last executing test programs: 11m52.235487431s ago: executing program 1 (id=1692): mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x803, 0x2}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) shutdown(0xffffffffffffffff, 0x1) 11m51.916037487s ago: executing program 1 (id=1696): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = add_key(&(0x7f0000000440)='asymmetric\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) syz_open_dev$radio(0x0, 0x2, 0x2) r5 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x22000) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r5, 0xc0a85352, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)={'#! ', '', [{}, {}, {}, {0x20, '#! '}, {0x20, '127.0.0.1\x00'}, {0x20, '[%!'}, {0x20, '127.0.0.1\x00'}, {0x20, '\'\x00\x00'}, {0x20, '[\''}], 0xa, "9799ffca66d73151faf8de69698981faca34b1c9afbfc2d3ab8c23e0fd5ed5952fe57f6e250d6d1163046bbe224154fb9951dde67a56bf5f5a310710d3b7728ad5826bff0007160b4130b7a6d88f4756d9fa025224076a36d7739818cb2f625c16eead3b03475242895a2adf731d60868f83f8ebca8779c8af6d0768e10afe1f69c070bc72b6e9613f48f65ed7d305799b8b02eac13c757ef0693c2f2b686dfcf87844f8300b2d6802a9313ead27bc33dc9980cdd722a6f575"}, 0xe5) r6 = add_key$user(0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$reject(0x13, r6, 0x4, 0x8000000000000000, r4) socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071120f000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @cgroup_sock_addr=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$dri(0x0, 0x4, 0x10000) mount$9p_tcp(&(0x7f00000002c0), &(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000080), 0x8, &(0x7f0000000000)=ANY=[]) r7 = socket$kcm(0x2b, 0x1, 0x0) listen(r7, 0x6) setsockopt$sock_attach_bpf(r7, 0x1, 0xd, &(0x7f0000000080), 0x24) socket$inet_mptcp(0x2, 0x1, 0x106) close(r7) 11m50.111375931s ago: executing program 1 (id=1699): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r3}, 0x18) syz_pidfd_open(r0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2406c089}, 0x20000000) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, 0x0, 0x3000d041) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f700004e2000e2ffca1b1f0000000004c00e72f740805ed08a56231dbf9ed7815e3802000000033a0093b837dc6cc01e32efaec8c7a6ec08200800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 11m38.232321482s ago: executing program 1 (id=1721): renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x2641) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) 11m36.604199112s ago: executing program 1 (id=1724): openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000006, 0x28011, r1, 0x2f126000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_ethernet(0x82, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe78, 0x0, 0x0, 0x10, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r3, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write(r2, 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') r6 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x5452, &(0x7f0000000000)) r7 = syz_io_uring_setup(0x10d, &(0x7f0000000180)={0x0, 0x45888, 0x800, 0x0, 0x36c, 0x0, r1}, &(0x7f0000000040)=0x0, &(0x7f00000007c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) recvmsg$kcm(r6, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0x0) getdents64(r5, &(0x7f0000002f40)=""/4098, 0x1002) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000300)='msdos\x00', 0x5, 0x0) 11m35.955887694s ago: executing program 1 (id=1726): syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x418, 0x3d8, 0x3d8, 0x418, 0x3d8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @local, [0xff, 0xffffffff, 0x0, 0xff000000], [0xffffff00, 0xff000000], 'erspan0\x00', 'wlan0\x00', {}, {0xff}, 0x2b, 0x3, 0x3}, 0x0, 0x1a0, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [0x0, 0x0, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'team_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x886215f4d37bb4bb, 0x90, 0x1, 0x69}, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) unshare(0x480) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) capset(&(0x7f0000000080)={0x20071026}, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r4, 0x7}}, 0x48) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000100)=0x1, r6, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0xfffffffd, @empty, 0x5}, r6}}, 0x30) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="10000000000000000000000000000000000400"/28], 0x48) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f0000000680)={0x14, 0x88, 