last executing test programs: 29m30.179575019s ago: executing program 32 (id=199): sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x4, 0x100, 0x10004, 0x2c}, 0x50) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 27m41.573187954s ago: executing program 2 (id=439): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f080, 0x19}) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) vmsplice(r0, &(0x7f0000001680)=[{&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)}, {&(0x7f00000016c0)="e20b86d0001f200e431dc9b614ba30830a93bc2076f5f1a3fb672614fec77c9512a2be4a52a8aaccdf8fef702e59946cf4ca771c250e26b93cb209fda874fcc98f456c0a5f2df0c46ad0914b1977b5b5874afdd2b31292f16b2f6fde2a576a8c8cfc9cdf8bc8b807bdf0ef54af33a3e8e9b6b447dab866d76e2c05f521ed0aae9762b60b270cf433ee69133d0733443d4282e2c6873d63", 0x97}, {&(0x7f00000013c0)="b474e904663623d8fc12d913442e1b67c1500dd29967aa963a63713cacecc3dcab3f5d36e14122d4a38826b9f0ab06d470bf42a67b3c44dcda1a7057e6bd4b34bcf5467d0bd0402996302481eccf", 0x4e}, {&(0x7f0000001440)="6f7993d9aa85e2c572f5c8c92b95b847593767a36da72b368301f733c22342f30d802ee5c75370039d2739f1a692b403ec93d3787fffc13095e8415d6b8e8ca7c375fa9ba0bdd7de1ddf8071599799906c8d89a509c115f6b9e686a8ee7d6b50e88cc24b000000000000008051dce5bdc2276966f6699970f6e36c00bb0bc49c3cf5d75f000000000000000000", 0x8d}, {&(0x7f0000001500)="480c4125b0a8048bd4169ebec8ffa3819b94023228dc93ee4a1a752292832a7e5f8d6196002307d1d3f251235012d54a248e10494250c20c0739e33759626e3f101d012bec8a499d6b90b9be6bbd8569c657f53e0a6ffd9109df7fc853d3a8a8a922407f889581f0a7cb768a7194f8be750b23a58febb6dc00760268a3d16b13a45b8af9652dc2a2c21a8fd135f67eec1bc769aa0aeb67497568e9661f59b7da7e92e97460d8ef8c518e3e7e5a8876c3e2042083403a6027988ae5485dbd8d581f38e76b886afce8628d3ff7d4b543a724244b6091b96c53b700e1c4a6c3a6c7acd35103f2", 0xe5}, {&(0x7f0000001600)="fcbdc3e644f1b26effd2038c5cb50f7a135fccbd42c0b2309ffc0575a7513a8b09427af50661af25bb4a4da4ffab668b91de0e3eea6dcdc35405d1188b3deeeede9100b8d3c3be4dc52755fa8cd3b90342ae783c5f382c", 0x57}], 0x7, 0x2) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2713, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82187202, &(0x7f00000000c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 27m39.382422676s ago: executing program 2 (id=444): r0 = socket$kcm(0x10, 0x3, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000011006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac004000202080002001f0001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c9", 0x5b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 27m38.862890922s ago: executing program 2 (id=445): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000002"], 0x50) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f0000000180)={0xa, 0x4e23, 0x1, @local, 0x38a}, 0x1c, &(0x7f0000000b00)=[{&(0x7f0000000400)}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="100000000000000029"], 0x30}, 0x4) 27m38.387720826s ago: executing program 2 (id=448): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) fsopen(&(0x7f0000000040)='cifs\x00', 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfc, "2af01c3d0040fbffffffffffffff00"}) syz_open_pts(r1, 0x0) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x800) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x0, @local}, {0x2, 0x4e23, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x20018847) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) 27m33.182654653s ago: executing program 2 (id=458): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0x9, 0xfffffffffffffffd, 0x6, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0xffffffff, 0x120, 0x2000, 0xa8, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xc2, 0xffffffffffffffff, 0x0, 0x0, 0x36}]) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0xffffffff9046dce8, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x3002a8d, 0x1) 27m31.475980632s ago: executing program 2 (id=464): socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x20, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x48000) r8 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r8, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r9, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x8c, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r11, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x2b, r11, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r12, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}}, 0x0, 0x32, 0x0, 0x1}, 0x28) 27m14.734661807s ago: executing program 33 (id=464): socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x20, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x48000) r8 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r8, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r9, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x8c, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r11, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x2b, r11, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r12, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}}, 0x0, 0x32, 0x0, 0x1}, 0x28) 25m1.024636977s ago: executing program 0 (id=695): syz_emit_ethernet(0x2a, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @void, {@arp={0x806, @generic={0x305, 0x888e, 0x6, 0x4, 0x0, @link_local, "6f173764", @random="5908c022f90d", "dd492134"}}}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, r0, 0x1, 0x0, 0x0, {0x54}, [{{@nsim={{0xe, 0x2}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) pread64(r3, &(0x7f0000001100)=""/216, 0xd8, 0x401) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x8}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r6, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000084, 0x0, 0x8001}]}) 24m58.521409258s ago: executing program 0 (id=700): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2}, &(0x7f0000000180)=0x20000, &(0x7f00000001c0)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000440)="000002", &(0x7f00000005c0)=""/152}, 0x20) 24m58.329354535s ago: executing program 0 (id=701): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002, 0xfffffffc, 0x0, 0x6}]}, 0x94) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f0000000340)=r3, 0x4) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, 0x0, 0x0) 24m57.66323746s ago: executing program 0 (id=703): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f0000000140)="41000200010078", 0x7) 24m57.508988743s ago: executing program 0 (id=704): syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x4, 0x8, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x8001, 0x400056}]}}}}}}}, 0x0) 24m57.4478973s ago: executing program 0 (id=705): socket$key(0xf, 0x3, 0x2) syz_io_uring_setup(0x66f, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0xfffffffd, 0x2e9}, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x71096000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x20000000) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) 24m42.146380754s ago: executing program 34 (id=705): socket$key(0xf, 0x3, 0x2) syz_io_uring_setup(0x66f, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0xfffffffd, 0x2e9}, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x71096000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x20000000) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) 24m13.43675627s ago: executing program 1 (id=753): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00004cb1000100000000000000000020010000000000000000000000000000ac14141500000000000000000000000000000005000000030a00201e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f000000000000ffffffffffffffff0000000000000000ffffffffffffffffffffff7f0000000000000100000000000200000000000000000a00000000000000000000008040000000000000000008000000000000000001"], 0xfc}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x80, 0x0}, 0x20000000) sendmsg$kcm(r1, &(0x7f0000002ec0)={&(0x7f0000001b00)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x1002}, 0x18, 0x0, 0x0, 0x0, 0x0, 0x86a9}, 0x20000000) 24m12.520401585s ago: executing program 1 (id=756): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x7, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x24c4436d5a174b6d, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, 0x0) r1 = getgid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002a00)=[{{&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000002780)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x18, 0x1, 0x2, {r0}}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {r0, 0x0, r1}}}, @cred={{0x18, 0x1, 0x2, {r0, 0xee01}}}], 0xa0, 0x4000040}}, {{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000002840)}, {&(0x7f0000002940)}], 0x2, 0x0, 0x0, 0x10000800}}], 0x2, 0x8010) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xa}, 0x6e) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x38011, r2, 0x0) read(r2, &(0x7f00000000c0)=""/163, 0xd0140f23) 24m10.789933885s ago: executing program 1 (id=757): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdir(0x0, 0x0) 24m10.564938405s ago: executing program 1 (id=758): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2803, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000480)={0x6, 0x0, [{0xb, 0xffffffff, 0x4, 0xffffff89, 0x6, 0x6, 0x3}, {0x1, 0x4, 0x0, 0x8, 0x0, 0x1, 0x5}, {0x0, 0x893, 0x0, 0x3ff, 0x7ffffdff, 0x8005, 0x31}, {0x80000019, 0xe5f, 0x1, 0x8, 0xdf3, 0x6, 0x80000001}, {0x80000000, 0x2ab, 0x1, 0xd, 0x3, 0x7ff, 0x400}, {0x80000001, 0x2, 0x3f91c194927b8e21, 0xfffffff7, 0xfffffff9, 0xff, 0x6}]}) 24m10.30608014s ago: executing program 1 (id=759): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) futex(&(0x7f0000000040), 0x6, 0x2, &(0x7f0000000080), 0x0, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240048d4}, 0x40800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syslog(0x2, &(0x7f0000001640)=""/153, 0x99) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4008890) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) socket$inet_tcp(0x2, 0x1, 0x0) 24m3.61117014s ago: executing program 1 (id=762): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xf8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x5, 0x0, 0x0, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xac, 0xfff, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x7fffffff}, {0x2, 0xfffffffffffffff9, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d2, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x7}]}]}, 0xf8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x3c, 0x68, 0x1, 0x0, 0x25dfdbfd, {0x2}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x4}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_HOPLIMIT={0x5, 0x4, 0x1}}, @NHA_ID={0x8, 0x6, 0xf2}, @NHA_OIF={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd1400fcdbdf250900020073797a30000000000800410072786500140033006c6f00"/56], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x2c020400) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) r9 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r6, r8, 0x25, 0x2, @val=@perf_event={0x11}}, 0x18) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r9, 0xffffffffffffffff, 0x4, r6}, 0x10) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_STOPDAEMON(r10, 0x0, 0x48c, &(0x7f00000011c0)={0x2, 'veth0_to_hsr\x00'}, 0x18) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002a40), r11) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x20, 0x1418, 0x1, 0x2, 0x3, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x8}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 23m47.458742486s ago: executing program 35 (id=762): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xf8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x5, 0x0, 0x0, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xac, 0xfff, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x7fffffff}, {0x2, 0xfffffffffffffff9, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d2, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x7}]}]}, 0xf8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x3c, 0x68, 0x1, 0x0, 0x25dfdbfd, {0x2}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x4}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_HOPLIMIT={0x5, 0x4, 0x1}}, @NHA_ID={0x8, 0x6, 0xf2}, @NHA_OIF={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd1400fcdbdf250900020073797a30000000000800410072786500140033006c6f00"/56], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x2c020400) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) r9 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r6, r8, 0x25, 0x2, @val=@perf_event={0x11}}, 0x18) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r9, 0xffffffffffffffff, 0x4, r6}, 0x10) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_STOPDAEMON(r10, 0x0, 0x48c, &(0x7f00000011c0)={0x2, 'veth0_to_hsr\x00'}, 0x18) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002a40), r11) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x20, 0x1418, 0x1, 0x2, 0x3, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x8}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 20m10.654293299s ago: executing program 7 (id=1001): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xbf0fe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000280)='.pending_reads\x00', 0x181000, 0x10) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, @empty, @empty, 0x0, 0x1, 0xfffffffe, 0x1}}) r5 = fsmount(r3, 0x1, 0x1) fchdir(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) mkdirat(0xffffffffffffff9c, 0x0, 0x1ec) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000180)={{}, {0x8}, [], {0x4, 0x2}, [], {}, {0x20, 0x4}}, 0x24, 0x3) syz_usb_connect(0x0, 0x36, 0x0, 0x0) userfaultfd(0x1) 20m7.302428605s ago: executing program 7 (id=1010): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000940)={0x44, &(0x7f0000000680)={0x0, 0x2a}, 0x0, 0x0, &(0x7f0000000800)={0x20, 0x81, 0x1, 's'}, &(0x7f00000009c0)={0x20, 0x82, 0x3, "65ce12"}, &(0x7f0000000880)={0x20, 0x83, 0x1, "91"}, 0x0, 0x0}) 20m3.205754932s ago: executing program 7 (id=1015): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000001340)=[{&(0x7f00000002c0)="81896919fd", 0x5}], 0x1, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x2000000002ffff, 0x0) 19m49.126424688s ago: executing program 7 (id=1032): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 19m44.118842094s ago: executing program 7 (id=1036): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x40000105, 0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x8e59, 0x0, 0x3}) close_range(r4, r2, 0x0) 19m43.251392062s ago: executing program 7 (id=1042): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x7, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x24c4436d5a174b6d, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002a00)=[{{&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000002780), 0x0, 0x4000040}}, {{0x0, 0x0, &(0x7f00000029c0)=[{0x0}, {&(0x7f0000002940)}], 0x2, 0x0, 0x0, 0x10000800}}], 0x2, 0x8010) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000003c0)={'broute\x00', 0x0, 0x0, 0x0, [0x61, 0x10000, 0x9c9, 0xf, 0x4, 0x3]}, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x38011, r0, 0x0) read(r0, &(0x7f00000000c0)=""/163, 0xd0140f23) r2 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r2, &(0x7f0000001500)=""/4067, 0xfe3) 19m26.736868158s ago: executing program 36 (id=1042): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x7, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x24c4436d5a174b6d, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002a00)=[{{&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000002780), 0x0, 0x4000040}}, {{0x0, 0x0, &(0x7f00000029c0)=[{0x0}, {&(0x7f0000002940)}], 0x2, 0x0, 0x0, 0x10000800}}], 0x2, 0x8010) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000003c0)={'broute\x00', 0x0, 0x0, 0x0, [0x61, 0x10000, 0x9c9, 0xf, 0x4, 0x3]}, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x38011, r0, 0x0) read(r0, &(0x7f00000000c0)=""/163, 0xd0140f23) r2 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r2, &(0x7f0000001500)=""/4067, 0xfe3) 18m14.564254835s ago: executing program 4 (id=1352): mount$tmpfs(0x0, 0x0, &(0x7f00000000c0), 0x800400, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, 0x0}, 0x20040010) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x4, 0xffffffffffffffff, 0x0}]) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2, 0x0, 0xffffffff}, 0x7, 0x7a3c, &(0x7f0000000040)={{0xdfe}}, 0x5, 0x0}}) 18m14.28528063s ago: executing program 4 (id=1354): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0xfffffffffffffdb1, &(0x7f0000000280)=0x6) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x121) fcntl$notify(r0, 0x402, 0x20) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) openat(r0, &(0x7f000000c380)='./file0\x00', 0x20042, 0x101) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) vmsplice(r1, &(0x7f00000009c0), 0x0, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$FUSE(r3, 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r4) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) 18m13.144867988s ago: executing program 4 (id=1355): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000200)=0xc) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='yeah', 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x7) sendto$inet(r0, &(0x7f00000001c0)='l', 0x1, 0x24008015, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0xa}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = getpgrp(0xffffffffffffffff) getpgrp(r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000440), 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r3}, 0x8) io_uring_setup(0x3d7d, &(0x7f0000000100)={0x0, 0xb2d0, 0x800, 0x3, 0x1f2}) writev(0xffffffffffffffff, 0x0, 0x0) epoll_create1(0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) sendto$inet(r0, &(0x7f0000000080)='<', 0xffffffffffffffef, 0x4805, 0x0, 0xfe8d) 18m10.803249884s ago: executing program 4 (id=1361): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x47, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x19, 0x0, r0}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{0x0}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r2, &(0x7f0000000480)={&(0x7f0000000500)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2}, 0x80, 0x0}, 0x4000011) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568da", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4848}, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0x642, 0x0, 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x10003, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cc, 0x0, 0xa1b, 0x8, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trAns=o,\x00'/20, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0x80a0000, 0x3b3ca000, 0x0, 0x2, 0x81, 0x10, 0x3, 0x7, 0x0, 0x8, 0x9}, {0x8080000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0xf9, 0x0, 0x7, 0xbf, 0x3}, {0x30000, 0x54000, 0xf, 0x0, 0x2a, 0xc4, 0x0, 0x0, 0x1, 0x3, 0x40, 0x3}, {0xeeef0000, 0x33331000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x9, 0x9, 0xd, 0x8, 0xf, 0x4, 0x2f}, {0x80a0000, 0xeeee8000, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0x0, 0x3f, 0x2, 0xff}, {0xb000, 0x5000, 0x9, 0x76, 0x2, 0x1, 0x2, 0x80, 0x0, 0xff, 0x6, 0x80}, {0xeeee8000, 0xeeee0000, 0x3, 0x4, 0x4, 0x0, 0xa1, 0x20, 0x42, 0x0, 0x4}, {0x2, 0x70000, 0x8, 0x3, 0x0, 0x7, 0x9, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0x40000, 0x80f3}, 0xddf8ffd3, 0x0, 0x0, 0x110, 0xe, 0xb001, 0xd000, [0x80000004, 0x1, 0x10000, 0xfffffffffffdffff]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$can_j1939(0x1d, 0x2, 0x7) 18m4.682729149s ago: executing program 4 (id=1368): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1", 0x83}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d0", 0x95}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29", 0xce}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d", 0x54}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec4898205", 0xa6}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257d", 0x85}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 18m1.598626191s ago: executing program 4 (id=1377): socket$key(0xf, 0x3, 0x2) syz_io_uring_setup(0x66f, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0xfffffffd, 0x2e9}, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x71096000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x20000000) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x10c}}, 0x28040800) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80785659, &(0x7f0000000440)={0x0, @frame_sync}) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r4, 0x0, 0x0) r5 = socket$inet6(0xa, 0x5, 0x0) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x1a1101, 0x0) ioctl$COMEDI_UNLOCK(r6, 0x6406) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, 0x6e) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe0064e200000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 17m46.124570309s ago: executing program 37 (id=1377): socket$key(0xf, 0x3, 0x2) syz_io_uring_setup(0x66f, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0xfffffffd, 0x2e9}, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x71096000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x20000000) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x10c}}, 0x28040800) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80785659, &(0x7f0000000440)={0x0, @frame_sync}) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r4, 0x0, 0x0) r5 = socket$inet6(0xa, 0x5, 0x0) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x1a1101, 0x0) ioctl$COMEDI_UNLOCK(r6, 0x6406) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, 0x6e) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe0064e200000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 15m2.386659009s ago: executing program 8 (id=2243): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x20, 0x0) 15m2.332686496s ago: executing program 8 (id=2244): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_buf(r0, 0x107, 0x18, 0x0, 0x0) 15m2.237261074s ago: executing program 8 (id=2245): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x8) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb62", 0x1c) syz_usb_connect(0x0, 0x24, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f0000000080)='securityfs\x00', 0x0, &(0x7f0000000280)='\x02\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x00\xfaC\x93\xc0S\xaf\f\x1a\fEik\x86\x15\xab\x909\xf8i\xc0\xa7\xa9\xb1\xbe\xc7\x1d\xe0\x18\xd2\xbaG|\xd5fC\x8d\t\x00/I\x8b\xbf\x94\xf4\x96[us\x96\x90\x8d\x9d\xfb\xdc\x7f0&\xab\x17@)\xf1\xc3Q\xb2M :\xaa\x99G\xdd\xa9E6A]@>\f\xb1n\x1a\x8c\xc6e7{@\x90\x8fz\xfcf\x88\x15A\x0e\xbf\xb8\xff\xa8\xb9\xab\x83>\xf9I0\xdd\x93#\x1e\x00\xed#\xc9\xd0Uk\xa6b\xa6/\x15\x92\xc6,p\xc9\xce\xe1\xc3\xd5\x89Lw\x17\x16\x18\xddh\xc8\x81w\x1e\x7f\xc7\x16\xe5\x96\x03\t\xc3\x94\xc7\xeb\xd6.