last executing test programs: 20.745517427s ago: executing program 3 (id=4): socket$nl_route(0x10, 0x3, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x5cee313670d5fda3}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x65) socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000fcfeffff8500000013000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1805000000000000000000000000000085000000a8"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x95) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r3}, 0xc) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000100)={0x4}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r5, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x84) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1/file4\x00', &(0x7f0000000280), 0x804010, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@aname={'aname', 0x3d, '/dev/snd/midiC#D#\x00'}}]}}) close_range(r0, 0xffffffffffffffff, 0x0) 19.097920677s ago: executing program 1 (id=11): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x54, 0x800, 0x2, {0xfffd, 0x1}, {0x38, 0x2}, @const={0x0, {0x0, 0x0, 0x100}}}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80d02, 0x0) socket(0x2, 0x80805, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000300)={0x2be, 0x81, 0xffff8e34}, 0xc) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x100) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$caif_seqpacket(0x25, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x80, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) r4 = fcntl$getown(r2, 0x9) ioctl$sock_FIOGETOWN(r2, 0x8903, 0x0) tgkill(r4, 0x0, 0x1d) pipe2$watch_queue(0x0, 0x80) request_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='\x00', 0xfffffffffffffffc) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r5, 0x11, 0x2, 0x0, &(0x7f00000003c0)) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18.309017634s ago: executing program 0 (id=1): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$KVM_VCPU(&(0x7f00007a6000/0x2000)=nil, 0x930, 0x4, 0x4018831, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c0000001100050026bd7000feffffff07000000", @ANYRES32=r4, @ANYBLOB="00000000000000000c001a800800058004000380"], 0x2c}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) syz_io_uring_setup(0x72ae, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000040)={0xa35, 0x6, 0xffff, 0x3}, 0x8) sendto$inet(r5, &(0x7f0000000100)="ab", 0x34000, 0x2000c8d4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) 17.490646926s ago: executing program 1 (id=12): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB], 0x14}], 0x1, 0x0, 0x0, 0x84}, 0x4000300) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000140), 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c1400001e0a05010000000000000000070000000900020073797a31000000000900010073797a300000000000140380300000802c000180250001007bb0c03ce8ed22d039cce454fd98ae614b08a9f3d4ddf1f742d55995af"], 0x14b0}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000240)) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) ioctl$SNDCTL_SEQ_SYNC(r3, 0x5101) r4 = epoll_create1(0x80000) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r5, &(0x7f00000002c0)=""/130, 0x45) pselect6(0x40, &(0x7f0000000100)={0x0, 0x20, 0x0, 0x0, 0x800, 0x0, 0x2}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x5e1e, 0x2, @mcast1, 0xfffffffd}, 0x1c) r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r6, 0xc02c564a, &(0x7f0000000000)={0x0, 0x50424752}) 17.48541079s ago: executing program 3 (id=13): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x78, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\a\x00\x00'}]}, 0x18}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000500)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f910, 0xffffc081, '\x00', @p_u8=&(0x7f00000003c0)=0xc2}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x746}, 0x94) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) r3 = syz_open_dev$sndpcmp(0x0, 0xb, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000005580)=""/102392, 0x18ff8) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x2a, 0x107, 0xfffffffc, 0x0, {0x5, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 16.630288346s ago: executing program 0 (id=14): r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x200000001003, 0x2) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000000)={0x1, 0x1, @start={0x3ff, 0x1}}) 15.480609765s ago: executing program 0 (id=15): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x78, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\a\x00\x00'}]}, 0x18}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000500)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f910, 0xffffc081, '\x00', @p_u8=&(0x7f00000003c0)=0xc2}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x746}, 0x94) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) r3 = syz_open_dev$sndpcmp(0x0, 0xb, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000005580)=""/102392, 0x18ff8) setresuid(0xee00, 0x0, 0xee00) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x2a, 0x107, 0xfffffffc, 0x0, {0x5, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 15.476731975s ago: executing program 1 (id=17): socket$vsock_stream(0x28, 0x1, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x60442, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x2) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r8, 