0xfa00, {r9, 0x1c, 0x0, @in6={0xa, 0x4e23, 0x0, @empty, 0x4194}}}, 0x90) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e20, 0x6, @remote, 0x9}}, [0xbda, 0x40005, 0x6, 0xffffffffffffffff, 0x10001, 0x0, 0x8, 0x1, 0x80000001, 0x0, 0x1ff, 0x0, 0x0, 0x5, 0xfff]}, &(0x7f0000000000)=0x100) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYRES16=r7, @ANYBLOB="f0952001f46c773a85c5a45c70f8940939649830b943bc33b7119d4600b403891a63ad716d55e00968f75e47c05a8aca4be81a621110c2d72dfcc7900df7bfa91af2310c174878c3b0ff6defd9c32c121c4054bd208a29fee91faf018e7c0870899545da9f85a3044907aa09a8d793df85b476e69d2a52730585cdbaaffabe3d18ec5570f8775d3a49402b7ca1bccf9d6bcea6", @ANYRES64=r8, @ANYRES16=r7, @ANYRES8, @ANYRESOCT=r8], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r8) 11m33.768170228s ago: executing program 32 (id=1726): syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x418, 0x3d8, 0x3d8, 0x418, 0x3d8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @local, [0xff, 0xffffffff, 0x0, 0xff000000], [0xffffff00, 0xff000000], 'erspan0\x00', 'wlan0\x00', {}, {0xff}, 0x2b, 0x3, 0x3}, 0x0, 0x1a0, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [0x0, 0x0, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'team_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x886215f4d37bb4bb, 0x90, 0x1, 0x69}, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) unshare(0x480) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) capset(&(0x7f0000000080)={0x20071026}, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r4, 0x7}}, 0x48) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000100)=0x1, r6, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0xfffffffd, @empty, 0x5}, r6}}, 0x30) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="10000000000000000000000000000000000400"/28], 0x48) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f0000000680)={0x14, 0x88, 0xfa00, {r9, 0x1c, 0x0, @in6={0xa, 0x4e23, 0x0, @empty, 0x4194}}}, 0x90) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e20, 0x6, @remote, 0x9}}, [0xbda, 0x40005, 0x6, 0xffffffffffffffff, 0x10001, 0x0, 0x8, 0x1, 0x80000001, 0x0, 0x1ff, 0x0, 0x0, 0x5, 0xfff]}, &(0x7f0000000000)=0x100) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYRES16=r7, @ANYBLOB="f0952001f46c773a85c5a45c70f8940939649830b943bc33b7119d4600b403891a63ad716d55e00968f75e47c05a8aca4be81a621110c2d72dfcc7900df7bfa91af2310c174878c3b0ff6defd9c32c121c4054bd208a29fee91faf018e7c0870899545da9f85a3044907aa09a8d793df85b476e69d2a52730585cdbaaffabe3d18ec5570f8775d3a49402b7ca1bccf9d6bcea6", @ANYRES64=r8, @ANYRES16=r7, @ANYRES8, @ANYRESOCT=r8], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r8) 9m30.433314952s ago: executing program 2 (id=1942): r0 = socket(0x2, 0x3, 0xff) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @remote}, 0x10) sendmmsg(r0, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="76cd0546c9a91422c8e329ac", 0xc}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x10, 0x1, 0x25}], 0x10}}], 0x2, 0x20006000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = gettid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffd, 0x0, 0x4) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f0000000040)=0x1e) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) io_uring_enter(0xffffffffffffffff, 0x7f33, 0x7c5b, 0x0, 0x0, 0xfffffe36) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_ABSBIT(r5, 0x40045567, 0x2) ioctl$USBDEVFS_RELEASE_PORT(r5, 0x80045519, &(0x7f0000000980)=0xfff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r6) sendmsg$NET_DM_CMD_START(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r7, 0x1}, 0x14}}, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) 9m28.042048823s ago: executing program 2 (id=1946): openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) syz_open_dev$dri(0x0, 0x8, 0x200000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = open(0x0, 0x0, 0x0) mkdirat(r2, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x5000003a, r4, 0x0) mkdirat(r3, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r5, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', r5, &(0x7f00000002c0)='./file0\x00', 0x2) read$FUSE(0xffffffffffffffff, &(0x7f0000000f40)={0x2020}, 0x2020) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0xb, r1, &(0x7f0000000240)=""/112, 0x349b7f55) 9m26.227582089s ago: executing program 2 (id=1949): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x89901) r3 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) ftruncate(r3, 