last executing test programs: 26.047261127s ago: executing program 0 (id=177): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0xb}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x80001, 0x1, 0x0, 0x1, 0x1}, {{@in=@broadcast, 0x4d1, 0x32}, 0x2, @in=@private=0xa010101, 0x3502, 0x1, 0x3, 0x0, 0xa, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) 25.497942759s ago: executing program 0 (id=182): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x0) ioctl$UI_DEV_CREATE(r3, 0x5501) 21.323978797s ago: executing program 0 (id=190): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs, 0x76) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x20000018) connect$llc(r0, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) 17.787890079s ago: executing program 4 (id=195): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000100000000000000010000001400020077673100200000000000000000000000080007000000000008000500"], 0x38}}, 0x0) 15.163635759s ago: executing program 2 (id=198): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x8082) syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x103401) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) setsockopt(0xffffffffffffffff, 0x1, 0x10000000000009, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 14.76027025s ago: executing program 2 (id=200): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='westwood', 0x8) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 13.834845326s ago: executing program 1 (id=201): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) listen(r2, 0x6) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x3e8, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(r0, 0x0, 0x8000002) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 13.727555422s ago: executing program 2 (id=202): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(0x0, r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) 13.512858647s ago: executing program 2 (id=203): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(0xffffffffffffffff, 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xab402) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) close_range(r4, 0xffffffffffffffff, 0x0) 13.29648835s ago: executing program 4 (id=204): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010026bd0043029f0900c333781400000005002300040000000a0001007770616e31000000"], 0x38}, 0x1, 0x0, 0x0, 0x24000000}, 0xc800) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x5) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r6, &(0x7f0000000080)=""/102356, 0x18fd4, 0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYRES8=r1], 0x48) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000000c0)=0x0) r8 = syz_open_procfs(r7, &(0x7f00000002c0)='net/l2cap\x00') bpf$PROG_LOAD(0x5, &(0x7f00000190c0)={0x0, 0x10, &(0x7f0000019080)=ANY=[@ANYRES8=r0, @ANYRESOCT=r1, @ANYBLOB="0000000000000000c856b7f7008008000000850000007800000095"], 0x0, 0x2083ab, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x5, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000780)=0x7f) 13.192435609s ago: executing program 1 (id=205): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4008af25, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, 0x200000}) bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfb, 0x4}, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f00000000c0)={0x7, 0x0, [0x7, 0x2, 0x416, 0x1], &(0x7f0000000080)}) listen(r2, 0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x240000d4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08060001080006040001aaaaaaaaaaaa0a0101024227147312a6640101006b9f234528aae7189654d54e7bd6540b5adf06be0efaf4b8c5d694ccbc05dcffff7d8d1c189885b5d699922a307b1328e97ebb65656e6d05a66dbfe2ec631f97dc5b5fb1fa3ba1b1ef14a1348e47d8af0c106ce1c74982e019ff0d926c8a1a2866fae6c3218e806af6032377687b55f2d3d1d633d13a10002cff7b39"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 12.992738163s ago: executing program 0 (id=206): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x13, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x60, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12.280731796s ago: executing program 1 (id=207): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000780)=""/106, &(0x7f0000000380), 0x0, 0x80, r4, 0x0, 0x7}, 0x38) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000380)={0x2, {0x8000, 0x7fffffff, 0xfffffffe, 0xe}}) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000080)={0x1, 0x103, 0x5, {0xb7f, 0x8100000, 0x1, 0xf4b}}) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f00000001c0)={0x9, 0x7ff}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xd) r5 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x1000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x40, &(0x7f0000000100)={'nat\x00', 0x0, [0x8, 0x9, 0x0, 0x5, 0x7]}, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x6, 0x102, 0x4, {0x6, 0x7, 0xc, 0xa688}}) 12.030552604s ago: executing program 4 (id=208): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x54, r1, 0xa3959ba9c9468c63, 0x6, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, '\t\x00'}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="1217e2db567c301abbceb673fdd6a765"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="cf06bfe2fca8bdd508bdd02d661b4eec"}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40010}, 0x24000040) 11.803766187s ago: executing program 3 (id=209): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x68, 0x10, 0xffffff1f, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1006, 0x13298}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @private1}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}]}}}, @IFLA_MTU={0x8, 0x4, 0x3193}]}, 0x68}}, 0x4000) 10.92593615s ago: executing program 1 (id=210): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0xa01) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f00000002c0)) 10.86128202s ago: executing program 4 (id=211): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$netlink(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr/sockcreate\x00') writev(r5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r4, 0x0, 0x40040) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@loopback}, @in6=@remote, {@in=@remote, @in=@broadcast, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56befe125658cb64}, {{@in6=@private2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x20, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, 0xfffffff9}, [@tmpl={0x84, 0x5, [{{@in=@broadcast, 0x4d3, 0x3c}, 0xa, @in6=@loopback, 0x3505, 0x2, 0x0, 0xac, 0x3, 