\xfa\xb3\xe0\x1f\xa9\x19\xfaS\x1f[T\x1e\xc5nX\x84\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00=0\xc3\xbc\xfd\xce~\xe3\xcaO\"\xbb\xd1\x15\xf2y\xb91\x1d\xab\xeaO\x19\rH4\xc2\xe4\x922~K^K`55\xb7\xd1\n\xba\xb7,\xdb\xc2\x86\xc30bnc\x06\x06q\xe9\x97\fHA<\x94`\xf7H?\x86\xb8C9\b\x18vFWRdNee\xf1A\x06\x8f\x97\x99\xa5A\xfa\x94IfB\xa9\xf5\xd8\x83\xc5\b\x0eL\\Z\x80](f6D\x1a\xf7si\xa4l\xa8\x0f\xcc\xa1\xef\x1bCq\x0e\xf87\xfc\xce\x96cm\x83\x05S\x01Zj`dP:d\xba\x02\x14\xaa\x051\xd7\x87\x1b\xcb\xa2.\x89\x16CRx\x9b\x04\x1f\x8fA\t<\x99/\'tk\xcb\xd7|\x0f\xc9m\x95\x9a\n\v&\xca\xcd\x11\xec\xfd\x17a$.\xe9\x14\x8f\n\x15\x8d\rJ\x99\x8a\x87\x81\xc4S\x85L\xe5w\xa1\xbf\x91Q&6\x8e\xd1\x02\x19K\xd3\xab\xe5\xdc\xac\x05\x8dQ\xf4\x1aa\x86\xbc6\\\x06\xdf\x84\x00+F|\xa6\xc4\xab\x00G\xd0\x14N+\xf9\x84i?C\x81\x8eu\xd3\xcbg\xb7\a\xd9\x9a*\x17>\xac\x9d\x9d\xf6\t\xd8b\x19\x8a\x1e&\xde\x87-%\xf3\x8a2L\x1cQ2\f\x94\xf7\xf9\xadI\xedU\xabr\xe2\xe1\xc2{\b\xa8\xc2\n4\x0f\'\xed\xcc\xd7qG\xa7p\x8ct\xe3/l\v\x93\x8a\x95R\xd6\x19L\x85\x80\x18\x15\xcezn\xa8,i\xf1\x91@\xc0\xb1\a\xfd\xec\x95>\b(\xfa~O\xfd\xe2\a6b\x97\xc6$?;\x8eJ/P\x9d\x17\xaaU\xc4\b') r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)=0x639) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ipvlan1\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004c084}, 0x20000080) r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000027c0)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000002800)={0x2020}, 0x2020) ioctl$I2C_RDWR(r5, 0x707, 0x0) 15m2.224549389s ago: executing program 8 (id=2246): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 15m2.125771204s ago: executing program 8 (id=2247): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x80080, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000001d80), 0x80800, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffff8, 0x4, 0x8, 0x0, 0x2}, 0x0, &(0x7f0000000900)={0x3fe, 0x0, 0x0, 0x81, 0x4000, 0x0, 0x7ffffffe, 0x4}, 0x0, 0x0) close(r0) 15m2.001398011s ago: executing program 8 (id=2248): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) capset(&(0x7f0000000080)={0x20071026}, 0x0) listen(r0, 0x5) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002480)=@deltfilter={0x24, 0x2d, 0x4, 0x70bd2f, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0x1, 0x2}, {0x4, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004885}, 0x40004) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f00000000c0)={0x1, 0x79e}, 0x8) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) 14m43.725331989s ago: executing program 5 (id=2277): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_buf(r0, 0x107, 0x18, &(0x7f0000000040), 0x0) 14m42.973174963s ago: executing program 5 (id=2280): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12015082d5281b08c00901024ffa0102030109021200013daea002090425070013fd42fb"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000980)={0x14, 0x0, &(0x7f0000000940)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000580)={0x20, 0x14, 0x1, "ef"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, 0x0) 14m37.681178353s ago: executing program 5 (id=2294): socket$pppoe(0x18, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x4, 0x0, 0x0) acct(0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40458d1, 0x0, 0x0) accept4(r0, &(0x7f0000000340)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f00000003c0)=0x80, 0x1800) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000400)={'ni_labpc\x00', [0x9, 0x7, 0x7f, 0x55, 0xffffffff, 0x2, 0x8fc, 0x200, 0x10, 0x80000001, 0x4, 0x4, 0x4, 0x43, 0xc, 0x4, 0x3, 0x0, 0x5, 0x3, 0xf, 0x892, 0x81, 0x7fff, 0x4, 0xf, 0x2, 0x7, 0xc, 0x6, 0xf9, 0xe]}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=r2], 0x48) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0) ioctl$COMEDI_CMD(r3, 0x80506409, &(0x7f0000000180)={0x0, 0x1, 0x2, 0x6dd, 0x10, 0x200, 0x2, 0x3, 0x20, 0xffffffff, 0x1, 0xeff3, &(0x7f00000000c0)=[0x4], 0x1, 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) readv(r5, &(0x7f0000000200)=[{&(0x7f0000000080)=""/1, 0x1}], 0x1) r6 = landlock_create_ruleset(&(0x7f00000002c0)={0x2000}, 0x18, 0x0) landlock_restrict_self(r6, 0x9) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0xfffffffffffffffc) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r8, 0x4068aea3, &(0x7f0000000000)={0xbe, 0x0, 0x1}) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYBLOB="010500"], 0x14}}, 0x6048800) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101701) 14m34.981988822s ago: executing program 5 (id=2297): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getxattr(0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}, @in={0x2, 0x4e21, @local}], 0x20) listen(r4, 0x7) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) listen(r0, 0x7) 14m33.336847605s ago: executing program 5 (id=2300): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) mmap(&(0x7f000033b000/0x2000)=nil, 0x2000, 0x3000000, 0x31, 0xffffffffffffffff, 0xb3175000) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000040)=0x8046c, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'tunl0\x00'}) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) remap_file_pages(&(0x7f0000491000/0x1000)=nil, 0x1000, 0x0, 0x1ff, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r4, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r5}, 0xc) dup2(r6, r4) 14m31.571982053s ago: executing program 5 (id=2303): syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)=0x10001) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820f", 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r3, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r5, &(0x7f0000008340)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0xfa, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r7, r8, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r9, 0x0, 0x0) dup2(r9, r5) write$FUSE_NOTIFY_POLL(r5, &(0x7f0000000100)={0xfffffffffffffeab, 0x1, 0x0, {0x2}}, 0xffffffe8) close_range(r4, 0xffffffffffffffff, 0x2) r10 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r10, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) 14m15.696523466s ago: executing program 38 (id=2303): syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)=0x10001) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820f", 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r3, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r5, &(0x7f0000008340)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0xfa, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r7, r8, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r9, 0x0, 0x0) dup2(r9, r5) write$FUSE_NOTIFY_POLL(r5, &(0x7f0000000100)={0xfffffffffffffeab, 0x1, 0x0, {0x2}}, 0xffffffe8) close_range(r4, 0xffffffffffffffff, 0x2) r10 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r10, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) 13m2.500606788s ago: executing program 3 (id=2471): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0x6, 0x0, 0xffffffff}, 0x10) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffd, 0x1}, 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x4, 0x0, 0xfffffffffffffff8, 0x0, 0x6}, {0x0, 0xffffffff, 0x400000003, 0xfffffffffffffffc}, 0xfffffffc, 0x0, 0x1, 0x0, 0x6}, {{@in=@private=0xa010102, 0x4, 0x32}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x1c) 12m59.750273375s ago: executing program 3 (id=2474): socket(0x10, 0x803, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sendmsg$sock(r0, &(0x7f0000000940)={&(0x7f0000000340)=@l2tp={0x2, 0x0, @multicast2, 0x1}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000440)="833a6405a680fd9ec25361c91e3092583b54696e3627c81e8a416764b2e452afb632c86282c85fc9cf207424e7d349c522f2e1afad5c715536a102c1b80943e20386f1a14d457fb5c058bb5e57ae9d1a936448e1a28b9a4131a2de2e1018c46733d982af44df7e38bb150e34a3c082ea08f3a4852553c1385cb040c23bc55d87d353eed0d2b809f3e19b86bdf857d48ec09d8aea2926c78418bb", 0x9a}, {&(0x7f0000000500)="97c6530817ffa8f3de5f0eff80b1e5606ad917d4f675a7bcb10eeb59f089dc23bd6407e2356498624f01570165a303fcd6831b27b5a8b8691983583a79d649c39055103b1e0496cecdfc0c7160c7b0ed1411c0fb1b", 0x55}, {&(0x7f0000000580)="0ed6f5707ba7cb6049cac6739467f37d2f7085f43a7d369e3cc3a0bd9837346ff0134031e27c3901e70edc9b65d1edd299b2096b67bd7fc9082d39bffd06efafbbdb", 0x42}, {&(0x7f00000006c0)="f791519db24d7faef3ec551e1c1831a6849d048a9e83150d8681b16307272e7952e43e85138f2aef6b789df7341244e3aa04be4e0fde6f0cbc4ecfdf4d5f6e499935b638c5274f2ccd85f559e7a17e6db91edace56acf840ff54ee413a7f80ae4091d7f59cf2eb20100b71bf1a06c0bccc82d6b99d8c712ca85277f68c59eaf92e0a796e75ac828d6e7967cfcd5988f67c5841f4b700e880d318", 0x9a}, {&(0x7f00000007c0)="023370d5e80f1b9fa912a86d93c9d56cbf0a41523fd2dc3d23f16b126cf1da24eedee5a78296624d0df15479fe83dc9367e778d097876f1f7b66184a83a6eace1297974bfe4b88ecf111846cc5623105c492d1c298082fb5e45acf1f7600d79d2cc3c557af6c3cf7200a51b59e568785b7c7f1fad26451e5bda70b2c89bed3e804af34c4c1fa702522be7a132c01af01ca7a90437114d1dd4fe4935da2a06616bf53ab475de911fdc611386e3f172fa81d7fe26d810900fee819", 0xba}], 0x5, &(0x7f00000008c0)=[@mark={{0x10, 0x1, 0x24, 0xe}}, @txtime={{0x14, 0x1, 0x3d, 0x100000001}}, @mark={{0x10, 0x1, 0x24, 0x5}}, @timestamping={{0x10, 0x1, 0x25, 0xffff}}, @mark={{0x10, 0x1, 0x24, 0x1}}, @mark={{0x10, 0x1, 0x24, 0xd}}, @txtime={{0x14, 0x1, 0x3d, 0x8d0}}], 0x78}, 0x4044840) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x20002) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) io_uring_setup(0x1b56, &(0x7f0000000100)={0x0, 0x1, 0x400, 0x0, 0x2c1}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}}, 0x1c) sendmsg$nfc_llcp(r2, &(0x7f0000000780)={&(0x7f00000002c0)={0x27, 0x0, 0x1, 0x4, 0x3, 0x9, "2d37644c4b7791f19351cdf66f3ee70127ac1a3ebe0823bbc4a076f54b85adcba8c7d6bc090a71aac5e3c814810753a64c408c72545d2aeb89a5f59f00bfb6", 0x21}, 0x58, &(0x7f0000000680)=[{0x0}, {&(0x7f00000007c0)}], 0x2, 0x0, 0x0, 0x4004000}, 0x4000081) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x44}) socket$kcm(0x10, 0x2, 0x0) 12m58.625460361s ago: executing program 3 (id=2477): socket$inet6(0xa, 0x805, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40186f40, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 12m57.119387336s ago: executing program 3 (id=2478): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 12m56.596971317s ago: executing program 3 (id=2480): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_newneigh={0x28, 0x1c, 0x114236db3b607435, 0x70bd28, 0x25dfd3fe, {0x2, 0x0, 0x0, r1, 0x4, 0x82, 0x4}, [@NDA_DST_MAC={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, 0x28}}, 0x80c0) 12m56.224472138s ago: executing program 3 (id=2482): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0x6, 0x0, 0xffffffff}, 0x10) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffd, 0x1}, 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x4, 0x0, 0xfffffffffffffff8, 0x0, 0x6}, {0x0, 0xffffffff, 0x400000003, 0xfffffffffffffffc}, 0xfffffffc, 0x0, 0x1, 0x0, 0x6}, {{@in=@private=0xa010102, 0x4, 0x32}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) 12m40.808412874s ago: executing program 39 (id=2482): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0x6, 0x0, 0xffffffff}, 0x10) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffd, 0x1}, 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x4, 0x0, 0xfffffffffffffff8, 0x0, 0x6}, {0x0, 0xffffffff, 0x400000003, 0xfffffffffffffffc}, 0xfffffffc, 0x0, 0x1, 0x0, 0x6}, {{@in=@private=0xa010102, 0x4, 0x32}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) 15.226520623s ago: executing program 6 (id=3444): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2721, 0x0, &(0x7f0000000000)) syz_usb_connect$lan78xx(0x3, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0x4004f506, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000380)={'syz1\x00', {0x0, 0x7fff, 0x2, 0x2}, 0x51, [0x3ff, 0x2, 0x10000, 0x0, 0x7ca6, 0x9, 0xc2ad, 0x4, 0x9, 0x9, 0x5, 0x9, 0x8, 0x200, 0x5, 0x3, 0x7, 0x5, 0xfffffff9, 0x6, 0x3, 0xfff, 0x7f, 0x4152, 0x8b3, 0x9, 0x861, 0x7, 0x5, 0x0, 0x3c, 0x4, 0x1005, 0x4, 0x8, 0x38, 0x8, 0x8, 0xd5bb, 0x3, 0x1, 0x9de9, 0x8, 0x3, 0x3, 0x7f, 0x5, 0x8, 0x0, 0x1, 0x3ff, 0x6, 0x2e, 0x800, 0x846c, 0x3, 0x6, 0x31b, 0x8, 0xa, 0x1, 0x7, 0xffffffff, 0x3], [0x4a, 0x19a78cbf, 0xe936, 0x0, 0x200, 0xfffffff7, 0x2, 0x7d, 0x10001, 0x8, 0x3ff, 0x1, 0x7, 0x8f, 0x1, 0x5, 0x1ff, 0x200, 0x6f8, 0x7, 0xd, 0x7, 0x100788, 0x6, 0x0, 0x0, 0x8, 0x3, 0x5, 0x2, 0xa, 0x7, 0x80, 0x5aa, 0xfffff000, 0x400, 0x2, 0x7, 0x6, 0x6, 0x5, 0x3, 0x87, 0x22e2, 0x502, 0xffffffff, 0x7, 0x1ff, 0x6, 0x10001, 0x9e, 0x1, 0x5, 0x101, 0xfffffffa, 0x0, 0x2, 0x2, 0x6, 0x1ff, 0x8, 0x3, 0x6], [0x2, 0x94da, 0xffffffff, 0xb, 0xc0000, 0x4, 0x4, 0xfffffffa, 0x6, 0x7, 0xea, 0x7, 0x6, 0x400, 0xfffeffff, 0xfc000000, 0x8, 0x8, 0xd1, 0x2, 0xb66, 0x3, 0x4, 0x52c, 0x4, 0x10001, 0xfffffff8, 0x2, 0x9, 0x1, 0x7, 0xe86, 0x8, 0x20000100, 0x7, 0x1, 0x746a6ffd, 0x3, 0x4, 0x0, 0x1, 0x45a6c325, 0x8, 0x10000, 0x1000, 0x2, 0x5, 0x0, 0x2, 0x2, 0x1, 0x8, 0x2, 0x2, 0x81, 0x200, 0x3ff, 0xffffffcc, 0x6, 0xa000000, 0x8, 0xfff, 0x4000, 0x1], [0x8, 0x7, 0x3, 0xfffffffc, 0x8000, 0x2, 0x8, 0x1ff, 0xfffffffe, 0x10, 0x5e, 0x4, 0x8, 0x8, 0x5, 0x8, 0xfb, 0xf25, 0xd, 0x1ff, 0x2, 0x95, 0x9, 0x9, 0x1, 0xc, 0xffff6f9e, 0x4, 0xfffffff7, 0x10000, 0x7, 0x52a, 0x5, 0xc1a4, 0x4, 0x8, 0x3, 0x9, 0x5, 0xb7af, 0x3, 0x4, 0x0, 0x1ff8, 0x2, 0x7, 0x6, 0x80000000, 0x652d, 0x7, 0x7fffffff, 0xd, 0x40, 0x3ff, 0xc, 0x1ff, 0x9, 0x6, 0x0, 0x1000, 0x9, 0x2, 0x9, 0x4]}, 0x45c) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) socket$igmp(0x2, 0x3, 0x2) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r5 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r5, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb", 0x3f}], 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, 0x0, 0x0) syz_genetlink_get_family_id$smc(0x0, r5) syz_genetlink_get_family_id$ethtool(0x0, r5) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r4, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c900"], 0x16) ppoll(&(0x7f00000000c0)=[{r4, 0x60}], 0x1, 0x0, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x4) 12.016519876s ago: executing program 6 (id=3447): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101100, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x3, 0x100) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0, @ANYBLOB='p'], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 11.185205402s ago: executing program 6 (id=3452): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x68346000) 8.159332392s ago: executing program 6 (id=3455): syz_emit_ethernet(0xea, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @udp={{0x30, 0x4, 0x0, 0x6, 0xdc, 0x65, 0x0, 0x9, 0x11, 0x0, @loopback, @rand_addr=0x64010101, {[@lsrr={0x83, 0x7, 0xbd, [@broadcast]}, @timestamp_prespec={0x44, 0x1c, 0xeb, 0x3, 0xf, [{@remote, 0x2}, {@broadcast, 0xe}, {@multicast2, 0x8}]}, @cipso={0x86, 0x34, 0x2, [{0x7, 0xa, "6d91568104264d9e"}, {0x2, 0x3, "a5"}, {0x5, 0x8, "3cb627384c2f"}, {0x7, 0xf, "12a491da04c81319366b9dde13"}, {0x5, 0xa, "fcb51fe425336e9a"}]}, @timestamp_addr={0x44, 0x4, 0x1c, 0x1, 0x4}, @rr={0x7, 0x1f, 0xb4, [@local, @local, @dev={0xac, 0x14, 0x14, 0x22}, @rand_addr=0x64010102, @multicast1, @multicast2, @remote]}, @rr={0x7, 0xb, 0xe1, [@multicast2, @dev={0xac, 0x14, 0x14, 0xa}]}, @timestamp_prespec={0x44, 0x24, 0x71, 0x3, 0xc, [{@rand_addr=0x64010101, 0x7}, {@empty, 0x2}, {@loopback, 0xfff}, {@local}]}]}}, {0x4e20, 0x4e21, 0x1c, 0x0, @opaque="8bfb15063d7796e3a1ec3cd6355613157977f5ba"}}}}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0) close(r0) socket$kcm(0x10, 0x2, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8b0b, &(0x7f0000000100)={'wlan1\x00', @random='\x00\x00 \x00'}) 7.5731092s ago: executing program 9 (id=3457): r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) 7.460653514s ago: executing program 9 (id=3458): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}}, 0x0) 7.400833945s ago: executing program 9 (id=3459): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x7}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003f80)=""/144, 0x90}, 0x8000}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=""/119, 0x77}, 0x6}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)=""/32, 0x20}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=""/255, 0xff}, 0x7d}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=""/215, 0xd7}, 0x2}, {{0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f00000003c0)=""/98, 0x62}, 0x8}], 0x7, 0x40000002, 0x0) 5.943168351s ago: executing program 6 (id=3460): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2721, 0x0, &(0x7f0000000000)) syz_usb_connect$lan78xx(0x3, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0x4004f506, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000380)={'syz1\x00', {0x0, 0x7fff, 0x2, 0x2}, 0x51, [0x3ff, 0x2, 0x10000, 0x0, 0x7ca6, 0x9, 0xc2ad, 0x4, 0x9, 0x9, 0x5, 0x9, 0x8, 0x200, 0x5, 0x3, 0x7, 0x5, 0xfffffff9, 0x6, 0x3, 0xfff, 0x7f, 0x4152, 0x8b3, 0x9, 0x861, 0x7, 0x5, 0x0, 0x3c, 0x4, 0x1005, 0x4, 0x8, 0x38, 0x8, 0x8, 0xd5bb, 0x3, 0x1, 0x9de9, 0x8, 0x3, 0x3, 0x7f, 0x5, 0x8, 0x0, 0x1, 0x3ff, 0x6, 0x2e, 0x800, 0x846c, 0x3, 0x6, 0x31b, 0x8, 0xa, 0x1, 0x7, 0xffffffff, 0x3], [0x4a, 0x19a78cbf, 0xe936, 0x0, 0x200, 0xfffffff7, 0x2, 0x7d, 0x10001, 0x8, 0x3ff, 0x1, 0x7, 0x8f, 0x1, 0x5, 0x1ff, 0x200, 0x6f8, 0x7, 0xd, 0x7, 0x100788, 0x6, 0x0, 0x0, 0x8, 0x3, 0x5, 0x2, 0xa, 0x7, 0x80, 0x5aa, 0xfffff000, 0x400, 0x2, 0x7, 0x6, 0x6, 0x5, 0x3, 0x87, 0x22e2, 0x502, 0xffffffff, 0x7, 0x1ff, 0x6, 0x10001, 0x9e, 0x1, 0x5, 0x101, 0xfffffffa, 0x0, 0x2, 0x2, 0x6, 0x1ff, 0x8, 0x3, 0x6], [0x2, 0x94da, 0xffffffff, 0xb, 0xc0000, 0x4, 0x4, 0xfffffffa, 0x6, 0x7, 0xea, 0x7, 0x6, 0x400, 0xfffeffff, 0xfc000000, 0x8, 0x8, 0xd1, 0x2, 0xb66, 0x3, 0x4, 0x52c, 0x4, 0x10001, 0xfffffff8, 0x2, 0x9, 0x1, 0x7, 0xe86, 0x8, 0x20000100, 0x7, 0x1, 0x746a6ffd, 0x3, 0x4, 0x0, 0x1, 0x45a6c325, 0x8, 0x10000, 0x1000, 0x2, 0x5, 0x0, 0x2, 0x2, 0x1, 0x8, 0x2, 0x2, 0x81, 0x200, 0x3ff, 0xffffffcc, 0x6, 0xa000000, 0x8, 0xfff, 0x4000, 0x1], [0x8, 0x7, 0x3, 0xfffffffc, 0x8000, 0x2, 0x8, 0x1ff, 0xfffffffe, 0x10, 0x5e, 0x4, 0x8, 0x8, 0x5, 0x8, 0xfb, 0xf25, 0xd, 0x1ff, 0x2, 0x95, 0x9, 0x9, 0x1, 0xc, 0xffff6f9e, 0x4, 0xfffffff7, 0x10000, 0x7, 0x52a, 0x5, 0xc1a4, 0x4, 0x8, 0x3, 0x9, 0x5, 0xb7af, 0x3, 0x4, 0x0, 0x1ff8, 0x2, 0x7, 0x6, 0x80000000, 0x652d, 0x7, 0x7fffffff, 0xd, 0x40, 0x3ff, 0xc, 0x1ff, 0x9, 0x6, 0x0, 0x1000, 0x9, 0x2, 0x9, 0x4]}, 0x45c) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x810, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r5 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r5, &(0x7f0000019440), 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, 0x0, 0x0) syz_genetlink_get_family_id$smc(0x0, r5) syz_genetlink_get_family_id$ethtool(0x0, r5) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r4, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c900"], 0x16) ppoll(&(0x7f00000000c0)=[{r4, 0x60}], 0x1, 0x0, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x4) 5.838461471s ago: executing program 9 (id=3461): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xbf0fe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r3, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000280)='.pending_reads\x00', 0x181000, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000002c0)=@o_path={0x0, r5, 0x4000, r4}, 0x18) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r7, 0x4, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x18}, @dev={0xfe, 0x80, '\x00', 0x30}, 0x80, 0x0, 0x1, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', 0x0}) fchdir(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) mkdirat(0xffffffffffffff9c, 0x0, 