0x7000000) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0, r4, 0x0, 0x91}, 0x18) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000409bb36bf200000800", @ANYRES32=r6], 0x3c}}, 0x80) 9m22.678036442s ago: executing program 2 (id=1952): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="500000000201010400000000000000000a050001300002802c00018014000300fc02000000000000000000000000000114000400fe8000000000000000000000000000210c0019800800020006000000135b688d68f784170334019b9180e960741cecb2586300395c8341b97c16245947ef"], 0x50}, 0x1, 0x0, 0x0, 0x8800}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x5000) r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0xb) utimensat(r4, &(0x7f0000000040)='./file0\x00', &(0x7f0000000500)={{}, {0x0, 0x2710}}, 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r5, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') msgget$private(0x0, 0x101) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000140)={r4, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) 9m20.532572804s ago: executing program 2 (id=1957): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f9849675000028004000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x20000080) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 9m17.57547606s ago: executing program 2 (id=1963): openat$ptmx(0xffffffffffffff9c, 0x0, 0x240, 0x0) socket$kcm(0x2d, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2ded, 0xef92, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) readv(r2, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x400, 0x0) preadv(r4, &(0x7f0000001cc0), 0x0, 0x0, 0xa3) write(r3, &(0x7f0000000000)="fa", 0xfffffdef) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYBLOB], 0x50) close(r5) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r6, 0xffffffffffffffff, 0x0) 9m1.686006771s ago: executing program 33 (id=1963): openat$ptmx(0xffffffffffffff9c, 0x0, 0x240, 0x0) socket$kcm(0x2d, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2ded, 0xef92, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) readv(r2, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x400, 0x0) preadv(r4, &(0x7f0000001cc0), 0x0, 0x0, 0xa3) write(r3, &(0x7f0000000000)="fa", 0xfffffdef) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYBLOB], 0x50) close(r5) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r6, 0xffffffffffffffff, 0x0) 7m35.630163865s ago: executing program 5 (id=2130): creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x1) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="1709000000000000000001000000050007000000000008000900fffffffe060002003f00000008000a000100000008001800ac1414aa080019", @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRES16=r1], 0x58}}, 0x400c094) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbff}, 0x94) write$qrtrtun(0xffffffffffffffff, &(0x7f0000000300), 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r6 = dup(r5) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r8) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r9, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 7m34.05765001s ago: executing program 5 (id=2133): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mknodat$null(0xffffffffffffff9c, 0x0, 0x1, 0x103) timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000380)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000100)="23000000010007", 0x7) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{0x0}], 0x1) r3 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r3, 0x0, 0x13, &(0x7f0000000280)=0x7, 0x4) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) r4 = syz_open_dev$video(0x0, 0x485, 0x40000) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000080)=0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) 7m32.025569433s ago: executing program 5 (id=2136): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r0, &(0x7f00000004c0)=""/57, 0x39) 7m31.862849185s ago: executing program 5 (id=2137): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) fchmod(r2, 0x82) socket$packet(0x11, 0x2, 0x300) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) pselect6(0x40, &(0x7f0000000000)={0x6, 0x2, 0x8000000000000000, 0x0, 0x2, 0x0, 0x100, 0x10001003}, 0x0, &(0x7f00000002c0)={0x3ff, 0x8, 0x1000000000, 0x689, 0x2, 0x3ffffffffd, 0x2, 0x7}, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x2}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x33}, 0x94) 7m30.784751422s ago: executing program 5 (id=2139): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x89901) r3 