503238][T11463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3227.538459][T11463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3227.666323][T11463] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3227.687916][T11463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3227.727850][T11463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3227.861821][T11466] team0: Port device team_slave_0 added [ 3227.959009][T11466] team0: Port device team_slave_1 added [ 3227.981360][T11463] hsr_slave_0: entered promiscuous mode [ 3227.995494][T11463] hsr_slave_1: entered promiscuous mode [ 3228.019901][T11463] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3228.036039][T11463] Cannot create hsr debugfs directory [ 3228.203548][T11485] bridge0: port 1(bridge_slave_0) entered blocking state [ 3228.216169][T11485] bridge0: port 1(bridge_slave_0) entered disabled state [ 3228.227633][T11485] bridge_slave_0: entered allmulticast mode [ 3228.244396][T11485] bridge_slave_0: entered promiscuous mode [ 3228.277657][T11466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3228.294885][T11466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3228.341130][T11466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3228.420508][T11485] bridge0: port 2(bridge_slave_1) entered blocking state [ 3228.438353][T11485] bridge0: port 2(bridge_slave_1) entered disabled state [ 3228.445846][T11485] bridge_slave_1: entered allmulticast mode [ 3228.461703][T11485] bridge_slave_1: entered promiscuous mode [ 3228.490789][T11466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3228.507352][T11466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3228.542919][T11466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3228.676661][T12446] bridge_slave_1: left allmulticast mode [ 3228.685790][T12446] bridge_slave_1: left promiscuous mode [ 3228.697322][T12446] bridge0: port 2(bridge_slave_1) entered disabled state [ 3228.722061][T12446] bridge_slave_0: left allmulticast mode [ 3228.734285][T12446] bridge_slave_0: left promiscuous mode [ 3228.742791][T12446] bridge0: port 1(bridge_slave_0) entered disabled state [ 3228.766644][T12446] bridge_slave_1: left allmulticast mode [ 3228.777126][T12446] bridge_slave_1: left promiscuous mode [ 3228.782849][T12446] bridge0: port 2(bridge_slave_1) entered disabled state [ 3228.806485][T12446] bridge_slave_0: left allmulticast mode [ 3228.817167][T12446] bridge_slave_0: left promiscuous mode [ 3228.822967][T12446] bridge0: port 1(bridge_slave_0) entered disabled state [ 3228.843903][T12446] bridge_slave_1: left allmulticast mode [ 3228.856081][T12446] bridge_slave_1: left promiscuous mode [ 3228.864083][T12446] bridge0: port 2(bridge_slave_1) entered disabled state [ 3228.892559][T12446] bridge_slave_0: left allmulticast mode [ 3228.904736][T12446] bridge_slave_0: left promiscuous mode [ 3228.914579][T12446] bridge0: port 1(bridge_slave_0) entered disabled state [ 3228.938341][T12446] bridge_slave_1: left allmulticast mode [ 3228.944060][T12446] bridge_slave_1: left promiscuous mode [ 3228.962979][T12446] bridge0: port 2(bridge_slave_1) entered disabled state [ 3228.982971][T12446] bridge_slave_0: left allmulticast mode [ 3228.994093][T12446] bridge_slave_0: left promiscuous mode [ 3229.004316][T12446] bridge0: port 1(bridge_slave_0) entered disabled state [ 3229.024968][T12446] bridge_slave_1: left allmulticast mode [ 3229.032712][T12446] bridge_slave_1: left promiscuous mode [ 3229.047237][T12446] bridge0: port 2(bridge_slave_1) entered disabled state [ 3229.069673][T12446] bridge_slave_0: left allmulticast mode [ 3229.075485][T12446] bridge_slave_0: left promiscuous mode [ 3229.089734][T12446] bridge0: port 1(bridge_slave_0) entered disabled state [ 3229.706675][T12446] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3229.731427][T12446] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3229.755769][T12446] bond0 (unregistering): Released all slaves [ 3229.783615][T12446] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3229.811817][T12446] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3229.843165][T12446] bond0 (unregistering): Released all slaves [ 3229.934916][T12446] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3229.964322][T12446] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3229.989321][T12446] bond0 (unregistering): Released all slaves [ 3230.010744][T12446] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3230.035690][T12446] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3230.060037][T12446] bond0 (unregistering): Released all slaves [ 3230.089181][T12446] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3230.113156][T12446] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3230.138825][T12446] bond0 (unregistering): Released all slaves [ 3230.180087][T11485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3230.218353][T11485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3230.303120][T11452] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 3230.325369][T11452] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 3230.447454][T11452] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 3230.524370][T12446] hsr_slave_0: left promiscuous mode [ 3230.548796][T12446] hsr_slave_1: left promiscuous mode [ 3230.565098][T12446] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3230.584519][T12446] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3230.623499][T12446] hsr_slave_0: left promiscuous mode [ 3230.638840][T12446] hsr_slave_1: left promiscuous mode [ 3230.663184][T12446] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3230.678547][T12446] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3230.711426][T12446] hsr_slave_0: left promiscuous mode [ 3230.727486][T12446] hsr_slave_1: left promiscuous mode [ 3230.747740][T12446] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3230.767720][T12446] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3230.795822][T12446] hsr_slave_0: left promiscuous mode [ 3230.815429][T12446] hsr_slave_1: left promiscuous mode [ 3230.832014][T12446] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3230.849898][T12446] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3230.884893][T12446] hsr_slave_0: left promiscuous mode [ 3230.900364][T12446] hsr_slave_1: left promiscuous mode [ 3230.915736][T12446] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3230.933998][T12446] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3231.205060][T12446] team0 (unregistering): Port device team_slave_1 removed [ 3231.245114][T12446] team0 (unregistering): Port device team_slave_0 removed [ 3231.566405][T12446] team0 (unregistering): Port device team_slave_1 removed [ 3231.598341][T12446] team0 (unregistering): Port device team_slave_0 removed [ 3231.914670][T12446] team0 (unregistering): Port device team_slave_1 removed [ 3231.961043][T12446] team0 (unregistering): Port device team_slave_0 removed [ 3232.418924][T12446] team0 (unregistering): Port device team_slave_1 