last executing test programs: 21m4.047736375s ago: executing program 32 (id=276): connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r3 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r4 = fanotify_init(0xf00, 0x1) fanotify_mark(r4, 0x105, 0x40009975, r3, 0x0) fallocate(r2, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) 20m48.063359337s ago: executing program 33 (id=292): connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r3 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r4 = fanotify_init(0xf00, 0x1) fanotify_mark(r4, 0x105, 0x40009975, r3, 0x0) fallocate(r2, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) 20m46.422188074s ago: executing program 34 (id=301): openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0x193, 0x1, 0x3, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x4, 0x4}, {0x2, 0x9}}}}, 0x11) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000805000100070000000900020073797a30000000001400078008001240001500000500150020000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x60300, 0x0) 18m15.933785688s ago: executing program 35 (id=433): write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1038, 0x12b6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x760, 0x103382) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000) sendmmsg$unix(r1, &(0x7f0000000540), 0x0, 0x4040880) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000140), 0x8) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1400000029000b0027bd72000008000005000004f8f362d0f0f4e97098b58296bf8a62a43cd9c4d7041e7f8d620c59e6a34c3a394c5b82d9daf65dc664b43bada99fcabe26f1472a067cc5771b049bdf909cda144b46a10cf11494410f9ab43cf1ecb1a22ba85aa67f7f792529888e2d06df31f9742673d169eb6d8f390b1be7"], 0x14}}, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x80402) pwrite64(r5, 0x0, 0x0, 0x9) 15m48.186362462s ago: executing program 5 (id=538): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x541b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) 15m46.85615682s ago: executing program 5 (id=540): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) syz_clone(0x10028100, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff, r3}) close(r2) 15m45.621403493s ago: executing program 5 (id=541): openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000805000100070000000900020073797a30000000001400078008001240001500000500150020000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x60300, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x2c, 0x0, 0x8, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88fb}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0441}, 0x4008000) openat$random(0xffffffffffffff9c, &(0x7f00000001c0), 0x20a40, 0x0) 15m39.495382089s ago: executing program 5 (id=542): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = creat(0x0, 0xecf86c37d53049cc) close(r3) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) 15m39.493897127s ago: executing program 6 (id=545): r0 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) 15m38.419595189s ago: executing program 6 (id=547): openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0x193, 0x1, 0x3, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x4, 0x4}, {0x2, 0x9}}}}, 0x11) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000805000100070000000900020073797a30000000001400078008001240001500000500150020000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x60300, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x2c, 0x0, 0x8, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88fb}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0441}, 0x4008000) r5 = openat$random(0xffffffffffffff9c, &(0x7f00000001c0), 0x20a40, 0x0) read(r5, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x8000, r3, 0x0, 0x0, 0x0, 0x0, 0x2}]) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x1, 0x1, 0x0, 0x2000, &(0x7f0000b07000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x4048aecb, &(0x7f0000000000)) 15m34.275609068s ago: executing program 6 (id=550): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) prlimit64(0x0, 0xe, 0x0, 0x0) syz_clone(0x10028100, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff, r3}) close(r2) 15m33.226126543s ago: executing program 6 (id=552): openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000805000100070000000900020073797a30000000001400078008001240001500000500150020000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x60300, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x2c, 0x0, 0x8, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88fb}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0441}, 0x4008000) openat$random(0xffffffffffffff9c, &(0x7f00000001c0), 0x20a40, 0x0) 15m31.656872555s ago: executing program 6 (id=553): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x1, 0x21, 0x0, {0x77359400}, {}, {0x0, 0x0, 0x1}, 0x1, @can={{}, 0x4, 0x3, 0x0, 0x0, "d6179242917c4150"}}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004080) 15m31.469866786s ago: executing program 5 (id=555): r0 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') getdents64(r2, &(0x7f0000000fc0)=""/224, 0xe0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) 15m31.406256433s ago: executing program 6 (id=556): connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') fanotify_init(0xf00, 0x1) fallocate(0xffffffffffffffff, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0) 15m30.434592969s ago: executing program 5 (id=558): openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0x193, 0x1, 0x3, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x4, 0x4}, {0x2, 0x9}}}}, 0x11) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000805000100070000000900020073797a30000000001400078008001240001500000500150020000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x60300, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x2c, 0x0, 0x8, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88fb}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0441}, 0x4008000) r6 = openat$random(0xffffffffffffff9c, &(0x7f00000001c0), 0x20a40, 0x0) read(r6, 0x0, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r7, 0x1, &(0x7f00000000c0)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x8000, r4, 0x0, 0x0, 0x0, 0x0, 0x2}]) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) 15m14.347244658s ago: executing program 36 (id=556): connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') fanotify_init(0xf00, 0x1) fallocate(0xffffffffffffffff, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0) 15m13.348396935s ago: executing program 37 (id=558): openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0x193, 0x1, 0x3, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x4, 0x4}, {0x2, 0x9}}}}, 0x11) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000805000100070000000900020073797a30000000001400078008001240001500000500150020000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x60300, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x2c, 0x0, 0x8, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88fb}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0441}, 0x4008000) r6 = openat$random(0xffffffffffffff9c, &(0x7f00000001c0), 0x20a40, 0x0) read(r6, 0x0, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r7, 0x1, &(0x7f00000000c0)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x8000, r4, 0x0, 0x0, 0x0, 0x0, 0x2}]) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) 10m24.703103228s ago: executing program 1 (id=885): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20) recvmsg$unix(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}, 0x10040) 10m23.319672182s ago: executing program 1 (id=890): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) creat(0x0, 0xecf86c37d53049cc) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000), 0x0) accept4(r0, 0x0, 0x0, 0x80800) 10m21.042200912s ago: executing program 1 (id=893): timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pwritev2(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0xe7b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56", 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x100000000004, 0x0, 0x106, 0x8}}, 0x20) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x51, 0x0, 0x0) 10m19.28639661s ago: executing program 1 (id=896): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x1c000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 10m16.138589871s ago: executing program 1 (id=899): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004041, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f00000007c0)={0x48, 0x2, r4}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r4, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) 10m13.394078793s ago: executing program 1 (id=902): r0 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') getdents64(r2, &(0x7f0000000fc0)=""/224, 0xe0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) 10m12.886313786s ago: executing program 7 (id=905): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000009c0)=@bridge_getlink={0x28, 0x12, 0x101, 0x0, 0xffffffe0, {0x7, 0x0, 0x0, 0x0, 0x84f8, 0x4000}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xfffffffd}]}, 0x28}, 0x1, 0x0, 0x0, 0x4050}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000200)={0x0, 0x0, 0x3, 0x1fd}) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) clock_nanosleep(0x9, 0x64, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, 0x0, 0x0) listen(r3, 0x3) syz_emit_ethernet(0x42, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3, 0x28, 0xda1c, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4, 0x0, 0x0, 0x1000}}}}}}, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100)='befs\x00', 0x214003, 0x0) 10m10.772104596s ago: executing program 7 (id=907): timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pwritev2(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0xe7b, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56", 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x100000000004, 0x0, 0x106, 0x8}}, 0x20) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x51, 0x0, 0x0) 10m9.028211834s ago: executing program 7 (id=911): r0 = fsopen(&(0x7f0000000300)='jfs\x00', 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) mkdir(&(0x7f0000000380)='./file1\x00', 0xa) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') openat$autofs(0xffffffffffffff9c, 0x0, 0x100, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r1, 0x1) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 10m6.908744846s ago: executing program 7 (id=913): syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0xf) 10m5.53490793s ago: executing program 7 (id=916): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000300)={0x0, 0x0, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffebe, 0x19, 0x0, r2}) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x0, 0x0, 0x9, 0x1}}, 0x26) r4 = syz_open_dev$vim2m(&(0x7f0000000280), 0x5, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000001c0)=@userptr={0xb, 0x0, 0x4, 0x800, 0x9, {}, {0x2, 0xc3a360ab3b82f309, 0x9, 0x8, 0x5, 0x6, "1540043c"}, 0x6, 0x2, {&(0x7f0000000140)}, 0x8}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000100)=0x1) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r3) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r5, @ANYBLOB="20002bbd7000fedbdf250700000008000100750000000c009900fbffffff7b00000008000500030000000400cc0005005300000018001400040064766d727031000000000000000000000a00e80008021100000100001c00e70008466f0424fa06dbc33f2fdd72cf065ac68150c151a1c2cb0a00e800ffffffffff"], 0xac}, 0x1, 0x0, 0x0, 0x48014}, 0x40800) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x1, @remote, 0x7}, 0x1c) connect$pppl2tp(r6, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) r7 = userfaultfd(0x80801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x100}) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, 0x0, 0x7f, 0x0) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffc000/0x2000)=nil) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000), 0x8) r9 = socket$packet(0x11, 0x2, 0x300) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x2000}, 0x4) r11 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r11, &(0x7f0000000100), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 9m58.309667431s ago: executing program 7 (id=923): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x20) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x800) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0) sendmmsg$unix(r5, &(0x7f0000000680), 0x4924924924925c6, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) readv(r3, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000180)=@multiplanar_fd={0x593, 0x0, 0x4, 0x4, 0x1, {}, {0x5, 0x0, 0x6, 0xb7, 0xe, 0xf8, "48b3dafa"}, 0xe0ed, 0x4, {&(0x7f0000000240)=[{0x81, 0x5e4a, {}, 0x6}, {0x81, 0x9, {}, 0x1ff}]}, 0x30d}) close_range(r2, 0xffffffffffffffff, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0x21, &(0x7f0000000000)=0x2, 0x4) r7 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r7, 0xc040565e, &(0x7f0000000900)={0x1, 0x102, 0x1, {0x9, 0x80, 0x6, 0x82}}) 9m57.319574354s ago: executing program 38 (id=902): r0 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') getdents64(r2, &(0x7f0000000fc0)=""/224, 0xe0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) 9m42.574933779s ago: executing program 39 (id=923): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x20) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x800) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0) sendmmsg$unix(r5, &(0x7f0000000680), 0x4924924924925c6, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) readv(r3, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000180)=@multiplanar_fd={0x593, 0x0, 0x4, 0x4, 0x1, {}, {0x5, 0x0, 0x6, 0xb7, 0xe, 0xf8, "48b3dafa"}, 0xe0ed, 0x4, {&(0x7f0000000240)=[{0x81, 0x5e4a, {}, 0x6}, {0x81, 0x9, {}, 0x1ff}]}, 0x30d}) close_range(r2, 0xffffffffffffffff, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0x21, &(0x7f0000000000)=0x2, 0x4) r7 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r7, 0xc040565e, &(0x7f0000000900)={0x1, 0x102, 0x1, {0x9, 0x80, 0x6, 0x82}}) 4m4.082975373s ago: executing program 9 (id=1481): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 4m3.502674715s ago: executing program 9 (id=1483): r0 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) 4m1.655810193s ago: executing program 9 (id=1486): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x541b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r4, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) write$UHID_SET_REPORT_REPLY(r4, &(0x7f00000007c0)=ANY=[], 0xffe0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r6, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x971}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004015}, 0x448d0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00042cbd7000fedbdf257900000008000300", @ANYRES32, @ANYBLOB="0c00000400f4000400f400"/24], 0x34}, 0x1, 0x0, 0x0, 0x885}, 0x0) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, 0x0, 0x0) 4m0.43557783s ago: executing program 9 (id=1488): connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r2 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r3 = fanotify_init(0xf00, 0x1) fanotify_mark(r3, 0x105, 0x40009975, r2, 0x0) fallocate(r1, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) 3m57.78338509s ago: executing program 9 (id=1491): r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000204f045db600000000000109022d0001000060060904001005030001000921000036012205000905810300000cfd07"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00045700"], 0x0, 0x0, 0x0, 0x0}, 0x0) 3m57.066157193s ago: executing program 9 (id=1492): openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r0, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000880)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdad", 0x2c}], 0x2}}], 0x2, 0x11) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085", 0xcb}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3m41.645013778s ago: executing program 40 (id=1492): openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r0, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000880)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdad", 0x2c}], 0x2}}], 0x2, 0x11) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085", 0xcb}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1m45.615672916s ago: executing program 4 (id=1676): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) socket$packet(0x11, 0x3, 0x300) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$vim2m(0x0, 0x8004, 0x2) socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20) recvmsg$unix(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}, 0x10040) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 1m41.746213825s ago: executing program 4 (id=1680): r0 = inotify_init() syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000000084ffe4006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x76, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_open_dev$usbmon(0x0, 0x400, 0x208000) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$pppoe(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'veth1\x00'}}, 0x1e) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m40.317496199s ago: executing program 4 (id=1684): socket(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[], 0xffe0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1m35.650557502s ago: executing program 2 (id=1693): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x80}, 0x1, 0x0, 0x0, 0x840}, 0x0) 1m35.391584527s ago: executing program 4 (id=1695): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x25, 0x1, 0x0) sendmmsg$unix(r4, &(0x7f0000004400), 0x400000000000203, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/18], 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r5, 0x26, 0x0, @void}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)}, 0x0) close(r6) r8 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) fchdir(r9) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r10, &(0x7f00000001c0)={0x13, 0x10, 0xfa00, {0x0, r11, 0x1b}}, 0x18) sendmsg$nl_route(r9, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x200000c0}, 0x40) 1m33.326436715s ago: executing program 4 (id=1697): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 1m32.922701614s ago: executing program 2 (id=1699): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004041, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f00000007c0)={0x48, 0x2, r4}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r4, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) 