0x1ec) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000180)={{}, {0x8}, [], {0x4, 0x2}, [], {}, {0x20, 0x4}}, 0x24, 0x3) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fc4c2608fd0b24019f3a010203010902240001000000000904000002c55bef000905ad1e0000000000090502"], 0x0) 2.082505841s ago: executing program 9 (id=3462): close(0xffffffffffffffff) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) epoll_create1(0x80000) socket$nl_audit(0x10, 0x3, 0x9) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000242000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {0x0}], 0x2) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000000), 0x80000) 18.469532ms ago: executing program 9 (id=3463): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2721, 0x0, &(0x7f0000000000)) syz_usb_connect$lan78xx(0x3, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0x4004f506, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000380)={'syz1\x00', {0x0, 0x7fff, 0x2, 0x2}, 0x51, [0x3ff, 0x2, 0x10000, 0x0, 0x7ca6, 0x9, 0xc2ad, 0x4, 0x9, 0x9, 0x5, 0x9, 0x8, 0x200, 0x5, 0x3, 0x7, 0x5, 0xfffffff9, 0x6, 0x3, 0xfff, 0x7f, 0x4152, 0x8b3, 0x9, 0x861, 0x7, 0x5, 0x0, 0x3c, 0x4, 0x1005, 0x4, 0x8, 0x38, 0x8, 0x8, 0xd5bb, 0x3, 0x1, 0x9de9, 0x8, 0x3, 0x3, 0x7f, 0x5, 0x8, 0x0, 0x1, 0x3ff, 0x6, 0x2e, 0x800, 0x846c, 0x3, 0x6, 0x31b, 0x8, 0xa, 0x1, 0x7, 0xffffffff, 0x3], [0x4a, 0x19a78cbf, 0xe936, 0x0, 0x200, 0xfffffff7, 0x2, 0x7d, 0x10001, 0x8, 0x3ff, 0x1, 0x7, 0x8f, 0x1, 0x5, 0x1ff, 0x200, 0x6f8, 0x7, 0xd, 0x7, 0x100788, 0x6, 0x0, 0x0, 0x8, 0x3, 0x5, 0x2, 0xa, 0x7, 0x80, 0x5aa, 0xfffff000, 0x400, 0x2, 0x7, 0x6, 0x6, 0x5, 0x3, 0x87, 0x22e2, 0x502, 0xffffffff, 0x7, 0x1ff, 0x6, 0x10001, 0x9e, 0x1, 0x5, 0x101, 0xfffffffa, 0x0, 0x2, 0x2, 0x6, 0x1ff, 0x8, 0x3, 0x6], [0x2, 0x94da, 0xffffffff, 0xb, 0xc0000, 0x4, 0x4, 0xfffffffa, 0x6, 0x7, 0xea, 0x7, 0x6, 0x400, 0xfffeffff, 0xfc000000, 0x8, 0x8, 0xd1, 0x2, 0xb66, 0x3, 0x4, 0x52c, 0x4, 0x10001, 0xfffffff8, 0x2, 0x9, 0x1, 0x7, 0xe86, 0x8, 0x20000100, 0x7, 0x1, 0x746a6ffd, 0x3, 0x4, 0x0, 0x1, 0x45a6c325, 0x8, 0x10000, 0x1000, 0x2, 0x5, 0x0, 0x2, 0x2, 0x1, 0x8, 0x2, 0x2, 0x81, 0x200, 0x3ff, 0xffffffcc, 0x6, 0xa000000, 0x8, 0xfff, 0x4000, 0x1], [0x8, 0x7, 0x3, 0xfffffffc, 0x8000, 0x2, 0x8, 0x1ff, 0xfffffffe, 0x10, 0x5e, 0x4, 0x8, 0x8, 0x5, 0x8, 0xfb, 0xf25, 0xd, 0x1ff, 0x2, 0x95, 0x9, 0x9, 0x1, 0xc, 0xffff6f9e, 0x4, 0xfffffff7, 0x10000, 0x7, 0x52a, 0x5, 0xc1a4, 0x4, 0x8, 0x3, 0x9, 0x5, 0xb7af, 0x3, 0x4, 0x0, 0x1ff8, 0x2, 0x7, 0x6, 0x80000000, 0x652d, 0x7, 0x7fffffff, 0xd, 0x40, 0x3ff, 0xc, 0x1ff, 0x9, 0x6, 0x0, 0x1000, 0x9, 0x2, 0x9, 0x4]}, 0x45c) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) socket$igmp(0x2, 0x3, 0x2) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r5 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r5, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb", 0x3f}], 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, 0x0, 0x0) syz_genetlink_get_family_id$smc(0x0, r5) syz_genetlink_get_family_id$ethtool(0x0, r5) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r4, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c900"], 0x16) ppoll(&(0x7f00000000c0)=[{r4, 0x60}], 0x1, 0x0, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x4) 0s ago: executing program 6 (id=3464): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) kernel console output (not intermixed with test programs): e hsr debugfs directory [ 1563.857509][T14747] Bluetooth: hci2: command tx timeout [ 1564.183318][T18503] hub 8-0:1.0: USB hub found [ 1564.194067][T18503] hub 8-0:1.0: 1 port detected [ 1565.964174][T14747] Bluetooth: hci2: command tx timeout [ 1567.155633][T15550] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 1567.311309][T15550] usb 10-1: Using ep0 maxpacket: 16 [ 1567.314003][T15550] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1567.314029][T15550] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1567.314049][T15550] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1567.317124][T15550] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1567.317153][T15550] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1567.317174][T15550] usb 10-1: Product: syz [ 1567.317190][T15550] usb 10-1: Manufacturer: syz [ 1567.317206][T15550] usb 10-1: SerialNumber: syz [ 1567.456214][T15550] usb 10-1: 0:2 : does not exist [ 1567.874597][ C1] raw-gadget.0 gadget.9: ignoring, device is not running [ 1567.875306][ C1] raw-gadget.0 gadget.9: ignoring, device is not running [ 1567.875957][ C1] raw-gadget.0 gadget.9: ignoring, device is not running [ 1567.876466][ C1] raw-gadget.0 gadget.9: ignoring, device is not running [ 1567.911883][T15550] usb 10-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1568.091818][T14747] Bluetooth: hci2: command tx timeout [ 1568.111965][T15550] usb 10-1: USB disconnect, device number 39 [ 1570.171821][T14747] Bluetooth: hci2: command tx timeout [ 1570.778010][T11910] bridge_slave_1: left allmulticast mode [ 1570.778050][T11910] bridge_slave_1: left promiscuous mode [ 1570.778376][T11910] bridge0: port 2(bridge_slave_1) entered disabled state [ 1571.036644][T11910] bridge_slave_0: left allmulticast mode [ 1571.036688][T11910] bridge_slave_0: left promiscuous mode [ 1571.037011][T11910] bridge0: port 1(bridge_slave_0) entered disabled state [ 1571.376652][T18552] overlay: Unknown parameter 'obj_role' [ 1572.916849][T11910] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1573.053973][T11910] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1573.358643][T11910] bond0 (unregistering): Released all slaves [ 1573.864395][T18190] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1575.348708][T18190] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1575.998257][T18190] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1576.586453][T18190] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1577.161869][T18190] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1577.274250][T18190] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1577.467104][T11910] hsr_slave_0: left promiscuous mode [ 1577.501285][T11910] hsr_slave_1: left promiscuous mode [ 1577.502674][T11910] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1577.971524][T11910] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1579.193672][T11910] team0 (unregistering): Port device team_slave_1 removed [ 1579.283932][T11910] team0 (unregistering): Port device team_slave_0 removed [ 1579.609168][T18190] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1579.713590][T18190] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1579.719606][ T5262] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1582.329487][ T4916] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1582.423332][ T4916] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1582.435594][ T4916] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1582.483641][ T4916] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1582.495412][ T4916] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1582.851187][T10996] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 1583.023636][T10996] usb 10-1: Using ep0 maxpacket: 16 [ 1583.026231][T10996] usb 10-1: config 251 has an invalid interface number: 202 but max is 0 [ 1583.026262][T10996] usb 10-1: config 251 has no interface number 0 [ 1583.026410][T10996] usb 10-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 1583.026438][T10996] usb 10-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1583.026461][T10996] usb 10-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 1583.026490][T10996] usb 10-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 1583.026517][T10996] usb 10-1: config 251 interface 202 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1583.026541][T10996] usb 10-1: config 251 interface 202 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 0 [ 1583.026566][T10996] usb 10-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1583.026595][T10996] usb 10-1: config 251 interface 202 has no altsetting 0 [ 1583.029597][T10996] usb 10-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 1583.029615][T10996] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1583.029628][T10996] usb 10-1: Product: syz [ 1583.029636][T10996] usb 10-1: Manufacturer: syz [ 1583.029644][T10996] usb 10-1: SerialNumber: syz [ 1583.043697][T18632] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1584.669785][ T4916] Bluetooth: hci0: command tx timeout [ 1586.518731][T10996] cxacru 10-1:251.202: submit of read urb for cm 0x90 failed (-90) [ 1586.518769][T10996] cxacru 10-1:251.202: usbatm_usb_probe: invalid endpoint 02! [ 1586.525835][T10996] cxacru 10-1:251.202: probe with driver cxacru failed with error -22 [ 1586.731301][ T4916] Bluetooth: hci0: command tx timeout [ 1588.427277][T10996] usb 10-1: USB disconnect, device number 40 [ 1588.822257][ T4916] Bluetooth: hci0: command tx timeout [ 1590.441839][T18480] bridge0: port 1(bridge_slave_0) entered blocking state [ 1590.441990][T18480] bridge0: port 1(bridge_slave_0) entered disabled state [ 1590.442240][T18480] bridge_slave_0: entered allmulticast mode [ 1590.445078][T18480] bridge_slave_0: entered promiscuous mode [ 1590.450736][T18480] bridge0: port 2(bridge_slave_1) entered blocking state [ 1590.450876][T18480] bridge0: port 2(bridge_slave_1) entered disabled state [ 1590.495869][T18480] bridge_slave_1: entered allmulticast mode [ 1590.498978][T18480] bridge_slave_1: entered promiscuous mode [ 1590.900482][T18480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1590.905606][ T4916] Bluetooth: hci0: command tx timeout [ 1590.933184][T18480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1592.479278][T18480] team0: Port device team_slave_0 added [ 1592.567041][T18480] team0: Port device team_slave_1 added [ 1595.560052][T18685] overlayfs: failed to resolve './bus': -2 [ 1598.759554][T18480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1598.759575][T18480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1598.759606][T18480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1598.776031][T18480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1598.776048][T18480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1598.776074][T18480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1599.237140][T18706] overlay: Unknown parameter 'obj_role' [ 1599.956601][T14747] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1600.023770][T14747] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1600.036551][T14747] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1600.071949][T14747] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1600.084531][T14747] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1602.058835][T18480] hsr_slave_0: entered promiscuous mode [ 1602.062053][T18480] hsr_slave_1: entered promiscuous mode [ 1602.304804][ T4916] Bluetooth: hci5: command tx timeout [ 1604.854903][ T4916] Bluetooth: hci5: command tx timeout [ 1604.867308][T18752] bridge_slave_0: left allmulticast mode [ 1604.867347][T18752] bridge_slave_0: left promiscuous mode [ 1604.867632][T18752] bridge0: port 1(bridge_slave_0) entered disabled state [ 1604.964494][T18752] bridge_slave_1: left allmulticast mode [ 1604.964543][T18752] bridge_slave_1: left promiscuous mode [ 1604.964807][T18752] bridge0: port 2(bridge_slave_1) entered disabled state [ 1605.191795][T18752] bond0: (slave bond_slave_0): Releasing backup interface [ 1606.111858][T18752] bond0: (slave bond_slave_1): Releasing backup interface [ 1606.181170][T18752] team0: Port device team_slave_0 removed [ 1606.214666][T18752] team0: Port device team_slave_1 removed [ 1606.215758][T18752] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1606.215783][T18752] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1606.262680][T18752] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1606.262702][T18752] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1606.306161][T18752] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1606.901701][ T4916] Bluetooth: hci5: command tx timeout [ 1607.696451][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.696543][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 1609.010233][ T4916] Bluetooth: hci5: command tx timeout [ 1609.183544][ T9191] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 1609.443214][ T9191] usb 10-1: Using ep0 maxpacket: 16 [ 1611.393275][ T9191] usb 10-1: config 251 has an invalid interface number: 202 but max is 0 [ 1611.393304][ T9191] usb 10-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 1611.393325][ T9191] usb 10-1: config 251 has no interface number 0 [ 1611.393396][ T9191] usb 10-1: config 251 interface 202 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1611.393426][ T9191] usb 10-1: config 251 interface 202 has no altsetting 0 [ 1611.395286][ T9191] usb 10-1: string descriptor 0 read error: -71 [ 1611.395452][ T9191] usb 10-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 1611.395478][ T9191] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1611.479343][ T9191] usb 10-1: can't set config #251, error -71 [ 1611.497471][ T9191] usb 10-1: USB disconnect, device number 41 [ 1612.052377][T18795] bridge_slave_0: left allmulticast mode [ 1612.052428][T18795] bridge_slave_0: left promiscuous mode [ 1612.052696][T18795] bridge0: port 1(bridge_slave_0) entered disabled state [ 1612.925518][T18795] bridge_slave_1: left allmulticast mode [ 1612.925558][T18795] bridge_slave_1: left promiscuous mode [ 1612.925825][T18795] bridge0: port 2(bridge_slave_1) entered disabled state [ 1612.992728][T18795] bond0: (slave bond_slave_0): Releasing backup interface [ 1613.062365][T18795] bond0: (slave bond_slave_1): Releasing backup interface [ 1613.152414][T18795] team0: Port device team_slave_0 removed [ 1613.186409][T18795] team0: Port device team_slave_1 removed [ 1613.187515][T18795] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1613.187543][T18795] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1613.209769][T18795] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1613.209799][T18795] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1613.229752][T18795] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1617.451910][T15461] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 1617.617789][T15461] usb 7-1: Using ep0 maxpacket: 16 [ 1617.631666][T15461] usb 7-1: config 251 has an invalid interface number: 202 but max is 0 [ 1617.631695][T15461] usb 7-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 1617.631714][T15461] usb 7-1: config 251 has no interface number 0 [ 1617.631757][T15461] usb 7-1: config 251 interface 202 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1617.631783][T15461] usb 7-1: config 251 interface 202 has no altsetting 0 [ 1617.639622][T15461] usb 7-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 1617.639653][T15461] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1617.639671][T15461] usb 7-1: Product: syz [ 1617.639685][T15461] usb 7-1: Manufacturer: syz [ 1617.639699][T15461] usb 7-1: SerialNumber: syz [ 1617.901986][T15461] cxacru 7-1:251.202: usbatm_usb_probe: bind failed: -19! [ 1617.968204][T15461] usb 7-1: USB disconnect, device number 70 [ 1619.044302][T18842] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1620.167319][T18625] bridge0: port 1(bridge_slave_0) entered blocking state [ 1620.168106][T18625] bridge0: port 1(bridge_slave_0) entered disabled state [ 1620.168341][T18625] bridge_slave_0: entered allmulticast mode [ 1620.196802][T18625] bridge_slave_0: entered promiscuous mode [ 1620.230754][T18625] bridge0: port 2(bridge_slave_1) entered blocking state [ 1620.238897][T18625] bridge0: port 2(bridge_slave_1) entered disabled state [ 1620.240117][T18625] bridge_slave_1: entered allmulticast mode [ 1620.351622][T18625] bridge_slave_1: entered promiscuous mode [ 1621.711527][ T5262] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1621.740526][T18625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1621.766373][T18625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1621.884212][T18625] team0: Port device team_slave_0 added [ 1621.925032][T18625] team0: Port device team_slave_1 added [ 1622.192747][T11910] bridge_slave_1: left allmulticast mode [ 1622.192788][T11910] bridge_slave_1: left promiscuous mode [ 1622.193090][T11910] bridge0: port 2(bridge_slave_1) entered disabled state [ 1622.283249][T11910] bridge_slave_0: left allmulticast mode [ 1622.283289][T11910] bridge_slave_0: left promiscuous mode [ 1622.283609][T11910] bridge0: port 1(bridge_slave_0) entered disabled state [ 1623.595128][T11910] bridge_slave_1: left allmulticast mode [ 1623.595168][T11910] bridge_slave_1: left promiscuous mode [ 1623.595438][T11910] bridge0: port 2(bridge_slave_1) entered disabled state [ 1623.744281][T11910] bridge_slave_0: left allmulticast mode [ 1623.744322][T11910] bridge_slave_0: left promiscuous mode [ 1623.744604][T11910] bridge0: port 1(bridge_slave_0) entered disabled state [ 1623.844355][T14747] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1623.850363][T14747] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1623.853011][T14747] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1623.876089][T14747] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1623.876867][T14747] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1625.649313][ T36] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 1625.761981][T11910] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1625.801250][ T36] usb 7-1: Using ep0 maxpacket: 16 [ 1625.803446][ T36] usb 7-1: config 251 has an invalid interface number: 202 but max is 0 [ 1625.803475][ T36] usb 7-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 1625.803495][ T36] usb 7-1: config 251 has no interface number 0 [ 1625.803535][ T36] usb 7-1: config 251 interface 202 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1625.803552][ T36] usb 7-1: config 251 interface 202 has no altsetting 0 [ 1625.806507][ T36] usb 7-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 1625.806537][ T36] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1625.806552][ T36] usb 7-1: Product: syz [ 1625.806560][ T36] usb 7-1: Manufacturer: syz [ 1625.806569][ T36] usb 7-1: SerialNumber: syz [ 1625.862785][T11910] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1625.905167][T11910] bond0 (unregistering): Released all slaves [ 1626.066854][ T36] cxacru 7-1:251.202: usbatm_usb_probe: bind failed: -19! [ 1626.086229][ T36] usb 7-1: USB disconnect, device number 71 [ 1626.198696][T14747] Bluetooth: hci1: command tx timeout [ 1626.441899][T11910] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1626.501767][T11910] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1626.542868][T11910] bond0 (unregistering): Released all slaves [ 1626.936010][T14747] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 1626.936042][T14747] CPU: 0 UID: 0 PID: 14747 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1626.936074][T14747] Tainted: [L]=SOFTLOCKUP [ 1626.936083][T14747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1626.936098][T14747] Workqueue: hci4 hci_rx_work [ 1626.936131][T14747] Call Trace: [ 1626.936141][T14747] [ 1626.936152][T14747] dump_stack_lvl+0xe8/0x150 [ 1626.936187][T14747] sysfs_create_dir_ns+0x271/0x2a0 [ 1626.936224][T14747] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1626.936260][T14747] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1626.936297][T14747] ? rt_spin_unlock+0x160/0x200 [ 1626.936332][T14747] kobject_add_internal+0x631/0xd10 [ 1626.936371][T14747] kobject_add+0x163/0x240 [ 1626.936404][T14747] ? __pfx_kobject_add+0x10/0x10 [ 1626.936440][T14747] ? get_device_parent+0x370/0x3a0 [ 1626.936474][T14747] device_add+0x408/0xbb0 [ 1626.936505][T14747] hci_conn_add_sysfs+0xd5/0x210 [ 1626.936556][T14747] le_conn_complete_evt+0x10e6/0x16b0 [ 1626.936596][T14747] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1626.936626][T14747] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1626.936662][T14747] ? lockdep_hardirqs_on+0x7a/0x110 [ 1626.936702][T14747] ? skb_pull_data+0xfb/0x200 [ 1626.936742][T14747] hci_le_conn_complete_evt+0x187/0x470 [ 1626.936780][T14747] hci_event_packet+0x659/0xef0 [ 1626.936813][T14747] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1626.936842][T14747] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1626.936867][T14747] ? __pfx_hci_event_packet+0x10/0x10 [ 1626.936902][T14747] ? rt_spin_unlock+0x14f/0x200 [ 1626.936943][T14747] ? hci_send_to_monitor+0xe2/0x590 [ 1626.936978][T14747] hci_rx_work+0x3ee/0x1040 [ 1626.937011][T14747] ? process_scheduled_works+0xa70/0x1860 [ 1626.937042][T14747] process_scheduled_works+0xb5d/0x1860 [ 1626.937107][T14747] ? __pfx_process_scheduled_works+0x10/0x10 [ 1626.937142][T14747] ? assign_work+0x3d5/0x5e0 [ 1626.937173][T14747] worker_thread+0xa53/0xfc0 [ 1626.937234][T14747] kthread+0x388/0x470 [ 1626.937266][T14747] ? __pfx_worker_thread+0x10/0x10 [ 1626.937288][T14747] ? __pfx_kthread+0x10/0x10 [ 1626.937318][T14747] ret_from_fork+0x514/0xb70 [ 1626.937349][T14747] ? __pfx_ret_from_fork+0x10/0x10 [ 1626.937376][T14747] ? __switch_to+0xc79/0x1410 [ 1626.937414][T14747] ? __pfx_kthread+0x10/0x10 [ 1626.937446][T14747] ret_from_fork_asm+0x1a/0x30 [ 1626.937497][T14747] [ 