0x1, 0x9}, {{@in6=@loopback, 0x4d5, 0x6c}, 0xa, @in=@remote, 0x3505, 0x3, 0x1, 0xf9, 0x2000009, 0x3, 0x200}]}]}, 0x1ac}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newsa={0x158, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xee01}, {@in6=@local, 0x0, 0x32}, @in=@empty, {0x0, 0x0, 0x6, 0xa, 0xa, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x7, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x68}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xe0, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207141b9a451c00aa"}}]}, 0x158}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 10.687806194s ago: executing program 1 (id=212): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, 0x0, 0x40110) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071105400000000001d400500000000004704000001ed00000f030000000000009f440000000000006b0a18fe000000007313000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff31a8fd3c0fd8b7ff831028e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a83469620c6e74e1f46132559c4f8700a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a920099c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3ba18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b4762302a271722fb515f31e0dd115a292f1e68481a62c49d15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc82300000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) mkdirat(0xffffffffffffff9c, 0x0, 0x1c8) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032"], 0x15) r4 = dup(r3) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, 0x0, &(0x7f0000000b80), 0x0, 0x0) 10.590891412s ago: executing program 3 (id=213): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff7fff}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0) syz_emit_ethernet(0x3c, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa080045"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 9.64348135s ago: executing program 4 (id=214): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3) 8.441918208s ago: executing program 3 (id=215): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) listen(r1, 0x6) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x3e8, 0x0, 0x0) 7.898096235s ago: executing program 1 (id=216): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs, 0x76) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x20000018) connect$llc(r0, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) 7.897663279s ago: executing program 4 (id=217): socket$inet_udp(0x2, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000002800)=@nat={'nat\x00', 0x670, 0x5, 0x430, 0x230, 0x0, 0xffffffff, 0x2d4, 0x0, 0x39c, 0x39c, 0xffffffff, 0x39c, 0x39c, 0x5, 0x0, {[{{@uncond, 0x0, 0x158, 0x18c, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x4, 0x400, 0x3}}]}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @port=0x4e22}}}}, {{@uncond, 0x0, 0x70, 0xa4}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x1b, @multicast1, @local, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'team_slave_0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x4}, 0x0, 0x70, 0xa4}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @port=0x4e23}}}}, {{@ip={@multicast1, @broadcast, 0xffffff00, 0xff, 'veth1_macvtap\x00', 'bridge0\x00', {}, {0xff}, 0x73, 0x0, 0x20}, 0x0, 0x94, 0xc8, 0x0, {}, [@common=@icmp={{0x24}, {0xc, "1542", 0x1}}]}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x26}, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x48c) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) rmdir(&(0x7f00000000c0)='./cgroup/../file0\x00') r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/protocols\x00') syz_ublk_setup_io_uring(0x6548, 0x0, 0x0, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0301, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r3, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) pselect6(0x40, &(0x7f0000000240)={0x1, 0x2, 0x1ff, 0x80007f, 0x100000002, 0x8000000008003, 0x4000000008, 0x1}, 0x0, &(0x7f0000000100)={0x3ff, 0x6, 0xffffffff, 0x400000009, 0x10000000, 0xb, 0xffff, 0x9}, 0x0, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r4, 0x89e3, &(0x7f0000000000)={0x14, 0x7d, 0x9, 0x4, 0x81, 0x81}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) faccessat(r2, 0x0, 0x9b225701cab8b82) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') 7.648237082s ago: executing program 0 (id=218): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010026bd0043029f0900c333781400000005002300040000000a0001007770616e31000000"], 0x38}, 0x1, 0x0, 0x0, 0x24000000}, 0xc800) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x5) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r6, &(0x7f0000000080)=""/102356, 0x18fd4, 0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYRES8=r1], 0x48) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000000c0)=0x0) r8 = syz_open_procfs(r7, &(0x7f00000002c0)='net/l2cap\x00') bpf$PROG_LOAD(0x5, &(0x7f00000190c0)={0x0, 0x10, &(0x7f0000019080)=ANY=[@ANYRES8=r0, @ANYRESOCT=r1, @ANYBLOB="0000000000000000c856b7f7008008000000850000007800000095"], 0x0, 0x2083ab, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000780)=0x7f) 5.875214761s ago: executing program 3 (id=219): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$mice(0xffffffffffffff9c, 0x0, 0x8401) fcntl$setstatus(r3, 0x4, 0x2400) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, 0x0, 0x2000000) accept(r2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r1, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0x1000, 0x101c, 0x10, 0x4, 0x401, 0x100, 0xa, 0x0, 0x52, 0x43, 0x7e9, 0x401, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x8, 0x0, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x0) 5.825941718s ago: executing program 3 (id=220): syz_open_dev$video4linux(&(0x7f0000001380), 0x5, 0x0) syz_io_uring_setup(0xf05, &(0x7f0000000080)={0x0, 0xb49c, 0x1, 0x83, 0x3ae}, 0x0, 0x0, 0x0) syz_io_uring_modify_offsets$generic(0x0, 0x0, 0x2c, 0x10000) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo/4\x00') pread64(r4, &(0x7f0000002140)=""/17, 0x11, 0x0) 4.361039694s ago: executing program 3 (id=221): openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000780)=""/106, &(0x7f0000000380), 0x0, 0x80, r3, 0x0, 0x7}, 0x38) 4.144019011s ago: executing program 2 (id=222): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000780)=""/106, &(0x7f0000000380), 0x0, 0x80, r4, 0x0, 0x7}, 0x38) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000380)={0x2, {0x8000, 0x7fffffff, 0xfffffffe, 0xe}}) 3.915064144s ago: executing program 0 (id=223): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x20004000) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x23, 0x5, 0x0) listen(r0, 0x800) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) write$tun(0xffffffffffffffff, 0x0, 0x3db) accept4(r0, 0x0, 0x0, 0x80000) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$P9_RLERRORu(r3, &(0x7f0000000280)=ANY=[], 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={0xffffffffffffffff, r4, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x80000000000, 0x1, 0x1}}, 0x40) recvmmsg$unix(r3, &(0x7f0000001000)=[{{&(0x7f0000000140), 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000000300)=""/83, 0x53}, {0x0}, {&(0x7f0000000840)=""/136, 0x88}, {&(0x7f0000000900)=""/228, 0xe4}, {&(0x7f0000000a00)=""/12, 0xc}, {&(0x7f0000000b00)=""/54, 0x36}], 0x6, &(0x7f0000000c80)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f0000000d40), 0x6e, &(0x7f0000000e80)=[{&(0x7f0000000dc0)=""/188, 0xbc}], 0x1, &(0x7f0000000ec0)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x120}}], 0x2, 0x60, &(0x7f00000010c0)={0x0, 0x989680}) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000a40), 0x12540, 0x0) fsetxattr$security_ima(r5, &(0x7f0000000a80), 0x0, 0x2, 0x2) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x70bd2a, 0x0, {0x2a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0xd4209235c937efa7}, 0x0) 0s ago: executing program 2 (id=224): syz_emit_ethernet(0x1a, &(0x7f0000000340)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}, @remote, @val={@void, {0x8100, 0x1, 0x1, 0x4}}, {@llc={0x4, {@snap={0x0, 0x0, "c0", "118190", 0xa00}}}}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.234' (ED25519) to the list of known hosts. [ 75.474300][ T5584] cgroup: Unknown subsys name 'net' [ 75.696614][ T5584] cgroup: Unknown subsys name 'cpuset' [ 75.770889][ T5584] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.379509][ T5584] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.783649][ T5602] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.824384][ T5611] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.839920][ T5611] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.843860][ T5611] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.859225][ T5615] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.863680][ T5615] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.864802][ T5614] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.889256][ T5608] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.892087][ T5614] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.892551][ T5614] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.893450][ T5614] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.897781][ T5608] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.903190][ T5608] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.905062][ T5614] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.905654][ T5614] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.915794][ T5614] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.916734][ T5611] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.916874][ T5611] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.924714][ T5611] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.925422][ T5611] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.926944][ T5611] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.927588][ T5611] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.937131][ T5607] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.959391][ T5607] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.993479][ T5611] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.021959][ T4914] Bluetooth: hci2: command tx timeout [ 82.022073][ T4914] Bluetooth: hci3: command tx timeout [ 82.022143][ T4914] Bluetooth: hci4: command tx timeout [ 82.101175][ T5611] Bluetooth: hci1: command tx timeout [ 82.101970][ T5611] Bluetooth: hci0: command tx timeout [ 82.385890][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.386560][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.386676][ T5596] bridge_slave_0: entered allmulticast mode [ 82.388433][ T5596] bridge_slave_0: entered promiscuous mode [ 82.451128][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.451204][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.451312][ T5596] bridge_slave_1: entered allmulticast mode [ 82.453660][ T5596] bridge_slave_1: entered promiscuous mode [ 82.455091][ T5599] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.455207][ T5599] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.455505][ T5599] bridge_slave_0: entered allmulticast mode [ 82.457279][ T5599] bridge_slave_0: entered promiscuous mode [ 82.459014][ T5597] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.459129][ T5597] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.459276][ T5597] bridge_slave_0: entered allmulticast mode [ 82.462554][ T5597] bridge_slave_0: entered promiscuous mode [ 82.466676][ T5600] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.466784][ T5600] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.467233][ T5600] bridge_slave_0: entered allmulticast mode [ 82.469625][ T5600] bridge_slave_0: entered promiscuous mode [ 82.519144][ T5599] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.519276][ T5599] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.519424][ T5599] bridge_slave_1: entered allmulticast mode [ 82.524352][ T5599] bridge_slave_1: entered promiscuous mode [ 82.525912][ T5597] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.526044][ T5597] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.526509][ T5597] bridge_slave_1: entered allmulticast mode [ 82.529044][ T5597] bridge_slave_1: entered promiscuous mode [ 82.531277][ T5600] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.531382][ T5600] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.531850][ T5600] bridge_slave_1: entered allmulticast mode [ 82.534256][ T5600] bridge_slave_1: entered promiscuous mode [ 82.665495][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.731953][ T5598] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.732132][ T5598] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.732483][ T5598] bridge_slave_0: entered allmulticast mode [ 82.733947][ T5598] bridge_slave_0: entered promiscuous mode [ 82.738627][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.748148][ T5599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.755119][ T5597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.761542][ T5600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.765154][ T5598] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.765269][ T5598] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.765433][ T5598] bridge_slave_1: entered allmulticast mode [ 82.767866][ T5598] bridge_slave_1: entered promiscuous mode [ 82.812808][ T5597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.819849][ T5600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.823989][ T5599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.927486][ T5596] team0: Port device team_slave_0 added [ 82.965714][ T5598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.967701][ T5596] team0: Port device team_slave_1 added [ 82.969226][ T5597] team0: Port device team_slave_0 added [ 82.971725][ T5600] team0: Port device team_slave_0 added [ 82.975116][ T5599] team0: Port device team_slave_0 added [ 82.980024][ T5598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.004579][ T5597] team0: Port device team_slave_1 added [ 83.007422][ T5600] team0: Port device team_slave_1 added [ 83.010184][ T5599] team0: Port device team_slave_1 added [ 83.088597][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.088607][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.088620][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.149262][ T5598] team0: Port device team_slave_0 added [ 83.150003][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.150016][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.150037][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.154084][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.154096][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.154125][ T5597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.155830][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.155840][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.155862][ T5600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.159135][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.159147][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.159168][ T5599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.166524][ T5598] team0: Port device team_slave_1 added [ 83.182610][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.182624][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.182646][ T5597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.185199][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.185211][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.185232][ T5600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.186956][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.186966][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.186988][ T5599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.344142][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.344155][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.344177][ T5598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.415127][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.415142][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.415165][ T5598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.443989][ T5596] hsr_slave_0: entered promiscuous mode [ 83.445535][ T5596] hsr_slave_1: entered promiscuous mode [ 83.531034][ T5600] hsr_slave_0: entered promiscuous mode [ 83.532348][ T5600] hsr_slave_1: entered promiscuous mode [ 83.533262][ T5600] debugfs: 'hsr0' already exists in 'hsr' [ 83.533919][ T5600] Cannot create hsr debugfs directory [ 83.545434][ T5599] hsr_slave_0: entered promiscuous mode [ 83.547181][ T5599] hsr_slave_1: entered promiscuous mode [ 83.548218][ T5599] debugfs: 'hsr0' already exists in 'hsr' [ 83.548238][ T5599] Cannot create hsr debugfs directory [ 83.584229][ T5597] hsr_slave_0: entered promiscuous mode [ 83.585336][ T5597] hsr_slave_1: entered promiscuous mode [ 83.586147][ T5597] debugfs: 'hsr0' already exists in 'hsr' [ 83.586167][ T5597] Cannot create hsr debugfs directory [ 83.725775][ T5598] hsr_slave_0: entered promiscuous mode [ 83.726473][ T5598] hsr_slave_1: entered promiscuous mode [ 83.726987][ T5598] debugfs: 'hsr0' already exists in 'hsr' [ 83.727006][ T5598] Cannot create hsr debugfs directory [ 84.100656][ T4914] Bluetooth: hci3: command tx timeout [ 84.100686][ T4914] Bluetooth: hci2: command tx timeout [ 84.100808][ T5611] Bluetooth: hci4: command tx timeout [ 84.180803][ T59] Bluetooth: hci1: command tx timeout [ 84.180937][ T5611] Bluetooth: hci0: command tx timeout [ 84.933053][ T5596] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.992317][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.998628][ T5596] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.017176][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.034019][ T5596] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.068974][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.089535][ T5596] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.124496][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.282967][ T5600] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.315665][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.333851][ T5600] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.375990][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.418840][ T5600] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.454114][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.457237][ T5600] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.494285][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.599712][ T5599] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.633715][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.642383][ T5599] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.673619][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.677949][ T5599] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.724234][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.752664][ T5599] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.784511][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.874117][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.905755][ T5597] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.933715][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.946462][ T5597] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.974587][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.980025][ T5597] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.005686][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.027958][ T5597] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.063155][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.120242][ T5596] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.183525][ T5611] Bluetooth: hci4: command tx timeout [ 86.183562][ T59] Bluetooth: hci2: command tx timeout [ 86.183566][ T5611] Bluetooth: hci3: command tx timeout [ 86.183726][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.183866][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.243508][ T5598] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 86.260815][ T4914] Bluetooth: hci1: command tx timeout [ 86.260896][ T59] Bluetooth: hci0: command tx timeout [ 86.294784][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.309528][ T5598] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 86.334609][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.339319][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.339472][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.352957][ T5598] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 86.393143][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.396124][ T5598] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 86.415438][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.472647][ T5600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.562923][ T5600] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.603408][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.603918][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.638267][ T5599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.648308][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.648436][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.687978][ T821] cfg80211: failed to load regulatory.db [ 86.809724][ T5599] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.863233][ T5597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.870171][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.870289][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.934886][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.935146][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.005460][ T5597] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.101603][ T1070] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.107702][ T1070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.156483][ T5598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.183912][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.184389][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.331540][ T5598] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.397826][ T1070] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.398020][ T1070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.445918][ T1070] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.447466][ T1070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.793483][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.183386][ T5600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.217537][ T5596] veth0_vlan: entered promiscuous mode [ 88.260492][ T4914] Bluetooth: hci3: command tx timeout [ 88.260520][ T4914] Bluetooth: hci4: command tx timeout [ 88.260571][ T59] Bluetooth: hci2: command tx timeout [ 88.321035][ T5596] veth1_vlan: entered promiscuous mode [ 88.351299][ T5611] Bluetooth: hci1: command tx timeout [ 88.351346][ T59] Bluetooth: hci0: command tx timeout [ 88.586160][ T5596] veth0_macvtap: entered promiscuous mode [ 88.644746][ T5600] veth0_vlan: entered promiscuous mode [ 88.661494][ T5596] veth1_macvtap: entered promiscuous mode [ 88.687720][ T5599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.720107][ T5600] veth1_vlan: entered promiscuous mode [ 88.787479][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.834410][ T5597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.838338][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.899492][ T1070] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.917257][ T1070] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.933268][ T1070] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.952180][ T1070] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.974416][ T5600] veth0_macvtap: entered promiscuous mode [ 88.988780][ T5599] veth0_vlan: entered promiscuous mode [ 89.069577][ T5598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.080111][ T5600] veth1_macvtap: entered promiscuous mode [ 89.173986][ T5599] veth1_vlan: entered promiscuous mode [ 89.395534][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.445496][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.494530][ T5597] veth0_vlan: entered promiscuous mode [ 89.538127][ T1168] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.572887][ T1168] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.579399][ T1168] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.592899][ T1168] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.619272][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.619293][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.697092][ T5597] veth1_vlan: entered promiscuous mode [ 89.732849][ T5599] veth0_macvtap: entered promiscuous mode [ 89.829759][ T5599] veth1_macvtap: entered promiscuous mode [ 89.829925][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.829939][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.053203][ T3706] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.053221][ T3706] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.063817][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.130465][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.131846][ T5598] veth0_vlan: entered promiscuous mode [ 90.140250][ T5597] veth0_macvtap: entered promiscuous mode [ 90.222910][ T3706] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.229705][ T5597] veth1_macvtap: entered promiscuous mode [ 90.247171][ T3706] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.252575][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.252592][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.255509][ T3706] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.283419][ T5598] veth1_vlan: entered promiscuous mode [ 90.295860][ T3706] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.521987][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.650991][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.727134][ T42] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.737833][ T42] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.808121][ T42] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.837588][ T42] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.840157][ T5598] veth0_macvtap: entered promiscuous mode [ 90.883479][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.883497][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.002033][ T5598] veth1_macvtap: entered promiscuous mode [ 91.992142][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.992161][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.289238][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.394040][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.456304][ T1070] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.456323][ T1070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.478124][ T1070] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.482217][ T1070] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.498217][ T1070] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.582798][ T1070] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.831333][ T161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.831353][ T161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.673871][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.673890][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.472262][ T5848] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15'. [ 102.645706][ T1070] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.645725][ T1070] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.209800][ T5879] netlink: 'syz.1.24': attribute type 1 has an invalid length. [ 104.354842][ T5879] vlan2: entered allmulticast mode [ 104.354863][ T5879] veth0: entered allmulticast mode [ 104.355669][ T5871] syzkaller0: entered promiscuous mode [ 104.355690][ T5871] syzkaller0: entered allmulticast mode [ 105.986055][ T5896] Bluetooth: MGMT ver 1.23 [ 106.224929][ T5901] netlink: 4 bytes leftover after parsing attributes in process `syz.4.28'. [ 109.684163][ T59] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 109.684204][ T59] CPU: 0 UID: 0 PID: 59 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 109.684225][ T59] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 109.684235][ T59] Workqueue: hci4 hci_rx_work [ 109.684272][ T59] Call Trace: [ 109.684279][ T59] [ 109.684286][ T59] dump_stack_lvl+0xe8/0x150 [ 109.684309][ T59] sysfs_create_dir_ns+0x271/0x2a0 [ 109.684333][ T59] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 109.684352][ T59] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 109.684381][ T59] ? rt_spin_unlock+0x160/0x200 [ 109.684401][ T59] kobject_add_internal+0x631/0xd10 [ 109.684432][ T59] kobject_add+0x163/0x240 [ 109.684458][ T59] ? __pfx_kobject_add+0x10/0x10 [ 109.684487][ T59] ? get_device_parent+0x370/0x3a0 [ 109.684511][ T59] device_add+0x408/0xbb0 [ 109.684533][ T59] hci_conn_add_sysfs+0xd5/0x210 [ 109.684560][ T5924] usb usb8: usbfs: process 5924 (syz.4.36) did not claim interface 0 before use [ 109.684556][ T59] le_conn_complete_evt+0x10e6/0x16b0 [ 109.684590][ T59] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 109.684619][ T59] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 109.684639][ T59] ? lockdep_hardirqs_on+0x7a/0x110 [ 109.684661][ T59] ? skb_pull_data+0xfb/0x200 [ 109.684690][ T59] hci_le_enh_conn_complete_evt+0x189/0x490 [ 109.684726][ T59] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 109.684754][ T59] hci_event_packet+0x659/0xef0 [ 109.684781][ T59] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 109.684797][ T59] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 109.684817][ T59] ? __pfx_hci_event_packet+0x10/0x10 [ 109.684836][ T59] ? rt_spin_unlock+0x14f/0x200 [ 109.684861][ T59] ? hci_send_to_monitor+0xe2/0x590 [ 109.684889][ T59] hci_rx_work+0x3ee/0x1040 [ 109.684915][ T59] ? process_scheduled_works+0xa70/0x1860 [ 109.684937][ T59] process_scheduled_works+0xb5d/0x1860 [ 109.684986][ T59] ? __pfx_process_scheduled_works+0x10/0x10 [ 109.685011][ T59] ? assign_work+0x3d5/0x5e0 [ 109.685034][ T59] worker_thread+0xa53/0xfc0 [ 109.685078][ T59] kthread+0x388/0x470 [ 109.685100][ T59] ? __pfx_worker_thread+0x10/0x10 [ 109.685117][ T59] ? __pfx_kthread+0x10/0x10 [ 109.685140][ T59] ret_from_fork+0x514/0xb70 [ 109.685162][ T59] ? __pfx_ret_from_fork+0x10/0x10 [ 109.685182][ T59] ? __switch_to+0xc79/0x1410 [ 109.685209][ T59] ? __pfx_kthread+0x10/0x10 [ 109.685234][ T59] ret_from_fork_asm+0x1a/0x30 [ 109.685273][ T59] [ 109.687767][ T59] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 109.687810][ T59] Bluetooth: hci4: failed to register connection device [ 110.783992][ T5931] netlink: 24 bytes leftover after parsing attributes in process `syz.1.38'. [ 110.787608][ T5931] netlink: 67 bytes leftover after parsing attributes in process `syz.1.38'. [ 111.972918][ C1] Unknown status report in ack skb [ 112.495838][ T5947] netlink: 4 bytes leftover after parsing attributes in process `syz.4.42'. [ 117.136951][ T5964] kAFS: unable to lookup cell '(,c¾ûL' [ 118.455587][ T5991] Zero length message leads to an empty skb [ 120.124324][ T6014] overlayfs: missing 'lowerdir' [ 124.907945][ T31] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 125.561995][ T6046] faux_driver vgem: [drm] Unknown color mode 11173; guessing buffer size. [ 126.372499][ T31] usb 1-1: device not accepting address 2, error -71 [ 129.998173][ T6069] bridge_slave_0: left allmulticast mode [ 129.998205][ T6069] bridge_slave_0: left promiscuous mode [ 130.024067][ T6069] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.722304][ T6069] bridge_slave_1: left allmulticast mode [ 130.722337][ T6069] bridge_slave_1: left promiscuous mode [ 130.722529][ T6069] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.352541][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.352630][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.540028][ T6069] bond0: (slave bond_slave_0): Releasing backup interface [ 134.797569][ T6069] bond0: (slave bond_slave_1): Releasing backup interface [ 135.651638][ T6069] team0: Port device team_slave_0 removed [ 135.703609][ T6069] team0: Port device team_slave_1 removed [ 135.704164][ T6069] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.704178][ T6069] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.873346][ T6069] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.873363][ T6069] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.902181][ T6069] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 136.802136][ T6070] team0: Mode changed to "loadbalance" [ 137.084183][ T6118] ======================================================= [ 137.084183][ T6118] WARNING: The mand mount option has been deprecated and [ 137.084183][ T6118] and is ignored by this kernel. Remove the mand [ 137.084183][ T6118] option from the mount to silence this warning. [ 137.084183][ T6118] ======================================================= [ 139.057811][ T6144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.95'. [ 139.875488][ T6156] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 146.819709][ T6201] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 146.819763][ T6201] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 146.898416][ T36] audit: type=1326 audit(1778731959.883:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6199 comm="syz.3.115" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3ecb2ce59 code=0x7ffc0000 [ 146.898467][ T36] audit: type=1326 audit(1778731959.883:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6199 comm="syz.3.115" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3ecb2ce59 code=0x7ffc0000 [ 146.898505][ T36] audit: type=1326 audit(1778731959.883:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6199 comm="syz.3.115" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fc3ecb2ce59 code=0x7ffc0000 [ 146.898555][ T36] audit: type=1326 audit(1778731959.883:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6199 comm="syz.3.115" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3ecb2ce59 code=0x7ffc0000 [ 146.898592][ T36] audit: type=1326 audit(1778731959.893:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6199 comm="syz.3.115" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3ecb2ce59 code=0x7ffc0000 [ 146.898629][ T36] audit: type=1326 audit(1778731959.893:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6199 comm="syz.3.115" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc3ecb2ce59 code=0x7ffc0000 [ 146.898672][ T36] audit: type=1326 audit(1778731959.893:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6199 comm="syz.3.115" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3ecb2ce59 code=0x7ffc0000 [ 146.898710][ T36] audit: type=1326 audit(1778731959.893:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6199 comm="syz.3.115" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3ecb2ce59 code=0x7ffc0000 [ 152.367863][ T31] libceph: connect (1)[c::]:6789 error -101 [ 152.417450][ T31] libceph: mon0 (1)[c::]:6789 connect error [ 152.516904][ T6238] ceph: No mds server is up or the cluster is laggy [ 152.569498][ T6254] input: syz0 as /devices/virtual/input/input5 [ 152.781934][ T31] libceph: connect (1)[c::]:6789 error -101 [ 152.782155][ T31] libceph: mon0 (1)[c::]:6789 connect error [ 153.666144][ T6265] netlink: 4 bytes leftover after parsing attributes in process `syz.3.131'. [ 154.028340][ T6273] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 154.460457][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 156.339988][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 157.163090][ T6292] 9pnet_fd: p9_fd_create_tcp (6292): problem connecting socket to 127.0.0.1 [ 157.229905][ T9] usb 1-1: device descriptor read/all, error -71 [ 157.600151][ T6294] input: syz0 as /devices/virtual/input/input6 [ 160.856262][ T5732] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 161.067957][ T5732] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 161.067984][ T5732] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.068001][ T5732] usb 4-1: Product: syz [ 161.068013][ T5732] usb 4-1: Manufacturer: syz [ 161.068025][ T5732] usb 4-1: SerialNumber: syz [ 162.712216][ T6339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.157'. [ 163.864975][ T5732] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 165.246385][ T5732] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 167.904540][ T6372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.163'. [ 168.132399][ T5732] usb 4-1: USB disconnect, device number 2 [ 168.189354][ T6362] [U] ^E   [ 168.585538][ T5732] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 173.026224][ T6424] [U] ^E   [ 177.744738][ T6465] [U] ^E   [ 181.396180][ T6479] 9p: Bad value for 'version' [ 185.490255][ T6505] [U] ^E   [ 191.259928][ T6559] [U] ^E   [ 191.320299][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 191.330296][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 191.340297][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 191.350296][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 191.360324][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 191.370300][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 191.380298][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 191.390299][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 191.400296][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 192.070329][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 193.785239][ T6557] 9pnet_virtio: no channels available for device syz [ 195.395897][ T6574] netlink: 'syz.0.223': attribute type 2 has an invalid length. [ 197.895536][ C0] [ 197.895548][ C0] ====================================================== [ 197.895556][ C0] WARNING: possible circular locking dependency detected [ 197.895578][ C0] syzkaller #0 Not tainted [ 197.895592][ C0] ------------------------------------------------------ [ 197.895599][ C0] syz.0.223/6575 is trying to acquire lock: [ 197.895610][ C0] ffff888062795160 (slock-AF_PHONET/1){+.+.}-{3:3}, at: __sk_receive_skb+0x1bf/0x9e0 [ 197.895679][ C0] [ 197.895679][ C0] but task is already holding lock: [ 197.895686][ C0] ffff8880627962e0 (slock-AF_PHONET){+...}-{3:3}, at: __sk_receive_skb+0x1f1/0x9e0 [ 197.895725][ C0] [ 197.895725][ C0] which lock already depends on the new lock. [ 197.895725][ C0] [ 197.895732][ C0] [ 197.895732][ C0] the existing dependency chain (in reverse order) is: [ 197.895740][ C0] [ 197.895740][ C0] -> #1 (slock-AF_PHONET){+...}-{3:3}: [ 197.895765][ C0] rt_spin_lock+0x83/0x400 [ 197.895788][ C0] __sk_receive_skb+0x1f1/0x9e0 [ 197.895805][ C0] phonet_rcv+0x781/0xc40 [ 197.895821][ C0] process_backlog+0x5e1/0xc60 [ 197.895837][ C0] __napi_poll+0xab/0x550 [ 197.895860][ C0] net_rx_action+0x696/0xe00 [ 197.895876][ C0] handle_softirqs+0x1de/0x6d0 [ 197.895894][ C0] __local_bh_enable_ip+0x170/0x2b0 [ 197.895912][ C0] netif_rx+0xb9/0xf0 [ 197.895932][ C0] pn_send+0x62a/0x8e0 [ 197.895946][ C0] pn_skb_send+0x218/0x510 [ 197.895961][ C0] pipe_snd_status+0x1f1/0x320 [ 197.895977][ C0] pipe_do_rcv+0xf15/0x16a0 [ 197.895994][ C0] __sk_receive_skb+0x962/0x9e0 [ 197.896011][ C0] pep_do_rcv+0x685/0xaa0 [ 197.896028][ C0] __release_sock+0x2a9/0x3d0 [ 197.896049][ C0] release_sock+0x1be/0x290 [ 197.896066][ C0] pep_sock_accept+0xd47/0x11e0 [ 197.896082][ C0] pn_socket_accept+0xc1/0x310 [ 197.896106][ C0] do_accept+0x52b/0x760 [ 197.896122][ C0] __sys_accept4+0x139/0x230 [ 197.896139][ C0] __x64_sys_accept4+0x9a/0xb0 [ 197.896156][ C0] do_syscall_64+0x15f/0xf80 [ 197.896176][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.896193][ C0] [ 197.896193][ C0] -> #0 (slock-AF_PHONET/1){+.