1m32.436511742s ago: executing program 4 (id=1700): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f00000007c0)={0x48, 0x2, r4}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r4, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) 1m31.40291358s ago: executing program 2 (id=1702): mkdir(&(0x7f0000000140)='./control\x00', 0x8) r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000180)='./control\x00', 0xa4000960) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000280)='./control\x00') 1m27.733595244s ago: executing program 2 (id=1706): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x25, 0x1, 0x0) sendmmsg$unix(r4, &(0x7f0000004400), 0x400000000000203, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/18], 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r5, 0x26, 0x0, @void}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)}, 0x0) close(r6) r8 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) fchdir(r9) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r10, &(0x7f00000001c0)={0x13, 0x10, 0xfa00, {0x0, r11, 0x1b}}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 1m25.745524114s ago: executing program 2 (id=1707): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x541b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r4, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) write$UHID_SET_REPORT_REPLY(r4, &(0x7f00000007c0)=ANY=[], 0xffe0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00042cbd7000fedbdf257900000008000300", @ANYRES32=r6, @ANYBLOB="0c00000400f4000400f400"/24], 0x34}, 0x1, 0x0, 0x0, 0x885}, 0x0) 1m23.339567493s ago: executing program 2 (id=1711): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) socket$packet(0x11, 0x3, 0x300) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$vim2m(0x0, 0x8004, 0x2) socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20) recvmsg$unix(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}, 0x10040) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 1m17.176808187s ago: executing program 41 (id=1700): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f00000007c0)={0x48, 0x2, r4}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r4, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) 1m7.8827918s ago: executing program 42 (id=1711): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) socket$packet(0x11, 0x3, 0x300) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$vim2m(0x0, 0x8004, 0x2) socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20) recvmsg$unix(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}, 0x10040) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 9.790411107s ago: executing program 8 (id=1861): r0 = socket$inet(0x2, 0x4, 0x8) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = syz_open_procfs$namespace(0x0, 0x0) ioctl$EXT4_IOC_SETFSUUID(r1, 0x8004b708, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @mcast1, 0x2}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000200)=[{&(0x7f0000000240)="580000001400add427323b472545b45602117fffffff81004e210e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000", 0x40}, {&(0x7f0000000100)="2a090ae06f43c8f260a64ab6b38c3cdd3384437f7821ef85", 0x18}], 0x2) 9.612182291s ago: executing program 8 (id=1862): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x0) socket(0x8, 0x3, 0x0) socket(0x8, 0x0, 0x8000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'mangle\x00', 0x0, [0x8, 0x0, 0x7, 0x4, 0x9]}, &(0x7f0000000200)=0x54) 6.635893926s ago: executing program 0 (id=1874): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x1, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r0}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r0}, 0x38) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, 0x0, 0x0) 6.144259501s ago: executing program 0 (id=1875): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r1) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x38, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x38}}, 0x0) 5.884653851s ago: executing program 0 (id=1876): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a00000095"], &(0x7f0000000200)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001680)={r2, r1, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}, 0x3c) syz_emit_ethernet(0x10c6, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa"], 0x0) 2.427096263s ago: executing program 0 (id=1878): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, r0, 0x0) r1 = socket(0x14, 0x2, 0x4) recvfrom$inet6(r1, 0x0, 0x0, 0x40010120, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) 2.279051651s ago: executing program 3 (id=1879): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 1.953300931s ago: executing program 3 (id=1880): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x14, 0x0, &(0x7f00000007c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a010200000000000000000100fffe0900010073797a30000000000900030073797a3213000000dc000000060a010400000000000000000100000508000b4000000000b4000480200001800d00010073796e70726f7879000000000c000280060001400000000034000180080001006c6f670028000280080006400000000d110002402b24292d2d2a5d"], 0x150}}, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000440)={'raw\x00', 0x0, [0x630, 0x3, 0x7fff, 0x80000000, 0xe]}, &(0x7f00000003c0)=0x54) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) socket$inet6(0xa, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) 1.239698532s ago: executing program 0 (id=1881): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0xa, 0x8}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x2, 0x10001, 0x9, 0x1, 0x1, 0x3, 0x10001, 0xb9a9, 0x40}}}}]}, 0x58}}, 0x44840) 1.048083542s ago: executing program 3 (id=1882): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000240)={0x24, @short={0x2, 0x1, 0xaaa0}}, 0x14) sendmmsg$inet(r0, &(0x7f0000005940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4800) 1.047304881s ago: executing program 8 (id=1883): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @echo_reply={0x0, 0x0, 0x0, 0x68, 0xe}}}}}, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r1, &(0x7f0000001c00)={0x0, 0x0, 0x0}, 0x41) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) syz_genetlink_get_family_id$mptcp(0x0, r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, 0x0, 0x0) r3 = accept(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r3, 0x0, 0x0, 0x10142, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r4) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="f5af24bd7000000000000e00000008000300", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 989.875567ms ago: executing program 3 (id=1884): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x3c}}, 0x0) 849.529607ms ago: executing program 8 (id=1885): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, 0x0, 0x0) unshare(0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) getsockopt(r1, 0x110, 0x9, 0x0, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockopt$sock_buf(r3, 0x1, 0x37, 0x0, &(0x7f0000001000)=0x29) r4 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) sendmsg$inet(r4, &(0x7f0000003740)={0x0, 0x0, 0x0}, 0x4004004) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r6, 0x300, 0x70bd25, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x801) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r7, 0x8919, &(0x7f00000002c0)={'batadv0\x00', {0x2, 0x0, @dev}}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, 0x7, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x24000004) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)) 587.820164ms ago: executing program 8 (id=1886): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000000000701042000000000000000000000000c0006400000000000000808090001fd88e5789863c7dd0073797a31000000000800054000000002"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mlxsw_sp_acl_tcam_vregion_migrate_end\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000300)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r2, @ANYBLOB="000300000001000000000c0000007c00018008000300020000001400020076657468315f746f5f6261746164760008000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="1400020069703665727370616e300000000000001400020069703665727370616e3000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020073797a5f74756e0000000000000000000800030002000000180001801400020076657468305f746f5f62"], 0xa8}}, 0x10000000) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) socket$rxrpc(0x21, 0x2, 0x2) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r4, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x34}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2c}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000fa8db4a000071102500"/36], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 587.082813ms ago: executing program 3 (id=1887): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x63, 0x0, &(0x7f0000000000)="ff", 0x0, 0x149d, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe) sendmmsg$inet_sctp(r2, 0x0, 0x0, 0x0) getpeername$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, 0x0) 527.098355ms ago: executing program 0 (id=1888): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@delchain={0x134, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0xf8, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xe0, 0x1, [@m_simple={0x60, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x32, 0x6, "b0024569afedec0626fbbc41a7ec997eb30f0b4a8d99c8f21c5bab98069474c0b93e701b06b846aa63eec457ef40"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_connmark={0x7c, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x4c, 0x6, "0ef6a460a5bbda16e826eafe044d3376872c48b74ae60f057b238fb15e2207986c5639bfbc3d91ee00b5a433e95b6b3527d9711d16abc0abaea927bcdffe4d3ec14fb6fca0407429"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x134}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 439.055104ms ago: executing program 8 (id=1889): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000007380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x40, r1, 0xe096044a3fc9e6f1, 0x3, 0x4000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_FLAGS={0x4}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x2f9}]}, 0x40}}, 0x8050) 0s ago: executing program 3 (id=1890): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) close(r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff}, [@jmp={0x5, 0x0, 0x849aee721dcc84be, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffe, 0xd1}]}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r0}, 0x18) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) kernel console output (not intermixed with test programs): idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 987.868303][ T8751] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.880862][ T8751] usb 4-1: config 0 descriptor?? [ 989.425704][ T5786] usb 4-1: USB disconnect, device number 8 [ 990.754957][T10266] Bluetooth: hci4: command 0x0406 tx timeout [ 990.974389][ T5816] Bluetooth: hci6: command 0x0406 tx timeout [ 994.541488][T10266] Bluetooth: hci4: ACL packet for unknown connection handle 403 [ 998.458193][ C1] vkms_vblank_simulate: vblank timer overrun [ 998.622597][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.622676][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 999.515105][ C1] vkms_vblank_simulate: vblank timer overrun [ 999.956828][ C1] vkms_vblank_simulate: vblank timer overrun [ 1000.596076][ C1] vkms_vblank_simulate: vblank timer overrun [ 1001.123278][T10266] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1001.132536][T10266] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1001.139299][T10266] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1001.147489][T10266] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1001.153534][T10266] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1003.012241][ T5807] Bluetooth: hci5: ACL packet for unknown connection handle 403 [ 1010.116482][ T5807] Bluetooth: hci1: command tx timeout [ 1010.690598][T10359] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1012.139385][T10266] Bluetooth: hci1: command tx timeout [ 1014.215482][T10266] Bluetooth: hci1: command tx timeout [ 1014.741996][T10379] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1016.607529][T10266] Bluetooth: hci1: command tx timeout [ 1017.559368][ T5807] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1017.568519][ T5807] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1017.570134][ T5807] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1017.573643][ T5807] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1017.574665][ T5807] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1019.655366][ T5807] Bluetooth: hci2: command tx timeout [ 1021.325311][ T5807] Bluetooth: hci4: ACL packet for unknown connection handle 403 [ 1021.747444][ T5807] Bluetooth: hci2: command tx timeout [ 1023.815368][ T5807] Bluetooth: hci2: command tx timeout [ 1024.283232][ T3576] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.831503][T10450] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1025.927167][ T5807] Bluetooth: hci2: command tx timeout [ 1026.435699][ T5786] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1026.740097][ T5786] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1026.740259][ T5786] usb 10-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1026.740319][ T5786] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.922408][ T5786] usb 10-1: config 0 descriptor?? [ 1027.175582][ T3576] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.423833][ T5786] video4linux radio48: keene_cmd_set failed (-71) [ 1028.423862][ T5786] radio-keene 10-1:0.0: V4L2 device registered as radio48 [ 1028.498492][ T5786] usb 10-1: USB disconnect, device number 2 [ 1029.694436][ T3576] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1030.027707][ T5807] Bluetooth: hci5: ACL packet for unknown connection handle 403 [ 1038.271797][ T3576] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.301456][T10505] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1038.661660][T10340] chnl_net:caif_netlink_parms(): no params data found [ 1039.085651][T10514] befs: (nullb0): invalid magic header [ 1039.935521][ T5786] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1040.099938][ T5786] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1040.099983][ T5786] usb 10-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1040.100009][ T5786] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.278104][ C0] vkms_vblank_simulate: vblank timer overrun [ 1040.899491][ C0] vkms_vblank_simulate: vblank timer overrun [ 1040.941731][ T5786] usb 10-1: config 0 descriptor?? [ 1041.425932][ C0] vkms_vblank_simulate: vblank timer overrun [ 1041.479109][ C0] vkms_vblank_simulate: vblank timer overrun [ 1042.848291][ C0] vkms_vblank_simulate: vblank timer overrun [ 1042.870314][ T5786] video4linux radio48: keene_cmd_set failed (-110) [ 1042.870344][ T5786] radio-keene 10-1:0.0: V4L2 device registered as radio48 [ 1042.950096][ C0] vkms_vblank_simulate: vblank timer overrun [ 1043.096903][ C0] vkms_vblank_simulate: vblank timer overrun [ 1043.425748][ C0] vkms_vblank_simulate: vblank timer overrun [ 1043.518543][ T6009] usb 10-1: USB disconnect, device number 3 [ 1043.610236][ C0] vkms_vblank_simulate: vblank timer overrun [ 1043.983235][ C0] vkms_vblank_simulate: vblank timer overrun [ 1044.091227][ T5807] Bluetooth: hci6: ACL packet for unknown connection handle 403 [ 1045.141446][T10340] bridge0: port 1(bridge_slave_0) entered blocking state [ 1045.141685][T10340] bridge0: port 1(bridge_slave_0) entered disabled state [ 1045.141961][T10340] bridge_slave_0: entered allmulticast mode [ 1045.209260][T10340] bridge_slave_0: entered promiscuous mode [ 1045.264992][T10340] bridge0: port 2(bridge_slave_1) entered blocking state [ 1045.277502][T10340] bridge0: port 2(bridge_slave_1) entered disabled state [ 1045.277773][T10340] bridge_slave_1: entered allmulticast mode [ 1045.278174][T10562] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1045.333867][T10340] bridge_slave_1: entered promiscuous mode [ 1045.477404][ T3576] bridge_slave_1: left allmulticast mode [ 1045.477428][ T3576] bridge_slave_1: left promiscuous mode [ 1045.477612][ T3576] bridge0: port 2(bridge_slave_1) entered disabled state [ 1045.577077][ T3576] bridge_slave_0: left allmulticast mode [ 1045.577099][ T3576] bridge_slave_0: left promiscuous mode [ 1045.577316][ T3576] bridge0: port 1(bridge_slave_0) entered disabled state [ 1046.605302][ T8632] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 1046.734745][ C0] vkms_vblank_simulate: vblank timer overrun [ 1046.892388][ C0] vkms_vblank_simulate: vblank timer overrun [ 1047.465292][ T8632] usb 9-1: Using ep0 maxpacket: 16 [ 1047.733641][ C0] vkms_vblank_simulate: vblank timer overrun [ 1047.751106][ T8632] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1047.751135][ T8632] usb 9-1: config 0 has no interface number 0 [ 1047.751204][ T8632] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1047.751233][ T8632] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1047.751276][ T8632] usb 9-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1047.751301][ T8632] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.848264][ T8632] usb 9-1: config 0 descriptor?? [ 1048.151095][ C0] vkms_vblank_simulate: vblank timer overrun [ 1048.214969][ C0] vkms_vblank_simulate: vblank timer overrun [ 1048.235703][ T5786] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1048.290819][ C0] vkms_vblank_simulate: vblank timer overrun [ 1048.950167][ T8632] usbhid 9-1:0.1: can't add hid device: -71 [ 1048.950388][ T8632] usbhid 9-1:0.1: probe with driver usbhid failed with error -71 [ 1048.963159][ T8632] usb 9-1: USB disconnect, device number 26 [ 1049.226327][ C0] vkms_vblank_simulate: vblank timer overrun [ 1049.398757][ T5786] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1049.398804][ T5786] usb 10-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1049.398829][ T5786] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1049.431616][ T5786] usb 10-1: config 0 descriptor?? [ 1050.075751][ C0] vkms_vblank_simulate: vblank timer overrun [ 1050.076366][ T5786] (null): keene_cmd_main failed (-110) [ 1050.104172][ T5786] video4linux radio48: keene_cmd_main failed (-32) [ 1050.104200][ T5786] radio-keene 10-1:0.0: V4L2 device registered as radio48 [ 1050.368217][ T5807] Bluetooth: hci5: ACL packet for unknown connection handle 403 [ 1051.607445][ T5886] usb 10-1: USB disconnect, device number 4 [ 1053.777398][ T5807] Bluetooth: hci6: ACL packet for unknown connection handle 403 [ 