0x1, 0x0, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB='-c'], 0x5) write$cgroup_subtree(r6, &(0x7f00000001c0), 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x800, &(0x7f00000007c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="12000000810000000800000002"], 0x14) r10 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') read$FUSE(r10, &(0x7f00000040c0)={0x2020}, 0x2020) sendmsg$SOCK_DIAG_BY_FAMILY(r9, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="28000000140011020000000000000000280011"], 0x28}, 0x1, 0x0, 0x0, 0x24000841}, 0x0) readv(r9, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0xf000, 0x20000, 0x0, 0x0, 0x0, 0x0}, 0x50) 13.374854377s ago: executing program 2 (id=18): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000040)={0xa35, 0x6, 0xffff, 0x3}, 0x8) sendto$inet(r3, &(0x7f0000000100)="ab", 0x34000, 0x2000c8d4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) 12.52141892s ago: executing program 4 (id=5): socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_usb_connect(0x4, 0x2d, &(0x7f0000000180)=ANY=[], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@my=0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x3f, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000) 11.695474936s ago: executing program 2 (id=19): accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000040)=0x10, 0x800) syz_io_uring_setup(0x18d7, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x30, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_open_dev$I2C(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) bind$alg(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='io\x00') pread64(r2, &(0x7f0000000100)=""/48, 0x3c, 0x100000000004) 11.596721262s ago: executing program 3 (id=20): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20008005, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r5, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r6) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="090000000000000000000200000014000180"], 0x28}}, 0x0) sendmmsg$inet(r3, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000640)=@generic={0x1, 0x5, 0x8000000000000001}) writev(r4, 0x0, 0x0) sendto$inet(r3, &(0x7f00000000c0), 0x0, 0x6000000000000000, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a000040050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970000c00078008000640"], 0x58}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) 10.927097964s ago: executing program 0 (id=21): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="30000000400007012bbd700000000000017c00000400c28014000180060006000806000006001700843b0000040002"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54b24f15955565060608d70ff6e425a6c36af37b33facd22dc8a9c7044410d324b03e654156762092a62fea8f13441431ce248bfc73a6726ee61b5191d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d100a05e97ed3dcad452db6e08a991e2c78b057f55deebde6f0b11ce65700c0a1ad7946ff7c355db87566e3e5abb7a37b52876fd9fa194c09273031900"}) chdir(0x0) r4 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f0000000340)={0x2e06, 0x16, [{0x0, 0x1}, {0xc, 0x1}, {0x8}, {0x5, 0x1}, {0xe}, {0xb, 0x1}, {0x6}, {0xb}, {0x3}, {0x5, 0x1}, {0xd}, {0xa}, {0xf, 0x1}, {0x0, 0x1}, {0xb, 0x1}, {0x1}, {0xc}, {0x4}, {0x7, 0x1}, {0xf}, {0xa}, {0x4, 0x1}]}) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000100)={0x29, 0x4, 0x0, {0x5, 0x2, 0x1, 0x0, [0x0]}}, 0x29) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 10.580593585s ago: executing program 1 (id=22): socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_usb_connect(0x4, 0x2d, &(0x7f0000000180)=ANY=[], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@my=0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x3f, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000) 10.060446428s ago: executing program 2 (id=23): r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x24048014}, 0x4040000) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) get_mempolicy(0x0, &(0x7f0000000100), 0x200200004, &(0x7f0000ffb000/0x2000)=nil, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) semget$private(0x0, 0x3, 0x410) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000300), &(0x7f0000000340)=0x8) io_uring_register$IORING_UNREGISTER_RING_FDS(0xffffffffffffffff, 0x24, &(0x7f0000004700), 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x3) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, 0x0) ioctl$IOMMU_IOAS_COPY(r1, 0x3b83, &(0x7f0000000480)={0x28, 0x3, r2, r2, 0x400, 0x8000, 0x9}) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xf0f041}) 6.695118878s ago: executing program 4 (id=24): r0 = epoll_create1(0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_tables_targets\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)={0x1b}) poll(&(0x7f0000000000)=[{r0, 0xb009}, {r0, 0x8401}], 0x2, 0x8000008) 4.430833927s ago: executing program 0 (id=25): openat$ptp0(0xffffffffffffff9c, 0x0, 0x60442, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x54}, 0x28) r4 = fsmount(r3, 0x0, 0x2) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_subtree(r5, &(0x7f00000001c0)={[{0x2b, 'cpu'}]}, 0x5) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="12000000810000000800000002"], 0x14) syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') 