removed [ 3232.446393][T12446] team0 (unregistering): Port device team_slave_0 removed [ 3232.762152][T12446] team0 (unregistering): Port device team_slave_1 removed [ 3232.813639][T12446] team0 (unregistering): Port device team_slave_0 removed [ 3232.976318][T11485] team0: Port device team_slave_0 added [ 3233.018340][T11485] team0: Port device team_slave_1 added [ 3233.081434][T11452] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 3233.190033][T11466] hsr_slave_0: entered promiscuous mode [ 3233.217412][T11466] hsr_slave_1: entered promiscuous mode [ 3233.260063][T11466] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3233.297516][T11466] Cannot create hsr debugfs directory [ 3233.553142][T11485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3233.607309][T11485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3233.683959][T11485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3233.695118][T11453] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 3233.705456][T11453] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 3233.723506][T11453] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 3233.734733][T11453] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 3233.747729][T11453] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 3233.755911][T11453] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 3233.785813][T11485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3233.795805][T11485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3233.833213][T11485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3233.972615][T11458] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 3234.080330][T11485] hsr_slave_0: entered promiscuous mode [ 3234.098168][T11485] hsr_slave_1: entered promiscuous mode [ 3234.115983][T11485] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3234.126865][T11485] Cannot create hsr debugfs directory [ 3234.152986][T11458] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 3234.229529][T11458] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 3234.240181][T11458] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 3235.837276][T11453] Bluetooth: hci3: command tx timeout [ 3237.122689][T11458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3237.175390][T11458] 8021q: adding VLAN 0 to HW filter on device team0 [ 3237.231600][T11506] chnl_net:caif_netlink_parms(): no params data found [ 3237.254064][ T4977] bridge0: port 1(bridge_slave_0) entered blocking state [ 3237.261239][ T4977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3237.336836][ T4977] bridge0: port 2(bridge_slave_1) entered blocking state [ 3237.344019][ T4977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3237.565192][T11506] bridge0: port 1(bridge_slave_0) entered blocking state [ 3237.584526][T11506] bridge0: port 1(bridge_slave_0) entered disabled state [ 3237.615255][T11506] bridge_slave_0: entered allmulticast mode [ 3237.625946][T11506] bridge_slave_0: entered promiscuous mode [ 3237.678255][T11506] bridge0: port 2(bridge_slave_1) entered blocking state [ 3237.685391][T11506] bridge0: port 2(bridge_slave_1) entered disabled state [ 3237.713614][T11506] bridge_slave_1: entered allmulticast mode [ 3237.742687][T11506] bridge_slave_1: entered promiscuous mode [ 3237.778641][T11466] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 3237.878615][T11466] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 3237.905034][T11506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3237.917460][T11453] Bluetooth: hci3: command tx timeout [ 3237.945577][T11466] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 3237.973372][T11506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3238.000703][T11466] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 3238.100221][T11506] team0: Port device team_slave_0 added [ 3238.119939][T11506] team0: Port device team_slave_1 added [ 3238.141941][T11458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3239.997223][T11453] Bluetooth: hci3: command tx timeout [ 3240.522791][T11463] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 3240.544881][T11463] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 3240.679455][T11463] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 3240.720504][T11463] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 3240.752255][T11506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3240.772925][T11506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3240.808587][T11506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3240.887363][T11506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3240.894361][T11506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3240.986194][T11506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3241.312701][T11466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3241.334415][T11506] hsr_slave_0: entered promiscuous mode [ 3241.351832][T11506] hsr_slave_1: entered promiscuous mode [ 3241.368612][T11506] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3241.376212][T11506] Cannot create hsr debugfs directory [ 3241.495703][T11458] veth0_vlan: entered promiscuous mode [ 3241.581516][T11466] 8021q: adding VLAN 0 to HW filter on device team0 [ 3241.623049][T11485] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 3241.694641][T11458] veth1_vlan: entered promiscuous mode [ 3241.713361][T11485] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 3241.734867][T11485] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 3241.796408][T11485] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 3241.825692][ T1331] bridge0: port 1(bridge_slave_0) entered blocking state [ 3241.832865][ T1331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3241.884211][ T1331] bridge0: port 2(bridge_slave_1) entered blocking state [ 3241.891395][ T1331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3242.065654][T11463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3242.077633][T11453] Bluetooth: hci3: command tx timeout [ 3242.136012][T12446] bridge_slave_1: left allmulticast mode [ 3242.144881][T12446] bridge_slave_1: left promiscuous mode [ 3242.156704][T12446] bridge0: port 2(bridge_slave_1) entered disabled state [ 3242.181932][T12446] bridge_slave_0: left allmulticast mode [ 3242.196074][T12446] bridge_slave_0: left promiscuous mode [ 3242.203180][T12446] bridge0: port 1(bridge_slave_0) entered disabled state [ 3242.225595][T12446] bridge_slave_1: left allmulticast mode [ 3242.236731][T12446] bridge_slave_1: left promiscuous mode [ 3242.246099][T12446] bridge0: port 2(bridge_slave_1) entered disabled state [ 3242.266000][T12446] bridge_slave_0: left allmulticast mode [ 3242.274277][T12446] bridge_slave_0: left promiscuous mode [ 3242.282995][T12446] bridge0: port 1(bridge_slave_0) entered disabled state [ 3242.304116][T12446] bridge_slave_1: left allmulticast mode [ 3242.316176][T12446] bridge_slave_1: left promiscuous mode [ 3242.329163][T12446] bridge0: port 2(bridge_slave_1) entered disabled state [ 