1054.874875][T10608] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1055.696971][ C1] vkms_vblank_simulate: vblank timer overrun [ 1056.061891][ C1] vkms_vblank_simulate: vblank timer overrun [ 1056.960381][ C1] vkms_vblank_simulate: vblank timer overrun [ 1057.424534][ C1] vkms_vblank_simulate: vblank timer overrun [ 1057.578256][ C1] vkms_vblank_simulate: vblank timer overrun [ 1058.107588][ C1] vkms_vblank_simulate: vblank timer overrun [ 1058.405340][ T5999] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1058.560240][ C1] vkms_vblank_simulate: vblank timer overrun [ 1058.635280][ T5999] usb 10-1: Using ep0 maxpacket: 16 [ 1058.638117][ T5999] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1058.638144][ T5999] usb 10-1: config 0 has no interface number 0 [ 1058.638194][ T5999] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1058.638223][ T5999] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1058.638263][ T5999] usb 10-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1058.638288][ T5999] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1058.644269][ T5999] usb 10-1: config 0 descriptor?? [ 1058.713528][ T5873] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 1058.889325][ T5873] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1058.889371][ T5873] usb 9-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1058.889453][ T5873] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1058.937994][ T3576] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1058.943697][ T5873] usb 9-1: config 0 descriptor?? [ 1058.946315][T10266] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1058.960865][T10266] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1058.963047][T10266] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1058.965962][T10266] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1058.970364][T10266] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1059.062196][ T5999] usbhid 10-1:0.1: can't add hid device: -71 [ 1059.062403][ T5999] usbhid 10-1:0.1: probe with driver usbhid failed with error -71 [ 1059.083738][ T5999] usb 10-1: USB disconnect, device number 5 [ 1059.098293][ T3576] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1059.144252][ T3576] bond0 (unregistering): Released all slaves [ 1059.252270][ C1] vkms_vblank_simulate: vblank timer overrun [ 1059.537499][T10390] chnl_net:caif_netlink_parms(): no params data found [ 1060.304779][ C1] vkms_vblank_simulate: vblank timer overrun [ 1060.597396][ T5873] video4linux radio48: keene_cmd_main failed (-110) [ 1060.597426][ T5873] radio-keene 9-1:0.0: V4L2 device registered as radio48 [ 1060.790222][T10648] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1060.954223][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1060.954303][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1061.031123][ T5807] Bluetooth: hci0: command tx timeout [ 1061.562761][ C0] vkms_vblank_simulate: vblank timer overrun [ 1061.689568][ T5999] usb 9-1: USB disconnect, device number 27 [ 1061.792952][ C0] vkms_vblank_simulate: vblank timer overrun [ 1062.117952][ C0] vkms_vblank_simulate: vblank timer overrun [ 1062.754899][ C0] vkms_vblank_simulate: vblank timer overrun [ 1062.920970][ C0] vkms_vblank_simulate: vblank timer overrun [ 1063.306201][ C0] vkms_vblank_simulate: vblank timer overrun [ 1063.307821][ T5807] Bluetooth: hci0: command tx timeout [ 1063.429024][ C0] vkms_vblank_simulate: vblank timer overrun [ 1063.896568][ C0] vkms_vblank_simulate: vblank timer overrun [ 1064.390966][ C0] vkms_vblank_simulate: vblank timer overrun [ 1064.723229][ C0] vkms_vblank_simulate: vblank timer overrun [ 1065.190868][ C0] vkms_vblank_simulate: vblank timer overrun [ 1065.335224][ T5807] Bluetooth: hci0: command tx timeout [ 1065.806824][ C0] vkms_vblank_simulate: vblank timer overrun [ 1065.859940][ C0] vkms_vblank_simulate: vblank timer overrun [ 1067.396061][T10693] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1067.621372][T10694] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1067.909063][ C0] vkms_vblank_simulate: vblank timer overrun [ 1067.938160][ T5807] Bluetooth: hci0: command tx timeout [ 1068.225316][ T5786] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1068.399478][ T5786] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1068.399524][ T5786] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1068.399549][ T5786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1068.414581][ T5786] usb 4-1: config 0 descriptor?? [ 1068.624974][ C1] vkms_vblank_simulate: vblank timer overrun [ 1068.668224][ C1] vkms_vblank_simulate: vblank timer overrun [ 1068.901781][ C1] vkms_vblank_simulate: vblank timer overrun [ 1069.651656][ T5786] video4linux radio48: keene_cmd_main failed (-110) [ 1069.651686][ T5786] radio-keene 4-1:0.0: V4L2 device registered as radio48 [ 1069.731065][T10390] bridge0: port 1(bridge_slave_0) entered blocking state [ 1069.731207][T10390] bridge0: port 1(bridge_slave_0) entered disabled state [ 1069.731443][T10390] bridge_slave_0: entered allmulticast mode [ 1069.824802][ C1] vkms_vblank_simulate: vblank timer overrun [ 1069.843737][T10390] bridge_slave_0: entered promiscuous mode [ 1070.662353][ C1] vkms_vblank_simulate: vblank timer overrun [ 1071.488795][T10716] befs: (nullb0): invalid magic header [ 1071.518988][ C1] vkms_vblank_simulate: vblank timer overrun [ 1071.721559][ C1] vkms_vblank_simulate: vblank timer overrun [ 1071.725357][ T3576] hsr_slave_0: left promiscuous mode [ 1071.748101][ C1] vkms_vblank_simulate: vblank timer overrun [ 1071.800897][ T5886] usb 4-1: USB disconnect, device number 9 [ 1071.867181][ T3576] hsr_slave_1: left promiscuous mode [ 1071.868182][ T3576] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1071.868208][ T3576] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1072.107700][ C1] vkms_vblank_simulate: vblank timer overrun [ 1072.138547][ T3576] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1072.138586][ T3576] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1072.763916][ C1] vkms_vblank_simulate: vblank timer overrun [ 1073.222151][ T3576] veth1_macvtap: left promiscuous mode [ 1073.222266][ T3576] veth0_macvtap: left promiscuous mode [ 1073.222537][ T3576] veth1_vlan: left promiscuous mode [ 1073.222733][ T3576] veth0_vlan: left promiscuous mode [ 1073.760300][T10739] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1076.518261][T10266] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1076.538359][T10266] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1076.539619][T10266] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1076.541165][T10266] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1076.541975][T10266] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1078.615896][ T5807] Bluetooth: hci1: command tx timeout [ 1078.798969][ T5873] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 1078.972542][ T5873] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1078.972588][ T5873] usb 9-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1078.972615][ T5873] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.082032][ T5873] usb 9-1: config 0 descriptor?? [ 1079.941952][ T5873] (null): keene_cmd_main failed (-110) [ 1079.985961][ T5873] video4linux radio48: keene_cmd_main failed (-32) [ 1079.985992][ T5873] radio-keene 9-1:0.0: V4L2 device registered as radio48 [ 1080.191333][T10771] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1080.711699][ T5807] Bluetooth: hci1: command tx timeout [ 1081.350739][ C0] vkms_vblank_simulate: vblank timer overrun [ 1081.815931][ T6003] usb 9-1: USB disconnect, device number 28 [ 1082.187071][ C0] vkms_vblank_simulate: vblank timer overrun [ 1082.422825][ C0] vkms_vblank_simulate: vblank timer overrun [ 1083.166800][ C0] vkms_vblank_simulate: vblank timer overrun [ 1083.180121][ T5807] Bluetooth: hci1: command tx timeout [ 1083.480929][ T5807] Bluetooth: hci6: ACL packet for unknown connection handle 403 [ 1085.265289][ T5807] Bluetooth: hci1: command tx timeout [ 1085.903912][ C0] vkms_vblank_simulate: vblank timer overrun [ 1087.212993][ T2109] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1087.865799][ T2109] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1087.865844][ T2109] usb 10-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1087.865868][ T2109] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1087.890847][ T2109] usb 10-1: config 0 descriptor?? [ 1088.311911][T10817] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1088.839480][ T2109] video4linux radio48: keene_cmd_set failed (-110) [ 1088.839589][ T2109] radio-keene 10-1:0.0: V4L2 device registered as radio48 [ 1089.724656][T10827] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1090.795937][ C1] vkms_vblank_simulate: vblank timer overrun [ 1090.816398][ T3576] team0 (unregistering): Port device team_slave_1 removed [ 1090.871678][ C1] vkms_vblank_simulate: vblank timer overrun [ 1090.894234][ T5999] usb 10-1: USB disconnect, device number 6 [ 1091.150889][ C1] vkms_vblank_simulate: vblank timer overrun [ 1091.387723][ C1] vkms_vblank_simulate: vblank timer overrun [ 1091.840661][T10834] orangefs_mount: mount request failed with -4 [ 1091.942145][ C1] vkms_vblank_simulate: vblank timer overrun [ 1092.099764][ T3576] team0 (unregistering): Port device team_slave_0 removed [ 1092.474420][ C1] vkms_vblank_simulate: vblank timer overrun [ 1092.557795][ C1] vkms_vblank_simulate: vblank timer overrun [ 1092.608646][ C1] vkms_vblank_simulate: vblank timer overrun [ 1092.655243][ C1] vkms_vblank_simulate: vblank timer overrun [ 1092.710638][ C1] vkms_vblank_simulate: vblank timer overrun [ 1092.765356][ C1] vkms_vblank_simulate: vblank timer overrun [ 1092.807713][ C1] vkms_vblank_simulate: vblank timer overrun [ 1092.868329][ C1] vkms_vblank_simulate: vblank timer overrun [ 1092.908436][ C1] vkms_vblank_simulate: vblank timer overrun [ 1092.959772][ C1] vkms_vblank_simulate: vblank timer overrun [ 1093.275463][ C1] vkms_vblank_simulate: vblank timer overrun [ 1093.931483][ C1] vkms_vblank_simulate: vblank timer overrun [ 1094.391019][ C1] vkms_vblank_simulate: vblank timer overrun [ 1094.450195][ C1] vkms_vblank_simulate: vblank timer overrun [ 1094.540948][ C1] vkms_vblank_simulate: vblank timer overrun [ 1095.037387][ C1] vkms_vblank_simulate: vblank timer overrun [ 1095.309586][ C1] vkms_vblank_simulate: vblank timer overrun [ 1095.368977][ C1] vkms_vblank_simulate: vblank timer overrun [ 1095.497709][ C1] vkms_vblank_simulate: vblank timer overrun [ 1095.568878][ C1] vkms_vblank_simulate: vblank timer overrun [ 1095.620708][ C1] vkms_vblank_simulate: vblank timer overrun [ 1095.635292][ T5999] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1095.679888][ C1] vkms_vblank_simulate: vblank timer overrun [ 1095.850043][ T5999] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1095.850087][ T5999] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1095.850112][ T5999] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.866421][ T5999] usb 4-1: config 0 descriptor?? [ 1096.669411][T10869] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1096.705994][T10835] batadv_slave_1: entered promiscuous mode [ 1096.707611][T10835] batadv_slave_1: left promiscuous mode [ 1096.738416][T10390] bridge0: port 2(bridge_slave_1) entered blocking state [ 1096.738731][T10390] bridge0: port 2(bridge_slave_1) entered disabled state [ 1096.739146][T10390] bridge_slave_1: entered allmulticast mode [ 1096.743971][T10390] bridge_slave_1: entered promiscuous mode [ 1096.958994][ T5999] video4linux radio48: keene_cmd_set failed (-71) [ 1096.959025][ T5999] radio-keene 4-1:0.0: V4L2 device registered as radio48 [ 1096.992314][ T5999] usb 4-1: USB disconnect, device number 10 [ 1098.159556][ C1] vkms_vblank_simulate: vblank timer overrun [ 1098.207238][ C1] vkms_vblank_simulate: vblank timer overrun [ 1098.213411][ T5786] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 1098.385383][ T5786] usb 9-1: Using ep0 maxpacket: 16 [ 1098.388383][ T5786] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1098.388409][ T5786] usb 9-1: config 0 has no interface number 0 [ 1098.388460][ T5786] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1098.388496][ T5786] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1098.388536][ T5786] usb 9-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1098.388561][ T5786] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.570082][ T5786] usb 9-1: config 0 descriptor?? [ 1099.160829][ C1] vkms_vblank_simulate: vblank timer overrun [ 1099.347544][ T5786] usbhid 9-1:0.1: can't add hid device: -71 [ 1099.347672][ T5786] usbhid 9-1:0.1: probe with driver usbhid failed with error -71 [ 1099.355710][ T5786] usb 9-1: USB disconnect, device number 29 [ 1099.384895][T10636] chnl_net:caif_netlink_parms(): no params data found [ 1100.597370][ C1] vkms_vblank_simulate: vblank timer overrun [ 1100.828742][ C1] vkms_vblank_simulate: vblank timer overrun [ 1101.507315][ C1] vkms_vblank_simulate: vblank timer overrun [ 1101.687012][ C1] vkms_vblank_simulate: vblank timer overrun [ 1102.113966][ C1] vkms_vblank_simulate: vblank timer overrun [ 1110.491228][T10636] bridge0: port 1(bridge_slave_0) entered blocking state [ 1110.491381][T10636] bridge0: port 1(bridge_slave_0) entered disabled state [ 1110.491642][T10636] bridge_slave_0: entered allmulticast mode [ 1110.494569][T10636] bridge_slave_0: entered promiscuous mode [ 1110.513751][T10636] bridge0: port 2(bridge_slave_1) entered blocking state [ 1110.513993][T10636] bridge0: port 2(bridge_slave_1) entered disabled state [ 1110.514562][T10636] bridge_slave_1: entered allmulticast mode [ 1110.544053][T10636] bridge_slave_1: entered promiscuous mode [ 1110.881040][T10924] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1111.644172][T10636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1112.275934][T10749] chnl_net:caif_netlink_parms(): no params data found [ 1112.308202][T10636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1112.445483][ T5872] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1112.605277][ T5872] usb 10-1: Using ep0 maxpacket: 16 [ 1112.607700][ T5872] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1112.607729][ T5872] usb 10-1: config 0 has no interface number 0 [ 1112.607780][ T5872] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1112.607810][ T5872] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1112.607851][ T5872] usb 10-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1112.607876][ T5872] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1112.613695][ T5872] usb 10-1: config 0 descriptor?? [ 1112.623012][T10471] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1112.922510][ C0] vkms_vblank_simulate: vblank timer overrun [ 1113.220156][ C0] vkms_vblank_simulate: vblank timer overrun [ 1115.009891][ C0] vkms_vblank_simulate: vblank timer overrun [ 1115.311664][ T5872] usbhid 10-1:0.1: can't add hid device: -71 [ 1115.311766][ T5872] usbhid 10-1:0.1: probe with driver usbhid failed with error -71 [ 1115.326256][ T5872] usb 10-1: USB disconnect, device number 7 [ 1115.740448][T10636] team0: Port device team_slave_0 added [ 1116.142258][T10471] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1116.238007][T10636] team0: Port device team_slave_1 added [ 1117.839484][T10471] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1118.627618][T10636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1118.627637][T10636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1118.627667][T10636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1118.864362][T10636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1118.864380][T10636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1118.864411][T10636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1119.211509][T10471] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1119.335479][T10973] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1119.364930][T10749] bridge0: port 1(bridge_slave_0) entered blocking state [ 1119.365058][T10749] bridge0: port 1(bridge_slave_0) entered disabled state [ 1119.379701][T10749] bridge_slave_0: entered allmulticast mode [ 1119.382669][T10749] bridge_slave_0: entered promiscuous mode [ 1119.401872][T10749] bridge0: port 2(bridge_slave_1) entered blocking state [ 1119.402111][T10749] bridge0: port 2(bridge_slave_1) entered disabled state [ 1119.402358][T10749] bridge_slave_1: entered allmulticast mode [ 1119.425812][T10749] bridge_slave_1: entered promiscuous mode [ 1119.426728][T10266] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1119.438246][T10266] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1119.453041][T10266] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1119.457629][T10266] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1119.460263][T10266] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1119.811711][T10749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1119.895862][T10749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1120.500050][T10985] befs: (nullb0): invalid magic header [ 1120.512747][ C1] vkms_vblank_simulate: vblank timer overrun [ 1121.396527][ C1] vkms_vblank_simulate: vblank timer overrun [ 1121.495414][T10266] Bluetooth: hci2: command tx timeout [ 1121.515331][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.515405][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1121.701598][ C1] vkms_vblank_simulate: vblank timer overrun [ 1121.874072][ C1] vkms_vblank_simulate: vblank timer overrun [ 1121.990448][ C1] vkms_vblank_simulate: vblank timer overrun [ 1122.275023][ C1] vkms_vblank_simulate: vblank timer overrun [ 1122.333765][ C1] vkms_vblank_simulate: vblank timer overrun [ 1123.546736][ C1] vkms_vblank_simulate: vblank timer overrun [ 1123.575319][T10266] Bluetooth: hci2: command tx timeout [ 1123.774889][ C1] vkms_vblank_simulate: vblank timer overrun [ 1125.678697][T10266] Bluetooth: hci2: command tx timeout [ 1127.735359][T10266] Bluetooth: hci2: command tx timeout [ 1131.787850][T10749] team0: Port device team_slave_0 added [ 1131.979379][T10749] team0: Port device team_slave_1 added [ 1132.463239][T11017] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1132.510799][T10749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1132.510817][T10749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1132.510848][T10749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1132.624453][T10749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1132.624471][T10749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1132.624502][T10749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1132.956561][T10471] bridge_slave_1: left allmulticast mode [ 1132.956592][T10471] bridge_slave_1: left promiscuous mode [ 1132.956823][T10471] bridge0: port 2(bridge_slave_1) entered disabled state [ 1133.063091][T10471] bridge_slave_0: left allmulticast mode [ 1133.063123][T10471] bridge_slave_0: left promiscuous mode [ 1133.063403][T10471] bridge0: port 1(bridge_slave_0) entered disabled state [ 1133.152066][T10471] bridge_slave_1: left allmulticast mode [ 1133.152099][T10471] bridge_slave_1: left promiscuous mode [ 1133.152352][T10471] bridge0: port 2(bridge_slave_1) entered disabled state [ 1133.226499][T10471] bridge_slave_0: left allmulticast mode [ 1133.226531][T10471] bridge_slave_0: left promiscuous mode [ 1133.226786][T10471] bridge0: port 1(bridge_slave_0) entered disabled state [ 1133.364787][T10471] bridge_slave_1: left allmulticast mode [ 1133.364819][T10471] bridge_slave_1: left promiscuous mode [ 1133.365085][T10471] bridge0: port 2(bridge_slave_1) entered disabled state [ 1133.462049][T10471] bridge_slave_0: left allmulticast mode [ 1133.462081][T10471] bridge_slave_0: left promiscuous mode [ 1133.462323][T10471] bridge0: port 1(bridge_slave_0) entered disabled state [ 1134.008886][ C0] vkms_vblank_simulate: vblank timer overrun [ 1134.701555][T11030] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1135.094744][ T5807] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1135.115715][ T5807] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1135.117796][ T5807] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1135.120315][ T5807] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1135.121567][ T5807] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1135.667067][ C0] vkms_vblank_simulate: vblank timer overrun [ 1136.095371][ C0] vkms_vblank_simulate: vblank timer overrun [ 1136.189276][ C0] vkms_vblank_simulate: vblank timer overrun [ 1136.621080][ C0] vkms_vblank_simulate: vblank timer overrun [ 1136.686867][T11043] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1136.999513][ C0] vkms_vblank_simulate: vblank timer overrun [ 1137.738161][ T5807] Bluetooth: hci0: command tx timeout [ 1137.866479][ C0] vkms_vblank_simulate: vblank timer overrun [ 1137.947987][T10471] bond0 (unregistering): Released all slaves [ 1139.421063][T10471] bond0 (unregistering): Released all slaves [ 1140.119794][ T5807] Bluetooth: hci0: command tx timeout [ 1140.709174][T11069] befs: (nullb0): invalid magic header [ 1142.135535][ T5807] Bluetooth: hci0: command tx timeout [ 1142.993042][ T8632] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1143.145304][ T8632] usb 4-1: Using ep0 maxpacket: 16 [ 1143.151653][ T8632] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1143.151747][ T8632] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1143.151790][ T8632] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1143.151816][ T8632] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1143.216224][ T8632] usb 4-1: config 0 descriptor?? [ 1143.822707][T11091] befs: (nullb0): invalid magic header [ 1144.595292][ T5807] Bluetooth: hci0: command tx timeout [ 1144.794395][ T8632] usbhid 4-1:0.0: can't add hid device: -71 [ 1144.794544][ T8632] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1144.816165][ T8632] usb 4-1: USB disconnect, device number 11 [ 1145.871929][T11106] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1148.576290][T10471] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1148.666995][T10471] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1148.739302][T10471] bond0 (unregistering): Released all slaves [ 1151.101957][T10975] chnl_net:caif_netlink_parms(): no params data found [ 1151.559818][T11146] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1151.999344][T11151] befs: (nullb0): invalid magic header [ 1155.385555][T11032] chnl_net:caif_netlink_parms(): no params data found [ 1157.558726][T11186] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1159.020385][ T8632] IPVS: starting estimator thread 0... [ 1159.125613][T11198] IPVS: using max 7 ests per chain, 16800 per kthread [ 1159.933694][T11205] befs: (nullb0): invalid magic header [ 1160.855505][T10975] bridge0: port 1(bridge_slave_0) entered blocking state [ 1160.855663][T10975] bridge0: port 1(bridge_slave_0) entered disabled state [ 1160.855922][T10975] bridge_slave_0: entered allmulticast mode [ 1160.858809][T10975] bridge_slave_0: entered promiscuous mode [ 1161.040150][T10471] hsr_slave_0: left promiscuous mode [ 1161.091737][T10471] hsr_slave_1: left promiscuous mode [ 1161.092773][T10471] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1161.092800][T10471] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1161.126949][T10471] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1161.126980][T10471] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1161.282134][T10471] veth1_macvtap: left promiscuous mode [ 1161.282250][T10471] veth0_macvtap: left promiscuous mode [ 1161.286995][T10471] veth1_vlan: left promiscuous mode [ 1161.289982][T10471] veth0_vlan: left promiscuous mode [ 1163.191555][T11227] befs: (nullb0): invalid magic header [ 1165.818738][ T5807] Bluetooth: hci6: ACL packet for unknown connection handle 403 [ 1178.441079][T11275] befs: (nullb0): invalid magic header [ 1179.676147][T10471] team0 (unregistering): Port device team_slave_1 removed [ 1179.910302][T10266] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1179.934776][T10266] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1179.943580][T10266] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1179.954989][T10266] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1179.983126][T10266] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1180.248932][T10471] team0 (unregistering): Port device team_slave_0 removed [ 1180.359046][ T5807] Bluetooth: hci5: ACL packet for unknown connection handle 403 [ 1181.972552][T11299] No control pipe specified [ 1182.073846][ T5807] Bluetooth: hci1: command tx timeout [ 1183.031036][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1183.033746][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1183.226542][T11306] orangefs_mount: mount request failed with -4 [ 1184.135255][ T5807] Bluetooth: hci1: command tx timeout [ 1185.069283][ T5807] Bluetooth: hci6: ACL packet for unknown connection handle 403 [ 1186.265122][ T5807] Bluetooth: hci1: command tx timeout [ 1186.916470][T11307] batadv_slave_1: entered promiscuous mode [ 1186.917139][T11308] batadv_slave_1: left promiscuous mode [ 1186.939232][T10975] bridge0: port 2(bridge_slave_1) entered blocking state [ 1186.939366][T10975] bridge0: port 2(bridge_slave_1) entered disabled state [ 1186.939595][T10975] bridge_slave_1: entered allmulticast mode [ 1186.941531][T10975] bridge_slave_1: entered promiscuous mode [ 1187.916848][T11032] bridge0: port 1(bridge_slave_0) entered blocking state [ 1187.945541][T11032] bridge0: port 1(bridge_slave_0) entered disabled state [ 1187.945787][T11032] bridge_slave_0: entered allmulticast mode [ 1187.966271][T11032] bridge_slave_0: entered promiscuous mode [ 1188.000100][T11032] bridge0: port 2(bridge_slave_1) entered blocking state [ 1188.000324][T11032] bridge0: port 2(bridge_slave_1) entered disabled state [ 1188.000564][T11032] bridge_slave_1: entered allmulticast mode [ 1188.003665][T11032] bridge_slave_1: entered promiscuous mode [ 1188.305371][ T5807] Bluetooth: hci1: command tx timeout [ 1189.736133][ T8632] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 1190.638152][ T8632] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1190.638908][ T8632] usb 10-1: not running at top speed; connect to a high speed hub [ 1190.640411][ T8632] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1190.640436][ T8632] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1190.644879][ T8632] usb 10-1: string descriptor 0 read error: -22 [ 1190.645038][ T8632] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1191.646669][ T8632] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1191.886460][ T8632] usb 10-1: 0:2 : does not exist [ 1192.520742][ T8632] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 1192.547732][ T8632] usb 10-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1192.564744][ T8632] usb 10-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1192.578385][ T8632] usb 10-1: 5:0: failed to get current value for ch 1 (-22) [ 1192.645218][ T8632] usb 10-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1192.667470][ T8632] usb 10-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1192.673204][T11032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1192.705610][ T8632] usb 10-1: USB disconnect, device number 8 [ 1194.055610][T11361] befs: (nullb0): invalid magic header [ 1194.278844][T11032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1194.623472][ T5807] Bluetooth: hci4: ACL packet for unknown connection handle 403 [ 1196.535727][T11280] chnl_net:caif_netlink_parms(): no params data found [ 1197.656247][T10266] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1197.677141][T10266] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1197.678498][T10266] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1197.680154][T10266] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1197.681043][T10266] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1199.735209][ T5807] Bluetooth: hci0: command tx timeout [ 1200.730983][T11280] bridge0: port 1(bridge_slave_0) entered blocking state [ 1200.731134][T11280] bridge0: port 1(bridge_slave_0) entered disabled state [ 1200.731396][T11280] bridge_slave_0: entered allmulticast mode [ 1200.734331][T11280] bridge_slave_0: entered promiscuous mode [ 1200.749317][T11280] bridge0: port 2(bridge_slave_1) entered blocking state [ 1200.749558][T11280] bridge0: port 2(bridge_slave_1) entered disabled state [ 1200.749819][T11280] bridge_slave_1: entered allmulticast mode [ 1200.753545][T11280] bridge_slave_1: entered promiscuous mode [ 1200.783084][ T5807] Bluetooth: hci5: ACL packet for unknown connection handle 403 [ 1202.106740][ T5807] Bluetooth: hci0: command tx timeout [ 1202.569276][T11280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1202.818728][T11280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1204.165372][ T5807] Bluetooth: hci0: command tx timeout [ 1204.186114][T11280] team0: Port device team_slave_0 added [ 1204.224162][T11280] team0: Port device team_slave_1 added [ 1206.217729][ T5807] Bluetooth: hci0: command tx timeout [ 1206.263552][T11438] befs: (nullb0): invalid magic header [ 1209.263715][ T5807] Bluetooth: hci5: ACL packet for unknown connection handle 403 [ 1209.532092][T11280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1209.532106][T11280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1209.532126][T11280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1209.609437][T11280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1209.609451][T11280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1209.609472][T11280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1211.094051][T11280] hsr_slave_0: entered promiscuous mode [ 1211.109574][T11280] hsr_slave_1: entered promiscuous mode [ 1211.110624][T11280] debugfs: 'hsr0' already exists in 'hsr' [ 1211.110650][T11280] Cannot create hsr debugfs directory [ 1211.389001][T11466] overlayfs: failed to clone upperpath [ 1212.833732][T11479] ptrace attach of "./syz-executor exec"[9358] was attempted by "./syz-executor exec"[11479] [ 1213.169362][T11486] befs: (nbd3): No write support. Marking filesystem read-only [ 1213.169799][T11486] befs: (nbd3): unable to read superblock [ 1214.144216][T10471] bridge_slave_1: left allmulticast mode [ 1214.144248][T10471] bridge_slave_1: left promiscuous mode [ 1214.144506][T10471] bridge0: port 2(bridge_slave_1) entered disabled state [ 1214.217305][T10471] bridge_slave_0: left allmulticast mode [ 1214.217338][T10471] bridge_slave_0: left promiscuous mode [ 1214.217640][T10471] bridge0: port 1(bridge_slave_0) entered disabled state [ 1214.308234][T10471] bridge_slave_1: left allmulticast mode [ 1214.308265][T10471] bridge_slave_1: left promiscuous mode [ 1214.308512][T10471] bridge0: port 2(bridge_slave_1) entered disabled state [ 1214.386005][ T5807] Bluetooth: hci4: ACL packet for unknown connection handle 403 [ 1214.571662][T10471] bridge_slave_0: left allmulticast mode [ 1214.571693][T10471] bridge_slave_0: left promiscuous mode [ 1214.571967][T10471] bridge0: port 1(bridge_slave_0) entered disabled state [ 1214.680860][T10471] bridge_slave_1: left allmulticast mode [ 1214.680893][T10471] bridge_slave_1: left promiscuous mode [ 1214.681141][T10471] bridge0: port 2(bridge_slave_1) entered disabled state [ 1214.768175][T10471] bridge_slave_0: left allmulticast mode [ 1214.768209][T10471] bridge_slave_0: left promiscuous mode [ 1214.768472][T10471] bridge0: port 1(bridge_slave_0) entered disabled state [ 1214.926945][T10471] bridge_slave_1: left allmulticast mode [ 1214.926986][T10471] bridge_slave_1: left promiscuous mode [ 1214.927281][T10471] bridge0: port 2(bridge_slave_1) entered disabled state [ 1216.527571][T11504] befs: (nullb0): invalid magic header [ 1216.777304][T10471] bridge_slave_0: left allmulticast mode [ 1216.777337][T10471] bridge_slave_0: left promiscuous mode [ 1216.777637][T10471] bridge0: port 1(bridge_slave_0) entered disabled state [ 1216.834174][T11506] ptrace attach of "./syz-executor exec"[9360] was attempted by "./syz-executor exec"[11506] [ 1217.081022][T11513] befs: (nbd9): No write support. Marking filesystem read-only [ 1217.083756][T11513] befs: (nbd9): unable to read superblock [ 1218.438071][T10471] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1219.405818][T10471] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1219.709712][T10471] bond0 (unregistering): Released all slaves [ 1220.689860][ T5807] Bluetooth: hci5: ACL packet for unknown connection handle 403 [ 1222.458301][T10471] bond0 (unregistering): Released all slaves [ 1223.656060][T10471] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1223.883746][T10471] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1223.995652][T10471] bond0 (unregistering): Released all slaves [ 1224.591133][T11559] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1224.882298][T10471] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1224.999024][ T5807] Bluetooth: hci4: ACL packet for unknown connection handle 403 [ 1225.707096][T10471] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1225.910060][T10471] bond0 (unregistering): Released all slaves [ 1226.007586][T11382] chnl_net:caif_netlink_parms(): no params data found [ 1228.365998][T11382] bridge0: port 1(bridge_slave_0) entered blocking state [ 1228.366142][T11382] bridge0: port 1(bridge_slave_0) entered disabled state [ 1228.366424][T11382] bridge_slave_0: entered allmulticast mode [ 1228.369336][T11382] bridge_slave_0: entered promiscuous mode [ 1229.925197][T11588] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1230.167876][ T5807] Bluetooth: hci5: ACL packet for unknown connection handle 403 [ 1230.359070][ T5807] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci6/hci6:201' [ 1230.359092][ T5807] CPU: 0 UID: 0 PID: 5807 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1230.359111][ T5807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1230.359122][ T5807] Workqueue: hci6 hci_rx_work [ 1230.359152][ T5807] Call Trace: [ 1230.359159][ T5807] [ 1230.359175][ T5807] dump_stack_lvl+0x189/0x250 [ 1230.359200][ T5807] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1230.359219][ T5807] ? __pfx__printk+0x10/0x10 [ 1230.359244][ T5807] ? kernfs_path_from_node+0x2c/0x280 [ 1230.359260][ T5807] ? kernfs_path_from_node+0x243/0x280 [ 1230.359275][ T5807] ? kernfs_path_from_node+0x2c/0x280 [ 1230.359293][ T5807] sysfs_create_dir_ns+0x259/0x280 [ 1230.359308][ T5807] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1230.359334][ T5807] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1230.359352][ T5807] ? rt_spin_unlock+0x161/0x200 [ 1230.359378][ T5807] kobject_add_internal+0x5a5/0xb50 [ 1230.359405][ T5807] kobject_add+0x155/0x220 [ 1230.359431][ T5807] ? __pfx_kobject_add+0x10/0x10 [ 1230.359460][ T5807] ? get_device_parent+0x370/0x3a0 [ 1230.359488][ T5807] device_add+0x408/0xb50 [ 1230.359515][ T5807] hci_conn_add_sysfs+0xd5/0x1e0 [ 1230.359540][ T5807] le_conn_complete_evt+0xf39/0x1500 [ 1230.359569][ T5807] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1230.359589][ T5807] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1230.359609][ T5807] ? lockdep_hardirqs_on+0x9c/0x150 [ 1230.359630][ T5807] ? skb_pull_data+0xfb/0x200 [ 1230.359655][ T5807] hci_le_enh_conn_complete_evt+0x189/0x470 [ 1230.359673][ T5807] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 1230.359694][ T5807] hci_event_packet+0x78f/0x1200 [ 1230.359720][ T5807] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1230.359739][ T5807] ? __pfx_hci_event_packet+0x10/0x10 [ 1230.359770][ T5807] ? hci_send_to_monitor+0xe2/0x570 [ 1230.359792][ T5807] hci_rx_work+0x46a/0xe80 [ 1230.359821][ T5807] ? process_scheduled_works+0x9ef/0x17b0 [ 1230.359842][ T5807] process_scheduled_works+0xade/0x17b0 [ 1230.359884][ T5807] ? __pfx_process_scheduled_works+0x10/0x10 [ 1230.359916][ T5807] worker_thread+0x8a0/0xda0 [ 1230.359938][ T5807] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1230.359962][ T5807] ? __kthread_parkme+0x7b/0x200 [ 1230.359990][ T5807] kthread+0x711/0x8a0 [ 1230.360016][ T5807] ? __pfx_worker_thread+0x10/0x10 [ 1230.360035][ T5807] ? __pfx_kthread+0x10/0x10 [ 1230.360056][ T5807] ? rt_spin_unlock+0x150/0x200 [ 1230.360083][ T5807] ? rt_spin_unlock+0x161/0x200 [ 1230.360104][ T5807] ? __pfx_kthread+0x10/0x10 [ 1230.360149][ T5807] ret_from_fork+0x4b9/0x870 [ 1230.360175][ T5807] ? __pfx_ret_from_fork+0x10/0x10 [ 1230.360200][ T5807] ? __switch_to_asm+0x39/0x70 [ 1230.360220][ T5807] ? __switch_to_asm+0x33/0x70 [ 1230.360240][ T5807] ? __pfx_kthread+0x10/0x10 [ 1230.360265][ T5807] ret_from_fork_asm+0x1a/0x30 [ 1230.360300][ T5807] [ 1230.361628][ T5807] kobject: kobject_add_internal failed for hci6:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1230.361664][ T5807] Bluetooth: hci6: failed to register connection device [ 1230.809122][T11382] bridge0: port 2(bridge_slave_1) entered blocking state [ 1230.809285][T11382] bridge0: port 2(bridge_slave_1) entered disabled state [ 1230.809558][T11382] bridge_slave_1: entered allmulticast mode [ 1230.812819][T11382] bridge_slave_1: entered promiscuous mode [ 