+.}-{3:3}: [ 197.896223][ C0] __lock_acquire+0x15a5/0x2cf0 [ 197.896244][ C0] lock_acquire+0x106/0x350 [ 197.896265][ C0] rt_spin_lock_nested+0x81/0x3f0 [ 197.896281][ C0] __sk_receive_skb+0x1bf/0x9e0 [ 197.896297][ C0] pep_do_rcv+0x685/0xaa0 [ 197.896314][ C0] __sk_receive_skb+0x962/0x9e0 [ 197.896330][ C0] phonet_rcv+0x781/0xc40 [ 197.896345][ C0] process_backlog+0x5e1/0xc60 [ 197.896361][ C0] __napi_poll+0xab/0x550 [ 197.896384][ C0] net_rx_action+0x696/0xe00 [ 197.896400][ C0] handle_softirqs+0x1de/0x6d0 [ 197.896417][ C0] __local_bh_enable_ip+0x170/0x2b0 [ 197.896434][ C0] netif_rx+0xb9/0xf0 [ 197.896454][ C0] pn_send+0x62a/0x8e0 [ 197.896468][ C0] pn_skb_send+0x218/0x510 [ 197.896482][ C0] pep_sock_close+0x2c1/0x5b0 [ 197.896499][ C0] pn_socket_release+0x9b/0xc0 [ 197.896521][ C0] sock_close+0xc3/0x240 [ 197.896542][ C0] __fput+0x461/0xa70 [ 197.896565][ C0] task_work_run+0x1d9/0x270 [ 197.896588][ C0] exit_to_user_mode_loop+0xf3/0x4d0 [ 197.896608][ C0] do_syscall_64+0x33e/0xf80 [ 197.896628][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.896645][ C0] [ 197.896645][ C0] other info that might help us debug this: [ 197.896645][ C0] [ 197.896651][ C0] Possible unsafe locking scenario: [ 197.896651][ C0] [ 197.896657][ C0] CPU0 CPU1 [ 197.896663][ C0] ---- ---- [ 197.896669][ C0] lock(slock-AF_PHONET); [ 197.896681][ C0] lock(slock-AF_PHONET/1); [ 197.896700][ C0] lock(slock-AF_PHONET); [ 197.896714][ C0] lock(slock-AF_PHONET/1); [ 197.896730][ C0] [ 197.896730][ C0] *** DEADLOCK *** [ 197.896730][ C0] [ 197.896740][ C0] 7 locks held by syz.0.223/6575: [ 197.896751][ C0] #0: ffff8880617fd3b8 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 197.896812][ C0] #1: ffff888062795ad8 (sk_lock-AF_PHONET){+.+.}-{0:0}, at: pep_sock_close+0x86/0x5b0 [ 197.896855][ C0] #2: ffffffff8dfc8140 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 197.896898][ C0] #3: ffffffff8dfc8140 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x271/0xc60 [ 197.896940][ C0] #4: ffff8880627962e0 (slock-AF_PHONET){+...}-{3:3}, at: __sk_receive_skb+0x1f1/0x9e0 [ 197.896980][ C0] #5: ffffffff8dfc8140 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 197.897015][ C0] #6: ffff888062796398 (sk_lock-AF_PHONET){+.+.}-{0:0}, at: phonet_rcv+0x781/0xc40 [ 197.897052][ C0] [ 197.897052][ C0] stack backtrace: [ 197.897069][ C0] CPU: 0 UID: 0 PID: 6575 Comm: syz.0.223 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 197.897090][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 197.897102][ C0] Call Trace: [ 197.897108][ C0] [ 197.897116][ C0] dump_stack_lvl+0xe8/0x150 [ 197.897137][ C0] print_circular_bug+0x2e1/0x300 [ 197.897156][ C0] check_noncircular+0x12e/0x150 [ 197.897184][ C0] __lock_acquire+0x15a5/0x2cf0 [ 197.897208][ C0] ? try_to_take_rt_mutex+0x840/0xb00 [ 197.897232][ C0] ? __sk_receive_skb+0x1bf/0x9e0 [ 197.897247][ C0] lock_acquire+0x106/0x350 [ 197.897268][ C0] ? __sk_receive_skb+0x1bf/0x9e0 [ 197.897286][ C0] ? sk_filter_trim_cap+0x8f1/0xce0 [ 197.897314][ C0] rt_spin_lock_nested+0x81/0x3f0 [ 197.897330][ C0] ? __sk_receive_skb+0x1bf/0x9e0 [ 197.897348][ C0] ? __pfx_sk_filter_trim_cap+0x10/0x10 [ 197.897370][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 197.897393][ C0] ? __pfx_rt_spin_lock_nested+0x10/0x10 [ 197.897411][ C0] ? rt_spin_lock+0x1e0/0x400 [ 197.897430][ C0] __sk_receive_skb+0x1bf/0x9e0 [ 197.897452][ C0] pep_do_rcv+0x685/0xaa0 [ 197.897472][ C0] ? __pfx_pep_do_rcv+0x10/0x10 [ 197.897507][ C0] ? __pfx_pep_do_rcv+0x10/0x10 [ 197.897524][ C0] ? phonet_rcv+0x781/0xc40 [ 197.897539][ C0] __sk_receive_skb+0x962/0x9e0 [ 197.897559][ C0] phonet_rcv+0x781/0xc40 [ 197.897574][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 197.897595][ C0] ? __pfx_phonet_rcv+0x10/0x10 [ 197.897611][ C0] ? process_backlog+0x271/0xc60 [ 197.897628][ C0] ? process_backlog+0x271/0xc60 [ 197.897645][ C0] ? __pfx_phonet_rcv+0x10/0x10 [ 197.897662][ C0] process_backlog+0x5e1/0xc60 [ 197.897686][ C0] __napi_poll+0xab/0x550 [ 197.897714][ C0] net_rx_action+0x696/0xe00 [ 197.897738][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 197.897755][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 197.897785][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 197.897812][ C0] ? enqueue_to_backlog+0x340/0xcb0 [ 197.897840][ C0] handle_softirqs+0x1de/0x6d0 [ 197.897863][ C0] __local_bh_enable_ip+0x170/0x2b0 [ 197.897884][ C0] netif_rx+0xb9/0xf0 [ 197.897905][ C0] pn_send+0x62a/0x8e0 [ 197.897925][ C0] pn_skb_send+0x218/0x510 [ 197.897944][ C0] pep_sock_close+0x2c1/0x5b0 [ 197.897963][ C0] pn_socket_release+0x9b/0xc0 [ 197.897988][ C0] sock_close+0xc3/0x240 [ 197.898011][ C0] ? __pfx_sock_close+0x10/0x10 [ 197.898035][ C0] __fput+0x461/0xa70 [ 197.898063][ C0] task_work_run+0x1d9/0x270 [ 197.898088][ C0] ? __pfx_task_work_run+0x10/0x10 [ 197.898115][ C0] exit_to_user_mode_loop+0xf3/0x4d0 [ 197.898137][ C0] ? rcu_is_watching+0x15/0xb0 [ 197.898163][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.898183][ C0] do_syscall_64+0x33e/0xf80 [ 197.898205][ C0] ? clear_bhb_loop+0x40/0x90 [ 197.898225][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.898244][ C0] RIP: 0033:0x7f92600fce59 [ 197.898268][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.898284][ C0] RSP: 002b:00007f925e32d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 197.898303][ C0] RAX: 0000000000000000 RBX: 00007f9260376090 RCX: 00007f92600fce59 [ 197.898316][ C0] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000009 [ 197.898328][ C0] RBP: 00007f9260192d6f R08: 0000000000000000 R09: 0000000000000000 [ 197.898340][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 197.898351][ C0] R13: 00007f9260376128 R14: 00007f9260376090 R15: 00007fff69d0f6a8 [ 197.898372][ C0] [ 199.302172][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.302217][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 206.501601][ T5614] Bluetooth: hci2: command 0x0406 tx timeout [ 206.501642][ T5614] Bluetooth: hci1: command 0x0406 tx timeout [ 206.501658][ T5614] Bluetooth: hci4: command 0x0406 tx timeout [ 206.501676][ T5614] Bluetooth: hci3: command 0x0406 tx timeout [ 206.501694][ T5614] Bluetooth: hci0: command 0x0406 tx timeout