3242.349583][T12446] bridge_slave_0: left allmulticast mode [ 3242.355331][T12446] bridge_slave_0: left promiscuous mode [ 3242.368034][T12446] bridge0: port 1(bridge_slave_0) entered disabled state [ 3242.760776][T12446] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3242.783435][T12446] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3242.816344][T12446] bond0 (unregistering): Released all slaves [ 3242.836392][T12446] bond0 (unregistering): Released all slaves [ 3242.887628][T12446] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3242.913904][T12446] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3242.935744][T12446] bond0 (unregistering): Released all slaves [ 3242.955996][T12446] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3242.978782][T12446] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3243.002798][T12446] bond0 (unregistering): Released all slaves [ 3243.040641][T11466] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3243.291039][T11463] 8021q: adding VLAN 0 to HW filter on device team0 [ 3243.377925][T12446] hsr_slave_0: left promiscuous mode [ 3243.407607][T12446] hsr_slave_1: left promiscuous mode [ 3243.457653][T12446] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3243.485169][T12446] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3243.527621][T12446] hsr_slave_0: left promiscuous mode [ 3243.583866][T12446] hsr_slave_1: left promiscuous mode [ 3243.632015][T12446] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3243.653970][T12446] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3243.679358][T12446] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3243.704911][T12446] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3243.916120][T10966] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 3243.925532][T10966] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 3243.940993][T10966] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 3243.955902][T10966] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 3243.971950][T10966] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 3243.983296][T10966] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 3246.077548][T10966] Bluetooth: hci1: command tx timeout [ 3248.161206][T10966] Bluetooth: hci1: command tx timeout [ 3250.237539][T10966] Bluetooth: hci1: command tx timeout [ 3250.409891][T12446] team0 (unregistering): Port device team_slave_1 removed [ 3250.442711][T12446] team0 (unregistering): Port device team_slave_0 removed [ 3250.735851][T12446] team0 (unregistering): Port device team_slave_1 removed [ 3250.772049][T12446] team0 (unregistering): Port device team_slave_0 removed [ 3250.963158][T12446] team0 (unregistering): Port device team_slave_1 removed [ 3250.996131][T12446] team0 (unregistering): Port device team_slave_0 removed [ 3251.228823][T14162] bridge0: port 1(bridge_slave_0) entered blocking state [ 3251.235986][T14162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3252.317238][T10966] Bluetooth: hci1: command tx timeout [ 3253.602985][ T4977] bridge0: port 2(bridge_slave_1) entered blocking state [ 3253.610166][ T4977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3253.690570][T11466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3253.836429][T11485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3253.952944][T11506] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 3253.987977][T11506] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 3254.058915][T11485] 8021q: adding VLAN 0 to HW filter on device team0 [ 3254.083811][T11506] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 3254.113690][T11506] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 3254.160509][T11466] veth0_vlan: entered promiscuous mode [ 3254.184425][ T2840] bridge0: port 1(bridge_slave_0) entered blocking state [ 3254.191596][ T2840] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3254.259680][T11466] veth1_vlan: entered promiscuous mode [ 3254.279623][ T2840] bridge0: port 2(bridge_slave_1) entered blocking state [ 3254.286761][ T2840] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3254.400601][T11463] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3254.504622][T11466] veth0_macvtap: entered promiscuous mode [ 3254.566664][T11466] veth1_macvtap: entered promiscuous mode [ 3254.652017][T11466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3254.671837][T11466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3254.724676][T11466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3254.742836][T11466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3254.754144][T11466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3254.773035][T11466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3254.784343][T11466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3254.799610][T11466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3254.811070][T11466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3254.821717][T11466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3254.831677][T11466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3254.843577][T11466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3254.862101][T11466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3254.875410][T11466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3254.897676][T11466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3254.916067][T11466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3254.929145][T11466] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3254.987549][T11466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3255.017048][T11466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3255.052846][T11466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3255.094464][T11466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3255.106217][T11466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3255.128994][T11466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3255.146136][T11466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3255.157230][T11466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3255.172793][T11466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3255.184448][T11466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3255.206997][T11466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3255.226612][T11466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3255.236725][T11466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3255.255243][T11466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3255.274221][T11466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3255.314430][T11466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3255.334760][T11466] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3255.414169][T11466] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3255.436665][T11466] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3255.454512][T11466] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3255.464194][T11466] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3255.539268][T11485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3255.681192][T11527] chnl_net:caif_netlink_parms(): no