1626.937540][T14747] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1626.937733][T14747] Bluetooth: hci4: failed to register connection device [ 1628.251270][ T4916] Bluetooth: hci1: command tx timeout [ 1628.971394][T14747] Bluetooth: hci4: command 0x0406 tx timeout [ 1630.337788][ T4916] Bluetooth: hci1: command tx timeout [ 1630.878243][T18936] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3100'. [ 1630.955268][ T5262] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1630.974939][T18625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1630.974959][T18625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1630.974989][T18625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1631.106855][ T4916] Bluetooth: hci4: command 0x0406 tx timeout [ 1632.066481][T18625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1632.066502][T18625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1632.066533][T18625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1632.411421][T14747] Bluetooth: hci1: command tx timeout [ 1633.104396][T18717] bridge0: port 1(bridge_slave_0) entered blocking state [ 1633.104560][T18717] bridge0: port 1(bridge_slave_0) entered disabled state [ 1633.104819][T18717] bridge_slave_0: entered allmulticast mode [ 1633.142854][T18717] bridge_slave_0: entered promiscuous mode [ 1633.334900][T18625] hsr_slave_0: entered promiscuous mode [ 1633.337962][T18625] hsr_slave_1: entered promiscuous mode [ 1633.340556][T18625] debugfs: 'hsr0' already exists in 'hsr' [ 1633.340585][T18625] Cannot create hsr debugfs directory [ 1633.341497][T18717] bridge0: port 2(bridge_slave_1) entered blocking state [ 1633.341629][T18717] bridge0: port 2(bridge_slave_1) entered disabled state [ 1633.341840][T18717] bridge_slave_1: entered allmulticast mode [ 1633.345353][T18717] bridge_slave_1: entered promiscuous mode [ 1633.463093][T18958] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1633.495411][T18958] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1634.078276][T18717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1634.104814][T18717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1635.437421][T18955] overlay: Unknown parameter 'obj_role' [ 1635.930257][T18717] team0: Port device team_slave_0 added [ 1635.970444][T15550] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 1636.191573][T15550] usb 7-1: Using ep0 maxpacket: 16 [ 1636.213809][T15550] usb 7-1: config 251 has an invalid interface number: 202 but max is 0 [ 1636.213852][T15550] usb 7-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 1636.213917][T15550] usb 7-1: config 251 has no interface number 0 [ 1636.214038][T15550] usb 7-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 1636.214079][T15550] usb 7-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1636.214142][T15550] usb 7-1: config 251 interface 202 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1636.214169][T15550] usb 7-1: config 251 interface 202 has no altsetting 0 [ 1636.254075][T15550] usb 7-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 1636.254125][T15550] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1636.254148][T15550] usb 7-1: Product: syz [ 1636.254162][T15550] usb 7-1: Manufacturer: syz [ 1636.254177][T15550] usb 7-1: SerialNumber: syz [ 1636.723460][T18963] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1637.737734][T15550] cxacru 7-1:251.202: usbatm_usb_probe: bind failed: -19! [ 1637.826354][T15550] usb 7-1: USB disconnect, device number 72 [ 1640.231417][T11910] hsr_slave_0: left promiscuous mode [ 1640.266340][T11910] hsr_slave_1: left promiscuous mode [ 1640.267347][T11910] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1640.306389][T11910] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1640.327739][T18982] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3108'. [ 1640.491542][T11910] hsr_slave_0: left promiscuous mode [ 1641.814923][T11910] hsr_slave_1: left promiscuous mode [ 1641.816078][T11910] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1641.883357][T11910] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1643.539994][ T4916] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1643.645023][ T4916] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1643.646684][ T4916] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1643.661494][ T4916] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1643.680675][ T4916] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1644.469617][T19013] overlay: Unknown parameter 'obj_role' [ 1644.523099][T11910] team0 (unregistering): Port device team_slave_1 removed [ 1644.640719][T11910] team0 (unregistering): Port device team_slave_0 removed [ 1646.011356][T14747] Bluetooth: hci2: command tx timeout [ 1646.144319][T11910] team0 (unregistering): Port device team_slave_1 removed [ 1646.297338][T11910] team0 (unregistering): Port device team_slave_0 removed [ 1646.777019][T18717] team0: Port device team_slave_1 added [ 1646.813645][ T5262] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1647.139066][T18717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1647.139084][T18717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1647.139112][T18717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1647.257639][T18717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1647.257660][T18717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1647.257690][T18717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1647.733560][T19037] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3118'. [ 1647.926934][T19045] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3119'. [ 1648.140323][T14747] Bluetooth: hci2: command tx timeout [ 1649.593896][T18717] hsr_slave_0: entered promiscuous mode [ 1649.687638][T19045] nbd: socks must be embedded in a SOCK_ITEM attr [ 1650.095203][T18717] hsr_slave_1: entered promiscuous mode [ 1650.096800][T18717] debugfs: 'hsr0' already exists in 'hsr' [ 1650.096830][T18717] Cannot create hsr debugfs directory [ 1650.209856][T14747] Bluetooth: hci2: command tx timeout [ 1652.281659][T14747] Bluetooth: hci2: command tx timeout [ 1653.776004][T18960] udevd[18960]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1654.318498][T19067] overlay: Unknown parameter 'obj_role' [ 1656.357135][T14747] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 1656.357168][T14747] CPU: 0 UID: 0 PID: 14747 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1656.357200][T14747] Tainted: [L]=SOFTLOCKUP [ 1656.357209][T14747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1656.357224][T14747] Workqueue: hci4 hci_rx_work [ 1656.357252][T14747] Call Trace: [ 1656.357261][T14747] [ 1656.357272][T14747] dump_stack_lvl+0xe8/0x150 [ 1656.357305][T14747] sysfs_create_dir_ns+0x271/0x2a0 [ 1656.357340][T14747] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1656.357372][T14747] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1656.357410][T14747] ? rt_spin_unlock+0x160/0x200 [ 1656.357448][T14747] kobject_add_internal+0x631/0xd10 [ 1656.357486][T14747] kobject_add+0x163/0x240 [ 1656.357518][T14747] ? __pfx_kobject_add+0x10/0x10 [ 1656.357553][T14747] ? get_device_parent+0x370/0x3a0 [ 1656.357584][T14747] device_add+0x408/0xbb0 [ 1656.357614][T14747] hci_conn_add_sysfs+0xd5/0x210 [ 1656.357653][T14747] le_conn_complete_evt+0x10e6/0x16b0 [ 1656.357695][T14747] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1656.357725][T14747] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1656.357761][T14747] ? lockdep_hardirqs_on+0x7a/0x110 [ 1656.357798][T14747] ? skb_pull_data+0xfb/0x200 [ 1656.357836][T14747] hci_le_conn_complete_evt+0x187/0x470 [ 1656.357872][T14747] hci_event_packet+0x659/0xef0 [ 1656.357902][T14747] ? __pfx____migrate_enable+0x10/0x10 [ 1656.357930][T14747] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1656.357956][T14747] ? __pfx_hci_event_packet+0x10/0x10 [ 1656.358005][T14747] ? hci_send_to_monitor+0xe2/0x590 [ 1656.358039][T14747] hci_rx_work+0x3ee/0x1040 [ 1656.358072][T14747] ? process_scheduled_works+0xa70/0x1860 [ 1656.358108][T14747] process_scheduled_works+0xb5d/0x1860 [ 1656.358173][T14747] ? __pfx_process_scheduled_works+0x10/0x10 [ 1656.358205][T14747] ? assign_work+0x3d5/0x5e0 [ 1656.358233][T14747] worker_thread+0xa53/0xfc0 [ 1656.358288][T14747] kthread+0x388/0x470 [ 1656.358319][T14747] ? __pfx_worker_thread+0x10/0x10 [ 1656.358341][T14747] ? __pfx_kthread+0x10/0x10 [ 1656.358372][T14747] ret_from_fork+0x514/0xb70 [ 1656.358401][T14747] ? __pfx_ret_from_fork+0x10/0x10 [ 1656.358424][T14747] ? __switch_to+0xc79/0x1410 [ 1656.358460][T14747] ? __pfx_kthread+0x10/0x10 [ 1656.358491][T14747] ret_from_fork_asm+0x1a/0x30 [ 1656.358539][T14747] [ 1656.384213][T14747] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1656.384250][T14747] Bluetooth: hci4: failed to register connection device [ 1658.412405][T14747] Bluetooth: hci4: command 0x0406 tx timeout [ 1660.228506][T18899] bridge0: port 1(bridge_slave_0) entered blocking state [ 1660.228871][T18899] bridge0: port 1(bridge_slave_0) entered disabled state [ 1660.229112][T18899] bridge_slave_0: entered allmulticast mode [ 1660.256211][T18899] bridge_slave_0: entered promiscuous mode [ 1660.495152][T14747] Bluetooth: hci4: command 0x0406 tx timeout [ 1660.665553][T18899] bridge0: port 2(bridge_slave_1) entered blocking state [ 1660.665729][T18899] bridge0: port 2(bridge_slave_1) entered disabled state [ 1660.666004][T18899] bridge_slave_1: entered allmulticast mode [ 1660.695182][T18899] bridge_slave_1: entered promiscuous mode [ 1660.990402][T14747] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1661.047407][T14747] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1661.066907][T14747] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1661.078775][T14747] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1661.099475][T14747] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1661.544414][T18899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1661.612982][T18899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1661.962920][T18899] team0: Port device team_slave_0 added [ 1662.060860][T18899] team0: Port device team_slave_1 added [ 1663.337165][T14747] Bluetooth: hci0: command tx timeout [ 1663.708136][T19003] bridge0: port 1(bridge_slave_0) entered blocking state [ 1663.708364][T19003] bridge0: port 1(bridge_slave_0) entered disabled state [ 1663.709160][T19003] bridge_slave_0: entered allmulticast mode [ 1663.747619][T19003] bridge_slave_0: entered promiscuous mode [ 1663.844480][T18899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1663.844500][T18899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1663.844526][T18899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1664.350786][T18299] bridge_slave_1: left allmulticast mode [ 1664.350835][T18299] bridge_slave_1: left promiscuous mode [ 1664.351804][T18299] bridge0: port 2(bridge_slave_1) entered disabled state [ 1664.424291][T18299] bridge_slave_0: left allmulticast mode [ 1664.424318][T18299] bridge_slave_0: left promiscuous mode [ 1664.424487][T18299] bridge0: port 1(bridge_slave_0) entered disabled state [ 1665.395041][T14747] Bluetooth: hci0: command tx timeout [ 1665.861239][T18299] bridge_slave_1: left allmulticast mode [ 1665.861280][T18299] bridge_slave_1: left promiscuous mode [ 1665.861618][T18299] bridge0: port 2(bridge_slave_1) entered disabled state [ 1666.094673][T18299] bridge_slave_0: left allmulticast mode [ 1666.094701][T18299] bridge_slave_0: left promiscuous mode [ 1666.094876][T18299] bridge0: port 1(bridge_slave_0) entered disabled state [ 1666.381386][T18299] bridge_slave_1: left allmulticast mode [ 1666.381424][T18299] bridge_slave_1: left promiscuous mode [ 1666.381710][T18299] bridge0: port 2(bridge_slave_1) entered disabled state [ 1666.430302][T19163] overlay: Unknown parameter 'obj_role' [ 1666.463122][T18299] bridge_slave_0: left allmulticast mode [ 1666.463164][T18299] bridge_slave_0: left promiscuous mode [ 1666.463466][T18299] bridge0: port 1(bridge_slave_0) entered disabled state [ 1666.793615][T18299] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1667.495850][T14747] Bluetooth: hci0: command tx timeout [ 1667.615367][T18299] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1667.702987][T18299] bond0 (unregistering): Released all slaves [ 1667.881848][T18299] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1667.961826][T18299] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1668.028407][T18299] bond0 (unregistering): Released all slaves [ 1668.172195][T18299] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1668.251988][T18299] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1668.312854][T18299] bond0 (unregistering): Released all slaves [ 1668.345457][T19174] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1668.345730][T19003] bridge0: port 2(bridge_slave_1) entered blocking state [ 1668.345875][T19003] bridge0: port 2(bridge_slave_1) entered disabled state [ 1668.346092][T19003] bridge_slave_1: entered allmulticast mode [ 1668.349289][T19003] bridge_slave_1: entered promiscuous mode [ 1668.408763][T18899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1668.408783][T18899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1668.408813][T18899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1668.903783][ T5262] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1669.143343][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.143423][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.278832][T19003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1669.438578][T19003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1669.477407][T18899] hsr_slave_0: entered promiscuous mode [ 1669.491797][T18899] hsr_slave_1: entered promiscuous mode [ 1669.492407][T18899] debugfs: 'hsr0' already exists in 'hsr' [ 1669.492425][T18899] Cannot create hsr debugfs directory [ 1669.572047][T14747] Bluetooth: hci0: command tx timeout [ 1669.910429][T19003] team0: Port device team_slave_0 added [ 1669.979506][T19003] team0: Port device team_slave_1 added [ 1670.406600][T19215] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3139'. [ 1670.586403][T18299] hsr_slave_0: left promiscuous mode [ 1671.235445][T19215] nbd: socks must be embedded in a SOCK_ITEM attr [ 1671.977492][T18299] hsr_slave_1: left promiscuous mode [ 1671.995473][T18299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1672.150849][T18299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1673.221162][T18299] hsr_slave_0: left promiscuous mode [ 1673.710883][T18299] hsr_slave_1: left promiscuous mode [ 1673.717364][T18299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1673.917405][T18299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1674.050931][T19141] udevd[19141]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1674.062181][T19137] udevd[19137]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1675.462482][T18299] hsr_slave_0: left promiscuous mode [ 1675.481190][T18299] hsr_slave_1: left promiscuous mode [ 1675.481981][T18299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1675.502285][T18299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1675.764714][T18299] team0 (unregistering): Port device team_slave_1 removed [ 1675.812716][T18299] team0 (unregistering): Port device team_slave_0 removed [ 1676.182829][T18299] team0 (unregistering): Port device team_slave_1 removed [ 1676.235822][T18299] team0 (unregistering): Port device team_slave_0 removed [ 1676.613463][T18299] team0 (unregistering): Port device team_slave_1 removed [ 1676.644686][T18299] team0 (unregistering): Port device team_slave_0 removed [ 1676.820138][T19003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1676.820159][T19003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1676.820189][T19003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1677.019821][T19003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1677.019842][T19003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1677.019870][T19003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1677.599533][T19003] hsr_slave_0: entered promiscuous mode [ 1677.623832][T19003] hsr_slave_1: entered promiscuous mode [ 1680.003207][T19260] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1681.779975][T18899] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1681.965423][T18899] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1681.966443][T19130] bridge0: port 1(bridge_slave_0) entered blocking state [ 1681.966516][T19130] bridge0: port 1(bridge_slave_0) entered disabled state [ 1681.966646][T19130] bridge_slave_0: entered allmulticast mode [ 1681.968616][T19130] bridge_slave_0: entered promiscuous mode [ 1682.017993][T18899] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1682.245310][T18899] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1682.281442][T19130] bridge0: port 2(bridge_slave_1) entered blocking state [ 1682.281588][T19130] bridge0: port 2(bridge_slave_1) entered disabled state [ 1682.281982][T19130] bridge_slave_1: entered allmulticast mode [ 1682.289266][T19130] bridge_slave_1: entered promiscuous mode [ 1682.597664][T18899] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1682.626731][T18899] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1682.858347][T19277] overlay: Unknown parameter 'obj_role' [ 1685.876021][ T4916] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1686.006800][ T4916] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1686.011505][ T4916] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1686.013976][ T4916] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1686.014643][ T4916] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1686.625707][T19130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1687.234648][T19130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1687.342548][T19130] team0: Port device team_slave_0 added [ 1687.387255][T19130] team0: Port device team_slave_1 added [ 1687.891967][T19130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1687.891986][T19130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1687.892011][T19130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1688.126045][T19130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1688.126067][T19130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1688.126098][T19130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1688.332448][T14747] Bluetooth: hci1: command tx timeout [ 1689.097648][T19130] hsr_slave_0: entered promiscuous mode [ 1689.099305][T19130] hsr_slave_1: entered promiscuous mode [ 1689.100480][T19130] debugfs: 'hsr0' already exists in 'hsr' [ 1689.100509][T19130] Cannot create hsr debugfs directory [ 1690.480853][T14747] Bluetooth: hci1: command tx timeout [ 1692.510705][T14747] Bluetooth: hci1: command tx timeout [ 1694.462048][ T9422] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 1694.573665][T14747] Bluetooth: hci1: command tx timeout [ 1694.631216][ T9422] usb 10-1: Using ep0 maxpacket: 16 [ 1694.633991][ T9422] usb 10-1: config 251 has an invalid interface number: 202 but max is 0 [ 1694.634021][ T9422] usb 10-1: config 251 has no interface number 0 [ 1694.634060][ T9422] usb 10-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 1694.634076][ T9422] usb 10-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1694.634089][ T9422] usb 10-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 1694.634104][ T9422] usb 10-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 1694.634119][ T9422] usb 10-1: config 251 interface 202 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1694.634132][ T9422] usb 10-1: config 251 interface 202 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 0 [ 1694.634146][ T9422] usb 10-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1694.634164][ T9422] usb 10-1: config 251 interface 202 has no altsetting 0 [ 1694.637093][ T9422] usb 10-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 1694.637124][ T9422] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1694.637145][ T9422] usb 10-1: Product: syz [ 1694.637158][ T9422] usb 10-1: Manufacturer: syz [ 1694.637166][ T9422] usb 10-1: SerialNumber: syz [ 1694.652228][T19334] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1694.925972][ T9422] cxacru 10-1:251.202: submit of read urb for cm 0x90 failed (-90) [ 1694.926000][ T9422] cxacru 10-1:251.202: usbatm_usb_probe: invalid endpoint 02! [ 1694.926119][ T9422] cxacru 10-1:251.202: probe with driver cxacru failed with error -22 [ 1695.004509][ T9422] usb 10-1: USB disconnect, device number 42 [ 1695.701046][T19003] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1695.739464][T19003] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1695.793831][ T36] IPVS: starting estimator thread 0... [ 1695.806118][T19003] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1695.999969][T19003] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1696.073562][T19003] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1696.083835][T19349] IPVS: using max 8 ests per chain, 19200 per kthread [ 1696.156731][T19003] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1696.285027][T19003] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1696.321202][T15461] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 