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) ftruncate(r3, 0x7000000) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0, r4, 0x0, 0x91}, 0x18) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00', @ANYRES16=r7, @ANYBLOB="01000000000000409bb36bf2000008000300", @ANYRES32=r6], 0x3c}}, 0x80) 7m29.752191704s ago: executing program 5 (id=2143): getpid() socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) listen(0xffffffffffffffff, 0xffffffff) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x7) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCFLSH(r1, 0x400455c8, 0x2) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) socket$kcm(0x10, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)="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", 0x6a6}], 0x1) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) ptrace(0x10, 0x1) 7m13.128056944s ago: executing program 34 (id=2143): getpid() socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) listen(0xffffffffffffffff, 0xffffffff) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x7) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCFLSH(r1, 0x400455c8, 0x2) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) socket$kcm(0x10, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)="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", 0x6a6}], 0x1) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) ptrace(0x10, 0x1) 3m36.62014913s ago: executing program 6 (id=2551): socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x1370, &(0x7f00000000c0)={0x0, 0x49fa, 0x10, 0x0, 0x4e}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}) io_uring_enter(r1, 0x47f6, 0x6ee0, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x1, 0x39d}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x10, 0x3c11a80151415fd4, @fd_index=0x1, 0x1, &(0x7f0000000540)=[{0x0}], 0x1, 0x1, 0x1, {0x2}}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000c80)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f0000002080)={0x4, 0x4, {0x8, @struct={0x5, 0x1}, 0x0, 0x80, 0x1, 0xb468, 0xffffffffffffffff, 0x81, 0x0, @usage=0xb732, 0x10000, 0x8, [0x40, 0x8, 0x4, 0x9, 0x1, 0x2]}, {0x0, @usage=0xa, r7, 0x7, 0x7, 0x1, 0x1, 0x9, 0x10, @usage=0x3, 0x0, 0x6, [0x0, 0x1, 0xfff, 0x1, 0xfffffffffffffffd, 0x6]}, {0x40, @struct={0x7, 0x3}, 0x0, 0x7, 0x8000000000000001, 0x58213437, 0x5, 0x7, 0xc0, @usage=0x87, 0xffffb886, 0x7, [0x61, 0x2, 0x2, 0xffffffffffff4f47, 0x8, 0xfffffffffffffff8]}, {0xd, 0x3, 0x7}}) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x4000000, 0x61, 0x11, 0x70}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) ioctl$KDFONTOP_SET(r8, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x1c, 0x401b, 0xfe, &(0x7f00000000c0)="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"}) io_uring_enter(r4, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 3m35.337846732s ago: executing program 6 (id=2557): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000100)={0x0, 0x3322, 0x1, "ca"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000000c0)={0x0, 0x6, 0x1, 'j'}, 0x9) 3m33.436525874s ago: executing program 6 (id=2561): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f00000007c0)=""/160, 0xa0) writev(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/stat\x00', 0x0, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, &(0x7f00000000c0), 0x0) recvfrom$inet_nvme(r5, 0x0, 0x0, 0x2, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) syz_io_uring_setup(0x57a, &(0x7f00000005c0)={0x0, 0x114dd, 0x2, 0x2, 0x288}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0xffffffffffffffff], 0x1}) unshare(0x24020400) socket$phonet_pipe(0x23, 0x5, 0x2) 3m29.85950808s ago: executing program 6 (id=2564): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002240)=""/102392, 0x18ff8) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(0x0, r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="0200020100000000000000800b000087dfa0ce0f00000500004928bfdaa900ab440f639a037a80801a78836a08b75a61650e2874c984bd3a1b"], 0x3c}}, 0x24008040) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x301, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24000010}, 0x8000) r3 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f0000000580)={0x0, 0x2a, 0x80, 0x20203843, 0x3, [0x2], [0x80ffff], [], [0x0, 0x8000000000000000]}) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r5) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x1000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r9, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r7}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYRES32=r10, @ANYBLOB="0000000000000000b7080000200000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100"], 