params data found [ 3255.952836][ T2840] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3255.984463][T11506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3255.991568][ T2840] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3256.064567][T11463] veth0_vlan: entered promiscuous mode [ 3256.252481][T11463] veth1_vlan: entered promiscuous mode [ 3256.269495][T11506] 8021q: adding VLAN 0 to HW filter on device team0 [ 3256.305986][ T4977] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3256.346373][ T4977] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3256.389300][ T5572] bridge0: port 1(bridge_slave_0) entered blocking state [ 3256.396437][ T5572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3256.406542][ T5572] bridge0: port 2(bridge_slave_1) entered blocking state [ 3256.413690][ T5572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3256.513686][T11485] veth0_vlan: entered promiscuous mode [ 3256.554675][T11527] bridge0: port 1(bridge_slave_0) entered blocking state [ 3256.582190][T11527] bridge0: port 1(bridge_slave_0) entered disabled state [ 3256.597976][T11527] bridge_slave_0: entered allmulticast mode [ 3256.757133][T11527] bridge_slave_0: entered promiscuous mode [ 3256.801065][T11527] bridge0: port 2(bridge_slave_1) entered blocking state [ 3256.817528][T11527] bridge0: port 2(bridge_slave_1) entered disabled state [ 3256.826494][T11527] bridge_slave_1: entered allmulticast mode [ 3256.841947][T11527] bridge_slave_1: entered promiscuous mode [ 3256.879668][T11485] veth1_vlan: entered promiscuous mode [ 3256.892772][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 3256.892793][ T29] audit: type=1326 audit(1735407215.855:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11552 comm="syz.0.11868" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcfbd785d29 code=0x0 [ 3257.031648][T11463] veth0_macvtap: entered promiscuous mode [ 3257.112068][T11527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3257.189835][T11527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3257.255645][T11463] veth1_macvtap: entered promiscuous mode [ 3257.379461][T11527] team0: Port device team_slave_0 added [ 3257.480981][T11527] team0: Port device team_slave_1 added [ 3257.603248][T11527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3257.623190][T11527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3257.655483][T11527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3257.689550][T11463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3257.725112][T11463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3257.747436][T11463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3257.786365][T11463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3257.810290][T11463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3257.827713][T11463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3257.844424][T11463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3257.855683][T11463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3257.871612][T11463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3257.886096][T11463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3257.904300][T11463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3257.915917][T11463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3257.934274][T11463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3257.945837][T11463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3257.960534][T11463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3257.973683][T11463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3257.991557][T11463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3258.020214][T11463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3258.034444][T11463] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3258.076420][T11527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3258.104457][T11527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3258.289064][T11527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3258.326174][T11485] veth0_macvtap: entered promiscuous mode [ 3258.370090][T11463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3258.394156][T11463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3258.410226][T11463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3258.429677][T11564] trusted_key: encrypted_key: master key parameter '2r7)oӌ6W*y"'F8.#fˊ0/g'đqDah4Ğֲ%eNKojGteۡ, 1 [ 3263.196051][T11453] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 3263.215667][T11453] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 3263.223583][T11453] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 3263.237820][T11453] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 3263.245146][T11453] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 3265.277448][T11453] Bluetooth: hci2: command tx timeout [ 3266.094869][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 3267.360557][T11453] Bluetooth: hci2: command tx timeout [ 3269.437255][T11453] Bluetooth: hci2: command tx timeout [ 3271.234043][T11506] veth1_macvtap: entered promiscuous mode [ 3271.517392][T11453] Bluetooth: hci2: command tx timeout [ 3271.613100][T11594] trusted_key: encrypted_key: master key parameter '2r7)oӌ6W*y"'F8.#fˊ0/g'đqDah4Ğֲ%eNKojGteۡ, 1 [ 3278.717902][T10966] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 3278.725147][T10966] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 3278.733983][T10966] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 3278.741850][T10966] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 3278.749268][T10966] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 3280.798017][T11453] Bluetooth: hci4: command tx timeout [ 3282.186549][T14162] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3282.513879][T11611] netlink: 'syz.0.11921': attribute type 8 has an invalid length. [ 3282.551926][T14162] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3282.667474][T11506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3282.684357][T11506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3282.696178][T11506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3282.720435][T11506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3282.741199][T11506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3282.762968][T11506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3282.777455][T11506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3282.799662][T11506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3282.814928][T11506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3282.838849][T11506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3282.854495][T11506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3282.872789][T11506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3282.883784][T11453] Bluetooth: hci4: command tx timeout [ 3282.895916][T11506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3282.912295][T11506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3282.922331][T11506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3282.941172][T11506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3282.954635][T11506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3282.978211][T11506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3282.992060][T11506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3283.004432][T11506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3283.036714][T11506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3283.059043][T11506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3283.090454][T11506] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3283.950064][T11619] trusted_key: encrypted_key: master key parameter '2r7)oӌ6W*y"'F8.