1230.853628][T10471] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1230.902132][T10471] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1231.020837][T10471] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1231.056041][T10471] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1233.443805][T11613] befs: (nullb0): invalid magic header [ 1236.014893][T10471] team0 (unregistering): Port device team_slave_1 removed [ 1236.223112][T10471] team0 (unregistering): Port device team_slave_0 removed [ 1238.816290][T10471] team0 (unregistering): Port device team_slave_1 removed [ 1238.885460][T10266] Bluetooth: hci5: ACL packet for unknown connection handle 403 [ 1239.080872][T10471] team0 (unregistering): Port device team_slave_0 removed [ 1240.168850][T11649] overlayfs: failed to clone upperpath [ 1241.854670][T11382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1241.882238][T11382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1242.719970][ T5807] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1242.730690][ T5807] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1242.737341][ T5807] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1242.740841][ T5807] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1242.742471][ T5807] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1244.033097][T11670] befs: (nullb0): invalid magic header [ 1244.104622][T11673] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1244.384195][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1244.384271][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1244.662470][T11382] team0: Port device team_slave_0 added [ 1244.723700][ T5807] Bluetooth: hci6: ACL packet for unknown connection handle 403 [ 1244.995021][ T5807] Bluetooth: hci2: command tx timeout [ 1245.920183][T11382] team0: Port device team_slave_1 added [ 1247.018106][ T5807] Bluetooth: hci2: command tx timeout [ 1247.866980][T11382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1247.867000][T11382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1247.867030][T11382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1247.869497][T11382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1247.869513][T11382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1247.869541][T11382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1248.267265][T11702] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1249.073308][T11382] hsr_slave_0: entered promiscuous mode [ 1249.074755][T11382] hsr_slave_1: entered promiscuous mode [ 1249.078475][T11382] debugfs: 'hsr0' already exists in 'hsr' [ 1249.078508][T11382] Cannot create hsr debugfs directory [ 1249.096904][ T5807] Bluetooth: hci2: command tx timeout [ 1249.489676][T11709] befs: (nullb0): invalid magic header [ 1251.486001][ T5807] Bluetooth: hci2: command tx timeout [ 1252.941564][T11729] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1255.602284][T11749] l2tp_ppp: sess 2/0: no socket in recv [ 1255.839858][T11659] chnl_net:caif_netlink_parms(): no params data found [ 1256.209804][T11760] befs: (nullb0): invalid magic header [ 1256.362365][T10266] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1256.406025][T10266] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1256.411723][T10266] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1256.424402][T10266] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1256.429400][T10266] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1258.085500][T11795] l2tp_ppp: sess 2/0: no socket in recv [ 1258.458911][T10266] Bluetooth: hci1: command tx timeout [ 1258.971862][T11659] bridge0: port 1(bridge_slave_0) entered blocking state [ 1258.972200][T11659] bridge0: port 1(bridge_slave_0) entered disabled state [ 1258.972452][T11659] bridge_slave_0: entered allmulticast mode [ 1258.980151][T11659] bridge_slave_0: entered promiscuous mode [ 1259.095273][T11659] bridge0: port 2(bridge_slave_1) entered blocking state [ 1259.095409][T11659] bridge0: port 2(bridge_slave_1) entered disabled state [ 1259.095634][T11659] bridge_slave_1: entered allmulticast mode [ 1259.139237][T11659] bridge_slave_1: entered promiscuous mode [ 1259.780252][T11659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1260.538225][T10266] Bluetooth: hci1: command tx timeout [ 1261.563309][T11659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1261.581667][T10471] bridge_slave_1: left allmulticast mode [ 1261.581697][T10471] bridge_slave_1: left promiscuous mode [ 1261.581967][T10471] bridge0: port 2(bridge_slave_1) entered disabled state [ 1261.939581][T11823] ptrace attach of "./syz-executor exec"[9360] was attempted by "./syz-executor exec"[11823] [ 1261.957768][T10471] bridge_slave_0: left allmulticast mode [ 1261.957798][T10471] bridge_slave_0: left promiscuous mode [ 1261.958083][T10471] bridge0: port 1(bridge_slave_0) entered disabled state [ 1261.962668][T11822] befs: (nullb0): invalid magic header [ 1262.429103][T11830] l2tp_ppp: sess 2/0: no socket in recv [ 1262.615249][T10266] Bluetooth: hci1: command tx timeout [ 1262.689708][T10471] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1263.956299][T10471] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1264.378762][T10471] bond0 (unregistering): Released all slaves [ 1264.695423][T10266] Bluetooth: hci1: command tx timeout [ 1265.059396][T11659] team0: Port device team_slave_0 added [ 1265.256958][T10471] hsr_slave_0: left promiscuous mode [ 1265.925199][T10471] hsr_slave_1: left promiscuous mode [ 1265.927335][T10471] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1265.977772][T10471] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1266.064003][T10266] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 1266.064035][T10266] CPU: 0 UID: 0 PID: 10266 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1266.064081][T10266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1266.064103][T10266] Workqueue: hci4 hci_rx_work [ 1266.064152][T10266] Call Trace: [ 1266.064160][T10266] [ 1266.064170][T10266] dump_stack_lvl+0x189/0x250 [ 1266.064204][T10266] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1266.064233][T10266] ? __pfx__printk+0x10/0x10 [ 1266.064266][T10266] ? kernfs_path_from_node+0x2c/0x280 [ 1266.064288][T10266] ? kernfs_path_from_node+0x243/0x280 [ 1266.064310][T10266] ? kernfs_path_from_node+0x2c/0x280 [ 1266.064334][T10266] sysfs_create_dir_ns+0x259/0x280 [ 1266.064350][T10266] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1266.064378][T10266] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1266.064400][T10266] ? rt_spin_unlock+0x161/0x200 [ 1266.064429][T10266] kobject_add_internal+0x5a5/0xb50 [ 1266.064460][T10266] kobject_add+0x155/0x220 [ 1266.064486][T10266] ? __pfx_kobject_add+0x10/0x10 [ 1266.064515][T10266] ? get_device_parent+0x370/0x3a0 [ 1266.064545][T10266] device_add+0x408/0xb50 [ 1266.064574][T10266] hci_conn_add_sysfs+0xd5/0x1e0 [ 1266.064601][T10266] le_conn_complete_evt+0xf39/0x1500 [ 1266.064631][T10266] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1266.064651][T10266] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1266.064672][T10266] ? lockdep_hardirqs_on+0x9c/0x150 [ 1266.064695][T10266] ? skb_pull_data+0xfb/0x200 [ 1266.064722][T10266] hci_le_enh_conn_complete_evt+0x189/0x470 [ 1266.064743][T10266] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 1266.064766][T10266] hci_event_packet+0x78f/0x1200 [ 1266.064794][T10266] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1266.064814][T10266] ? __pfx_hci_event_packet+0x10/0x10 [ 1266.064849][T10266] ? hci_send_to_monitor+0xe2/0x570 [ 1266.064873][T10266] hci_rx_work+0x46a/0xe80 [ 1266.064906][T10266] ? process_scheduled_works+0x9ef/0x17b0 [ 1266.064930][T10266] process_scheduled_works+0xade/0x17b0 [ 1266.064976][T10266] ? __pfx_process_scheduled_works+0x10/0x10 [ 1266.065012][T10266] worker_thread+0x8a0/0xda0 [ 1266.065041][T10266] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1266.065074][T10266] ? __kthread_parkme+0x7b/0x200 [ 1266.065110][T10266] kthread+0x711/0x8a0 [ 1266.065145][T10266] ? __pfx_worker_thread+0x10/0x10 [ 1266.065166][T10266] ? __pfx_kthread+0x10/0x10 [ 1266.065190][T10266] ? rt_spin_unlock+0x150/0x200 [ 1266.065219][T10266] ? rt_spin_unlock+0x161/0x200 [ 1266.065244][T10266] ? __pfx_kthread+0x10/0x10 [ 1266.065271][T10266] ret_from_fork+0x4b9/0x870 [ 1266.065295][T10266] ? __pfx_ret_from_fork+0x10/0x10 [ 1266.065323][T10266] ? __switch_to_asm+0x39/0x70 [ 1266.065345][T10266] ? __switch_to_asm+0x33/0x70 [ 1266.065367][T10266] ? __pfx_kthread+0x10/0x10 [ 1266.065395][T10266] ret_from_fork_asm+0x1a/0x30 [ 1266.065434][T10266] [ 1266.085256][T10266] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1266.085315][T10266] Bluetooth: hci4: failed to register connection device [ 1270.276217][T10471] team0 (unregistering): Port device team_slave_1 removed [ 1272.725780][T10471] team0 (unregistering): Port device team_slave_0 removed [ 1273.950639][ T5807] Bluetooth: hci5: ACL packet for unknown connection handle 403 [ 1274.588124][T11659] team0: Port device team_slave_1 added [ 1276.289983][T11659] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1276.289998][T11659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1276.290018][T11659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1276.292970][T11659] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1276.292982][T11659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1276.293004][T11659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1277.099324][T11659] hsr_slave_0: entered promiscuous mode [ 1277.150951][T11659] hsr_slave_1: entered promiscuous mode [ 1277.257029][T11659] debugfs: 'hsr0' already exists in 'hsr' [ 1277.257066][T11659] Cannot create hsr debugfs directory [ 1280.858608][T11763] chnl_net:caif_netlink_parms(): no params data found [ 1282.315123][T10471] bridge_slave_1: left allmulticast mode [ 1282.315153][T10471] bridge_slave_1: left promiscuous mode [ 1282.315406][T10471] bridge0: port 2(bridge_slave_1) entered disabled state [ 1282.577492][T10471] bridge_slave_0: left allmulticast mode [ 1282.577525][T10471] bridge_slave_0: left promiscuous mode [ 1282.577810][T10471] bridge0: port 1(bridge_slave_0) entered disabled state [ 1284.158956][T11980] l2tp_ppp: sess 2/0: no socket in recv [ 1286.406068][T10471] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1286.546665][T10471] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1286.589623][T10471] bond0 (unregistering): Released all slaves [ 1286.794683][T11763] bridge0: port 1(bridge_slave_0) entered blocking state [ 1286.794824][T11763] bridge0: port 1(bridge_slave_0) entered disabled state [ 1286.795220][T11763] bridge_slave_0: entered allmulticast mode [ 1286.799069][T11763] bridge_slave_0: entered promiscuous mode [ 1286.833792][T11763] bridge0: port 2(bridge_slave_1) entered blocking state [ 1286.833906][T11763] bridge0: port 2(bridge_slave_1) entered disabled state [ 1286.834103][T11763] bridge_slave_1: entered allmulticast mode [ 1286.875596][T11763] bridge_slave_1: entered promiscuous mode [ 1287.738797][T10471] hsr_slave_0: left promiscuous mode [ 1287.845834][T12010] befs: (nullb0): invalid magic header [ 1288.153272][T10471] hsr_slave_1: left promiscuous mode [ 1288.188303][T10471] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1288.211928][T10471] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1291.686072][T10471] team0 (unregistering): Port device team_slave_1 removed [ 1291.938430][T12028] ptrace attach of "./syz-executor exec"[7903] was attempted by "./syz-executor exec"[12028] [ 1292.049716][T10471] team0 (unregistering): Port device team_slave_0 removed [ 1293.333106][T11763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1293.512029][T11763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1295.014218][T11763] team0: Port device team_slave_0 added [ 1295.157470][T11763] team0: Port device team_slave_1 added [ 1296.168981][T11763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1296.169001][T11763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1296.169032][T11763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1296.291804][T11763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1296.291823][T11763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1296.291854][T11763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1296.292494][T11659] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1296.416226][T11659] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1296.947654][T11659] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1298.169215][T11659] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1298.296360][T11763] hsr_slave_0: entered promiscuous mode [ 1298.313455][T11763] hsr_slave_1: entered promiscuous mode [ 1298.316921][T11763] debugfs: 'hsr0' already exists in 'hsr' [ 1298.316956][T11763] Cannot create hsr debugfs directory [ 1300.021200][T11659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1300.496768][T11659] 8021q: adding VLAN 0 to HW filter on device team0 [ 1300.534717][T11763] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1300.606169][T11763] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1300.676950][T11763] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1300.745683][T11763] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1301.168438][T11763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1301.224939][T11763] 8021q: adding VLAN 0 to HW filter on device team0 [ 1301.251514][T10126] bridge0: port 1(bridge_slave_0) entered blocking state [ 1301.269037][T10126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1301.272215][T10126] bridge0: port 2(bridge_slave_1) entered blocking state [ 1301.272376][T10126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1302.940198][T12121] l2tp_ppp: sess 2/0: no socket in recv [ 1303.187465][T12128] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1303.205765][T12128] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1303.216117][T12128] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1303.229804][T12128] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1303.246306][T12128] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1305.355207][ T5807] Bluetooth: hci0: command tx timeout [ 1306.318538][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1306.318617][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1306.367019][T11763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1307.196789][T11763] veth0_vlan: entered promiscuous mode [ 1307.271057][T11763] veth1_vlan: entered promiscuous mode [ 1307.278808][T12126] chnl_net:caif_netlink_parms(): no params data found [ 1307.416106][ T5807] Bluetooth: hci0: command tx timeout [ 1310.371386][ T5807] Bluetooth: hci0: command tx timeout [ 1311.436566][T12126] bridge0: port 1(bridge_slave_0) entered blocking state [ 1311.436714][T12126] bridge0: port 1(bridge_slave_0) entered disabled state [ 1311.436946][T12126] bridge_slave_0: entered allmulticast mode [ 1311.448288][T12126] bridge_slave_0: entered promiscuous mode [ 1311.482189][T12126] bridge0: port 2(bridge_slave_1) entered blocking state [ 1311.482330][T12126] bridge0: port 2(bridge_slave_1) entered disabled state [ 1311.482587][T12126] bridge_slave_1: entered allmulticast mode [ 1311.517956][T12126] bridge_slave_1: entered promiscuous mode [ 1311.530084][ T44] bridge_slave_1: left allmulticast mode [ 1311.530113][ T44] bridge_slave_1: left promiscuous mode [ 1311.530398][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 1311.626412][ T44] bridge_slave_0: left allmulticast mode [ 1311.626435][ T44] bridge_slave_0: left promiscuous mode [ 1311.626635][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 1312.687639][T12128] Bluetooth: hci0: command tx timeout [ 1316.868442][ T5807] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1316.918953][ T5807] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1316.924024][ T5807] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1316.947893][ T5807] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1316.960293][ T5807] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1317.615733][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1318.595809][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1318.694188][ T44] bond0 (unregistering): Released all slaves [ 1319.032904][ T5807] Bluetooth: hci2: command tx timeout [ 1320.517614][ T44] hsr_slave_0: left promiscuous mode [ 1320.575371][ T44] hsr_slave_1: left promiscuous mode [ 1320.576614][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1320.638068][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1321.095159][ T5807] Bluetooth: hci2: command tx timeout [ 1322.140241][ T44] team0 (unregistering): Port device team_slave_1 removed [ 1322.397651][ T44] team0 (unregistering): Port device team_slave_0 removed [ 1323.180638][ T5807] Bluetooth: hci2: command tx timeout [ 1324.159309][T12320] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1418'. [ 1325.255126][ T5807] Bluetooth: hci2: command tx timeout [ 1325.512416][T12126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1325.847520][T12126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1326.757014][T12126] team0: Port device team_slave_0 added [ 1326.827863][T12126] team0: Port device team_slave_1 added [ 1327.269365][T12126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1327.269383][T12126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1327.269414][T12126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1327.372190][T12126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1327.372204][T12126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1327.372225][T12126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1328.005642][T12126] hsr_slave_0: entered promiscuous mode [ 1328.007274][T12126] hsr_slave_1: entered promiscuous mode [ 1328.008281][T12126] debugfs: 'hsr0' already exists in 'hsr' [ 1328.008307][T12126] Cannot create hsr debugfs directory [ 1330.679626][T12256] chnl_net:caif_netlink_parms(): no params data found [ 1336.803127][T12256] bridge0: port 1(bridge_slave_0) entered blocking state [ 1336.803280][T12256] bridge0: port 1(bridge_slave_0) entered disabled state [ 1336.803530][T12256] bridge_slave_0: entered allmulticast mode [ 1336.835368][T12256] bridge_slave_0: entered promiscuous mode [ 1336.977239][T12256] bridge0: port 2(bridge_slave_1) entered blocking state [ 1336.977381][T12256] bridge0: port 2(bridge_slave_1) entered disabled state [ 1336.977582][T12256] bridge_slave_1: entered allmulticast mode [ 1336.984530][T12256] bridge_slave_1: entered promiscuous mode [ 1341.321049][T12256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1341.347884][T12256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1341.598737][T12138] IPVS: starting estimator