1696.333755][T19003] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1696.494089][T15461] usb 10-1: Using ep0 maxpacket: 8 [ 1696.496745][T15461] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 1696.496808][T15461] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1696.496833][T15461] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1696.496860][T15461] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1696.496885][T15461] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1696.496931][T15461] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1696.496957][T15461] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1696.804961][T15461] usb 10-1: usb_control_msg returned -32 [ 1696.805013][T15461] usbtmc 10-1:16.0: can't read capabilities [ 1697.529443][T19285] bridge0: port 1(bridge_slave_0) entered blocking state [ 1697.529774][T19285] bridge0: port 1(bridge_slave_0) entered disabled state [ 1697.530034][T19285] bridge_slave_0: entered allmulticast mode [ 1697.553145][T19285] bridge_slave_0: entered promiscuous mode [ 1697.595004][T19285] bridge0: port 2(bridge_slave_1) entered blocking state [ 1697.595151][T19285] bridge0: port 2(bridge_slave_1) entered disabled state [ 1697.595376][T19285] bridge_slave_1: entered allmulticast mode [ 1697.600421][T19285] bridge_slave_1: entered promiscuous mode [ 1697.682162][T18299] bridge_slave_1: left allmulticast mode [ 1697.682192][T18299] bridge_slave_1: left promiscuous mode [ 1697.682468][T18299] bridge0: port 2(bridge_slave_1) entered disabled state [ 1697.742875][T18299] bridge_slave_0: left allmulticast mode [ 1697.742915][T18299] bridge_slave_0: left promiscuous mode [ 1697.743106][T18299] bridge0: port 1(bridge_slave_0) entered disabled state [ 1697.901926][T18299] bridge_slave_1: left allmulticast mode [ 1697.901956][T18299] bridge_slave_1: left promiscuous mode [ 1697.902122][T18299] bridge0: port 2(bridge_slave_1) entered disabled state [ 1697.974830][T18299] bridge_slave_0: left allmulticast mode [ 1697.974860][T18299] bridge_slave_0: left promiscuous mode [ 1697.975027][T18299] bridge0: port 1(bridge_slave_0) entered disabled state [ 1698.257790][T18299] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1698.382546][T18299] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1698.463721][T18299] bond0 (unregistering): Released all slaves [ 1698.577780][ T9422] usb 10-1: USB disconnect, device number 43 [ 1698.813845][T18299] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1698.893993][T18299] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1698.963852][T18299] bond0 (unregistering): Released all slaves [ 1699.010813][T19130] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1699.026833][T19130] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1699.150129][T19130] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1699.234455][T19130] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1699.240646][T19285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1699.273437][T19130] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1699.299219][T19130] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1699.370803][T19285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1699.412055][T19130] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1699.479956][T19130] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1699.610196][T19285] team0: Port device team_slave_0 added [ 1699.637334][T19285] team0: Port device team_slave_1 added [ 1699.911266][T18299] hsr_slave_0: left promiscuous mode [ 1699.953704][T18299] hsr_slave_1: left promiscuous mode [ 1699.954840][T18299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1700.001914][T18299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1700.181193][T18299] hsr_slave_0: left promiscuous mode [ 1700.221410][T18299] hsr_slave_1: left promiscuous mode [ 1700.222271][T18299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1700.252356][T18299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1700.712820][T18299] team0 (unregistering): Port device team_slave_1 removed [ 1700.762443][T18299] team0 (unregistering): Port device team_slave_0 removed [ 1701.333048][T18299] team0 (unregistering): Port device team_slave_1 removed [ 1701.391815][T18299] team0 (unregistering): Port device team_slave_0 removed [ 1701.733316][T19285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1701.733336][T19285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1701.733375][T19285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1701.740799][T19285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1701.740818][T19285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1701.740847][T19285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1702.212382][T19285] hsr_slave_0: entered promiscuous mode [ 1702.213902][T19285] hsr_slave_1: entered promiscuous mode [ 1702.215028][T19285] debugfs: 'hsr0' already exists in 'hsr' [ 1702.215054][T19285] Cannot create hsr debugfs directory [ 1705.483213][ T4916] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1705.967310][ T4916] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1706.190667][T19402] overlay: Unknown parameter 'obj_role' [ 1706.206293][ T4916] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1706.335011][ T4916] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1706.393397][ T4916] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1707.205654][T19130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1707.888157][T19418] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3178'. [ 1709.043154][T19418] nbd: socks must be embedded in a SOCK_ITEM attr [ 1709.169121][ T4916] Bluetooth: hci2: command tx timeout [ 1711.298673][ T4916] Bluetooth: hci2: command tx timeout [ 1711.727773][T19332] udevd[19332]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1711.875664][T19336] udevd[19336]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1712.079837][T19130] 8021q: adding VLAN 0 to HW filter on device team0 [ 1712.178468][ T1392] bridge0: port 1(bridge_slave_0) entered blocking state [ 1712.178633][ T1392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1712.420793][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 1712.421744][ T3302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1713.548290][ T4916] Bluetooth: hci2: command tx timeout [ 1714.677504][T19455] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1715.698416][ T4916] Bluetooth: hci2: command tx timeout [ 1715.932388][T19466] overlay: Unknown parameter 'obj_role' [ 1719.821191][T15463] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 1719.914150][T19130] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1720.497525][T15463] usb 7-1: Using ep0 maxpacket: 16 [ 1720.507489][T15463] usb 7-1: config 251 has an invalid interface number: 202 but max is 0 [ 1720.507522][T15463] usb 7-1: config 251 has no interface number 0 [ 1720.507612][T15463] usb 7-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 1720.507639][T15463] usb 7-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1720.507662][T15463] usb 7-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 1720.507689][T15463] usb 7-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 1720.507716][T15463] usb 7-1: config 251 interface 202 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1720.507740][T15463] usb 7-1: config 251 interface 202 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 0 [ 1720.507765][T15463] usb 7-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1720.507793][T15463] usb 7-1: config 251 interface 202 has no altsetting 0 [ 1720.510898][T15463] usb 7-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 1720.515390][T15463] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1720.515418][T15463] usb 7-1: Product: syz [ 1720.515434][T15463] usb 7-1: Manufacturer: syz [ 1720.515450][T15463] usb 7-1: SerialNumber: syz [ 1720.666475][T19494] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1720.893166][T15463] cxacru 7-1:251.202: submit of read urb for cm 0x90 failed (-90) [ 1720.893204][T15463] cxacru 7-1:251.202: usbatm_usb_probe: invalid endpoint 02! [ 1720.893434][T15463] cxacru 7-1:251.202: probe with driver cxacru failed with error -22 [ 1720.968262][T15463] usb 7-1: USB disconnect, device number 73 [ 1722.312800][T19405] bridge0: port 1(bridge_slave_0) entered blocking state [ 1722.387643][T19405] bridge0: port 1(bridge_slave_0) entered disabled state [ 1722.616320][T19405] bridge_slave_0: entered allmulticast mode [ 1722.667482][T14747] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1722.737982][T19405] bridge_slave_0: entered promiscuous mode [ 1722.753462][T14747] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1722.759714][T14747] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1722.776939][T14747] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1722.816980][T14747] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1723.558526][T19535] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3193'. [ 1724.109594][T19535] nbd: socks must be embedded in a SOCK_ITEM attr [ 1725.211412][ T4916] Bluetooth: hci5: command tx timeout [ 1726.866594][T19332] udevd[19332]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1726.890914][T19336] udevd[19336]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1727.294459][ T4916] Bluetooth: hci5: command tx timeout [ 1728.166014][T19405] bridge0: port 2(bridge_slave_1) entered blocking state [ 1728.166163][T19405] bridge0: port 2(bridge_slave_1) entered disabled state [ 1728.166430][T19405] bridge_slave_1: entered allmulticast mode [ 1728.241986][T19405] bridge_slave_1: entered promiscuous mode [ 1729.281117][ T4916] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 1729.281149][ T4916] CPU: 1 UID: 0 PID: 4916 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1729.281179][ T4916] Tainted: [L]=SOFTLOCKUP [ 1729.281187][ T4916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1729.281202][ T4916] Workqueue: hci4 hci_rx_work [ 1729.281235][ T4916] Call Trace: [ 1729.281244][ T4916] [ 1729.281255][ T4916] dump_stack_lvl+0xe8/0x150 [ 1729.281289][ T4916] sysfs_create_dir_ns+0x271/0x2a0 [ 1729.281338][ T4916] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1729.281372][ T4916] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1729.281412][ T4916] ? rt_spin_unlock+0x160/0x200 [ 1729.281444][ T4916] kobject_add_internal+0x631/0xd10 [ 1729.281483][ T4916] kobject_add+0x163/0x240 [ 1729.281515][ T4916] ? __pfx_kobject_add+0x10/0x10 [ 1729.281550][ T4916] ? get_device_parent+0x370/0x3a0 [ 1729.281583][ T4916] device_add+0x408/0xbb0 [ 1729.281612][ T4916] hci_conn_add_sysfs+0xd5/0x210 [ 1729.281651][ T4916] le_conn_complete_evt+0x10e6/0x16b0 [ 1729.281692][ T4916] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1729.281721][ T4916] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1729.281756][ T4916] ? lockdep_hardirqs_on+0x7a/0x110 [ 1729.281800][ T4916] ? skb_pull_data+0xfb/0x200 [ 1729.281838][ T4916] hci_le_conn_complete_evt+0x187/0x470 [ 1729.281874][ T4916] hci_event_packet+0x659/0xef0 [ 1729.281905][ T4916] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1729.281933][ T4916] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1729.281968][ T4916] ? __pfx_hci_event_packet+0x10/0x10 [ 1729.282002][ T4916] ? rt_spin_unlock+0x14f/0x200 [ 1729.282042][ T4916] ? hci_send_to_monitor+0xe2/0x590 [ 1729.282077][ T4916] hci_rx_work+0x3ee/0x1040 [ 1729.282110][ T4916] ? process_scheduled_works+0xa70/0x1860 [ 1729.282140][ T4916] process_scheduled_works+0xb5d/0x1860 [ 1729.282203][ T4916] ? __pfx_process_scheduled_works+0x10/0x10 [ 1729.282237][ T4916] ? assign_work+0x3d5/0x5e0 [ 1729.282268][ T4916] worker_thread+0xa53/0xfc0 [ 1729.282327][ T4916] kthread+0x388/0x470 [ 1729.282358][ T4916] ? __pfx_worker_thread+0x10/0x10 [ 1729.282382][ T4916] ? __pfx_kthread+0x10/0x10 [ 1729.282415][ T4916] ret_from_fork+0x514/0xb70 [ 1729.282447][ T4916] ? __pfx_ret_from_fork+0x10/0x10 [ 1729.282473][ T4916] ? __switch_to+0xc79/0x1410 [ 1729.282510][ T4916] ? __pfx_kthread+0x10/0x10 [ 1729.282542][ T4916] ret_from_fork_asm+0x1a/0x30 [ 1729.282592][ T4916] [ 1729.282751][ T4916] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1729.282899][ T4916] Bluetooth: hci4: failed to register connection device [ 1729.459703][T19580] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3197'. [ 1730.076229][ T4916] Bluetooth: hci5: command tx timeout [ 1730.326435][T19580] nbd: socks must be embedded in a SOCK_ITEM attr [ 1730.685142][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.685821][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.446916][T14747] Bluetooth: hci4: command 0x0406 tx timeout [ 1732.167573][ T4916] Bluetooth: hci5: command tx timeout [ 1733.620671][T14747] Bluetooth: hci4: command 0x0406 tx timeout [ 1733.935227][T19332] udevd[19332]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1733.939512][T19336] udevd[19336]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1734.081888][T19405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1734.133285][T19405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1734.487950][T10718] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 1735.371076][T10718] usb 10-1: Using ep0 maxpacket: 16 [ 1735.373469][T10718] usb 10-1: config 251 has an invalid interface number: 202 but max is 0 [ 1735.373497][T10718] usb 10-1: config 251 has no interface number 0 [ 1735.373548][T10718] usb 10-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 1735.373575][T10718] usb 10-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1735.373599][T10718] usb 10-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 1735.373627][T10718] usb 10-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 1735.373653][T10718] usb 10-1: config 251 interface 202 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1735.373677][T10718] usb 10-1: config 251 interface 202 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 0 [ 1735.373701][T10718] usb 10-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1735.373748][T10718] usb 10-1: config 251 interface 202 has no altsetting 0 [ 1735.390398][T10718] usb 10-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 1735.390431][T10718] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1735.390453][T10718] usb 10-1: Product: syz [ 1735.390469][T10718] usb 10-1: Manufacturer: syz [ 1735.390484][T10718] usb 10-1: SerialNumber: syz [ 1735.550544][T19589] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1735.773283][T10718] cxacru 10-1:251.202: submit of read urb for cm 0x90 failed (-90) [ 1735.773321][T10718] cxacru 10-1:251.202: usbatm_usb_probe: invalid endpoint 02! [ 1735.773543][T10718] cxacru 10-1:251.202: probe with driver cxacru failed with error -22 [ 1735.845553][T10718] usb 10-1: USB disconnect, device number 44 [ 1735.962531][T19285] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1736.029217][T19285] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1736.034207][T19405] team0: Port device team_slave_0 added [ 1736.058055][T19405] team0: Port device team_slave_1 added [ 1736.160258][T19285] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1736.228578][T19285] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1736.330767][T19285] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1736.401716][T19285] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1736.408650][T19405] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1736.408669][T19405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1736.408697][T19405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1736.469035][T19285] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1736.499300][T19285] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1736.500697][T19405] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1736.500714][T19405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1736.500739][T19405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1738.779874][T19631] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3203'. [ 1739.974577][T19631] nbd: socks must be embedded in a SOCK_ITEM attr [ 1741.849587][ T4916] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 1741.849621][ T4916] CPU: 0 UID: 0 PID: 4916 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1741.849653][ T4916] Tainted: [L]=SOFTLOCKUP [ 1741.849661][ T4916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1741.849676][ T4916] Workqueue: hci4 hci_rx_work [ 1741.849704][ T4916] Call Trace: [ 1741.849714][ T4916] [ 1741.849724][ T4916] dump_stack_lvl+0xe8/0x150 [ 1741.849754][ T4916] sysfs_create_dir_ns+0x271/0x2a0 [ 1741.849789][ T4916] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1741.849828][ T4916] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1741.849865][ T4916] ? rt_spin_unlock+0x160/0x200 [ 1741.849896][ T4916] kobject_add_internal+0x631/0xd10 [ 1741.849933][ T4916] kobject_add+0x163/0x240 [ 1741.849964][ T4916] ? __pfx_kobject_add+0x10/0x10 [ 1741.849998][ T4916] ? get_device_parent+0x370/0x3a0 [ 1741.850029][ T4916] device_add+0x408/0xbb0 [ 1741.850057][ T4916] hci_conn_add_sysfs+0xd5/0x210 [ 1741.850092][ T4916] le_conn_complete_evt+0x10e6/0x16b0 [ 1741.850129][ T4916] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1741.850159][ T4916] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1741.850193][ T4916] ? lockdep_hardirqs_on+0x7a/0x110 [ 1741.850232][ T4916] ? skb_pull_data+0xfb/0x200 [ 1741.850266][ T4916] hci_le_conn_complete_evt+0x187/0x470 [ 1741.850303][ T4916] hci_event_packet+0x659/0xef0 [ 1741.850333][ T4916] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1741.850360][ T4916] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1741.850382][ T4916] ? __pfx_hci_event_packet+0x10/0x10 [ 1741.850410][ T4916] ? rt_spin_unlock+0x14f/0x200 [ 1741.850444][ T4916] ? hci_send_to_monitor+0xe2/0x590 [ 1741.850469][ T4916] hci_rx_work+0x3ee/0x1040 [ 1741.850488][ T4916] ? preempt_schedule_thunk+0x16/0x30 [ 1741.850516][ T4916] ? process_scheduled_works+0xa70/0x1860 [ 1741.850537][ T4916] process_scheduled_works+0xb5d/0x1860 [ 1741.850585][ T4916] ? __pfx_process_scheduled_works+0x10/0x10 [ 1741.850609][ T4916] ? assign_work+0x3d5/0x5e0 [ 1741.850633][ T4916] worker_thread+0xa53/0xfc0 [ 1741.850677][ T4916] kthread+0x388/0x470 [ 1741.850699][ T4916] ? __pfx_worker_thread+0x10/0x10 [ 1741.850716][ T4916] ? __pfx_kthread+0x10/0x10 [ 1741.850740][ T4916] ret_from_fork+0x514/0xb70 [ 1741.850762][ T4916] ? __pfx_ret_from_fork+0x10/0x10 [ 1741.850781][ T4916] ? __switch_to+0xc79/0x1410 [ 1741.850817][ T4916] ? __pfx_kthread+0x10/0x10 [ 1741.850841][ T4916] ret_from_fork_asm+0x1a/0x30 [ 1741.850877][ T4916] [ 1741.851346][ T4916] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1741.851393][ T4916] Bluetooth: hci4: failed to register connection device [ 1742.051670][T19638] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3204'. [ 1742.051924][T19638] nbd: device at index 64 is going down [ 1743.931268][T14747] Bluetooth: hci4: command 0x0406 tx timeout [ 1744.341447][T19332] udevd[19332]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1744.368211][T19336] udevd[19336]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1744.879728][T19405] hsr_slave_0: entered promiscuous mode [ 1744.884604][T19405] hsr_slave_1: entered promiscuous mode [ 1744.887233][T19405] debugfs: 'hsr0' already exists in 'hsr' [ 1744.887260][T19405] Cannot create hsr debugfs directory [ 1745.826629][T16990] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1745.880557][T16990] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1745.939744][T16990] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1745.964636][T16990] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1745.966405][T16990] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1746.011239][T14747] Bluetooth: hci4: command 0x0406 tx timeout [ 1746.285841][T18299] bridge_slave_1: left allmulticast mode [ 1746.285883][T18299] bridge_slave_1: left promiscuous mode [ 1746.286164][T18299] bridge0: port 2(bridge_slave_1) entered disabled state [ 1746.353241][T18299] bridge_slave_0: left allmulticast mode [ 1746.353284][T18299] bridge_slave_0: left promiscuous mode [ 1746.353636][T18299] bridge0: port 1(bridge_slave_0) entered disabled state [ 1747.446151][T19678] overlay: Unknown parameter 'obj_role' [ 1748.132212][T18299] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1748.171331][T16990] Bluetooth: hci0: command tx timeout [ 1748.224087][T18299] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1748.284688][T18299] bond0 (unregistering): Released all slaves [ 1748.499136][T19681] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1749.051946][T18299] hsr_slave_0: left promiscuous mode [ 1749.081156][T18299] hsr_slave_1: left promiscuous mode [ 1749.082365][T18299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1749.132527][T18299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1749.561905][T18299] team0 (unregistering): Port device team_slave_1 removed [ 1749.613825][T18299] team0 (unregistering): Port device team_slave_0 removed [ 1750.251138][T16990] Bluetooth: hci0: command tx timeout [ 1752.332076][T16990] Bluetooth: hci0: command tx timeout [ 1753.379320][T19521] bridge0: port 1(bridge_slave_0) entered blocking state [ 1753.379440][T19521] bridge0: port 1(bridge_slave_0) entered disabled state [ 1753.379686][T19521] bridge_slave_0: entered allmulticast mode [ 1753.396995][T19521] bridge_slave_0: entered promiscuous mode [ 1753.891763][T19521] bridge0: port 2(bridge_slave_1) entered blocking state [ 1753.892054][T19521] bridge0: port 2(bridge_slave_1) entered disabled state [ 1753.892314][T19521] bridge_slave_1: entered allmulticast mode [ 1753.896282][T19521] bridge_slave_1: entered promiscuous mode [ 1754.234851][T19521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1754.280045][T19521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1754.407510][ T5262] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1754.415819][T16990] Bluetooth: hci0: command tx timeout [ 1754.581881][T19521] team0: Port device team_slave_0 added [ 1754.804705][T19521] team0: Port device team_slave_1 added [ 1754.980522][T19521] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1754.980541][T19521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1754.980571][T19521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1755.197371][T19521] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1755.197391][T19521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1755.197419][T19521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1757.142853][T19521] hsr_slave_0: entered promiscuous mode [ 1757.144910][T19521] hsr_slave_1: entered promiscuous mode [ 1758.365053][T19666] bridge0: port 1(bridge_slave_0) entered blocking state [ 1758.365255][T19666] bridge0: port 1(bridge_slave_0) entered disabled state [ 1758.365811][T19666] bridge_slave_0: entered allmulticast mode [ 1758.375545][T19666] bridge_slave_0: entered promiscuous mode [ 1758.691368][T19790] overlay: Unknown parameter 'obj_role' [ 1758.895444][T19666] bridge0: port 2(bridge_slave_1) entered blocking state [ 1758.895588][T19666] bridge0: port 2(bridge_slave_1) entered disabled state [ 1758.895854][T19666] bridge_slave_1: entered allmulticast mode [ 1758.910548][T19666] bridge_slave_1: entered promiscuous mode [ 1759.442305][T19666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1759.510579][T19666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1759.648647][T19666] team0: Port device team_slave_0 added [ 1759.669612][T19666] team0: Port device team_slave_1 added [ 1759.793351][T19405] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1759.889425][T19405] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1759.895851][T19666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1759.895869][T19666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1759.895895][T19666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1759.935402][T19666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1759.935419][T19666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1759.935444][T19666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1759.941907][T19405] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1760.028022][T19405] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1761.339640][T19405] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1761.367735][T19405] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1761.506880][T19405] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1761.525652][T19405] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1762.408867][T19666] hsr_slave_0: entered promiscuous mode [ 1762.409923][T19666] hsr_slave_1: entered promiscuous mode [ 1762.410677][T19666] debugfs: 'hsr0' already exists in 'hsr' [ 1762.410696][T19666] Cannot create hsr debugfs directory [ 1763.368722][T19837] overlay: Unknown parameter 'obj_role' [ 1763.824756][T18299] bridge_slave_1: left allmulticast mode [ 1763.824798][T18299] bridge_slave_1: left promiscuous mode [ 1763.825097][T18299] bridge0: port 2(bridge_slave_1) entered disabled state [ 1763.906065][T18299] bridge_slave_0: left allmulticast mode [ 1763.906103][T18299] bridge_slave_0: left promiscuous mode [ 1763.906406][T18299] bridge0: port 1(bridge_slave_0) entered disabled state [ 1764.111345][T18299] bridge_slave_1: left allmulticast mode [ 1764.111384][T18299] bridge_slave_1: left promiscuous mode [ 1764.111669][T18299] bridge0: port 2(bridge_slave_1) entered disabled state [ 1764.174726][T18299] bridge_slave_0: left allmulticast mode [ 1764.174766][T18299] bridge_slave_0: left promiscuous mode [ 1764.175052][T18299] bridge0: port 1(bridge_slave_0) entered disabled state [ 1764.721942][T18299] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1765.464162][T18299] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1765.540559][ T4916] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1765.593466][ T4916] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1765.598212][ T4916] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1765.606688][ T4916] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1765.613081][ T4916] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1765.745696][T18299] bond0 (unregistering): Released all slaves [ 1767.162663][T18299] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1767.794086][T16990] Bluetooth: hci1: command tx timeout [ 1767.977068][T18299] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1768.597834][T18299] bond0 (unregistering): Released all slaves [ 1769.117605][T19890] overlay: Unknown parameter 'obj_role' [ 1769.452403][T19885] overlay: Unknown parameter 'obj_role' [ 1769.918563][T16990] Bluetooth: hci1: command tx timeout [ 1770.402527][ T5262] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1772.082866][T16990] Bluetooth: hci1: command tx timeout [ 1772.425452][T18299] hsr_slave_0: left promiscuous mode [ 1772.478590][T18299] hsr_slave_1: left promiscuous mode [ 1772.484110][T18299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1772.522081][T18299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1772.731947][T18299] hsr_slave_0: left promiscuous mode [ 1772.774957][T18299] hsr_slave_1: left promiscuous mode [ 1772.776444][T18299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1772.822949][T18299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1773.490122][T18299] team0 (unregistering): Port device team_slave_1 removed [ 1773.597907][T19949] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3256'. [ 1774.222851][T16990] Bluetooth: hci1: command tx timeout [ 1774.262110][T19949] nbd: socks must be embedded in a SOCK_ITEM attr [ 1776.611965][T18299] team0 (unregistering): Port device team_slave_0 removed [ 1777.264009][T19965] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3258'. [ 1777.760849][T19951] udevd[19951]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1780.005531][T18299] team0 (unregistering): Port device team_slave_1 removed [ 1780.126916][T18299] team0 (unregistering): Port device team_slave_0 removed [ 1783.252274][ T4916] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1783.304147][ T4916] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1783.306104][ T4916] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1783.405671][ T4916] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1783.439844][ T4916] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1786.276179][T16990] Bluetooth: hci2: command tx timeout [ 1786.311353][T19861] bridge0: port 1(bridge_slave_0) entered blocking state [ 1786.311709][T19861] bridge0: port 1(bridge_slave_0) entered disabled state [ 1786.311958][T19861] bridge_slave_0: entered allmulticast mode [ 1786.315275][T19861] bridge_slave_0: entered promiscuous mode [ 1786.356075][T19861] bridge0: port 2(bridge_slave_1) entered blocking state [ 1786.356218][T19861] bridge0: port 2(bridge_slave_1) entered disabled state [ 1786.356506][T19861] bridge_slave_1: entered allmulticast mode [ 1786.390138][T19861] bridge_slave_1: entered promiscuous mode [ 1786.729926][T19861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1786.820090][T19861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1787.114302][T19861] team0: Port device team_slave_0 added [ 1787.130682][T19861] team0: Port device team_slave_1 added [ 1787.203065][T19861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1787.203084][T19861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1787.203123][T19861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1787.842789][T19861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1787.842809][T19861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1787.842835][T19861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1788.337125][T16990] Bluetooth: hci2: command tx timeout [ 1788.548959][T19861] hsr_slave_0: entered promiscuous mode [ 1788.566231][T19861] hsr_slave_1: entered promiscuous mode [ 1788.568584][T19861] debugfs: 'hsr0' already exists in 'hsr' [ 1788.568612][T19861] Cannot create hsr debugfs directory [ 1790.355040][T19666] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1790.432714][T16990] Bluetooth: hci2: command tx timeout [ 1790.483604][T19666] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1790.526200][T19666] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1790.571626][T19666] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1790.924121][T19666] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1790.956496][T19666] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1791.024970][T19666] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1791.090061][T19666] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1792.013421][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.013503][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.494907][T16990] Bluetooth: hci2: command tx timeout [ 1792.618047][T20132] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3295'. [ 1793.256723][T20132] nbd: socks must be embedded in a SOCK_ITEM attr [ 1795.595298][T19898] udevd[19898]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1795.606289][T19951] udevd[19951]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1796.016563][T20013] bridge0: port 1(bridge_slave_0) entered blocking state [ 1796.016710][T20013] bridge0: port 1(bridge_slave_0) entered disabled state [ 1796.016973][T20013] bridge_slave_0: entered allmulticast mode [ 1796.020764][T20013] bridge_slave_0: entered promiscuous mode [ 1796.075672][T20013] bridge0: port 2(bridge_slave_1) entered blocking state [ 1796.075816][T20013] bridge0: port 2(bridge_slave_1) entered disabled state [ 1796.076069][T20013] bridge_slave_1: entered allmulticast mode [ 1796.079387][T20013] bridge_slave_1: entered promiscuous mode [ 1796.295298][T20013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1796.501377][T20150] overlay: Unknown parameter 'obj_role' [ 1797.493235][T20013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1797.899854][T20013] team0: Port device team_slave_0 added [ 1797.920577][T20013] team0: Port device team_slave_1 added [ 1798.170194][T20013] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1798.170212][T20013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1798.170239][T20013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1798.347607][T20013] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1798.347627][T20013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1798.347656][T20013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1798.720874][T20176] overlay: Unknown parameter 'obj_role' [ 1800.122971][T18299] bridge_slave_1: left allmulticast mode [ 1800.123013][T18299] bridge_slave_1: left promiscuous mode [ 1800.123236][T18299] bridge0: port 2(bridge_slave_1) entered disabled state [ 1800.203329][T18299] bridge_slave_0: left allmulticast mode [ 1800.203357][T18299] bridge_slave_0: left promiscuous mode [ 1800.203555][T18299] bridge0: port 1(bridge_slave_0) entered disabled state [ 1800.414125][T18299] bridge_slave_1: left allmulticast mode [ 1800.414167][T18299] bridge_slave_1: left promiscuous mode [ 1800.414462][T18299] bridge0: port 2(bridge_slave_1) entered disabled state [ 1800.513423][T18299] bridge_slave_0: left allmulticast mode [ 1800.513452][T18299] bridge_slave_0: left promiscuous mode [ 1800.513681][T18299] bridge0: port 1(bridge_slave_0) entered disabled state [ 1800.851978][T18299] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1800.952575][T18299] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1801.035135][T18299] bond0 (unregistering): Released all slaves [ 1801.342029][T18299] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1801.433052][T18299] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1801.500809][T18299] bond0 (unregistering): Released all slaves [ 1801.663811][T20200] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3317'. [ 1801.693306][T20013] hsr_slave_0: entered promiscuous mode [ 1801.694664][T20013] hsr_slave_1: entered promiscuous mode [ 1801.695614][T20013] debugfs: 'hsr0' already exists in 'hsr' [ 1801.695639][T20013] Cannot create hsr debugfs directory [ 1802.337589][T20212] overlay: Unknown parameter 'obj_role' [ 1803.779416][T19666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1804.001111][T18299] hsr_slave_0: left promiscuous mode [ 1804.041101][T18299] hsr_slave_1: left promiscuous mode [ 1804.042800][T18299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1804.103416][T18299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1804.312125][T18299] hsr_slave_0: left promiscuous mode [ 1804.352602][T18299] hsr_slave_1: left promiscuous mode [ 1804.353647][T18299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1804.403106][T18299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1805.902384][T18299] team0 (unregistering): Port device team_slave_1 removed [ 1805.962239][T18299] team0 (unregistering): Port device team_slave_0 removed [ 1806.441770][T18299] team0 (unregistering): Port device team_slave_1 removed [ 1806.486469][T18299] team0 (unregistering): Port device team_slave_0 removed [ 1806.694350][T19861] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1806.750794][T19861] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1806.847777][T19861] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1806.904372][T19861] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1808.115744][T19861] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1808.229057][ T4916] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1808.253152][T19861] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1808.349212][ T4916] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1808.358030][ T4916] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1808.363522][ T4916] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1808.364996][ T4916] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1809.063425][T19861] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1809.120556][T16990] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 1809.120592][T16990] CPU: 0 UID: 0 PID: 16990 Comm: kworker/u9:2 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1809.120624][T16990] Tainted: [L]=SOFTLOCKUP [ 1809.120634][T16990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1809.120650][T16990] Workqueue: hci4 hci_rx_work [ 1809.120682][T16990] Call Trace: [ 1809.120691][T16990] [ 1809.120703][T16990] dump_stack_lvl+0xe8/0x150 [ 1809.120735][T16990] sysfs_create_dir_ns+0x271/0x2a0 [ 1809.120771][T16990] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1809.120805][T16990] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1809.120845][T16990] ? rt_spin_unlock+0x160/0x200 [ 1809.120879][T16990] kobject_add_internal+0x631/0xd10 [ 1809.120920][T16990] kobject_add+0x163/0x240 [ 1809.120952][T16990] ? __pfx_kobject_add+0x10/0x10 [ 1809.120987][T16990] ? get_device_parent+0x370/0x3a0 [ 1809.121018][T16990] device_add+0x408/0xbb0 [ 1809.121049][T16990] hci_conn_add_sysfs+0xd5/0x210 [ 1809.121089][T16990] le_conn_complete_evt+0x10e6/0x16b0 [ 1809.121131][T16990] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1809.121161][T16990] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1809.121198][T16990] ? lockdep_hardirqs_on+0x7a/0x110 [ 1809.121237][T16990] ? skb_pull_data+0xfb/0x200 [ 1809.121283][T16990] hci_le_conn_complete_evt+0x187/0x470 [ 1809.121321][T16990] hci_event_packet+0x659/0xef0 [ 1809.121353][T16990] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1809.121382][T16990] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1809.121407][T16990] ? __pfx_hci_event_packet+0x10/0x10 [ 1809.121441][T16990] ? rt_spin_unlock+0x14f/0x200 [ 1809.121480][T16990] ? hci_send_to_monitor+0xe2/0x590 [ 1809.121516][T16990] hci_rx_work+0x3ee/0x1040 [ 1809.121548][T16990] ? process_scheduled_works+0xa70/0x1860 [ 1809.121578][T16990] process_scheduled_works+0xb5d/0x1860 [ 1809.121643][T16990] ? __pfx_process_scheduled_works+0x10/0x10 [ 1809.121676][T16990] ? assign_work+0x3d5/0x5e0 [ 1809.121709][T16990] worker_thread+0xa53/0xfc0 [ 1809.121769][T16990] kthread+0x388/0x470 [ 1809.121801][T16990] ? __pfx_worker_thread+0x10/0x10 [ 1809.121825][T16990] ? __pfx_kthread+0x10/0x10 [ 1809.121858][T16990] ret_from_fork+0x514/0xb70 [ 1809.121889][T16990] ? __pfx_ret_from_fork+0x10/0x10 [ 1809.121915][T16990] ? __switch_to+0xc79/0x1410 [ 1809.121953][T16990] ? __pfx_kthread+0x10/0x10 [ 1809.121986][T16990] ret_from_fork_asm+0x1a/0x30 [ 1809.122034][T16990] [ 1809.137381][T16990] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1809.137437][T16990] Bluetooth: hci4: failed to register connection device [ 1809.507317][T20260] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3331'. [ 1809.674047][T19861] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1810.797163][T16990] Bluetooth: hci5: command tx timeout [ 1811.278327][T14747] Bluetooth: hci4: command 0x0406 tx timeout [ 1813.374308][ T4916] Bluetooth: hci4: command 0x0406 tx timeout [ 1813.374353][ T4916] Bluetooth: hci5: command tx timeout [ 1813.458327][T19898] udevd[19898]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1813.674223][T19951] udevd[19951]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1815.490657][T16990] Bluetooth: hci5: command tx timeout [ 1817.531226][T16990] Bluetooth: hci5: command tx timeout [ 1817.600141][ T5262] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1817.847574][T19861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1818.235629][T19861] 8021q: adding VLAN 0 to HW filter on device team0 [ 1820.165504][T10719] bridge0: port 1(bridge_slave_0) entered blocking state [ 1820.165756][T10719] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1821.410771][ T3329] bridge0: port 2(bridge_slave_1) entered blocking state [ 1821.411491][ T3329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1828.023139][ T4916] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1828.156127][ T4916] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1828.168620][ T4916] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1828.169788][ T4916] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1828.192931][ T4916] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1828.985786][T20247] bridge0: port 1(bridge_slave_0) entered blocking state [ 1828.985995][T20247] bridge0: port 1(bridge_slave_0) entered disabled state [ 1828.986226][T20247] bridge_slave_0: entered allmulticast mode [ 1828.992256][T20247] bridge_slave_0: entered promiscuous mode [ 1829.897828][T20247] bridge0: port 2(bridge_slave_1) entered blocking state [ 1829.898514][T20247] bridge0: port 2(bridge_slave_1) entered disabled state [ 1829.899139][T20247] bridge_slave_1: entered allmulticast mode [ 1829.986801][T20247] bridge_slave_1: entered promiscuous mode [ 1830.571959][ T4916] Bluetooth: hci0: command tx timeout [ 1833.267181][ T4916] Bluetooth: hci0: command tx timeout [ 1835.371495][ T4916] Bluetooth: hci0: command tx timeout [ 1837.457648][ T4916] Bluetooth: hci0: command tx timeout [ 1837.839810][T20247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1837.880860][T20247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1837.885766][T20013] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1837.941710][T20013] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1838.008315][T20013] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1838.235261][T20013] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1838.379853][T20013] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1838.427525][T20013] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1838.488610][T20247] team0: Port device team_slave_0 added [ 1838.492274][T20013] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1838.625880][T20013] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1838.633207][T20247] team0: Port device team_slave_1 added [ 1839.159286][T20247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1839.159305][T20247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1839.159330][T20247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1839.282450][T20247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1839.282472][T20247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1839.282503][T20247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1846.414329][T20247] hsr_slave_0: entered promiscuous mode [ 1846.422939][T20247] hsr_slave_1: entered promiscuous mode [ 1847.371897][T18299] bridge_slave_1: left allmulticast mode [ 1847.371940][T18299] bridge_slave_1: left promiscuous mode [ 1847.372243][T18299] bridge0: port 2(bridge_slave_1) entered disabled state [ 1847.897468][T20465] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1848.629267][T20465] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1848.629369][T20465] overlayfs: failed to look up (tracing) for ino (-66) [ 1849.921613][T18299] bridge_slave_0: left allmulticast mode [ 1849.921655][T18299] bridge_slave_0: left promiscuous mode [ 1849.922082][T18299] bridge0: port 1(bridge_slave_0) entered disabled state [ 1850.261683][T20467] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3369'. [ 1851.051043][T20467] nbd: socks must be embedded in a SOCK_ITEM attr [ 1852.475697][ T4916] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1853.464622][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.464703][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.499005][ T4916] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1853.670909][ T4916] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1853.877454][ T4916] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1853.919062][ T4916] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1854.361664][T20432] udevd[20432]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1854.418711][T20432] udevd[20432]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1855.201983][T18299] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1855.282678][T18299] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1855.358330][T18299] bond0 (unregistering): Released all slaves [ 1856.254364][T16990] Bluetooth: hci1: command tx timeout [ 1856.664817][T20497] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1856.708721][T20497] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1857.374005][T20499] netlink: 388 bytes leftover after parsing attributes in process `syz.9.3375'. [ 1859.332279][T16990] Bluetooth: hci1: command tx timeout [ 1860.065334][T18299] hsr_slave_0: left promiscuous mode [ 1860.418273][T18299] hsr_slave_1: left promiscuous mode [ 1860.449879][T18299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1860.815373][T18299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1861.283024][T20510] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3378'. [ 1861.352145][T16990] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 1861.352252][T16990] CPU: 0 UID: 0 PID: 16990 Comm: kworker/u9:2 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1861.352288][T16990] Tainted: [L]=SOFTLOCKUP [ 1861.352296][T16990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1861.352311][T16990] Workqueue: hci4 hci_rx_work [ 1861.352346][T16990] Call Trace: [ 1861.352358][T16990] [ 1861.352376][T16990] dump_stack_lvl+0xe8/0x150 [ 1861.352410][T16990] sysfs_create_dir_ns+0x271/0x2a0 [ 1861.352442][T16990] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1861.352472][T16990] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1861.352509][T16990] ? rt_spin_unlock+0x160/0x200 [ 1861.352542][T16990] kobject_add_internal+0x631/0xd10 [ 1861.352581][T16990] kobject_add+0x163/0x240 [ 1861.352615][T16990] ? __pfx_kobject_add+0x10/0x10 [ 1861.352675][T16990] ? get_device_parent+0x370/0x3a0 [ 1861.352708][T16990] device_add+0x408/0xbb0 [ 1861.352739][T16990] hci_conn_add_sysfs+0xd5/0x210 [ 1861.352778][T16990] le_conn_complete_evt+0x10e6/0x16b0 [ 1861.352820][T16990] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1861.352850][T16990] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1861.352886][T16990] ? lockdep_hardirqs_on+0x7a/0x110 [ 1861.352925][T16990] ? skb_pull_data+0xfb/0x200 [ 1861.352963][T16990] hci_le_conn_complete_evt+0x187/0x470 [ 1861.353001][T16990] hci_event_packet+0x659/0xef0 [ 1861.353033][T16990] ? __pfx____migrate_enable+0x10/0x10 [ 1861.353062][T16990] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1861.353088][T16990] ? __pfx_hci_event_packet+0x10/0x10 [ 1861.353137][T16990] ? hci_send_to_monitor+0xe2/0x590 [ 1861.353171][T16990] hci_rx_work+0x3ee/0x1040 [ 1861.353204][T16990] ? process_scheduled_works+0xa70/0x1860 [ 1861.353234][T16990] process_scheduled_works+0xb5d/0x1860 [ 1861.353299][T16990] ? __pfx_process_scheduled_works+0x10/0x10 [ 1861.353333][T16990] ? assign_work+0x3d5/0x5e0 [ 1861.353366][T16990] worker_thread+0xa53/0xfc0 [ 1861.353424][T16990] kthread+0x388/0x470 [ 1861.353456][T16990] ? __pfx_worker_thread+0x10/0x10 [ 1861.353479][T16990] ? __pfx_kthread+0x10/0x10 [ 1861.353512][T16990] ret_from_fork+0x514/0xb70 [ 1861.353544][T16990] ? __pfx_ret_from_fork+0x10/0x10 [ 1861.353570][T16990] ? __switch_to+0xc79/0x1410 [ 1861.353608][T16990] ? __pfx_kthread+0x10/0x10 [ 1861.353640][T16990] ret_from_fork_asm+0x1a/0x30 [ 1861.353697][T16990] [ 1861.354131][T16990] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1861.427597][ T4916] Bluetooth: hci1: command tx timeout [ 1861.448703][T16990] Bluetooth: hci4: failed to register connection device [ 1862.080732][T20510] nbd: socks must be embedded in a SOCK_ITEM attr [ 1863.501896][T19667] Bluetooth: hci4: command 0x0406 tx timeout [ 1863.533895][ T4916] Bluetooth: hci1: command tx timeout [ 1865.033412][T20450] udevd[20450]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1865.039901][T20432] udevd[20432]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1865.293822][T18299] team0 (unregistering): Port device team_slave_1 removed [ 1865.372910][T18299] team0 (unregistering): Port device team_slave_0 removed [ 1865.602242][T20506] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1865.602289][T20506] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1865.602311][T20506] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1865.771085][T19667] Bluetooth: hci4: command 0x0406 tx timeout [ 1866.806835][T20537] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1868.064387][ T5262] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1868.108465][T20385] bridge0: port 1(bridge_slave_0) entered blocking state [ 1868.109007][T20385] bridge0: port 1(bridge_slave_0) entered disabled state [ 1868.109259][T20385] bridge_slave_0: entered allmulticast mode [ 1868.132705][T20385] bridge_slave_0: entered promiscuous mode [ 1868.199280][T20385] bridge0: port 2(bridge_slave_1) entered blocking state [ 1868.199416][T20385] bridge0: port 2(bridge_slave_1) entered disabled state [ 1868.199603][T20385] bridge_slave_1: entered allmulticast mode [ 1868.202037][T20385] bridge_slave_1: entered promiscuous mode [ 1868.589942][T20385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1868.621595][T20385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1868.676274][T20385] team0: Port device team_slave_0 added [ 1868.918045][T20385] team0: Port device team_slave_1 added [ 1869.050441][T20545] netlink: 388 bytes leftover after parsing attributes in process `syz.6.3383'. [ 1869.525535][T20385] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1869.525552][T20385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1869.525578][T20385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1869.618973][T19667] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1869.684668][T19667] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1869.685616][T20385] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1869.685631][T20385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1869.685656][T20385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1869.686696][T19667] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1870.011088][T19667] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1870.012308][T19667] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1871.322581][T20385] hsr_slave_0: entered promiscuous mode [ 1871.325745][T20385] hsr_slave_1: entered promiscuous mode [ 1871.331673][T20385] debugfs: 'hsr0' already exists in 'hsr' [ 1871.331701][T20385] Cannot create hsr debugfs directory [ 1871.580525][T20570] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3387'. [ 1873.131260][ T4916] Bluetooth: hci2: command tx timeout [ 1875.227954][ T4916] Bluetooth: hci2: command tx timeout [ 1877.389708][ T4916] Bluetooth: hci2: command tx timeout [ 1879.791246][T20469] bridge0: port 1(bridge_slave_0) entered blocking state [ 1879.791394][T20469] bridge0: port 1(bridge_slave_0) entered disabled state [ 1879.791681][T20469] bridge_slave_0: entered allmulticast mode [ 1879.794978][T20469] bridge_slave_0: entered promiscuous mode [ 1879.966826][ T4916] Bluetooth: hci2: command tx timeout [ 1881.321676][T20469] bridge0: port 2(bridge_slave_1) entered blocking state [ 1881.321908][T20469] bridge0: port 2(bridge_slave_1) entered disabled state [ 1881.322154][T20469] bridge_slave_1: entered allmulticast mode [ 1881.325344][T20469] bridge_slave_1: entered promiscuous mode [ 1881.512211][T20639] netlink: 388 bytes leftover after parsing attributes in process `syz.6.3401'. [ 1881.611465][T20469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1883.484391][T20649] overlay: Unknown parameter 'obj_role' [ 1884.054485][T20469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1884.158094][T20662] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3406'. [ 1885.487610][T20657] netlink: 'syz.6.3405': attribute type 29 has an invalid length. [ 1886.065823][T20469] team0: Port device team_slave_0 added [ 1886.136560][T20469] team0: Port device team_slave_1 added [ 1886.404990][T20469] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1886.405010][T20469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1886.405038][T20469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1887.013762][T20469] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1887.013783][T20469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1887.013814][T20469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1888.757885][T20469] hsr_slave_0: entered promiscuous mode [ 1888.758751][T20469] hsr_slave_1: entered promiscuous mode [ 1888.759353][T20469] debugfs: 'hsr0' already exists in 'hsr' [ 1888.759371][T20469] Cannot create hsr debugfs directory [ 1889.101322][T18299] bridge_slave_1: left allmulticast mode [ 1889.101362][T18299] bridge_slave_1: left promiscuous mode [ 1889.101664][T18299] bridge0: port 2(bridge_slave_1) entered disabled state [ 1889.183157][T18299] bridge_slave_0: left allmulticast mode [ 1889.183199][T18299] bridge_slave_0: left promiscuous mode [ 1889.183507][T18299] bridge0: port 1(bridge_slave_0) entered disabled state [ 1889.392468][T18299] bridge_slave_1: left allmulticast mode [ 1889.392513][T18299] bridge_slave_1: left promiscuous mode [ 1889.392803][T18299] bridge0: port 2(bridge_slave_1) entered disabled state [ 1889.564138][T19667] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1889.615764][T18299] bridge_slave_0: left allmulticast mode [ 1889.615885][T18299] bridge_slave_0: left promiscuous mode [ 1889.616186][T18299] bridge0: port 1(bridge_slave_0) entered disabled state [ 1889.645022][T19667] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1889.647013][T19667] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1889.648275][T19667] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1889.649017][T19667] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1889.893399][T20692] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3412'. [ 1891.860681][ T4916] Bluetooth: hci0: command tx timeout [ 1892.287208][T18299] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1892.401911][T18299] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1892.472755][T18299] bond0 (unregistering): Released all slaves [ 1892.951753][T18299] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1893.032291][T18299] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1893.053289][T18299] bond0 (unregistering): Released all slaves [ 1893.931018][ T4916] Bluetooth: hci0: command tx timeout [ 1895.591066][T20553] bridge0: port 1(bridge_slave_0) entered blocking state [ 1895.591309][T20553] bridge0: port 1(bridge_slave_0) entered disabled state [ 1895.591551][T20553] bridge_slave_0: entered allmulticast mode [ 1895.611974][T20553] bridge_slave_0: entered promiscuous mode [ 1895.923818][T20553] bridge0: port 2(bridge_slave_1) entered blocking state [ 1895.923964][T20553] bridge0: port 2(bridge_slave_1) entered disabled state [ 1895.924251][T20553] bridge_slave_1: entered allmulticast mode [ 1895.932628][T20553] bridge_slave_1: entered promiscuous mode [ 1896.024828][ T4916] Bluetooth: hci0: command tx timeout [ 1896.681754][T18299] hsr_slave_0: left promiscuous mode [ 1896.721216][T18299] hsr_slave_1: left promiscuous mode [ 1896.723892][T18299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1896.762773][T18299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1896.951065][T18299] hsr_slave_0: left promiscuous mode [ 1896.973260][T18299] hsr_slave_1: left promiscuous mode [ 1896.974208][T18299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1897.022355][T18299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1897.532675][T18299] team0 (unregistering): Port device team_slave_1 removed [ 1897.602384][T18299] team0 (unregistering): Port device team_slave_0 removed [ 1898.091062][ T4916] Bluetooth: hci0: command tx timeout [ 1898.909966][T20764] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3426'. [ 1899.601263][T20764] nbd: socks must be embedded in a SOCK_ITEM attr [ 1901.660018][T18299] team0 (unregistering): Port device team_slave_1 removed [ 1901.723169][T20450] udevd[20450]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1901.754038][T20432] udevd[20432]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1901.885848][T18299] team0 (unregistering): Port device team_slave_0 removed [ 1902.278575][T20553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1902.321967][ T5262] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1903.500611][T20553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1903.601218][T20286] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 1903.801118][T20286] usb 7-1: Using ep0 maxpacket: 8 [ 1903.803674][T20286] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 1903.803708][T20286] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1903.803732][T20286] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 1903.803758][T20286] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 128 [ 1903.858597][T20286] usb 7-1: New USB device found, idVendor=0bfd, idProduct=0124, bcdDevice=3a.9f [ 1903.858630][T20286] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1903.858653][T20286] usb 7-1: Product: syz [ 1903.858669][T20286] usb 7-1: Manufacturer: syz [ 1903.858685][T20286] usb 7-1: SerialNumber: syz [ 1903.908606][T20286] usb 7-1: config 0 descriptor?? [ 1903.909496][T20776] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1903.930661][T20286] kvaser_usb 7-1:0.0: error -EPROTO: Cannot get software info [ 1903.930768][T20286] kvaser_usb 7-1:0.0: probe with driver kvaser_usb failed with error -71 [ 1904.089083][T20553] team0: Port device team_slave_0 added [ 1904.298507][T20553] team0: Port device team_slave_1 added [ 1904.419845][T20553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1904.419864][T20553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1904.419886][T20553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1904.469296][T20553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1904.469312][T20553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1904.469338][T20553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1905.264693][T15550] usb 7-1: USB disconnect, device number 74 [ 1905.506928][T20553] hsr_slave_0: entered promiscuous mode [ 1905.516637][T20553] hsr_slave_1: entered promiscuous mode [ 1905.519230][T20553] debugfs: 'hsr0' already exists in 'hsr' [ 1905.519260][T20553] Cannot create hsr debugfs directory [ 1906.915539][ T4916] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 1906.915572][ T4916] CPU: 1 UID: 0 PID: 4916 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1906.915604][ T4916] Tainted: [L]=SOFTLOCKUP [ 1906.915614][ T4916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1906.915629][ T4916] Workqueue: hci4 hci_rx_work [ 1906.915660][ T4916] Call Trace: [ 1906.915669][ T4916] [ 1906.915679][ T4916] dump_stack_lvl+0xe8/0x150 [ 1906.915712][ T4916] sysfs_create_dir_ns+0x271/0x2a0 [ 1906.915748][ T4916] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1906.915792][ T4916] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1906.915832][ T4916] ? rt_spin_unlock+0x160/0x200 [ 1906.915866][ T4916] kobject_add_internal+0x631/0xd10 [ 1906.915905][ T4916] kobject_add+0x163/0x240 [ 1906.915938][ T4916] ? __pfx_kobject_add+0x10/0x10 [ 1906.915973][ T4916] ? get_device_parent+0x370/0x3a0 [ 1906.916006][ T4916] device_add+0x408/0xbb0 [ 1906.916035][ T4916] hci_conn_add_sysfs+0xd5/0x210 [ 1906.916075][ T4916] le_conn_complete_evt+0x10e6/0x16b0 [ 1906.916115][ T4916] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1906.916146][ T4916] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1906.916182][ T4916] ? lockdep_hardirqs_on+0x7a/0x110 [ 1906.916221][ T4916] ? skb_pull_data+0xfb/0x200 [ 1906.916259][ T4916] hci_le_conn_complete_evt+0x187/0x470 [ 1906.916297][ T4916] hci_event_packet+0x659/0xef0 [ 1906.916330][ T4916] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1906.916356][ T4916] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1906.916381][ T4916] ? __pfx_hci_event_packet+0x10/0x10 [ 1906.916415][ T4916] ? rt_spin_unlock+0x14f/0x200 [ 1906.916462][ T4916] ? hci_send_to_monitor+0xe2/0x590 [ 1906.916497][ T4916] hci_rx_work+0x3ee/0x1040 [ 1906.916530][ T4916] ? process_scheduled_works+0xa70/0x1860 [ 1906.916558][ T4916] process_scheduled_works+0xb5d/0x1860 [ 1906.916623][ T4916] ? __pfx_process_scheduled_works+0x10/0x10 [ 1906.916658][ T4916] ? assign_work+0x3d5/0x5e0 [ 1906.916690][ T4916] worker_thread+0xa53/0xfc0 [ 1906.916751][ T4916] kthread+0x388/0x470 [ 1906.916791][ T4916] ? __pfx_worker_thread+0x10/0x10 [ 1906.916814][ T4916] ? __pfx_kthread+0x10/0x10 [ 1906.916844][ T4916] ret_from_fork+0x514/0xb70 [ 1906.916875][ T4916] ? __pfx_ret_from_fork+0x10/0x10 [ 1906.916902][ T4916] ? __switch_to+0xc79/0x1410 [ 1906.916940][ T4916] ? __pfx_kthread+0x10/0x10 [ 1906.916974][ T4916] ret_from_fork_asm+0x1a/0x30 [ 1906.917022][ T4916] [ 1906.917083][ T4916] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1906.917128][ T4916] Bluetooth: hci4: failed to register connection device [ 1907.320756][T20813] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3434'. [ 1907.575627][T20813] nbd: socks must be embedded in a SOCK_ITEM attr [ 1908.998201][T19667] Bluetooth: hci4: command 0x0406 tx timeout [ 1909.741763][T20432] udevd[20432]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1910.353153][T16990] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1910.390644][T16990] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1910.431346][T16990] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1910.440592][T16990] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1910.448987][T16990] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1911.122266][T20686] bridge0: port 1(bridge_slave_0) entered blocking state [ 1911.122420][T20686] bridge0: port 1(bridge_slave_0) entered disabled state [ 1911.152082][T20686] bridge_slave_0: entered allmulticast mode [ 1911.172742][T20686] bridge_slave_0: entered promiscuous mode [ 1911.193442][T19667] Bluetooth: hci4: command 0x0406 tx timeout [ 1912.254482][T20686] bridge0: port 2(bridge_slave_1) entered blocking state [ 1912.254632][T20686] bridge0: port 2(bridge_slave_1) entered disabled state [ 1912.254951][T20686] bridge_slave_1: entered allmulticast mode [ 1912.268103][T20686] bridge_slave_1: entered promiscuous mode [ 1912.574852][T20686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1912.579279][T20686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1912.759871][T20686] team0: Port device team_slave_0 added [ 1912.770431][T20686] team0: Port device team_slave_1 added [ 1912.776213][ T4916] Bluetooth: hci5: command tx timeout [ 1915.521568][ T4916] Bluetooth: hci5: command tx timeout [ 1915.657742][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 1915.657826][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 1915.954477][T20865] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3444'. [ 1916.102000][T20865] nbd: socks must be embedded in a SOCK_ITEM attr [ 1917.535400][ T4916] Bluetooth: hci5: command tx timeout [ 1918.740493][T20686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1918.740511][T20686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1918.740534][T20686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1918.750569][T20686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1918.750583][T20686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1918.750598][T20686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1919.349913][T20686] hsr_slave_0: entered promiscuous mode [ 1919.360915][T20686] hsr_slave_1: entered promiscuous mode [ 1919.361976][T20686] debugfs: 'hsr0' already exists in 'hsr' [ 1919.362003][T20686] Cannot create hsr debugfs directory [ 