0x0, 0x5, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, r8}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="071800000000000000e70500000008000300", @ANYRES32=r11, @ANYBLOB="0800050009000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x7c, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x51, 0xe, {{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @random=0x8, 0x1, @val, @void, @val={0x3, 0x1, 0x84}, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x2, 0x0, 0x7, 0x0, {0x6, 0x2, 0x0, 0xbc}, 0x400, 0x3, 0x9}}, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x4}], @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) ioctl$SG_NEXT_CMD_LEN(r4, 0x2283, &(0x7f0000000080)=0xe1) ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f0000000040)=0x2) 3m28.159211016s ago: executing program 6 (id=2568): bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x24004800}, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x8, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x38}}, 0x0) 3m25.409292706s ago: executing program 6 (id=2572): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) dup3(0xffffffffffffffff, r0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000019300), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000007c0)={0xa, 0x2, 0x0, @empty, 0x80000001}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x8}, 0x1c) 3m9.420916445s ago: executing program 35 (id=2572): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) dup3(0xffffffffffffffff, r0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000019300), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000007c0)={0xa, 0x2, 0x0, @empty, 0x80000001}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x8}, 0x1c) 3m9.064027953s ago: executing program 3 (id=2597): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x41, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) sendto$inet6(r0, &(0x7f0000000700)='\x00', 0x1, 0x4090, 0x0, 0x0) writev(r0, &(0x7f0000001880)=[{&(0x7f0000001900)='P', 0x1}], 0x1) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1) 3m6.695847203s ago: executing program 3 (id=2598): r0 = socket(0x2, 0x3, 0xff) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @remote}, 0x10) sendmmsg(r0, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000000100)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x10, 0x1, 0x25}], 0x10}}], 0x2, 0x20006000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = gettid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_io_uring_setup(0x237, 0x0, 0x0, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffd, 0x0, 0x4) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f0000000040)=0x1e) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) io_uring_enter(r3, 0x7f33, 0x7c5b, 0x0, 0x0, 0xfffffe36) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_ABSBIT(r6, 0x40045567, 0x2) ioctl$USBDEVFS_RELEASE_PORT(r6, 0x80045519, &(0x7f0000000980)=0xfff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r7) sendmsg$NET_DM_CMD_START(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r8, 0x1}, 0x14}}, 0x0) ioctl$UI_DEV_CREATE(r6, 0x5501) 3m4.898449218s ago: executing program 3 (id=2601): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') lstat(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r0, &(0x7f0000000180)=0xfffffffa) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='::,:/', 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaa", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r5 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d7", 0x6, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) dup(r8) 3m3.551625376s ago: executing program 3 (id=2605): syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e8, 0x0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x418, 0x3d8, 0x3d8, 0x418, 0x3d8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @local, [0xff, 0xffffffff, 0x0, 0xff000000], [0xffffff00, 0xff000000], 'erspan0\x00', 'wlan0\x00', {}, {0xff}, 0x2b, 0x3, 0x3}, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [0x0, 0x0, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'team_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x886215f4d37bb4bb, 0x90, 0x1, 0x69}, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) unshare(0x480) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) capset(&(0x7f0000000080)={0x20071026}, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r4, 