#fˊ0/g'đqDah4Ğֲ%eNKojGteۡ, 1 [ 3295.269376][T10966] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 3295.281705][T10966] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 3295.291446][T10966] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 3295.302510][T10966] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 3295.310900][T10966] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 3297.357058][T10966] Bluetooth: hci0: command tx timeout [ 3299.437106][T10966] Bluetooth: hci0: command tx timeout [ 3300.755794][T14162] hsr_slave_0: left promiscuous mode [ 3300.783483][T14162] hsr_slave_1: left promiscuous mode [ 3300.825154][T14162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3300.841757][T14162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3300.861094][T14162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3300.875292][T14162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3300.903904][T14162] veth1_macvtap: left promiscuous mode [ 3300.913587][T14162] veth0_macvtap: left promiscuous mode [ 3300.921205][T14162] veth1_vlan: left promiscuous mode [ 3300.931419][T14162] veth0_vlan: left promiscuous mode [ 3301.454734][T14162] team0 (unregistering): Port device team_slave_1 removed [ 3301.503845][T14162] team0 (unregistering): Port device team_slave_0 removed [ 3301.517033][T10966] Bluetooth: hci0: command tx timeout [ 3301.953286][T11675] trusted_key: encrypted_key: master key parameter '2r7)oӌ6W*y"'F8.#fˊ0/g'đqDah4Ğֲ%eNKojGteۡ, 1 [ 3304.897147][T11453] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 3304.904522][T11453] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 3304.916267][T11453] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 3304.924103][T11453] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 3304.931560][T11453] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 3304.955370][T11606] team0: Port device team_slave_1 added [ 3305.004795][T11589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3305.013932][T11589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3305.049644][T11589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3305.154955][T11589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3305.166165][T11589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3305.201358][T11589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3305.227568][T11606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3305.250364][T11606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3305.302321][T11606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3305.379790][T11655] chnl_net:caif_netlink_parms(): no params data found [ 3305.403859][T11606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3305.419809][T11606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3305.452145][T11606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3306.957093][T11453] Bluetooth: hci1: command tx timeout [ 3309.037217][T11453] Bluetooth: hci1: command tx timeout [ 3310.360511][T11589] hsr_slave_0: entered promiscuous mode [ 3310.386792][T11589] hsr_slave_1: entered promiscuous mode [ 3310.417092][T11589] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3310.426141][T11589] Cannot create hsr debugfs directory [ 3310.687100][T11336] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 3310.857404][T11336] usb 1-1: Using ep0 maxpacket: 8 [ 3310.870890][T11336] usb 1-1: config 0 interface 0 altsetting 112 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3310.887053][T11336] usb 1-1: config 0 interface 0 altsetting 112 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3310.904381][T11336] usb 1-1: config 0 interface 0 has no altsetting 0 [ 3310.912041][T11336] usb 1-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 3310.930671][T11336] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3310.949652][T11336] usb 1-1: config 0 descriptor?? [ 3311.117486][T11453] Bluetooth: hci1: command tx timeout [ 3311.385028][T11336] kye 0003:0458:0153.003D: hidraw0: USB HID v0.00 Device [HID 0458:0153] on usb-dummy_hcd.0-1/input0 [ 3311.602757][T11336] usb 1-1: USB disconnect, device number 10 [ 3313.197220][T11453] Bluetooth: hci1: command tx timeout [ 3314.338264][T11706] trusted_key: encrypted_key: master key parameter '2r7)oӌ6W*y"'F8.#fˊ0/g'đqDah4Ğֲ%eNKojGteۡ, 1 [ 3324.063902][T11429] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 3324.074302][T11429] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 3324.086527][T11429] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 3324.101289][T11429] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 3324.113045][T11429] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 3324.477302][T11429] Bluetooth: hci5: command 0x0406 tx timeout [ 3324.712527][T11725] gretap0: left allmulticast mode [ 3324.727218][T11725] gretap0: left promiscuous mode [ 3324.732368][T11725] bridge0: port 3(gretap0) entered disabled state [ 3324.828639][T11689] bridge0: port 1(bridge_slave_0) entered blocking state [ 3324.840291][T11689] bridge0: port 1(bridge_slave_0) entered disabled state [ 3324.862875][T11689] bridge_slave_0: entered allmulticast mode [ 3324.880761][T11689] bridge_slave_0: entered promiscuous mode [ 3324.968365][T11606] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 3324.990258][T11689] bridge0: port 2(bridge_slave_1) entered blocking state [ 3325.012279][T11689] bridge0: port 2(bridge_slave_1) entered disabled state [ 3325.027225][T11689] bridge_slave_1: entered allmulticast mode [ 3325.036789][T11689] bridge_slave_1: entered promiscuous mode [ 3325.122263][T11606] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 3326.157146][T11453] Bluetooth: hci3: command tx timeout [ 3327.136427][T11741] trusted_key: encrypted_key: master key parameter '2r7)oӌ6W*y"'F8.