4.414045393s ago: executing program 1 (id=26): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_getevents(0x0, 0x6, 0x6, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000180)={0x77359400}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000006c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x48}}, 0x0) 4.25875475s ago: executing program 3 (id=27): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$video(0x0, 0x101, 0xab02) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) write$P9_RSTATu(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x4d6) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000a, 0x204031, r1, 0xffffd000) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x800) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) userfaultfd(0x80000) 4.188825166s ago: executing program 4 (id=28): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) mount$9p_fd(0x0, 0x0, 0x0, 0x40, &(0x7f0000000180)) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000400)=[@in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x5}, @in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e21, 0x1, @local, 0xc46}], 0x58) shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002040)=""/102400, 0x19000) r4 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x200000001003, 0x2) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) ioctl$VIDIOC_DECODER_CMD(r4, 0xc0485660, &(0x7f0000000000)={0x1, 0x1, @start={0x3ff, 0x1}}) capset(&(0x7f0000000000)={0x20080522}, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x5608, 0x3) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 2.863199643s ago: executing program 0 (id=29): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r4 = dup(r3) ptrace$peeksig(0x4209, r0, 0x0, 0x0) ioctl$BLKROSET(r3, 0x125d, &(0x7f0000000000)=0x1000000010) ioctl$BLKRRPART(r4, 0x125f, 0x0) r5 = fsopen(&(0x7f0000000140)='f2fs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1, 0x20d}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000380)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x800, 0x2, 0x2, 0xb, 0x8, 0x100}, 0x20) 2.856449948s ago: executing program 2 (id=30): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$KVM_VCPU(&(0x7f00007a6000/0x2000)=nil, 0x930, 0x4, 0x4018831, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) socket$rxrpc(0x21, 0x2, 0xa) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000040)={0xa35, 0x6, 0xffff, 0x3}, 0x8) sendto$inet(r3, &(0x7f0000000100)="ab", 0x34000, 0x2000c8d4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) 1.142599349s ago: executing program 2 (id=31): accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000040)=0x10, 0x800) syz_io_uring_setup(0x18d7, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x30, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_open_dev$I2C(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) bind$alg(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='io\x00') pread64(r2, &(0x7f0000000100)=""/48, 0x3c, 0x100000000004) 946.966443ms ago: executing program 1 (id=32): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f0000"], 0x48) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4600, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000880)={0x0, 0x2, 0x1, [0x1, 0xeb5b, 0x6, 0x3, 0x100000000], [0x1, 0x3, 0x4, 0x2ca, 0x4, 0x200, 0x5, 0x5631, 0x7, 0x5, 0xfffffffffffffff7, 0xaf, 0x100000001, 0x7, 0x6e0, 0x86e, 0x2, 0x4, 0x1, 0x2, 0xfffffffffffffff7, 0x7c, 0x8, 0x4, 0x8, 0x157b84ad, 0x0, 0xa, 0x80000001, 0x9, 0x10001, 0xfffffffffffffff9, 0x5, 0x3, 0x1, 0x1, 0x1001, 0x1, 0x4, 0x3, 0x8, 0x7, 0xb, 0x3, 0x0, 0x9, 0x10000, 0x1000, 0x2, 0x8, 0x64, 0x280000000000, 0x2, 0x4, 0x7, 0xa, 0x3, 0x8, 0x2, 0x0, 0xa0000000000, 0xfffffffffffffff5, 0x7, 0x3, 0x176, 0x15f, 0x0, 0x5, 0x5, 0xfc72, 0x9, 0x7, 0x7, 0x2, 0x6, 0x81, 0x2, 0x4, 0x10000000100, 0x0, 0x9, 0x2ce1, 0x7f, 0x8, 0xeab5, 0xffffffffffffffff, 0xeffffffffffffffe, 0x6, 0x10001, 0x2b6, 0x1, 0x2e06ffea, 0x10001, 0xf2d5, 0xffffffffffffffff, 0x2b6b, 0x1, 0x4, 0x5ac, 0x7f95, 0x20000d13, 0x2c, 0x1ff, 0x1000, 0xd05, 0x1, 0x9e, 0x8000000000000000, 0x3, 0x0, 0x3, 0x5, 0xc, 0x6, 0x6281, 0x10, 0x7f, 0x7, 0x3, 0x3, 0x7]}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBSENT(r3, 0x4b49, 0xfffffffffffffffd) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fchmodat(r4, &(0x7f0000000180)='./file0\x00', 0x22) r5 = syz_open_dev$loop(&(0x7f0000000240), 0x6, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000280)={r6, 0x0, {0x0, 0x0, 0x0, 0x32, 0x4000000000001001, 0x0, 0x0, 0x1c, 0xc, "faf98317e5a1149989fc8dbe53ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0x3, 0x6]}}) ioctl$SNDCTL_DSP_GETODELAY(r6, 0x80045017, &(0x7f0000000100)) pipe2$9p(0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0xdc}}, 0x0) prctl$PR_GET_TSC(0x43, 0x0) sendmsg$NFT_MSG_GETRULE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newtaction={0x6c, 0x30, 0xb, 0x80000, 0x40, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x6b}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 887.137028ms ago: executing program 3 (id=33): socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$search(0xa, 0x0, &(0x7f0000000200)='trusted\x00', 0x0, 0x0) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000000100)=0x2, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000980)=@mangle={'mangle\x00', 0x2, 