1919.638755][T20553] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1919.683173][T20553] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1919.691005][ T4916] Bluetooth: hci5: command tx timeout [ 1919.738977][T20553] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1919.799717][T20553] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1919.835386][T20553] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1919.888129][T20553] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1919.924828][T20553] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1920.016180][T20553] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1920.251590][ T4916] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 1920.251613][ T4916] CPU: 1 UID: 0 PID: 4916 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1920.251636][ T4916] Tainted: [L]=SOFTLOCKUP [ 1920.251643][ T4916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1920.251656][ T4916] Workqueue: hci4 hci_rx_work [ 1920.251684][ T4916] Call Trace: [ 1920.251694][ T4916] [ 1920.251703][ T4916] dump_stack_lvl+0xe8/0x150 [ 1920.251733][ T4916] sysfs_create_dir_ns+0x271/0x2a0 [ 1920.251765][ T4916] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1920.251796][ T4916] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1920.251842][ T4916] ? rt_spin_unlock+0x160/0x200 [ 1920.251875][ T4916] kobject_add_internal+0x631/0xd10 [ 1920.251912][ T4916] kobject_add+0x163/0x240 [ 1920.251940][ T4916] ? __pfx_kobject_add+0x10/0x10 [ 1920.251980][ T4916] ? get_device_parent+0x370/0x3a0 [ 1920.252003][ T4916] device_add+0x408/0xbb0 [ 1920.252019][ T4916] hci_conn_add_sysfs+0xd5/0x210 [ 1920.252041][ T4916] le_conn_complete_evt+0x10e6/0x16b0 [ 1920.252065][ T4916] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1920.252081][ T4916] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1920.252101][ T4916] ? lockdep_hardirqs_on+0x7a/0x110 [ 1920.252123][ T4916] ? skb_pull_data+0xfb/0x200 [ 1920.252144][ T4916] hci_le_conn_complete_evt+0x187/0x470 [ 1920.252165][ T4916] hci_event_packet+0x659/0xef0 [ 1920.252181][ T4916] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1920.252197][ T4916] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1920.252210][ T4916] ? __pfx_hci_event_packet+0x10/0x10 [ 1920.252236][ T4916] ? rt_spin_unlock+0x14f/0x200 [ 1920.252276][ T4916] ? hci_send_to_monitor+0xe2/0x590 [ 1920.252295][ T4916] hci_rx_work+0x3ee/0x1040 [ 1920.252312][ T4916] ? process_scheduled_works+0xa70/0x1860 [ 1920.252336][ T4916] process_scheduled_works+0xb5d/0x1860 [ 1920.252369][ T4916] ? __pfx_process_scheduled_works+0x10/0x10 [ 1920.252387][ T4916] ? assign_work+0x3d5/0x5e0 [ 1920.252404][ T4916] worker_thread+0xa53/0xfc0 [ 1920.252435][ T4916] kthread+0x388/0x470 [ 1920.252452][ T4916] ? __pfx_worker_thread+0x10/0x10 [ 1920.252465][ T4916] ? __pfx_kthread+0x10/0x10 [ 1920.252488][ T4916] ret_from_fork+0x514/0xb70 [ 1920.252517][ T4916] ? __pfx_ret_from_fork+0x10/0x10 [ 1920.252533][ T4916] ? __switch_to+0xc79/0x1410 [ 1920.252553][ T4916] ? __pfx_kthread+0x10/0x10 [ 1920.252570][ T4916] ret_from_fork_asm+0x1a/0x30 [ 1920.252600][ T4916] [ 1920.252777][ T4916] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1920.252824][ T4916] Bluetooth: hci4: failed to register connection device [ 1920.336454][T20900] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3454'. [ 1921.012968][ T43] bridge_slave_1: left allmulticast mode [ 1921.013010][ T43] bridge_slave_1: left promiscuous mode [ 1921.013326][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 1921.138946][ T43] bridge_slave_0: left allmulticast mode [ 1921.138988][ T43] bridge_slave_0: left promiscuous mode [ 1921.139287][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 1921.316172][ T43] bridge_slave_1: left allmulticast mode [ 1921.316201][ T43] bridge_slave_1: left promiscuous mode [ 1921.316411][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 1921.387257][ T43] bridge_slave_0: left allmulticast mode [ 1921.387286][ T43] bridge_slave_0: left promiscuous mode [ 1921.387472][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 1921.397458][T20900] nbd: socks must be embedded in a SOCK_ITEM attr [ 1921.586108][ T43] bridge_slave_1: left allmulticast mode [ 1921.586138][ T43] bridge_slave_1: left promiscuous mode [ 1921.586345][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 1921.666855][ T43] bridge_slave_0: left allmulticast mode [ 1921.666884][ T43] bridge_slave_0: left promiscuous mode [ 1921.667107][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 1921.837641][T20432] udevd[20432]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1922.341123][ T4916] Bluetooth: hci4: command 0x0406 tx timeout [ 1922.412490][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1922.495106][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1922.562317][ T43] bond0 (unregistering): Released all slaves [ 1922.902183][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1922.983617][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1923.044589][ T43] bond0 (unregistering): Released all slaves [ 1923.313104][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1923.411972][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1923.493746][ T43] bond0 (unregistering): Released all slaves [ 1924.411103][T19667] Bluetooth: hci4: command 0x0406 tx timeout [ 1925.247447][T20919] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3460'. [ 1927.786563][T20919] nbd: socks must be embedded in a SOCK_ITEM attr [ 1929.625284][T20432] udevd[20432]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1929.659907][T20432] udevd[20432]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1930.301243][ T43] hsr_slave_0: left promiscuous mode [ 1930.321118][ T43] hsr_slave_1: left promiscuous mode [ 1930.321829][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1930.362020][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1930.634520][ T43] hsr_slave_0: left promiscuous mode [ 1930.671173][ T43] hsr_slave_1: left promiscuous mode [ 1930.671978][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1930.722326][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1930.865118][ T43] hsr_slave_0: left promiscuous mode [ 1930.904163][ T43] hsr_slave_1: left promiscuous mode [ 1930.905326][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1931.035905][ T4916] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 1931.035991][ T4916] CPU: 1 UID: 0 PID: 4916 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1931.036024][ T4916] Tainted: [L]=SOFTLOCKUP [ 1931.036033][ T4916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1931.036048][ T4916] Workqueue: hci4 hci_rx_work [ 1931.036079][ T4916] Call Trace: [ 1931.036089][ T4916] [ 1931.036102][ T4916] dump_stack_lvl+0xe8/0x150 [ 1931.036135][ T4916] sysfs_create_dir_ns+0x271/0x2a0 [ 1931.036172][ T4916] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1931.036205][ T4916] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1931.036243][ T4916] ? rt_spin_unlock+0x160/0x200 [ 1931.036275][ T4916] kobject_add_internal+0x631/0xd10 [ 1931.036313][ T4916] kobject_add+0x163/0x240 [ 1931.036346][ T4916] ? __pfx_kobject_add+0x10/0x10 [ 1931.036386][ T4916] ? get_device_parent+0x370/0x3a0 [ 1931.036417][ T4916] device_add+0x408/0xbb0 [ 1931.036448][ T4916] hci_conn_add_sysfs+0xd5/0x210 [ 1931.036486][ T4916] le_conn_complete_evt+0x10e6/0x16b0 [ 1931.036528][ T4916] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1931.036558][ T4916] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1931.036594][ T4916] ? lockdep_hardirqs_on+0x7a/0x110 [ 1931.036631][ T4916] ? skb_pull_data+0xfb/0x200 [ 1931.036668][ T4916] hci_le_conn_complete_evt+0x187/0x470 [ 1931.036703][ T4916] hci_event_packet+0x659/0xef0 [ 1931.036744][ T4916] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1931.036772][ T4916] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1931.036798][ T4916] ? __pfx_hci_event_packet+0x10/0x10 [ 1931.036833][ T4916] ? rt_spin_unlock+0x14f/0x200 [ 1931.036875][ T4916] ? hci_send_to_monitor+0xe2/0x590 [ 1931.036910][ T4916] hci_rx_work+0x3ee/0x1040 [ 1931.036942][ T4916] ? process_scheduled_works+0xa70/0x1860 [ 1931.036972][ T4916] process_scheduled_works+0xb5d/0x1860 [ 1931.037034][ T4916] ? __pfx_process_scheduled_works+0x10/0x10 [ 1931.037069][ T4916] ? assign_work+0x3d5/0x5e0 [ 1931.037100][ T4916] worker_thread+0xa53/0xfc0 [ 1931.037160][ T4916] kthread+0x388/0x470 [ 1931.037192][ T4916] ? __pfx_worker_thread+0x10/0x10 [ 1931.037216][ T4916] ? __pfx_kthread+0x10/0x10 [ 1931.037245][ T4916] ret_from_fork+0x514/0xb70 [ 1931.037275][ T4916] ? __pfx_ret_from_fork+0x10/0x10 [ 1931.037300][ T4916] ? __switch_to+0xc79/0x1410 [ 1931.037335][ T4916] ? __pfx_kthread+0x10/0x10 [ 1931.037368][ T4916] ret_from_fork_asm+0x1a/0x30 [ 1931.037418][ T4916] [ 1931.037480][ T4916] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1931.037579][ T4916] Bluetooth: hci4: failed to register connection device [ 1931.116173][T20941] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3463'. [ 1931.756657][T20941] nbd: socks must be embedded in a SOCK_ITEM attr [ 1932.717268][T16990] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1932.815402][T16990] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1932.956571][T16990] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1932.984485][T16990] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1933.020716][T16990] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1933.062601][T14747] Bluetooth: hci4: command 0x0406 tx timeout [ 1934.801421][ T4916] ================================================================== [ 1934.801444][ T4916] BUG: KASAN: slab-use-after-free in l2cap_connect_cfm+0x902/0x1560 [ 1934.801487][ T4916] Read of size 8 at addr ffff88803b393500 by task kworker/u9:1/4916 [ 1934.801507][ T4916] [ 1934.801525][ T4916] CPU: 1 UID: 0 PID: 4916 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1934.801558][ T4916] Tainted: [L]=SOFTLOCKUP [ 1934.801567][ T4916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1934.801583][ T4916] Workqueue: hci1 hci_rx_work [ 1934.801607][ T4916] Call Trace: [ 1934.801616][ T4916] [ 1934.801627][ T4916] dump_stack_lvl+0xe8/0x150 [ 1934.801655][ T4916] print_address_description+0x55/0x1e0 [ 1934.801719][ T4916] ? l2cap_connect_cfm+0x902/0x1560 [ 1934.801747][ T4916] print_report+0x58/0x70 [ 1934.801771][ T4916] kasan_report+0x117/0x150 [ 1934.801872][ T4916] ? l2cap_connect_cfm+0x902/0x1560 [ 1934.801915][ T4916] l2cap_connect_cfm+0x902/0x1560 [ 1934.801949][ T4916] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1934.801977][ T4916] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1934.802014][ T4916] ? lockdep_hardirqs_on+0x7a/0x110 [ 1934.802048][ T4916] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1934.802082][ T4916] ? mutex_lock_nested+0x152/0x1d0 [ 1934.802109][ T4916] ? hci_connect_cfm+0x2c/0x140 [ 1934.802135][ T4916] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1934.802165][ T4916] hci_connect_cfm+0x95/0x140 [ 1934.802193][ T4916] le_conn_complete_evt+0x1134/0x16b0 [ 1934.802226][ T4916] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1934.802254][ T4916] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1934.802288][ T4916] ? lockdep_hardirqs_on+0x7a/0x110 [ 1934.802322][ T4916] ? skb_pull_data+0xfb/0x200 [ 1934.802354][ T4916] hci_le_conn_complete_evt+0x187/0x470 [ 1934.802384][ T4916] hci_event_packet+0x659/0xef0 [ 1934.802418][ T4916] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1934.802447][ T4916] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1934.802472][ T4916] ? __pfx_hci_event_packet+0x10/0x10 [ 1934.802504][ T4916] ? rt_spin_unlock+0x14f/0x200 [ 1934.802536][ T4916] ? hci_send_to_monitor+0xe2/0x590 [ 1934.802567][ T4916] hci_rx_work+0x3ee/0x1040 [ 1934.802593][ T4916] ? process_scheduled_works+0xa70/0x1860 [ 1934.802619][ T4916] process_scheduled_works+0xb5d/0x1860 [ 1934.802657][ T4916] ? __pfx_process_scheduled_works+0x10/0x10 [ 1934.802684][ T4916] ? assign_work+0x3d5/0x5e0 [ 1934.802716][ T4916] worker_thread+0xa53/0xfc0 [ 1934.802754][ T4916] kthread+0x388/0x470 [ 1934.802782][ T4916] ? __pfx_worker_thread+0x10/0x10 [ 1934.802804][ T4916] ? __pfx_kthread+0x10/0x10 [ 1934.802834][ T4916] ret_from_fork+0x514/0xb70 [ 1934.802861][ T4916] ? __pfx_ret_from_fork+0x10/0x10 [ 1934.802885][ T4916] ? __switch_to+0xc79/0x1410 [ 1934.802919][ T4916] ? __pfx_kthread+0x10/0x10 [ 1934.802949][ T4916] ret_from_fork_asm+0x1a/0x30 [ 1934.802985][ T4916] [ 1934.802994][ T4916] [ 1934.803000][ T4916] Allocated by task 4916: [ 1934.803012][ T4916] kasan_save_track+0x3e/0x80 [ 1934.803032][ T4916] __kasan_kmalloc+0x93/0xb0 [ 1934.803052][ T4916] __kmalloc_cache_noprof+0x3a6/0x690 [ 1934.803106][ T4916] l2cap_chan_create+0x51/0x7a0 [ 1934.803136][ T4916] l2cap_sock_new_connection_cb+0x182/0x2e0 [ 1934.803195][ T4916] l2cap_connect_cfm+0x368/0x1560 [ 1934.803222][ T4916] hci_connect_cfm+0x95/0x140 [ 1934.803243][ T4916] le_conn_complete_evt+0x1134/0x16b0 [ 1934.803269][ T4916] hci_le_conn_complete_evt+0x187/0x470 [ 1934.803292][ T4916] hci_event_packet+0x659/0xef0 [ 1934.803310][ T4916] hci_rx_work+0x3ee/0x1040 [ 1934.803328][ T4916] process_scheduled_works+0xb5d/0x1860 [ 1934.803349][ T4916] worker_thread+0xa53/0xfc0 [ 1934.803368][ T4916] kthread+0x388/0x470 [ 1934.803393][ T4916] ret_from_fork+0x514/0xb70 [ 1934.803425][ T4916] ret_from_fork_asm+0x1a/0x30 [ 1934.803450][ T4916] [ 1934.803456][ T4916] Freed by task 20940: [ 1934.803467][ T4916] kasan_save_track+0x3e/0x80 [ 1934.803487][ T4916] kasan_save_free_info+0x46/0x50 [ 1934.803514][ T4916] __kasan_slab_free+0x5c/0x80 [ 1934.803534][ T4916] kfree+0x1c5/0x6c0 [ 1934.803551][ T4916] l2cap_sock_cleanup_listen+0xf0/0x440 [ 1934.803580][ T4916] l2cap_sock_release+0x6e/0x270 [ 1934.803607][ T4916] sock_close+0xc3/0x240 [ 1934.803662][ T4916] __fput+0x461/0xa70 [ 1934.803750][ T4916] task_work_run+0x1d9/0x270 [ 1934.803779][ T4916] exit_to_user_mode_loop+0xed/0x480 [ 1934.803870][ T4916] do_syscall_64+0x33e/0xf80 [ 1934.803889][ T4916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1934.803937][ T4916] [ 1934.803943][ T4916] The buggy address belongs to the object at ffff88803b393000 [ 1934.803943][ T4916] which belongs to the cache kmalloc-2k of size 2048 [ 1934.803963][ T4916] The buggy address is located 1280 bytes inside of [ 1934.803963][ T4916] freed 2048-byte region [ffff88803b393000, ffff88803b393800) [ 1934.803986][ T4916] [ 1934.803993][ T4916] The buggy address belongs to the physical page: [ 1934.804005][ T4916] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803b397000 pfn:0x3b390 [ 1934.804028][ T4916] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1934.804047][ T4916] flags: 0x80000000000240(workingset|head|node=0|zone=1) [ 1934.804065][ T4916] page_type: f5(slab) [ 1934.804086][ T4916] raw: 0080000000000240 ffff88801a010000 ffffea0000bb8810 ffffea000182d210 [ 1934.804106][ T4916] raw: ffff88803b397000 0000000800080007 00000000f5000000 0000000000000000 [ 1934.804127][ T4916] head: 0080000000000240 ffff88801a010000 ffffea0000bb8810 ffffea000182d210 [ 1934.804146][ T4916] head: ffff88803b397000 0000000800080007 00000000f5000000 0000000000000000 [ 1934.804165][ T4916] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1934.804183][ T4916] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 1934.804195][ T4916] page dumped because: kasan: bad access detected [ 1934.804206][ T4916] page_owner tracks the page as allocated [ 1934.804214][ T4916] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5601, tgid 5601 (syz-executor), ts 98603594892, free_ts 98490761142 [ 1934.804253][ T4916] post_alloc_hook+0x231/0x280 [ 1934.804310][ T4916] get_page_from_freelist+0x27c8/0x2840 [ 1934.804357][ T4916] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1934.804383][ T4916] allocate_slab+0x77/0x660 [ 1934.804440][ T4916] refill_objects+0x33c/0x3d0 [ 1934.804465][ T4916] __pcs_replace_empty_main+0x373/0x720 [ 1934.804495][ T4916] __kmalloc_node_track_caller_noprof+0x60b/0x7e0 [ 1934.804519][ T4916] __alloc_skb+0x2c1/0x7d0 [ 1934.804545][ T4916] inet6_ifinfo_notify+0x70/0x120 [ 1934.804615][ T4916] addrconf_notify+0xca0/0x1050 [ 1934.804639][ T4916] notifier_call_chain+0x1ad/0x3d0 [ 1934.804665][ T4916] __dev_notify_flags+0x1a9/0x310 [ 1934.804704][ T4916] rtnl_newlink_create+0x657/0xb70 [ 1934.804749][ T4916] rtnl_newlink+0x166a/0x1bb0 [ 1934.804767][ T4916] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1934.804784][ T4916] netlink_rcv_skb+0x232/0x4b0 [ 1934.804852][ T4916] page last free pid 5599 tgid 5599 stack trace: [ 1934.804865][ T4916] __free_frozen_pages+0xfa6/0x10f0 [ 1934.804887][ T4916] __slab_free+0x252/0x2a0 [ 1934.804910][ T4916] qlist_free_all+0x99/0x100 [ 1934.804948][ T4916] kasan_quarantine_reduce+0x148/0x160 [ 1934.804976][ T4916] __kasan_slab_alloc+0x22/0x80 [ 1934.804997][ T4916] kmem_cache_alloc_node_noprof+0x22a/0x6e0 [ 1934.805018][ T4916] __alloc_skb+0x27d/0x7d0 [ 1934.805036][ T4916] netlink_ack+0x146/0xa50 [ 1934.805054][ T4916] netlink_rcv_skb+0x2b6/0x4b0 [ 1934.805073][ T4916] netlink_unicast+0x780/0x920 [ 1934.805127][ T4916] netlink_sendmsg+0x813/0xb40 [ 1934.805148][ T4916] __sys_sendto+0x67f/0x710 [ 1934.805167][ T4916] __x64_sys_sendto+0xde/0x100 [ 1934.805187][ T4916] do_syscall_64+0x15f/0xf80 [ 1934.805206][ T4916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1934.805227][ T4916] [ 1934.805233][ T4916] Memory state around the buggy address: [ 1934.805246][ T4916] ffff88803b393400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1934.805261][ T4916] ffff88803b393480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1934.805276][ T4916] >ffff88803b393500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1934.805288][ T4916] ^ [ 1934.805300][ T4916] ffff88803b393580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1934.805315][ T4916] ffff88803b393600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1934.805327][ T4916] ================================================================== [ 1934.805374][ T4916] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1934.805396][ T4916] CPU: 1 UID: 0 PID: 4916 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1934.805437][ T4916] Tainted: [L]=SOFTLOCKUP [ 1934.805447][ T4916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1934.805462][ T4916] Workqueue: hci1 hci_rx_work [ 1934.805486][ T4916] Call Trace: [ 1934.805497][ T4916] [ 1934.805508][ T4916] vpanic+0x56c/0xa60 [ 1934.805538][ T4916] ? __pfx_vpanic+0x10/0x10 [ 1934.805570][ T4916] panic+0xc5/0xd0 [ 1934.805597][ T4916] ? __pfx_panic+0x10/0x10 [ 1934.805624][ T4916] ? preempt_schedule_thunk+0x16/0x30 [ 1934.805658][ T4916] ? l2cap_connect_cfm+0x902/0x1560 [ 1934.805685][ T4916] ? preempt_schedule_thunk+0x16/0x30 [ 1934.805718][ T4916] ? l2cap_connect_cfm+0x902/0x1560 [ 1934.805746][ T4916] check_panic_on_warn+0x89/0xb0 [ 1934.805777][ T4916] ? l2cap_connect_cfm+0x902/0x1560 [ 1934.805806][ T4916] end_report+0x73/0x170 [ 1934.805830][ T4916] ? l2cap_connect_cfm+0x902/0x1560 [ 1934.805858][ T4916] kasan_report+0x128/0x150 [ 1934.805884][ T4916] ? l2cap_connect_cfm+0x902/0x1560 [ 1934.805917][ T4916] l2cap_connect_cfm+0x902/0x1560 [ 1934.805951][ T4916] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1934.805980][ T4916] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1934.806015][ T4916] ? lockdep_hardirqs_on+0x7a/0x110 [ 1934.806048][ T4916] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1934.806083][ T4916] ? mutex_lock_nested+0x152/0x1d0 [ 1934.806109][ T4916] ? hci_connect_cfm+0x2c/0x140 [ 1934.806133][ T4916] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1934.806163][ T4916] hci_connect_cfm+0x95/0x140 [ 1934.806190][ T4916] le_conn_complete_evt+0x1134/0x16b0 [ 1934.806223][ T4916] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1934.806251][ T4916] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1934.806286][ T4916] ? lockdep_hardirqs_on+0x7a/0x110 [ 1934.806320][ T4916] ? skb_pull_data+0xfb/0x200 [ 1934.806350][ T4916] hci_le_conn_complete_evt+0x187/0x470 [ 1934.806380][ T4916] hci_event_packet+0x659/0xef0 [ 1934.806403][ T4916] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1934.806438][ T4916] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1934.806462][ T4916] ? __pfx_hci_event_packet+0x10/0x10 [ 1934.806495][ T4916] ? rt_spin_unlock+0x14f/0x200 [ 1934.806529][ T4916] ? hci_send_to_monitor+0xe2/0x590 [ 1934.806560][ T4916] hci_rx_work+0x3ee/0x1040 [ 1934.806586][ T4916] ? process_scheduled_works+0xa70/0x1860 [ 1934.806611][ T4916] process_scheduled_works+0xb5d/0x1860 [ 1934.806647][ T4916] ? __pfx_process_scheduled_works+0x10/0x10 [ 1934.806671][ T4916] ? assign_work+0x3d5/0x5e0 [ 1934.806696][ T4916] worker_thread+0xa53/0xfc0 [ 1934.806734][ T4916] kthread+0x388/0x470 [ 1934.806763][ T4916] ? __pfx_worker_thread+0x10/0x10 [ 1934.806786][ T4916] ? __pfx_kthread+0x10/0x10 [ 1934.806825][ T4916] ret_from_fork+0x514/0xb70 [ 1934.806851][ T4916] ? __pfx_ret_from_fork+0x10/0x10 [ 1934.806876][ T4916] ? __switch_to+0xc79/0x1410 [ 1934.806909][ T4916] ? __pfx_kthread+0x10/0x10 [ 1934.806939][ T4916] ret_from_fork_asm+0x1a/0x30 [ 1934.806975][ T4916] [ 1934.807425][ T4916] Kernel Offset: disabled