#fˊ0/g'đqDah4Ğֲ%eNKojGteۡ, 1 [ 3339.872197][T11429] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 3339.886495][T11429] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 3339.912825][T11429] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 3339.934547][T11429] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 3339.952263][T11429] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 3339.959579][T16276] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 3340.137997][T16276] usb 1-1: Using ep0 maxpacket: 16 [ 3340.155142][T16276] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 3340.185524][T16276] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3340.197597][T11689] team0: Port device team_slave_0 added [ 3340.223484][T16276] usb 1-1: config 0 descriptor?? [ 3340.243455][T16276] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 3340.338126][T11689] team0: Port device team_slave_1 added [ 3340.638654][T11689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3340.677343][T11689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3340.800452][T11689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3340.903884][T11689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3340.986991][T11689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3341.085347][T11689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3341.137188][T11780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11963'. [ 3341.167418][T16276] gspca_sonixj: reg_w1 err -110 [ 3341.172435][T16276] sonixj 1-1:0.0: probe with driver sonixj failed with error -110 [ 3341.997134][T11429] Bluetooth: hci6: command tx timeout [ 3344.077074][T11429] Bluetooth: hci6: command tx timeout [ 3345.744481][T16276] usb 1-1: USB disconnect, device number 12 [ 3345.804659][T11689] hsr_slave_0: entered promiscuous mode [ 3345.826551][T11689] hsr_slave_1: entered promiscuous mode [ 3345.995114][T11728] chnl_net:caif_netlink_parms(): no params data found [ 3346.157313][T11429] Bluetooth: hci6: command tx timeout [ 3346.320030][T11728] bridge0: port 1(bridge_slave_0) entered blocking state [ 3346.334616][T11728] bridge0: port 1(bridge_slave_0) entered disabled state [ 3346.343293][T11728] bridge_slave_0: entered allmulticast mode [ 3346.359227][T11728] bridge_slave_0: entered promiscuous mode [ 3346.404546][T11728] bridge0: port 2(bridge_slave_1) entered blocking state [ 3346.420100][T11728] bridge0: port 2(bridge_slave_1) entered disabled state [ 3346.431429][T11728] bridge_slave_1: entered allmulticast mode [ 3346.443570][T11728] bridge_slave_1: entered promiscuous mode [ 3346.536607][T11773] chnl_net:caif_netlink_parms(): no params data found [ 3346.580143][T11728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3346.604898][T11655] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 3346.984495][T11796] netlink: 'syz.0.11965': attribute type 8 has an invalid length. [ 3348.237027][T11429] Bluetooth: hci6: command tx timeout [ 3356.065419][T11453] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 3356.085387][T11453] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 3356.095004][T11453] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 3356.106717][T11453] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 3356.115517][T11453] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 3356.123048][T11453] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 3358.157106][T11453] Bluetooth: hci2: command tx timeout [ 3358.856538][T11728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3358.905238][T11655] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 3359.331410][T11728] team0: Port device team_slave_0 added [ 3359.418483][T11728] team0: Port device team_slave_1 added [ 3359.449145][T11805] trusted_key: encrypted_key: master key parameter '2r7)oӌ6W*y"'F8.#fˊ0/g'đqDah4Ğֲ%eNKojGteۡ, 1 [ 3366.104893][T11429] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 3366.118324][T11429] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 3366.126190][T11429] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 3366.133871][T11429] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 3366.141188][T11429] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 3368.236978][T11429] Bluetooth: hci0: command tx timeout [ 3369.040416][T11728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3369.070637][T11728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3369.136484][T11728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3369.160523][T11824] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11971'. [ 3369.177713][T11728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3369.185882][T11728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3369.231626][T11728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3369.256090][T11773] bridge0: port 1(bridge_slave_0) entered blocking state [ 3369.266482][T11773] bridge0: port 1(bridge_slave_0) entered disabled state [ 3369.280558][T11773] bridge_slave_0: entered allmulticast mode [ 3369.290410][T11773] bridge_slave_0: entered promiscuous mode [ 3369.348495][T11824] bond0: entered promiscuous mode [ 3369.364170][T11824] bond_slave_0: entered promiscuous mode [ 3369.375165][T11824] bond_slave_1: entered promiscuous mode [ 3369.406537][T11824] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 3369.440673][T11824] bond0: left promiscuous mode [ 3369.462812][T11824] bond_slave_0: left promiscuous mode [ 3369.470199][T11824] bond_slave_1: left promiscuous mode [ 3369.592102][T11773] bridge0: port 2(bridge_slave_1) entered blocking state [ 3369.621477][T11773] bridge0: port 2(bridge_slave_1) entered disabled state [ 3369.639773][T11773] bridge_slave_1: entered allmulticast mode [ 3369.667529][T11773] bridge_slave_1: entered promiscuous mode [ 3369.849381][T11773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3370.231390][T11829] netlink: 'syz.0.11972': attribute type 8 has an invalid length. [ 3370.317340][T11429] Bluetooth: hci0: command tx timeout [ 3372.397073][T11429] Bluetooth: hci0: command tx timeout [ 3373.590649][T11728] hsr_slave_0: entered promiscuous mode [ 3373.611883][T11728] hsr_slave_1: entered promiscuous mode [ 3373.631081][T11728] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3373.644811][T11728] Cannot create hsr debugfs directory [ 3373.684202][T11773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3374.105702][T11773] team0: Port device team_slave_0 added [ 3374.150312][T11773] team0: Port device team_slave_1 added [ 3374.296234][T11836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11975'. [ 3374.628441][T11429] Bluetooth: hci0: command tx timeout [ 3375.349146][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 3375.349167][ T29] audit: type=1326 audit(1735407334.315:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11835 comm="syz.0.11975" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcfbd785d29 code=0x0 [ 3375.381683][T11773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3375.398994][T11773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3375.448403][T11773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3382.410098][T11773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3382.423516][T11773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3382.458254][T11773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3382.680367][T14162] bridge_slave_1: left allmulticast mode [ 3382.686070][T14162] bridge_slave_1: left promiscuous mode [ 3382.718004][T14162] bridge0: port 2(bridge_slave_1) entered disabled state [ 3382.741130][T14162] bridge_slave_0: left allmulticast mode [ 3382.758610][T14162] bridge_slave_0: left promiscuous mode [ 3382.764361][T14162] bridge0: port 1(bridge_slave_0) entered disabled state [ 3382.778927][T11845] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11977'. [ 3382.803228][T14162] bridge_slave_1: left allmulticast mode [ 3382.815069][T14162] bridge_slave_1: left promiscuous mode [ 3382.823005][T14162] bridge0: port 2(bridge_slave_1) entered disabled state [ 3382.840607][T14162] bridge_slave_0: left allmulticast mode [ 3382.852359][T14162] bridge_slave_0: left promiscuous mode [ 3382.861858][T14162] bridge0: port 1(bridge_slave_0) entered disabled state [ 3383.127235][T14162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3383.150923][T14162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3383.171233][T14162] bond0 (unregistering): Released all slaves [ 3383.191163][T14162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3383.216378][T14162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3383.240795][T14162] bond0 (unregistering): Released all slaves [ 3383.333513][T11798] chnl_net:caif_netlink_parms(): no params data found [ 3383.405515][T11773] hsr_slave_0: entered promiscuous mode [ 3383.578635][T11773] hsr_slave_1: entered promiscuous mode [ 3383.592218][T11773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3383.603158][T11773] Cannot create hsr debugfs directory [ 3383.654873][T14162] hsr_slave_0: left promiscuous mode [ 3383.669348][T14162] hsr_slave_1: left promiscuous mode [ 3383.679218][T14162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3383.699089][T14162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3383.734613][T14162] hsr_slave_0: left promiscuous mode [ 3383.750396][T14162] hsr_slave_1: left promiscuous mode [ 3383.767475][T14162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3383.788410][T14162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3384.045576][T14162] team0 (unregistering): Port device team_slave_1 removed [ 3384.082051][T14162] team0 (unregistering): Port device team_slave_0 removed [ 3384.543479][T14162] team0 (unregistering): Port device team_slave_1 removed [ 3384.574807][T14162] team0 (unregistering): Port device team_slave_0 removed [ 3384.949416][T11821] chnl_net:caif_netlink_parms(): no params data found [ 3385.482813][T11861] netlink: 'syz.0.11979': attribute type 8 has an invalid length. [ 3385.733869][T11453] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 3385.741404][T11453] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 3385.750290][T11453] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 3385.760159][T11453] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 3385.776427][T11453] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 3385.786706][T11453] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 3387.836936][T11453] Bluetooth: hci1: command tx timeout [ 3388.247683][T11798] bridge0: port 1(bridge_slave_0) entered blocking state [ 3388.254832][T11798] bridge0: port 1(bridge_slave_0) entered disabled state [ 3388.283070][T11798] bridge_slave_0: entered allmulticast mode [ 3388.304270][T11798] bridge_slave_0: entered promiscuous mode [ 3388.427767][T11798] bridge0: port 2(bridge_slave_1) entered blocking state [ 3388.434896][T11798] bridge0: port 2(bridge_slave_1) entered disabled state [ 3388.483587][T11798] bridge_slave_1: entered allmulticast mode [ 3388.496051][T11798] bridge_slave_1: entered promiscuous mode [ 3388.650697][T11872] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 3388.657267][T11872] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 3388.685868][T11872] vhci_hcd vhci_hcd.0: Device attached [ 3388.696766][T11821] bridge0: port 1(bridge_slave_0) entered blocking state [ 3388.712810][T11821] bridge0: port 1(bridge_slave_0) entered disabled state [ 3388.731625][T11872] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(5) [ 3388.738186][T11872] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 3388.747405][T11821] bridge_slave_0: entered allmulticast mode [ 3388.755952][T11821] bridge_slave_0: entered promiscuous mode [ 3388.770717][T11872] vhci_hcd vhci_hcd.0: Device attached [ 3388.792318][T11872] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(8) [ 3388.798899][T11872] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 3388.815494][T11872] vhci_hcd vhci_hcd.0: Device attached [ 3388.823835][T11798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3388.844686][T11798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3388.860002][ T9] vhci_hcd: vhci_device speed not set [ 3388.872659][T11879] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 3388.884037][T11821] bridge0: port 2(bridge_slave_1) entered blocking state [ 3388.902135][T11872] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(10) [ 3388.908784][T11872] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 3388.921366][T11821] bridge0: port 2(bridge_slave_1) entered disabled state [ 3388.928820][ T9] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 3388.948718][T11821] bridge_slave_1: entered allmulticast mode [ 3388.956087][T11821] bridge_slave_1: entered promiscuous mode [ 3388.978525][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 3388.993084][T11872] vhci_hcd vhci_hcd.0: Device attached [ 3389.002460][T11872] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(14) [ 3389.009191][T11872] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 3389.067383][T11872] vhci_hcd vhci_hcd.0: Device attached [ 3389.101700][T11879] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(17) [ 3389.108362][T11879] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 3407.318877][T11879] vhci_hcd vhci_hcd.0: Device attached [ 3494.166771][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 3494.173796][ C1] rcu: 0-...!: (1 ticks this GP) idle=55c4/1/0x4000000000000000 softirq=226651/226651 fqs=0 [ 3494.184005][ C1] rcu: (detected by 1, t=10502 jiffies, g=222625, q=239 ncpus=2) [ 3494.191847][ C1] Sending NMI from CPU 1 to CPUs 0: [ 3494.191892][ C0] NMI backtrace for cpu 0 [ 3494.191914][ C0] CPU: 0 UID: 0 PID: 11882 Comm: vhci_rx Not tainted 6.13.0-rc4-syzkaller-00069-g8379578b11d5 #0 [ 3494.191936][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 3494.191948][ C0] RIP: 0010:advance_sched+0x5bc/0xca0 [ 3494.191993][ C0] Code: ff ff ff ff 7f 49 bc 00 00 00 00 00 fc ff df 4c 8b 74 24 28 48 8b 6c 24 40 eb 49 e8 ee 9f d9 f7 49 bc 00 00 00 00 00 fc ff df <48> 8b 44 24 48 42 80 3c 20 00 4c 8b 74 24 28 48 8b 5c 24 30 74 08 [ 3494.192010][ C0] RSP: 0000:ffffc90000007c70 EFLAGS: 00000006 [ 3494.192030][ C0] RAX: ffffffff89c5d3f2 RBX: ffff888028a8b130 RCX: ffff888024e1bc00 [ 3494.192045][ C0] RDX: 0000000000010000 RSI: 0000000004000000 RDI: 0000000000000000 [ 3494.192058][ C0] RBP: 1ffff11005151681 R08: ffffffff89c5d3c3 R09: fffff52000000f7c [ 3494.192073][ C0] R10: dffffc0000000000 R11: fffff52000000f7c R12: dffffc0000000000 [ 3494.192088][ C0] R13: ffff888028a8b408 R14: 0000000000000000 R15: 0000000000000001 [ 3494.192101][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 3494.192117][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3494.192130][ C0] CR2: 0000001b30b0eff8 CR3: 000000004a4ac000 CR4: 00000000003526f0 [ 3494.192147][ C0] Call Trace: [ 3494.192156][ C0] [ 3494.192166][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 3494.192189][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 3494.192211][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 3494.192239][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 3494.192266][ C0] ? nmi_handle+0x14f/0x5a0 [ 3494.192286][ C0] ? nmi_handle+0x2a/0x5a0 [ 3494.192307][ C0] ? advance_sched+0x5bc/0xca0 [ 3494.192328][ C0] ? default_do_nmi+0x63/0x160 [ 3494.192348][ C0] ? exc_nmi+0x123/0x1f0 [ 3494.192367][ C0] ? end_repeat_nmi+0xf/0x53 [ 3494.192387][ C0] ? advance_sched+0x583/0xca0 [ 3494.192406][ C0] ? advance_sched+0x5b2/0xca0 [ 3494.192428][ C0] ? advance_sched+0x5bc/0xca0 [ 3494.192449][ C0] ? advance_sched+0x5bc/0xca0 [ 3494.192470][ C0] ? advance_sched+0x5bc/0xca0 [ 3494.192491][ C0] [ 3494.192497][ C0] [ 3494.192509][ C0] ? __pfx_advance_sched+0x10/0x10 [ 3494.192531][ C0] __hrtimer_run_queues+0x59b/0xd30 [ 3494.192562][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 3494.192586][ C0] ? handle_softirqs+0x7e0/0x9b0 [ 3494.192613][ C0] ? read_tsc+0x9/0x20 [ 3494.192637][ C0] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 3494.192661][ C0] hrtimer_interrupt+0x403/0xa40 [ 3494.192694][ C0] __sysvec_apic_timer_interrupt+0x110/0x420 [ 3494.192717][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 3494.192743][ C0] [ 3494.192749][ C0] [ 3494.192756][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3494.192785][ C0] RIP: 0010:clear_page_erms+0xb/0x20 [ 3494.192804][ C0] Code: 48 8d 7f 40 75 d9 90 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa b9 00 10 00 00 31 c0 aa c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 [ 3494.192820][ C0] RSP: 0000:ffffc90003c876b0 EFLAGS: 00010246 [ 3494.192837][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00000000000004c0 [ 3494.192849][ C0] RDX: ffff88803699f000 RSI: 0000000000000001 RDI: ffff88803699fb40 [ 3494.192862][ C0] RBP: 0000000000000004 R08: ffffea0000da67f7 R09: 0000000000000000 [ 3494.192874][ C0] R10: ffffed1006d33e00 R11: fffff940001b4cff R12: 0000000000000001 [ 3494.192887][ C0] R13: 0000000000000001 R14: ffffea0000da67c0 R15: 0000000000000000 [ 3494.192907][ C0] post_alloc_hook+0xf8/0x230 [ 3494.192929][ C0] get_page_from_freelist+0x3651/0x37a0 [ 3494.192956][ C0] ? rcu_is_watching+0x15/0xb0 [ 3494.192988][ C0] ? lock_release+0xbf/0xa30 [ 3494.193010][ C0] ? __pfx___might_resched+0x10/0x10 [ 3494.193040][ C0] ? alloc_pages_bulk_noprof+0x70b/0xcc0 [ 3494.193072][ C0] __alloc_pages_noprof+0x292/0x710 [ 3494.193098][ C0] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 3494.193125][ C0] ? alloc_pages_bulk_array_mempolicy_noprof+0x8ea/0x1600 [ 3494.193149][ C0] alloc_pages_mpol_noprof+0x3e8/0x680 [ 3494.193180][ C0] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 3494.193208][ C0] ? kcov_remote_start+0x322/0x7d0 [ 3494.193226][ C0] ? __get_vm_area_node+0x1c8/0x2d0 [ 3494.193247][ C0] ? __get_vm_area_node+0x25c/0x2d0 [ 3494.193267][ C0] ? alloc_pages_noprof+0xef/0x170 [ 3494.193296][ C0] __vmalloc_node_range_noprof+0x9c9/0x1380 [ 3494.193330][ C0] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 3494.193353][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 3494.193374][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 3494.193401][ C0] ? kcov_remote_start+0x322/0x7d0 [ 3494.193420][ C0] vmalloc_noprof+0x79/0x90 [ 3494.193441][ C0] ? kcov_remote_start+0x322/0x7d0 [ 3494.193459][ C0] kcov_remote_start+0x322/0x7d0 [ 3494.193478][ C0] ? kcov_remote_start+0x97/0x7d0 [ 3494.193515][ C0] vhci_rx_loop+0x190/0x1070 [ 3494.193535][ C0] ? rcu_is_watching+0x15/0xb0 [ 3494.193563][ C0] ? __pfx_vhci_rx_loop+0x10/0x10 [ 3494.193580][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 3494.193606][ C0] ? __kthread_parkme+0x169/0x1d0 [ 3494.193626][ C0] ? __pfx_vhci_rx_loop+0x10/0x10 [ 3494.193643][ C0] kthread+0x2f0/0x390 [ 3494.193663][ C0] ? __pfx_vhci_rx_loop+0x10/0x10 [ 3494.193680][ C0] ? __pfx_kthread+0x10/0x10 [ 3494.193700][ C0] ret_from_fork+0x4b/0x80 [ 3494.193717][ C0] ? __pfx_kthread+0x10/0x10 [ 3494.193737][ C0] ret_from_fork_asm+0x1a/0x30 [ 3494.193770][ C0] [ 3494.193882][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g222625 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 3494.734294][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=291313 [ 3494.742287][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g222625 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 3494.753759][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 3494.763743][ C1] rcu: RCU grace-period kthread stack dump: [ 3494.769642][ C1] task:rcu_preempt state:I stack:25976 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 3494.779853][ C1] Call Trace: [ 3494.783142][ C1] [ 3494.786091][ C1] __schedule+0x17fb/0x4be0 [ 3494.790636][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 3494.796560][ C1] ? schedule+0x90/0x320 [ 3494.800824][ C1] ? lock_release+0xbf/0xa30 [ 3494.805435][ C1] ? __pfx___schedule+0x10/0x10 [ 3494.810311][ C1] ? __pfx_lock_release+0x10/0x10 [ 3494.815363][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 3494.821712][ C1] ? schedule+0x90/0x320 [ 3494.825981][ C1] schedule+0x14b/0x320 [ 3494.830163][ C1] schedule_timeout+0x15a/0x290 [ 3494.835036][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 3494.840426][ C1] ? __pfx_process_timeout+0x10/0x10 [ 3494.845745][ C1] ? prepare_to_swait_event+0x330/0x350 [ 3494.851311][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 3494.856183][ C1] ? rcu_gp_init+0x1256/0x1630 [ 3494.860973][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 3494.865929][ C1] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 3494.871843][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 3494.877155][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 3494.883074][ C1] ? finish_swait+0xd4/0x1e0 [ 3494.887683][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 3494.892305][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 3494.897525][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 3494.903442][ C1] ? __kthread_parkme+0x169/0x1d0 [ 3494.908495][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 3494.913716][ C1] kthread+0x2f0/0x390 [ 3494.917807][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 3494.923029][ C1] ? __pfx_kthread+0x10/0x10 [ 3494.927644][ C1] ret_from_fork+0x4b/0x80 [ 3494.932086][ C1] ? __pfx_kthread+0x10/0x10 [ 3494.936696][ C1] ret_from_fork_asm+0x1a/0x30 [ 3494.941497][ C1]