0x6, 0x510, 0x1b0, 0x290, 0x1b0, 0x450, 0x1b0, 0x680, 0x680, 0x680, 0x680, 0x680, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'syzkaller0\x00', 'macvtap0\x00', {}, {}, 0x0, 0x0, 0x7}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @HL={0x28}}, {{@ipv6={@mcast2, @dev, [0xff], [], 'veth1_macvtap\x00', 'erspan0\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1b0}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000000)=0x86, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001900010000000000000000000a000000fe000000f2ffffff"], 0x30}}, 0x804) 309.48893ms ago: executing program 4 (id=34): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) mount$9p_fd(0x0, 0x0, 0x0, 0x40, &(0x7f0000000180)) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000400)=[@in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x5}, @in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e21, 0x1, @local, 0xc46}], 0x58) shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002040)=""/102400, 0x19000) r4 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x200000001003, 0x2) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) ioctl$VIDIOC_DECODER_CMD(r4, 0xc0485660, &(0x7f0000000000)={0x1, 0x1, @start={0x3ff, 0x1}}) capset(&(0x7f0000000000)={0x20080522}, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x5608, 0x3) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x503, 0x2, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x14615, 0xef}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6=r5}]}}}]}, 0x38}}, 0x0) 0s ago: executing program 2 (id=35): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) mount$9p_fd(0x0, 0x0, 0x0, 0x40, &(0x7f0000000180)) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000400)=[@in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x5}, @in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e21, 0x1, @local, 0xc46}], 0x58) shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002040)=""/102400, 0x19000) r4 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x200000001003, 0x2) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) ioctl$VIDIOC_DECODER_CMD(r4, 0xc0485660, &(0x7f0000000000)={0x1, 0x1, @start={0x3ff, 0x1}}) capset(&(0x7f0000000000)={0x20080522}, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x5608, 0x3) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.168' (ED25519) to the list of known hosts. [ 82.087453][ T5830] cgroup: Unknown subsys name 'net' [ 82.226373][ T5830] cgroup: Unknown subsys name 'cpuset' [ 82.235693][ T5830] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.933579][ T5830] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.303912][ T5854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.315257][ T5858] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.325128][ T5855] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.343410][ T5855] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.354687][ T5858] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.363527][ T5855] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.371824][ T5858] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.381657][ T5855] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.391380][ T5858] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.400561][ T5858] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.410228][ T5858] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.418714][ T5858] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.426832][ T5858] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.428625][ T5862] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.441878][ T5862] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.451350][ T5855] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.461116][ T5862] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.462974][ T5858] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.469134][ T5862] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.478936][ T5855] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.488933][ T5862] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.497063][ T5855] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.504792][ T5855] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.508984][ T5864] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.522445][ T5855] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.386311][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 87.490623][ T5856] chnl_net:caif_netlink_parms(): no params data found [ 87.561887][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 87.625186][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 87.778117][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.785797][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.793437][ T5845] bridge_slave_0: entered allmulticast mode [ 87.802019][ T5845] bridge_slave_0: entered promiscuous mode [ 87.839994][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 87.861777][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.869663][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.877250][ T5845] bridge_slave_1: entered allmulticast mode [ 87.885288][ T5845] bridge_slave_1: entered promiscuous mode [ 88.029720][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.037949][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.045395][ T5856] bridge_slave_0: entered allmulticast mode [ 88.053403][ T5856] bridge_slave_0: entered promiscuous mode [ 88.112757][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.123846][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.131196][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.139243][ T5856] bridge_slave_1: entered allmulticast mode [ 88.147541][ T5856] bridge_slave_1: entered promiscuous mode [ 88.174779][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.182213][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.189766][ T5844] bridge_slave_0: entered allmulticast mode [ 88.198222][ T5844] bridge_slave_0: entered promiscuous mode [ 88.210661][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.234512][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.242204][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.249665][ T5842] bridge_slave_0: entered allmulticast mode [ 88.257995][ T5842] bridge_slave_0: entered promiscuous mode [ 88.274552][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.282411][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.289912][ T5844] bridge_slave_1: entered allmulticast mode [ 88.299032][ T5844] bridge_slave_1: entered promiscuous mode [ 88.336718][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.344546][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.352453][ T5842] bridge_slave_1: entered allmulticast mode [ 88.360602][ T5842] bridge_slave_1: entered promiscuous mode [ 88.418122][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.474941][ T5845] team0: Port device team_slave_0 added [ 88.485372][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.508161][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.515940][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.523843][ T5843] bridge_slave_0: entered allmulticast mode [ 88.532263][ T5843] bridge_slave_0: entered promiscuous mode [ 88.546233][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.554776][ T5864] Bluetooth: hci3: command tx timeout [ 88.565677][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.578433][ T5845] team0: Port device team_slave_1 added [ 88.604774][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.614320][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.622605][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.630089][ T5843] bridge_slave_1: entered allmulticast mode [ 88.637258][ T5864] Bluetooth: hci4: command tx timeout [ 88.638746][ T5864] Bluetooth: hci0: command tx timeout [ 88.650293][ T5864] Bluetooth: hci1: command tx timeout [ 88.656244][ T5854] Bluetooth: hci2: command tx timeout [ 88.662941][ T5843] bridge_slave_1: entered promiscuous mode [ 88.719664][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.775208][ T5856] team0: Port device team_slave_0 added [ 88.813755][ T5844] team0: Port device team_slave_0 added [ 88.822419][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.829895][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.856616][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.874056][ T5856] team0: Port device team_slave_1 added [ 88.902447][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.915954][ T5844] team0: Port device team_slave_1 added [ 88.923893][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.930961][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.958911][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.989334][ T5842] team0: Port device team_slave_0 added [ 88.999413][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.065043][ T5842] team0: Port device team_slave_1 added [ 89.107524][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.114681][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.143541][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.173955][ T5843] team0: Port device team_slave_0 added [ 89.182208][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.189208][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.215758][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.232699][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.240027][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.266906][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.304678][ T5843] team0: Port device team_slave_1 added [ 89.312561][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.319578][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.346773][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.405165][ T5845] hsr_slave_0: entered promiscuous mode [ 89.412603][ T5845] hsr_slave_1: entered promiscuous mode [ 89.421794][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.428915][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.455857][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.493454][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.500775][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.527513][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.556344][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.563763][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.589836][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.641127][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.648243][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.674873][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.707311][ T5856] hsr_slave_0: entered