0x7}}, 0x48) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000100)=0x1, r6, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0xfffffffd, @empty, 0x5}, r6}}, 0x30) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="10000000000000000000000000000000000400"/28], 0x48) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f0000000680)={0x14, 0x88, 0xfa00, {r9, 0x1c, 0x0, @in6={0xa, 0x4e23, 0x0, @empty, 0x4194}}}, 0x90) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e20, 0x6, @remote, 0x9}}, [0xbda, 0x40005, 0x6, 0xffffffffffffffff, 0x10001, 0x0, 0x8, 0x1, 0x80000001, 0x0, 0x1ff, 0x0, 0x0, 0x5, 0xfff]}, &(0x7f0000000000)=0x100) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYRES16=r7, @ANYBLOB="f0952001f46c773a85c5a45c70f8940939649830b943bc33b7119d4600b403891a63ad716d55e00968f75e47c05a8aca4be81a621110c2d72dfcc7900df7bfa91af2310c174878c3b0ff6defd9c32c121c4054bd208a29fee91faf018e7c0870899545da9f85a3044907aa09a8d793df85b476e69d2a52730585cdbaaffabe3d18ec5570f8775d3a49402b7ca1bccf9d6bcea6", @ANYRES64=r8, @ANYRES16=r7, @ANYRES8, @ANYRESOCT=r8], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r8) 3m2.246862491s ago: executing program 3 (id=2606): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) keyctl$read(0xb, 0x0, &(0x7f00000007c0)=""/160, 0xa0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/stat\x00', 0x0, 0x0) preadv(r3, &(0x7f0000003780), 0x0, 0xffff, 0x0) 2m53.784008901s ago: executing program 3 (id=2617): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() waitid(0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_emit_ethernet(0x1f, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r4, 0x29, 0x5, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0) setsockopt$inet6_int(r4, 0x29, 0x4, &(0x7f0000000000)=0x6568, 0x4) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) 2m38.220489821s ago: executing program 36 (id=2617): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() waitid(0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_emit_ethernet(0x1f, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r4, 0x29, 0x5, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0) setsockopt$inet6_int(r4, 0x29, 0x4, &(0x7f0000000000)=0x6568, 0x4) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) 15.335895318s ago: executing program 7 (id=2866): openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000006, 0x28011, r1, 0x2f126000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_ethernet(0x82, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe78, 0x0, 0x0, 0x10, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r3, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write(r2, 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') r6 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x5452, &(0x7f0000000000)) r7 = syz_io_uring_setup(0x10d, &(0x7f0000000180)={0x0, 0x45888, 0x800, 0x0, 0x36c, 0x0, r1}, &(0x7f0000000040)=0x0, &(0x7f00000007c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) recvmsg$kcm(r6, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0x0) getdents64(r5, &(0x7f0000002f40)=""/4098, 0x1002) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000300)='msdos\x00', 0x5, 0x0) 13.549758472s ago: executing program 7 (id=2868): syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000061199c000000e7ff9400000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000300)={0x2, @pix_mp={0x7e, 0x0, 0x34324152, 0x4, 0x0, [{0x0, 0xf}, {0x20010}, {}, {0x1000000}, {0x3}, {0x2fe}, {0x0, 0x7ff}], 0xf, 0x0, 0x0, 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000004c00)=""/102392, 0x18ff8) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x0, 0x0, 'none\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x0, 0x0, 0xfffffffc}, 0x2c) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000280)={0x4, 0x1, 0x1, 0x93}, 0x10) setsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000080), 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'sit0\x00', 0x0}) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x7, @empty, 0x3aa7}, @ib={0x1b, 0xffff, 0x0, {}, 0x0, 0xfffffffffffffffc, 0x6}}}, 0x118) 12.811940631s ago: executing program 7 (id=2871): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x3f}, @void, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008001}, 