thread 0... [ 1341.775245][T12456] IPVS: using max 7 ests per chain, 16800 per kthread [ 1342.103313][ T44] bridge_slave_1: left allmulticast mode [ 1342.103348][ T44] bridge_slave_1: left promiscuous mode [ 1342.103622][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 1342.779019][ T44] bridge_slave_0: left allmulticast mode [ 1342.780618][ T44] bridge_slave_0: left promiscuous mode [ 1342.820119][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 1351.247523][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1351.327257][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1351.387745][ T44] bond0 (unregistering): Released all slaves [ 1351.442065][T12256] team0: Port device team_slave_0 added [ 1351.764256][T12256] team0: Port device team_slave_1 added [ 1356.103270][T12256] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1356.103292][T12256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1356.103323][T12256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1356.137921][T12544] overlayfs: failed to resolve './file0': -2 [ 1356.231453][T12551] netlink: 84 bytes leftover after parsing attributes in process `syz.8.1489'. [ 1356.373422][ T44] hsr_slave_0: left promiscuous mode [ 1356.385205][ T44] hsr_slave_1: left promiscuous mode [ 1356.386252][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1356.626053][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1356.997496][ T44] veth1_vlan: left promiscuous mode [ 1356.997730][ T44] veth0_vlan: left promiscuous mode [ 1362.739550][T12579] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1498'. [ 1363.293501][T12583] overlayfs: failed to resolve './file0': -2 [ 1363.776363][T12128] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1363.814537][T12128] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1363.823458][T12128] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1363.848246][T12128] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1363.863419][T12128] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1364.949039][ T44] team0 (unregistering): Port device team_slave_1 removed [ 1365.548899][ T44] team0 (unregistering): Port device team_slave_0 removed [ 1365.895529][ T5807] Bluetooth: hci1: command tx timeout [ 1367.262402][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1367.262628][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1367.975439][ T5807] Bluetooth: hci1: command tx timeout [ 1370.055210][ T5807] Bluetooth: hci1: command tx timeout [ 1370.127584][T12617] netlink: 84 bytes leftover after parsing attributes in process `syz.8.1507'. [ 1370.545758][T12620] overlayfs: failed to resolve './file1': -2 [ 1372.214037][ T5807] Bluetooth: hci1: command tx timeout [ 1372.228624][T12632] overlayfs: failed to clone upperpath [ 1373.145301][T12256] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1373.145319][T12256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1373.145351][T12256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1374.019179][T12256] hsr_slave_0: entered promiscuous mode [ 1374.020580][T12256] hsr_slave_1: entered promiscuous mode [ 1374.021585][T12256] debugfs: 'hsr0' already exists in 'hsr' [ 1374.021609][T12256] Cannot create hsr debugfs directory [ 1374.716176][T12128] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1374.729190][T12128] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1374.731356][T12128] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1374.733183][T12128] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1374.734125][T12128] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1377.020573][T12128] Bluetooth: hci3: command tx timeout [ 1377.031488][T12220] IPVS: starting estimator thread 0... [ 1377.115419][T12648] IPVS: using max 10 ests per chain, 24000 per kthread [ 1378.200526][ T5807] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1378.228389][ T5807] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1378.233834][ T5807] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1378.245258][ T5807] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1378.285724][ T5807] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1379.310985][T12128] Bluetooth: hci3: command tx timeout [ 1380.455249][T12128] Bluetooth: hci0: command tx timeout [ 1380.701820][T12585] chnl_net:caif_netlink_parms(): no params data found [ 1381.338633][T12128] Bluetooth: hci3: command tx timeout [ 1382.619365][T12128] Bluetooth: hci0: command tx timeout [ 1383.009684][T12585] bridge0: port 1(bridge_slave_0) entered blocking state [ 1383.009929][T12585] bridge0: port 1(bridge_slave_0) entered disabled state [ 1383.010209][T12585] bridge_slave_0: entered allmulticast mode [ 1383.030700][T12585] bridge_slave_0: entered promiscuous mode [ 1383.066249][T12585] bridge0: port 2(bridge_slave_1) entered blocking state [ 1383.066388][T12585] bridge0: port 2(bridge_slave_1) entered disabled state [ 1383.066758][T12585] bridge_slave_1: entered allmulticast mode [ 1383.072584][T12585] bridge_slave_1: entered promiscuous mode [ 1383.075625][T12636] chnl_net:caif_netlink_parms(): no params data found [ 1383.415832][T12128] Bluetooth: hci3: command tx timeout [ 1384.770348][T12128] Bluetooth: hci0: command tx timeout [ 1384.952068][T12585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1386.715695][T12585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1387.632213][T12128] Bluetooth: hci0: command tx timeout [ 1388.341804][T12585] team0: Port device team_slave_0 added [ 1388.654034][T12585] team0: Port device team_slave_1 added [ 1389.250190][T12636] bridge0: port 1(bridge_slave_0) entered blocking state [ 1389.250392][T12636] bridge0: port 1(bridge_slave_0) entered disabled state [ 1389.250670][T12636] bridge_slave_0: entered allmulticast mode [ 1389.252875][T12636] bridge_slave_0: entered promiscuous mode [ 1389.689181][ T44] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1389.759870][T12636] bridge0: port 2(bridge_slave_1) entered blocking state [ 1389.760037][T12636] bridge0: port 2(bridge_slave_1) entered disabled state [ 1389.760304][T12636] bridge_slave_1: entered allmulticast mode [ 1389.768577][T12636] bridge_slave_1: entered promiscuous mode [ 1389.786684][T12585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1389.786707][T12585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1389.786742][T12585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1390.011053][T12585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1390.011073][T12585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1390.011104][T12585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1390.012798][T12658] chnl_net:caif_netlink_parms(): no params data found [ 1390.317967][T12744] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1540'. [ 1390.702208][ T44] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1391.819857][T12636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1392.076393][T12636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1394.202260][ T44] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1394.380451][T12636] team0: Port device team_slave_0 added [ 1394.639674][ T44] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1394.705106][T12585] hsr_slave_0: entered promiscuous mode [ 1394.706265][T12585] hsr_slave_1: entered promiscuous mode [ 1394.708094][T12585] debugfs: 'hsr0' already exists in 'hsr' [ 1394.708119][T12585] Cannot create hsr debugfs directory [ 1394.761269][T12636] team0: Port device team_slave_1 added [ 1394.929965][T12774] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1548'. [ 1397.077107][T12636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1397.077126][T12636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1397.077155][T12636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1397.100117][T12658] bridge0: port 1(bridge_slave_0) entered blocking state [ 1397.100275][T12658] bridge0: port 1(bridge_slave_0) entered disabled state [ 1397.100611][T12658] bridge_slave_0: entered allmulticast mode [ 1397.103755][T12658] bridge_slave_0: entered promiscuous mode [ 1397.142479][T12636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1397.142501][T12636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1397.142537][T12636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1397.176391][T12658] bridge0: port 2(bridge_slave_1) entered blocking state [ 1397.176549][T12658] bridge0: port 2(bridge_slave_1) entered disabled state [ 1397.176870][T12658] bridge_slave_1: entered allmulticast mode [ 1397.185723][T12658] bridge_slave_1: entered promiscuous mode [ 1397.951275][T12658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1398.234404][T12658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1399.128695][T12636] hsr_slave_0: entered promiscuous mode [ 1399.130264][T12636] hsr_slave_1: entered promiscuous mode [ 1399.131321][T12636] debugfs: 'hsr0' already exists in 'hsr' [ 1399.131347][T12636] Cannot create hsr debugfs directory [ 1400.811518][T12814] overlayfs: failed to clone upperpath [ 1400.827667][T12658] team0: Port device team_slave_0 added [ 1401.140532][T12658] team0: Port device team_slave_1 added [ 1402.466951][ T44] bridge_slave_1: left allmulticast mode [ 1402.466982][ T44] bridge_slave_1: left promiscuous mode [ 1402.467257][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 1402.560235][ T44] bridge_slave_0: left allmulticast mode [ 1402.560270][ T44] bridge_slave_0: left promiscuous mode [ 1402.560556][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 1402.714396][ T44] bridge_slave_1: left allmulticast mode [ 1402.714430][ T44] bridge_slave_1: left promiscuous mode [ 1402.714687][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 1402.806826][ T44] bridge_slave_0: left allmulticast mode [ 1402.806849][ T44] bridge_slave_0: left promiscuous mode [ 1402.807108][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 1405.599476][T12840] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1568'. [ 1405.851430][T12128] Bluetooth: hci5: ACL packet for unknown connection handle 403 [ 1406.236310][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1406.253524][T12847] overlayfs: failed to clone upperpath [ 1406.548499][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1406.810612][ T44] bond0 (unregistering): Released all slaves [ 1410.682960][T12128] Bluetooth: hci4: ACL packet for unknown connection handle 403 [ 1412.220712][T12883] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1582'. [ 1412.596140][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1412.863821][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1412.903802][ T44] bond0 (unregistering): Released all slaves [ 1413.553366][T12658] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1413.553385][T12658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1413.553416][T12658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1413.657949][T12658] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1413.657969][T12658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1413.658002][T12658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1417.556671][T12658] hsr_slave_0: entered promiscuous mode [ 1417.586514][T12658] hsr_slave_1: entered promiscuous mode [ 1417.587212][T12658] debugfs: 'hsr0' already exists in 'hsr' [ 1417.587230][T12658] Cannot create hsr debugfs directory [ 1417.943930][T12930] overlayfs: failed to clone upperpath [ 1418.010806][ T44] hsr_slave_0: left promiscuous mode [ 1418.057196][ T44] hsr_slave_1: left promiscuous mode [ 1418.057918][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1418.078762][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1418.415136][ T44] hsr_slave_0: left promiscuous mode [ 1418.492345][ T44] hsr_slave_1: left promiscuous mode [ 1418.494285][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1418.494313][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1418.527218][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1418.527241][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1418.734060][ T44] veth1_macvtap: left promiscuous mode [ 1418.734186][ T44] veth0_macvtap: left promiscuous mode [ 1418.734467][ T44] veth1_vlan: left promiscuous mode [ 1418.734655][ T44] veth0_vlan: left promiscuous mode [ 1423.682428][T12950] ptrace attach of "./syz-executor exec"[7903] was attempted by "./syz-executor exec"[12950] [ 1423.717752][ T44] team0 (unregistering): Port device team_slave_1 removed [ 1423.995920][ T44] team0 (unregistering): Port device team_slave_0 removed [ 1424.127064][ T5807] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1424.163894][ T5807] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1424.179875][ T5807] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1424.181347][ T5807] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1424.183030][ T5807] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1426.592437][ T5807] Bluetooth: hci2: command tx timeout [ 1428.615596][ T5807] Bluetooth: hci2: command tx timeout [ 1428.699939][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.700044][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1428.950514][T12990] ptrace attach of "./syz-executor exec"[9358] was attempted by "./syz-executor exec"[12990] [ 1430.698989][ T5807] Bluetooth: hci2: command tx timeout [ 1431.857494][T13003] No control pipe specified [ 1432.775324][ T5807] Bluetooth: hci2: command tx timeout [ 1432.829526][T13005] ptrace attach of "./syz-executor exec"[7903] was attempted by "./syz-executor exec"[13005] [ 1433.040446][T13013] ptrace attach of "./syz-executor exec"[9358] was attempted by "./syz-executor exec"[13013] [ 1433.683613][T13020] ptrace attach of "./syz-executor exec"[9358] was attempted by "./syz-executor exec"[13020] [ 1435.195795][ T5807] Bluetooth: hci5: ACL packet for unknown connection handle 403 [ 1435.631995][T12128] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1435.647737][T12128] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1435.663795][T12128] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1435.673349][T12128] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1435.674494][T12128] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1438.118623][T12128] Bluetooth: hci6: command tx timeout [ 1440.356396][ T44] team0 (unregistering): Port device team_slave_1 removed [ 1440.496192][T13057] ptrace attach of "./syz-executor exec"[7903] was attempted by "./syz-executor exec"[13057] [ 1440.648212][T12128] Bluetooth: hci6: command tx timeout [ 1441.817214][ T5807] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1441.834541][ T5807] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1441.837016][ T5807] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1441.838766][ T5807] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1441.840078][ T5807] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1442.090038][ T44] team0 (unregistering): Port device team_slave_0 removed [ 1442.705382][ T5807] Bluetooth: hci6: command tx timeout [ 1444.246515][ T5807] Bluetooth: hci7: command tx timeout [ 1444.787262][ T5807] Bluetooth: hci6: command tx timeout [ 1446.226142][T13093] overlayfs: failed to clone upperpath [ 1446.298684][ T5807] Bluetooth: hci7: command tx timeout [ 1448.375970][ T5807] Bluetooth: hci7: command tx timeout [ 1450.264256][T12959] chnl_net:caif_netlink_parms(): no params data found [ 1450.473963][ T5807] Bluetooth: hci7: command tx timeout [ 1450.543546][T13064] chnl_net:caif_netlink_parms(): no params data found [ 1450.553444][T13030] chnl_net:caif_netlink_parms(): no params data found [ 1450.996834][T12959] bridge0: port 1(bridge_slave_0) entered blocking state [ 1450.997019][T12959] bridge0: port 1(bridge_slave_0) entered disabled state [ 1450.997270][T12959] bridge_slave_0: entered allmulticast mode [ 1450.999284][T12959] bridge_slave_0: entered promiscuous mode [ 1451.042142][T12959] bridge0: port 2(bridge_slave_1) entered blocking state [ 1451.042299][T12959] bridge0: port 2(bridge_slave_1) entered disabled state [ 1451.042535][T12959] bridge_slave_1: entered allmulticast mode [ 1451.058069][T12959] bridge_slave_1: entered promiscuous mode [ 1451.164661][ T44] IPVS: stop unused estimator thread 0... [ 1451.469558][T12959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1451.621016][T12959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1451.621281][T13064] bridge0: port 1(bridge_slave_0) entered blocking state [ 1451.621467][T13064] bridge0: port 1(bridge_slave_0) entered disabled state [ 1451.621616][T13064] bridge_slave_0: entered allmulticast mode [ 1451.623567][T13064] bridge_slave_0: entered promiscuous mode [ 1451.628623][T13030] bridge0: port 1(bridge_slave_0) entered blocking state [ 1451.628790][T13030] bridge0: port 1(bridge_slave_0) entered disabled state [ 1451.629044][T13030] bridge_slave_0: entered allmulticast mode [ 1451.632326][T13030] bridge_slave_0: entered promiscuous mode [ 1451.709841][T13064] bridge0: port 2(bridge_slave_1) entered blocking state [ 1451.709968][T13064] bridge0: port 2(bridge_slave_1) entered disabled state [ 1451.710140][T13064] bridge_slave_1: entered allmulticast mode [ 1451.712100][T13064] bridge_slave_1: entered promiscuous mode [ 1451.713560][T13030] bridge0: port 2(bridge_slave_1) entered blocking state [ 1451.713695][T13030] bridge0: port 2(bridge_slave_1) entered disabled state [ 1451.713901][T13030] bridge_slave_1: entered allmulticast mode [ 1451.721045][T13030] bridge_slave_1: entered promiscuous mode [ 1451.929876][T12959] team0: Port device team_slave_0 added [ 1452.161482][T12959] team0: Port device team_slave_1 added [ 1452.339878][T13064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1452.343525][T13030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1452.491173][T13064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1452.494147][T13030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1452.819099][T12959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1452.819114][T12959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1452.819135][T12959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1452.820480][ T44] bridge_slave_1: left allmulticast mode [ 1452.820509][ T44] bridge_slave_1: left promiscuous mode [ 1452.820771][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 1452.882220][ T44] bridge_slave_0: left allmulticast mode [ 1452.882256][ T44] bridge_slave_0: left promiscuous mode [ 1452.882684][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 1452.949028][ T44] bridge_slave_1: left allmulticast mode [ 1452.949057][ T44] bridge_slave_1: left promiscuous mode [ 1452.949254][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 1453.023752][ T44] bridge_slave_0: left allmulticast mode [ 1453.023780][ T44] bridge_slave_0: left promiscuous mode [ 1453.023989][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 1453.103204][ T44] bridge_slave_1: left allmulticast mode [ 1453.103229][ T44] bridge_slave_1: left promiscuous mode [ 1453.103408][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 1453.158040][ T44] bridge_slave_0: left allmulticast mode [ 1453.158066][ T44] bridge_slave_0: left promiscuous mode [ 1453.158277][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 1453.238426][ T44] bridge_slave_1: left allmulticast mode [ 1453.238451][ T44] bridge_slave_1: left promiscuous mode [ 1453.238638][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 1453.296488][ T44] bridge_slave_0: left allmulticast mode [ 1453.296512][ T44] bridge_slave_0: left promiscuous mode [ 1453.296710][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 1453.656049][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1453.756704][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1453.823046][ T44] bond0 (unregistering): Released all slaves [ 1454.025997][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1454.117404][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1454.177389][ T44] bond0 (unregistering): Released all slaves [ 1454.385898][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1454.506001][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1454.587571][ T44] bond0 (unregistering): Released all slaves [ 1454.805984][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1454.897254][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1454.967530][ T44] bond0 (unregistering): Released all slaves [ 1455.179657][T12959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1455.179676][T12959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1455.179705][T12959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1455.182539][T13064] team0: Port device team_slave_0 added [ 1455.190267][T13030] team0: Port device team_slave_0 added [ 1455.207142][T13064] team0: Port device team_slave_1 added [ 1455.210359][T13030] team0: Port device team_slave_1 added [ 1455.789226][T13064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1455.789246][T13064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1455.789276][T13064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1455.891559][T13030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1455.891577][T13030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1455.891607][T13030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1455.894586][T13064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1455.894599][T13064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1455.894619][T13064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1455.908324][T12959] hsr_slave_0: entered promiscuous mode [ 1455.910004][T12959] hsr_slave_1: entered promiscuous mode [ 1455.911154][T12959] debugfs: 'hsr0' already exists in 'hsr' [ 1455.911184][T12959] Cannot create hsr debugfs directory [ 1455.916235][T13030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1455.916254][T13030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1455.916296][T13030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1456.303986][T13064] hsr_slave_0: entered promiscuous mode [ 1456.306844][T13064] hsr_slave_1: entered promiscuous mode [ 1456.308075][T13064] debugfs: 'hsr0' already exists in 'hsr' [ 1456.308107][T13064] Cannot create hsr debugfs directory [ 1456.585235][ T44] hsr_slave_0: left promiscuous mode [ 1456.617572][ T44] hsr_slave_1: left promiscuous mode [ 1456.618432][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1456.656035][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1456.715331][ T44] hsr_slave_0: left promiscuous mode [ 1456.735381][ T44] hsr_slave_1: left promiscuous mode [ 1456.736972][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1456.776080][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1456.925419][ T44] hsr_slave_0: left promiscuous mode [ 1456.945574][ T44] hsr_slave_1: left promiscuous mode [ 1456.946712][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1456.995895][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1457.085550][ T44] hsr_slave_0: left promiscuous mode [ 1457.125367][ T44] hsr_slave_1: left promiscuous mode [ 1457.127075][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1457.156120][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1457.885899][ T44] team0 (unregistering): Port device team_slave_1 removed [ 1458.025923][ T44] team0 (unregistering): Port device team_slave_0 removed [ 1458.936159][ T44] team0 (unregistering): Port device team_slave_1 removed [ 1459.086371][ T44] team0 (unregistering): Port device team_slave_0 removed [ 1460.226280][ T44] team0 (unregistering): Port device team_slave_1 removed [ 1460.379596][ T44] team0 (unregistering): Port device team_slave_0 removed [ 1461.396014][ T44] team0 (unregistering): Port device team_slave_1 removed [ 1461.536100][ T44] team0 (unregistering): Port device team_slave_0 removed [ 1462.193567][T13030] hsr_slave_0: entered promiscuous mode [ 1462.194541][T13030] hsr_slave_1: entered promiscuous mode [ 1462.196518][T13030] debugfs: 'hsr0' already exists in 'hsr' [ 1462.196552][T13030] Cannot create hsr debugfs directory [ 1463.362240][T12959] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1463.416824][T12959] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1463.638092][T12959] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1463.691233][T12959] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1464.266364][T12959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1464.297651][T12959] 8021q: adding VLAN 0 to HW filter on device team0 [ 1464.318456][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1464.318682][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1464.383390][ T3547] bridge0: port 2(bridge_slave_1) entered blocking state [ 1464.383979][ T3547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1466.062719][T12959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1466.401084][T13064] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1466.453221][T13064] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1466.492327][T13064] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1466.562799][T13064] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1466.801465][T13030] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1466.846531][T13030] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1466.884749][T13030] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1466.922726][T13030] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1467.076764][T12959] veth0_vlan: entered promiscuous mode [ 1467.121725][T12959] veth1_vlan: entered promiscuous mode [ 1467.280758][T13064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1467.286928][T12959] veth0_macvtap: entered promiscuous mode [ 1467.308676][T12959] veth1_macvtap: entered promiscuous mode [ 1467.352335][T13064] 8021q: adding VLAN 0 to HW filter on device team0 [ 1467.390259][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 1467.390542][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1467.423065][T12959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1467.439863][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1467.440063][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1467.449753][T13030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1467.470031][T12959] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1467.523035][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1467.539859][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1467.556414][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1467.564745][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1467.594454][T13030] 8021q: adding VLAN 0 to HW filter on device team0 [ 1467.673655][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1467.674619][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1467.811552][T10471] bridge0: port 2(bridge_slave_1) entered blocking state [ 1467.811699][T10471] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1468.029654][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1468.029677][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1468.164400][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1468.164423][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1468.449070][T13064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1471.008627][ T5807] Bluetooth: hci2: ACL packet for unknown connection handle 403 [ 1473.433956][T13064] veth0_vlan: entered promiscuous mode [ 1473.476578][T13064] veth1_vlan: entered promiscuous mode [ 1473.627606][T13064] veth0_macvtap: entered promiscuous mode [ 1473.673623][T13064] veth1_macvtap: entered promiscuous mode [ 1473.778989][T13030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1473.811546][T13064] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1473.866110][T13064] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1473.904646][ T69] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1473.908040][ T69] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1473.910789][ T69] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1473.910869][ T69] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1473.933392][T13257] ptrace attach of "./syz-executor exec"[12959] was attempted by "./syz-executor exec"[13257] [ 1475.335818][T13264] befs: (nbd4): No write support. Marking filesystem read-only [ 1475.342670][T13264] befs: (nbd4): unable to read superblock [ 1475.815143][ T5807] Bluetooth: hci4: command 0x0406 tx timeout [ 1477.057901][T13030] veth0_vlan: entered promiscuous mode [ 1477.237092][T13030] veth1_vlan: entered promiscuous mode [ 1477.446913][T10471] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1477.446936][T10471] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1478.995214][ T5807] Bluetooth: hci4: ACL packet for unknown connection handle 403 [ 1479.136041][T10126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1479.136064][T10126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1480.305500][T13030] veth0_macvtap: entered promiscuous mode [ 1480.328986][T13030] veth1_macvtap: entered promiscuous mode [ 1480.527167][T13030] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1480.575917][T13030] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1480.885528][T13313] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1481.380083][ T1527] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1481.552140][ T1527] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1481.565228][ T1527] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1481.575878][ T1527] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1483.225174][ T2109] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1483.375094][ T2109] usb 1-1: Using ep0 maxpacket: 16 [ 1483.379877][ T2109] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1483.379914][ T2109] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1483.379951][ T2109] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1483.379977][ T2109] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1483.421277][ T2109] usb 1-1: config 0 descriptor?? [ 1484.050203][ T2109] nzxt-smart2 0003:1E71:2009.0003: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 1485.098358][ T8265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1485.098381][ T8265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1485.355896][ T2109] usb 1-1: USB disconnect, device number 5 [ 1485.435133][ T8751] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1485.531898][T13338] fido_id[13338]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 1485.589930][ T8751] usb 5-1: Using ep0 maxpacket: 32 [ 1485.603439][ T8751] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1485.603490][ T8751] usb 5-1: config 0 interface 0 altsetting 16 has an invalid descriptor for endpoint zero, skipping [ 1485.603513][ T8751] usb 5-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1485.603541][ T8751] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1485.603584][ T8751] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1485.603608][ T8751] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1485.705444][ T8751] usb 5-1: config 0 descriptor?? [ 1485.823051][ T8265] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1485.823075][ T8265] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1486.184238][ T8751] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0 [ 1486.184284][ T8751] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0 [ 1486.184314][ T8751] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0 [ 1486.184343][ T8751] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0 [ 1486.184372][ T8751] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0 [ 1486.284604][ T8751] hid-thrustmaster 0003:044F:B65D.0004: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.4-1/input0 [ 1486.297705][ T8751] hid-thrustmaster 0003:044F:B65D.0004: Wrong number of endpoints? [ 1486.711037][ T5786] usb 5-1: USB disconnect, device number 3 [ 1486.804114][T13362] ptrace attach of "./syz-executor exec"[7903] was attempted by "./syz-executor exec"[13362] [ 1487.065642][ C1] hid-thrustmaster 0003:044F:B65D.0004: URB to get model id failed with error -2 [ 1487.354281][T13363] fido_id[13363]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1490.555841][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1490.555919][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1494.627462][T13421] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1497.436000][ T5807] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 1497.436032][ T5807] CPU: 1 UID: 0 PID: 5807 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1497.436060][ T5807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1497.436075][ T5807] Workqueue: hci5 hci_rx_work [ 1497.436115][ T5807] Call Trace: [ 1497.436124][ T5807] [ 1497.436135][ T5807] dump_stack_lvl+0x189/0x250 [ 1497.436168][ T5807] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1497.436197][ T5807] ? __pfx__printk+0x10/0x10 [ 1497.436233][ T5807] ? kernfs_path_from_node+0x2c/0x280 [ 1497.436256][ T5807] ? kernfs_path_from_node+0x243/0x280 [ 1497.436278][ T5807] ? kernfs_path_from_node+0x2c/0x280 [ 1497.436305][ T5807] sysfs_create_dir_ns+0x259/0x280 [ 1497.436327][ T5807] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1497.436364][ T5807] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1497.436391][ T5807] ? rt_spin_unlock+0x161/0x200 [ 1497.436428][ T5807] kobject_add_internal+0x5a5/0xb50 [ 1497.436467][ T5807] kobject_add+0x155/0x220 [ 1497.436502][ T5807] ? __pfx_kobject_add+0x10/0x10 [ 1497.436540][ T5807] ? get_device_parent+0x370/0x3a0 [ 1497.436580][ T5807] device_add+0x408/0xb50 [ 1497.436620][ T5807] hci_conn_add_sysfs+0xd5/0x1e0 [ 1497.436655][ T5807] le_conn_complete_evt+0xf39/0x1500 [ 1497.436696][ T5807] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1497.436723][ T5807] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1497.436749][ T5807] ? lockdep_hardirqs_on+0x9c/0x150 [ 1497.436779][ T5807] ? skb_pull_data+0xfb/0x200 [ 1497.436821][ T5807] hci_le_enh_conn_complete_evt+0x189/0x470 [ 1497.436849][ T5807] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 1497.436879][ T5807] hci_event_packet+0x78f/0x1200 [ 1497.436917][ T5807] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1497.436944][ T5807] ? __pfx_hci_event_packet+0x10/0x10 [ 1497.436989][ T5807] ? hci_send_to_monitor+0xe2/0x570 [ 1497.437019][ T5807] hci_rx_work+0x46a/0xe80 [ 1497.437062][ T5807] ? process_scheduled_works+0x9ef/0x17b0 [ 1497.437093][ T5807] process_scheduled_works+0xade/0x17b0 [ 1497.437155][ T5807] ? __pfx_process_scheduled_works+0x10/0x10 [ 1497.437203][ T5807] worker_thread+0x8a0/0xda0 [ 1497.437234][ T5807] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1497.437271][ T5807] ? __kthread_parkme+0x7b/0x200 [ 1497.437313][ T5807] kthread+0x711/0x8a0 [ 1497.437351][ T5807] ? __pfx_worker_thread+0x10/0x10 [ 1497.437378][ T5807] ? __pfx_kthread+0x10/0x10 [ 1497.437409][ T5807] ? rt_spin_unlock+0x150/0x200 [ 1497.437446][ T5807] ? rt_spin_unlock+0x161/0x200 [ 1497.437499][ T5807] ? __pfx_kthread+0x10/0x10 [ 1497.437536][ T5807] ret_from_fork+0x4b9/0x870 [ 1497.437566][ T5807] ? __pfx_ret_from_fork+0x10/0x10 [ 1497.437602][ T5807] ? __switch_to_asm+0x39/0x70 [ 1497.437630][ T5807] ? __switch_to_asm+0x33/0x70 [ 1497.437657][ T5807] ? __pfx_kthread+0x10/0x10 [ 1497.437693][ T5807] ret_from_fork_asm+0x1a/0x30 [ 1497.437742][ T5807] [ 1497.437776][ T5807] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1497.437826][ T5807] Bluetooth: hci5: failed to register connection device [ 1502.738530][T13487] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1504.945689][T13504] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1513.431887][T13564] ptrace attach of "./syz-executor exec"[9358] was attempted by "./syz-executor exec"[13564] [ 1517.455948][ T8632] IPVS: starting estimator thread 0... [ 1517.615419][T13580] IPVS: using max 8 ests per chain, 19200 per kthread [ 1520.760672][ T5807] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1520.799691][ T5807] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1520.809124][ T5807] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1520.824294][ T5807] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1520.825309][ T5807] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1522.939832][T12128] Bluetooth: hci0: command tx timeout [ 1525.589674][T12128] Bluetooth: hci0: command tx timeout [ 1528.091303][T13652] befs: (nullb0): invalid magic header [ 1528.225935][T12128] Bluetooth: hci0: command tx timeout [ 1530.465151][T12128] Bluetooth: hci0: command tx timeout [ 1532.224188][T13601] chnl_net:caif_netlink_parms(): no params data found [ 1532.552243][ T5807] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1533.648244][ T5807] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1533.652191][ T5807] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1533.653526][ T5807] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1533.654419][ T5807] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1537.178053][ T5807] Bluetooth: hci1: command tx timeout [ 1539.816509][ T5807] Bluetooth: hci1: command tx timeout [ 1541.510463][ T44] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1542.512812][ T5807] Bluetooth: hci1: command tx timeout [ 1543.054506][T13750] ptrace attach of "./syz-executor exec"[7903] was attempted by "./syz-executor exec"[13750] [ 1543.422321][ T44] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1544.526882][T13601] bridge0: port 1(bridge_slave_0) entered blocking state [ 1544.527023][T13601] bridge0: port 1(bridge_slave_0) entered disabled state [ 1544.527295][T13601] bridge_slave_0: entered allmulticast mode [ 1544.555806][T13601] bridge_slave_0: entered promiscuous mode [ 1544.630723][ T5807] Bluetooth: hci1: command tx timeout [ 1544.687133][T13601] bridge0: port 2(bridge_slave_1) entered blocking state [ 1544.687266][T13601] bridge0: port 2(bridge_slave_1) entered disabled state [ 1544.687517][T13601] bridge_slave_1: entered allmulticast mode [ 1544.690379][T13601] bridge_slave_1: entered promiscuous mode [ 1547.435133][T12220] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1548.868024][T12220] usb 1-1: device descriptor read/64, error -71 [ 1548.890719][ T44] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1549.211942][T13601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1549.250843][T13601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1549.424136][T12220] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1551.592071][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1551.592157][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1555.123746][ T44] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1555.364171][T13601] team0: Port device team_slave_0 added [ 1555.383979][T13601] team0: Port device team_slave_1 added [ 1558.409137][T13601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1558.409155][T13601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1558.409185][T13601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1559.114719][T13601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1559.114738][T13601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1559.114769][T13601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1562.355181][ T5807] Bluetooth: hci4: ACL packet for unknown connection handle 403 [ 1564.124674][T13601] hsr_slave_0: entered promiscuous mode [ 1564.136458][T13601] hsr_slave_1: entered promiscuous mode [ 1564.143624][T13601] debugfs: 'hsr0' already exists in 'hsr' [ 1564.143654][T13601] Cannot create hsr debugfs directory [ 1567.073840][ T44] bridge_slave_1: left allmulticast mode [ 1567.073870][ T44] bridge_slave_1: left promiscuous mode [ 1567.074140][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 1567.216131][ T44] bridge_slave_0: left allmulticast mode [ 1567.216160][ T44] bridge_slave_0: left promiscuous mode [ 1567.216454][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 1569.028197][ T5807] Bluetooth: hci7: command 0x0406 tx timeout [ 1570.423231][T13936] syz.3.1793 uses obsolete (PF_INET,SOCK_PACKET) [ 1570.719191][T13941] befs: (nullb0): invalid magic header [ 1571.905728][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1571.986589][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1572.007933][ T44] bond0 (unregistering): Released all slaves [ 1572.441661][T13957] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1797'. [ 1572.759414][T13673] chnl_net:caif_netlink_parms(): no params data found [ 1572.761780][T13963] netlink: 212284 bytes leftover after parsing attributes in process `syz.8.1799'. [ 1572.762174][T13963] openvswitch: netlink: Message has 25 unknown bytes. [ 1573.783154][T13969] warning: `syz.8.1802' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1573.984691][T13982] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1808'. [ 1574.172393][T13988] netlink: 'syz.0.1809': attribute type 1 has an invalid length. [ 1574.172419][T13988] netlink: 208 bytes leftover after parsing attributes in process `syz.0.1809'. [ 1574.305288][ T44] hsr_slave_0: left promiscuous mode [ 1574.325148][ T44] hsr_slave_1: left promiscuous mode [ 1574.326023][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1574.326061][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1574.376455][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1574.376484][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1574.453278][ T44] veth1_macvtap: left promiscuous mode [ 1574.453387][ T44] veth0_macvtap: left promiscuous mode [ 1574.453625][ T44] veth1_vlan: left promiscuous mode [ 1574.453765][ T44] veth0_vlan: left promiscuous mode [ 1576.865973][ T44] team0 (unregistering): Port device team_slave_1 removed [ 1577.105718][ T44] team0 (unregistering): Port device team_slave_0 removed [ 1578.537953][ T5807] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1578.540949][ T5807] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1578.543616][ T5807] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1578.552205][ T5807] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1578.564512][ T5807] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1580.481351][T14007] netlink: 'syz.8.1814': attribute type 1 has an invalid length. [ 1580.625340][ T5807] Bluetooth: hci2: command tx timeout [ 1580.752231][T14017] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1819'. [ 1580.951350][T13673] bridge0: port 1(bridge_slave_0) entered blocking state [ 1580.951494][T13673] bridge0: port 1(bridge_slave_0) entered disabled state [ 1580.951759][T13673] bridge_slave_0: entered allmulticast mode [ 1580.979737][T13673] bridge_slave_0: entered promiscuous mode [ 1581.028300][T13673] bridge0: port 2(bridge_slave_1) entered blocking state [ 1581.028437][T13673] bridge0: port 2(bridge_slave_1) entered disabled state [ 1581.028668][T13673] bridge_slave_1: entered allmulticast mode [ 1581.072153][T13673] bridge_slave_1: entered promiscuous mode [ 1581.569116][T13673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1581.626626][T13673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1581.835290][T14049] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1831'. [ 1582.089526][T13673] team0: Port device team_slave_0 added [ 1582.167947][T13673] team0: Port device team_slave_1 added [ 1582.492314][T13673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1582.492334][T13673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1582.492364][T13673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1582.539970][T13673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1582.539990][T13673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1582.540022][T13673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1582.589555][T14050] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1582.695185][ T5807] Bluetooth: hci2: command tx timeout [ 1583.188421][T13673] hsr_slave_0: entered promiscuous mode [ 1583.189939][T13673] hsr_slave_1: entered promiscuous mode [ 1583.191019][T13673] debugfs: 'hsr0' already exists in 'hsr' [ 1583.191046][T13673] Cannot create hsr debugfs directory [ 1584.297562][T14123] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1855'. [ 1584.554740][ T44] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1584.794113][ T5807] Bluetooth: hci2: command tx timeout [ 1584.907814][T13994] chnl_net:caif_netlink_parms(): no params data found [ 1585.016775][T14143] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1859'. [ 1585.129839][ T44] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1585.698667][ T44] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1586.113461][ T44] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1586.314489][T14178] bond1: entered allmulticast mode [ 1586.320250][T14178] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1586.344839][T14180] netlink: 'syz.0.1867': attribute type 5 has an invalid length. [ 1586.584485][T14185] tipc: Enabling of bearer rejected, failed to enable media [ 1586.585300][T13994] bridge0: port 1(bridge_slave_0) entered blocking state [ 1586.585440][T13994] bridge0: port 1(bridge_slave_0) entered disabled state [ 1586.585734][T13994] bridge_slave_0: entered allmulticast mode [ 1586.604768][T13994] bridge_slave_0: entered promiscuous mode [ 1586.664562][T13994] bridge0: port 2(bridge_slave_1) entered blocking state [ 1586.664842][T13994] bridge0: port 2(bridge_slave_1) entered disabled state [ 1586.665887][T13994] bridge_slave_1: entered allmulticast mode [ 1586.683655][T13994] bridge_slave_1: entered promiscuous mode [ 1586.855134][ T5807] Bluetooth: hci2: command tx timeout [ 1586.983215][T14209] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1871'. [ 1587.258089][T14201] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1870'. [ 1587.901276][T12128] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1587.922103][T12128] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1587.927484][T12128] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1587.928843][T12128] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1587.930489][T12128] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1588.033144][T13994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1588.127343][T13994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1588.469950][T13994] team0: Port device team_slave_0 added [ 1588.651657][T13994] team0: Port device team_slave_1 added [ 1589.258289][T13994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1589.258304][T13994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1589.258325][T13994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1589.259606][ T44] bridge_slave_1: left allmulticast mode [ 1589.259635][ T44] bridge_slave_1: left promiscuous mode [ 1589.259889][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 1589.396662][ T44] bridge_slave_0: left allmulticast mode [ 1589.396695][ T44] bridge_slave_0: left promiscuous mode [ 1589.397196][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 1589.488931][ T44] bridge_slave_1: left allmulticast mode [ 1589.488963][ T44] bridge_slave_1: left promiscuous mode [ 1589.489216][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 1589.576858][ T44] bridge_slave_0: left allmulticast mode [ 1589.576890][ T44] bridge_slave_0: left promiscuous mode [ 1589.577168][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 1589.975223][ T5807] Bluetooth: hci0: command tx timeout [ 1590.217734][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1590.261924][T14265] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1877'. [ 1590.316829][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1590.377993][ T44] bond0 (unregistering): Released all slaves [ 1592.047326][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1592.055277][ T5807] Bluetooth: hci0: command tx timeout [ 1592.115690][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1592.141136][ T44] bond0 (unregistering): Released all slaves [ 1592.357626][T13994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1592.357645][T13994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1592.357676][T13994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1593.298926][T14283] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1880'. [ 1593.630807][T13994] hsr_slave_0: entered promiscuous mode [ 1593.632251][T13994] hsr_slave_1: entered promiscuous mode [ 1593.686503][T13994] debugfs: 'hsr0' already exists in 'hsr' [ 1593.686535][T13994] Cannot create hsr debugfs directory [ 1594.135081][ T5807] Bluetooth: hci0: command tx timeout [ 1594.155500][T14304] bridge1: entered promiscuous mode [ 1594.155527][T14304] bridge1: entered allmulticast mode [ 1594.334744][T14316] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1886'. [ 1595.175875][T14335] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 1595.175900][T14335] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 14335, name: syz.3.1890 [ 1595.175921][T14335] preempt_count: 1, expected: 0 [ 1595.175932][T14335] RCU nest depth: 2, expected: 2 [ 1595.175954][T14335] 5 locks held by syz.3.1890/14335: [ 1595.175967][T14335] #0: ffff88807a268e10 (sk_lock-AF_VSOCK){+.+.}-{0:0}, at: vsock_connect+0x152/0xe20 [ 1595.176032][T14335] #1: ffffffff8d7aa500 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run9+0x1ec/0x500 [ 1595.176093][T14335] #2: ffff8880b8932c88 ((stream_local_lock)){+.+.}-{3:3}, at: __bpf_stream_push_str+0x211/0xbe0 [ 1595.176148][T14335] #3: ffffffff8d7aa500 (rcu_read_lock){....}-{1:3}, at: rt_spin_trylock+0x10d/0x2b0 [ 1595.176212][T14335] #4: ffff8880b893f6e8 (&s->lock_key#5){+.+.}-{3:3}, at: ___slab_alloc+0x12f/0x1470 [ 1595.176269][T14335] Preemption disabled at: [ 1595.176275][T14335] [<0000000000000000>] 0x0 [ 1595.176303][T14335] CPU: 1 UID: 0 PID: 14335 Comm: syz.3.1890 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1595.176329][T14335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1595.176343][T14335] Call Trace: [ 1595.176352][T14335] [ 1595.176362][T14335] dump_stack_lvl+0x189/0x250 [ 1595.176396][T14335] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1595.176424][T14335] ? __pfx__printk+0x10/0x10 [ 1595.176464][T14335] ? print_lock_name+0xde/0x100 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1595.176499][T14335] __might_resched+0x44b/0x5d0 [ 1595.176533][T14335] ? __pfx___might_resched+0x10/0x10 [ 1595.176560][T14335] ? ___slab_alloc+0x12f/0x1470 [ 1595.176585][T14335] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1595.176611][T14335] ? lockdep_hardirqs_on+0x9c/0x150 [ 1595.176643][T14335] rt_spin_lock+0xc7/0x3e0 [ 1595.176679][T14335] ? __pfx_rt_spin_lock+0x10/0x10 [ 1595.176711][T14335] ? __lock_acquire+0xab9/0xd20 [ 1595.176752][T14335] ___slab_alloc+0x12f/0x1470 [ 1595.176777][T14335] ? __set_page_owner+0x25c/0x490 [ 1595.176814][T14335] __slab_alloc+0xc6/0x1f0 [ 1595.176847][T14335] ? __set_page_owner+0x25c/0x490 [ 1595.176878][T14335] __kmalloc_cache_noprof+0xec/0x6c0 [ 1595.176908][T14335] ? __set_page_owner+0x25c/0x490 [ 1595.176941][T14335] __set_page_owner+0x25c/0x490 [ 1595.176972][T14335] ? __pfx___set_page_owner+0x10/0x10 [ 1595.177001][T14335] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1595.177044][T14335] post_alloc_hook+0x240/0x2a0 [ 1595.177081][T14335] get_page_from_freelist+0x28c0/0x2960 [ 1595.177134][T14335] ? lockdep_unlock+0x89/0x120 [ 1595.177168][T14335] ? __lock_acquire+0xab9/0xd20 [ 1595.177222][T14335] alloc_frozen_pages_nolock_noprof+0xbc/0x150 [ 1595.177260][T14335] alloc_pages_nolock_noprof+0xa/0x30 [ 1595.177285][T14335] bpf_stream_page_replace+0x19/0x1e0 [ 1595.177311][T14335] __bpf_stream_push_str+0x35c/0xbe0 [ 1595.177342][T14335] ? __pfx___bpf_stream_push_str+0x10/0x10 [ 1595.177378][T14335] bpf_stream_stage_printk+0x14e/0x1c0 [ 1595.177401][T14335] ? __pfx_find_from_stack_cb+0x10/0x10 [ 1595.177432][T14335] ? arch_bpf_stack_walk+0x112/0x170 [ 1595.177465][T14335] ? __pfx_bpf_stream_stage_printk+0x10/0x10 [ 1595.177498][T14335] ? lockdep_hardirqs_on+0x9c/0x150 [ 1595.177533][T14335] bpf_prog_report_may_goto_violation+0xc4/0x190 [ 1595.177561][T14335] ? __pfx_bpf_prog_report_may_goto_violation+0x10/0x10 [ 1595.177589][T14335] ? irqentry_exit+0x74/0x90 [ 1595.177616][T14335] ? read_tsc+0x9/0x20 [ 1595.177644][T14335] bpf_check_timed_may_goto+0xaa/0xb0 [ 1595.177672][T14335] arch_bpf_timed_may_goto+0x21/0x40 [ 1595.177702][T14335] bpf_prog_6fd842a53d323cc5+0x53/0x5f [ 1595.177724][T14335] bpf_trace_run9+0x2db/0x500 [ 1595.177757][T14335] ? bpf_trace_run9+0x1ec/0x500 [ 1595.177787][T14335] ? __pfx_bpf_trace_run9+0x10/0x10 [ 1595.177846][T14335] __bpf_trace_virtio_transport_alloc_pkt+0x2d7/0x340 [ 1595.177892][T14335] ? __pfx___bpf_trace_virtio_transport_alloc_pkt+0x10/0x10 [ 1595.177925][T14335] ? kmem_cache_alloc_node_noprof+0x291/0x6e0 [ 1595.177953][T14335] ? __alloc_skb+0x112/0x2d0 [ 1595.177990][T14335] ? __alloc_skb+0x1bc/0x2d0 [ 1595.178023][T14335] ? __local_bh_enable+0x28c/0x410 [ 1595.178059][T14335] virtio_transport_alloc_skb+0x10cc/0x1130 [ 1595.178104][T14335] ? __pfx_virtio_transport_alloc_skb+0x10/0x10 [ 1595.178133][T14335] ? rt_spin_unlock+0x150/0x200 [ 1595.178171][T14335] virtio_transport_send_pkt_info+0x6be/0x1100 [ 1595.178236][T14335] virtio_transport_connect+0xa7/0x100 [ 1595.178270][T14335] ? __pfx_virtio_transport_connect+0x10/0x10 [ 1595.178312][T14335] ? __pfx_vsock_auto_bind+0x10/0x10 [ 1595.178338][T14335] ? vsock_assign_transport+0x5ed/0x770 [ 1595.178381][T14335] vsock_connect+0xb8b/0xe20 [ 1595.178415][T14335] ? __might_fault+0xb0/0x130 [ 1595.178444][T14335] ? __pfx_vsock_connect+0x10/0x10 [ 1595.178474][T14335] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1595.178501][T14335] ? bpf_lsm_socket_connect+0x9/0x20 [ 1595.178527][T14335] __sys_connect+0x323/0x450 [ 1595.178546][T14335] ? __pfx___sys_connect+0x10/0x10 [ 1595.178571][T14335] ? rcu_is_watching+0x15/0xb0 [ 1595.178603][T14335] __x64_sys_connect+0x7a/0x90 [ 1595.178619][T14335] do_syscall_64+0xfa/0xfa0 [ 1595.178636][T14335] ? lockdep_hardirqs_on+0x9c/0x150 [ 1595.178653][T14335] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1595.178669][T14335] ? clear_bhb_loop+0x60/0xb0 [ 1595.178688][T14335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1595.178703][T14335] RIP: 0033:0x7f499eb6eec9 [ 1595.178718][T14335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1595.178733][T14335] RSP: 002b:00007f499cdce038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1595.178749][T14335] RAX: ffffffffffffffda RBX: 00007f499edc5fa0 RCX: 00007f499eb6eec9 [ 1595.178761][T14335] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000005 [ 1595.178771][T14335] RBP: 00007f499ebf1f91 R08: 0000000000000000 R09: 0000000000000000 [ 1595.178781][T14335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1595.178790][T14335] R13: 00007f499edc6038 R14: 00007f499edc5fa0 R15: 00007ffc5a94cf38 [ 1595.178818][T14335] [ 1596.255999][ T5807] Bluetooth: hci0: command tx timeout [ 1596.693451][ T44] hsr_slave_0: left promiscuous mode [ 1596.737491][ T44] hsr_slave_1: left promiscuous mode [ 1596.739541][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1596.786781][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1597.025247][ T44] hsr_slave_0: left promiscuous mode [ 1597.075132][ T44] hsr_slave_1: left promiscuous mode [ 1597.076191][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1597.076219][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1597.122541][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1597.122571][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1597.225308][ T44] veth1_macvtap: left promiscuous mode [ 1597.225423][ T44] veth0_macvtap: left promiscuous mode [ 1597.225707][ T44] veth1_vlan: left promiscuous mode [ 1597.225889][ T44] veth0_vlan: left promiscuous mode [ 1598.225803][ T44] team0 (unregistering): Port device team_slave_1 removed [ 1598.356001][ T44] team0 (unregistering): Port device team_slave_0 removed [ 1600.935846][ T44] team0 (unregistering): Port device team_slave_1 removed [ 1601.135819][ T44] team0 (unregistering): Port device team_slave_0 removed