promiscuous mode [ 89.722182][ T5856] hsr_slave_1: entered promiscuous mode [ 89.734647][ T5856] debugfs: 'hsr0' already exists in 'hsr' [ 89.747384][ T5856] Cannot create hsr debugfs directory [ 89.849477][ T5844] hsr_slave_0: entered promiscuous mode [ 89.857178][ T5844] hsr_slave_1: entered promiscuous mode [ 89.864247][ T5844] debugfs: 'hsr0' already exists in 'hsr' [ 89.870109][ T5844] Cannot create hsr debugfs directory [ 89.932324][ T5842] hsr_slave_0: entered promiscuous mode [ 89.939935][ T5842] hsr_slave_1: entered promiscuous mode [ 89.947222][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 89.956084][ T5842] Cannot create hsr debugfs directory [ 90.122118][ T5843] hsr_slave_0: entered promiscuous mode [ 90.129506][ T5843] hsr_slave_1: entered promiscuous mode [ 90.137009][ T5843] debugfs: 'hsr0' already exists in 'hsr' [ 90.142870][ T5843] Cannot create hsr debugfs directory [ 90.631636][ T5854] Bluetooth: hci3: command tx timeout [ 90.712607][ T5854] Bluetooth: hci0: command tx timeout [ 90.713096][ T5855] Bluetooth: hci1: command tx timeout [ 90.718199][ T5854] Bluetooth: hci4: command tx timeout [ 90.730103][ T5864] Bluetooth: hci2: command tx timeout [ 90.763355][ T5845] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.782519][ T5845] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.795389][ T5845] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.810447][ T5845] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.912675][ T5856] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.927953][ T5856] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.960779][ T5856] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.976508][ T5856] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.083936][ T5844] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.107214][ T5844] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.142704][ T5844] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.167963][ T5844] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.288924][ T5842] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.316374][ T5842] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.339935][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.360573][ T5842] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.382717][ T5842] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.495570][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.543130][ T5843] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.555312][ T5843] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.570198][ T5843] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.591084][ T1016] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.598941][ T1016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.617282][ T5843] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.662594][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.686069][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.693402][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.793794][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.834251][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.845028][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.852243][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.886102][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.893416][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.997630][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.042415][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.049654][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.073897][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.134095][ T168] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.141386][ T168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.156172][ T864] cfg80211: failed to load regulatory.db [ 92.189201][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.261008][ T168] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.268306][ T168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.338093][ T168] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.345430][ T168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.415979][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.526648][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.589631][ T1016] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.596857][ T1016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.642335][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.657740][ T1016] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.664995][ T1016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.711553][ T5855] Bluetooth: hci3: command tx timeout [ 92.793711][ T5864] Bluetooth: hci2: command tx timeout [ 92.800327][ T5852] Bluetooth: hci4: command tx timeout [ 92.806596][ T5854] Bluetooth: hci0: command tx timeout [ 92.807396][ T5855] Bluetooth: hci1: command tx timeout [ 92.866145][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.056680][ T5845] veth0_vlan: entered promiscuous mode [ 93.087829][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.146017][ T5845] veth1_vlan: entered promiscuous mode [ 93.195770][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.255137][ T5856] veth0_vlan: entered promiscuous mode [ 93.346094][ T5856] veth1_vlan: entered promiscuous mode [ 93.355987][ T5845] veth0_macvtap: entered promiscuous mode [ 93.395347][ T5845] veth1_macvtap: entered promiscuous mode [ 93.460993][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.502946][ T5842] veth0_vlan: entered promiscuous mode [ 93.526087][ T5844] veth0_vlan: entered promiscuous mode [ 93.557589][ T5842] veth1_vlan: entered promiscuous mode [ 93.575236][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.604874][ T5844] veth1_vlan: entered promiscuous mode [ 93.623131][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.689436][ T5856] veth0_macvtap: entered promiscuous mode [ 93.703291][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.716851][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.745472][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.755368][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.775147][ T5856] veth1_macvtap: entered promiscuous mode [ 93.929303][ T5844] veth0_macvtap: entered promiscuous mode [ 93.943549][ T5842] veth0_macvtap: entered promiscuous mode [ 93.955956][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.969624][ T5844] veth1_macvtap: entered promiscuous mode [ 94.006254][ T5842] veth1_macvtap: entered promiscuous mode [ 94.018962][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.074793][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.086842][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.101919][ T168] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.115149][ T168] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.144001][ T168] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.154217][ T168] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.214097][ T1016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.229539][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.237601][ T1016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.251213][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.292825][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.314371][ T5843] veth0_vlan: entered promiscuous mode [ 94.326671][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.370309][ T5845] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.412291][ T1016] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.438465][ T1016] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.450929][ T1016] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.494729][ T1016] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.506912][ T1016] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.525999][ T5843] veth1_vlan: entered promiscuous mode [ 94.577482][ T1016] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.591981][ T1016] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.708836][ T1016] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.801979][ T5855] Bluetooth: hci3: command tx timeout [ 94.872280][ T5855] Bluetooth: hci1: command tx timeout [ 94.872310][ T5854] Bluetooth: hci4: command tx timeout [ 94.878622][ T5855] Bluetooth: hci0: command tx timeout [ 94.885167][ T5864] Bluetooth: hci2: command tx timeout [ 94.934619][ T1016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.011072][ T1016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.395046][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.411953][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.499720][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.516559][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.743663][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.754174][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.774810][ T5843] veth0_macvtap: entered promiscuous mode [ 96.557127][ T5843] veth1_macvtap: entered promiscuous mode [ 96.591469][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.611778][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.973476][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.989722][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.360211][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.922464][ T5990] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 98.250674][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.064119][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.076120][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.116771][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.372238][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.509233][ T1171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.541414][ T1171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.103999][ T1118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.112517][ T1118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.247201][ T6044] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.254892][ T6044] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.321234][ T6044] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.329279][ T6044] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.888362][ T6053] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.896548][ T6053] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.243229][ T6053] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.255306][ T6053] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.038684][ T6057] vivid-004: disconnect [ 113.897238][ T6054] vivid-004: reconnect [ 115.278143][ T6070] mmap: syz.3.27 (6070) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 116.957455][ T6064] syzkaller0: entered promiscuous mode [ 116.969165][ T6064] syzkaller0: entered allmulticast mode [ 117.986229][ T6092] loop6: detected capacity change from 0 to 7 [ 118.052590][ T6094] netlink: 12 bytes leftover after parsing attributes in process `syz.1.32'. [ 118.101521][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 118.111325][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 118.274658][ T6095] syzkaller0: entered promiscuous mode [ 118.282328][ T6095] syzkaller0: entered allmulticast mode [ 118.507925][ T6075] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] SMP KASAN PTI [ 118.519950][ T6075] KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f] [ 118.528428][ T6075] CPU: 0 UID: 0 PID: 6075 Comm: syz.0.29 Not tainted syzkaller #0 PREEMPT(full) [ 118.537560][ T6075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 118.547639][ T6075] RIP: 0010:rwsem_mark_wake+0xfa/0x7c0 [ 118.553211][ T6075] Code: 01 00 74 08 4c 89 f7 e8 94 d9 8d 00 4c 89 74 24 10 4d 8b 26 4d 8d 74 24 18 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 75 06 00 00 41 83 3e 00 74 64 4c 89 ef be [ 118.572921][ T6075] RSP: 0000:ffffc90004d779a0 EFLAGS: 00010006 [ 118.579157][ T6075] RAX: 0000000000000003 RBX: 0000000000000000 RCX: dffffc0000000000 [ 118.587234][ T6075] RDX: 1ffff920009aef40 RSI: ffffffff8e1b1f01 RDI: ffffffff8c287200 [ 118.595374][ T6075] RBP: ffffc90004d77aa0 R08: 0000000000000003 R09: 0000000000000004 [ 118.603408][ T6075] R10: dffffc0000000000 R11: fffff520009aef50 R12: 0000000000000000 [ 118.611421][ T6075] R13: ffff888036f0f350 R14: 0000000000000018 R15: ffffc90004d77c20 [ 118.619442][ T6075] FS: 0000555570578500(0000) GS:ffff888125436000(0000) knlGS:0000000000000000 [ 118.628411][ T6075] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 118.635021][ T6075] CR2: 0000001b32310ff8 CR3: 0000000037f88000 CR4: 00000000003526f0 [ 118.643020][ T6075] Call Trace: [ 118.646325][ T6075] [ 118.649285][ T6075] ? __lock_acquire+0x6b5/0x2cf0 [ 118.654269][ T6075] ? __pfx_rwsem_mark_wake+0x10/0x10 [ 118.660002][ T6075] ? do_raw_spin_lock+0x12b/0x2f0 [ 118.665042][ T6075] rwsem_del_wake_waiter+0x25d/0x2e0 [ 118.670447][ T6075] rwsem_down_write_slowpath+0xa6f/0x1080 [ 118.676213][ T6075] ? rwsem_down_write_slowpath+0x4a3/0x1080 [ 118.682536][ T6075] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 118.688727][ T6075] ? futex_wake+0x4ac/0x580 [ 118.693302][ T6075] ? __pfx_futex_wait+0x10/0x10 [ 118.698286][ T6075] ? vm_mmap_pgoff+0x234/0x4f0 [ 118.703080][ T6075] down_write_killable+0x1eb/0x240 [ 118.708214][ T6075] ? __pfx_down_write_killable+0x10/0x10 [ 118.714043][ T6075] ? apparmor_mmap_file+0x197/0x3e0 [ 118.719293][ T6075] ? security_mmap_file+0x4df/0xa20 [ 118.724647][ T6075] vm_mmap_pgoff+0x234/0x4f0 [ 118.729258][ T6075] ? __se_sys_futex+0x3a8/0x450 [ 118.734117][ T6075] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 118.739425][ T6075] ? __pfx___se_sys_futex+0x10/0x10 [ 118.744824][ T6075] ? rcu_is_watching+0x15/0xb0 [ 118.749625][ T6075] ? ksys_mmap_pgoff+0xf3/0x760 [ 118.754524][ T6075] ? __x64_sys_mmap+0x7f/0x140 [ 118.759416][ T6075] do_syscall_64+0x14d/0xf80 [ 118.764015][ T6075] ? trace_irq_disable+0x3b/0x150 [ 118.769233][ T6075] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.775460][ T6075] ? clear_bhb_loop+0x40/0x90 [ 118.780251][ T6075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.786253][ T6075] RIP: 0033:0x7f2f4ab9c502 [ 118.790845][ T6075] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 118.811980][ T6075] RSP: 002b:00007ffce810a228 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 118.820576][ T6075] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2f4ab9c502 [ 118.828563][ T6075] RDX: 0000000000000000 RSI: 0000000000021000 RDI: 0000000000000000 [ 118.836634][ T6075] RBP: 0000000000020022 R08: 00000000ffffffff R09: 0000000000000000 [ 118.844696][ T6075] R10: 0000000000020022 R11: 0000000000000246 R12: 00007ffce810a390 [ 118.852688][ T6075] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 118.860673][ T6075] [ 118.863695][ T6075] Modules linked in: [ 118.867690][ T6075] ---[ end trace 0000000000000000 ]--- [ 118.873153][ T6075] RIP: 0010:rwsem_mark_wake+0xfa/0x7c0 [ 118.878833][ T6075] Code: 01 00 74 08 4c 89 f7 e8 94 d9 8d 00 4c 89 74 24 10 4d 8b 26 4d 8d 74 24 18 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 75 06 00 00 41 83 3e 00 74 64 4c 89 ef be [ 118.898624][ T6075] RSP: 0000:ffffc90004d779a0 EFLAGS: 00010006 [ 118.904783][ T6075] RAX: 0000000000000003 RBX: 0000000000000000 RCX: dffffc0000000000 [ 118.912876][ T6075] RDX: 1ffff920009aef40 RSI: ffffffff8e1b1f01 RDI: ffffffff8c287200 [ 118.920977][ T6075] RBP: ffffc90004d77aa0 R08: 0000000000000003 R09: 0000000000000004 [ 118.928979][ T6075] R10: dffffc0000000000 R11: fffff520009aef50 R12: 0000000000000000 [ 118.936978][ T6075] R13: ffff888036f0f350 R14: 0000000000000018 R15: ffffc90004d77c20 [ 118.944957][ T6075] FS: 0000555570578500(0000) GS:ffff888125436000(0000) knlGS:0000000000000000 [ 118.953898][ T6075] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 118.960618][ T6075] CR2: 0000001b32310ff8 CR3: 0000000037f88000 CR4: 00000000003526f0 [ 118.968721][ T6075] Kernel panic - not syncing: Fatal exception [ 118.975399][ T6075] Kernel Offset: disabled [ 118.979742][ T6075] Rebooting in 86400 seconds..