0x814) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) fsopen(0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a78000000060a010400000000000000000200000038000480340001800a0001006d617463680000002400028008000100756470000e0003007acc6338a90000b03bd9000008000240000000000900010073797a30000000000900020073797a320000000014000580"], 0xa0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x402}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000000c0)='%pI4 \x00'}, 0x20) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r4}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40000000e, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000000)={0x3a, 0x2, 0x457f1c9146f8f874, "464905e100000000000000007f00", 0xb5315241}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x401, 0x70bd2c, 0x1800, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x8200}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0xa10d}, @IFLA_MACSEC_REPLAY_PROTECT={0x5, 0xc, 0x5}, @IFLA_MACSEC_INC_SCI={0x5, 0x9, 0xa}, @IFLA_MACSEC_ENCRYPT={0x5, 0x7, 0x10}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 12.300202552s ago: executing program 7 (id=2872): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0x800) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CAP_HYPERV_SYNIC2(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) r1 = syz_open_procfs(0x0, 0x0) r2 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x0, 0x10100}, 0x0, 0x0) io_uring_enter(r2, 0x207a98, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) getdents(r1, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettaction={0x20, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}}, 0x0) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r5, 0xfffffffffffffffe, r5, 0x1) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x4044840) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x40040, 0x0) 7.310828353s ago: executing program 4 (id=2879): syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000061199c000000e7ff9400000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000300)={0x2, @pix_mp={0x7e, 0x0, 0x34324152, 0x4, 0x0, [{0x0, 0xf}, {0x20010}, {}, {0x1000000}, {0x3}, {0x2fe}, {0x0, 0x7ff}], 0xf, 0x0, 0x0, 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000004c00)=""/102392, 0x18ff8) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x0, 0x0, 'none\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x0, 0x0, 0xfffffffc}, 0x2c) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000280)={0x4, 0x1, 0x1, 0x93}, 0x10) setsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000080), 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'sit0\x00', 0x0}) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x7, @empty, 0x3aa7}, @ib={0x1b, 0xffff, 0x0, {}, 0x0, 0xfffffffffffffffc, 0x6}}}, 0x118) 6.259189347s ago: executing program 4 (id=2882): renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x2641) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) 5.23445786s ago: executing program 7 (id=2883): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) dup3(0xffffffffffffffff, r0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000019300), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000007c0)={0xa, 0x2, 0x0, @empty, 0x80000001}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x8}, 0x1c) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4}, 0xe) listen(r3, 0xffffffff) 5.197458963s ago: executing program 4 (id=2884): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) sendmmsg(0xffffffffffffffff, &(0x7f000001c600)=[{{&(0x7f0000000340)=@ll={0x11, 0x5, 0x0, 0x1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}, 0x80, &(0x7f00000019c0)=[{&(0x7f000001c240)="4a70f1bb6401bc1f6ccfd7ac53b651b70938cde457db6cc68aa531c0c973f65a82bcbbb687a6158af8eb76663e088afada149eb3370e7a140edca1129ec6fb3ebd43b19099d96a959739a5c0ff6bce96cc03b65c36ae9eff86c747ebf2b037f13e56a5d0f0ce4497f0f74c5b34a6abfa8de1dc938a3255db58b967cd5f6072f7caebe0c9bed44d32938aa3087a059eb70789c854f02c1b86912ec9a21ad9fb56a1bcfa33f966e98bc61c89a40a29d6d103d57833781ea9418981333bfe896187aa9295019a1ffb4ecce743c024b18f57a7f680624db6000787334586266d7ee750b86343a88895c9a6e60c3185", 0xed}, {&(0x7f000001c340)="758c11d27d28745cda93d91a2b258bddcaeae456a7420ce2189a107a1f5888138454edf01a008fa3baca4b5d24cab914c1ba811c8157fd6afcf0ecf69723fc93f9467bf3e07fc684b6bc96a17851029b3359b70707f3ee9eb290a5fb1b30d212f1eb4042c0d4b72f6f930b38697a64a3c982ea50631773eaa5819f6c8fb9424ce4262b44bbb302bc9a0f66", 0x8b}, {&(0x7f0000000600)="74dfad22e92ebf513062f7fdcd2d794489b1b1bbbff2e037fb686483257d8c0e88721cbb2973b90dd1afa60ff6501dd3825a757d52a767371abc5646", 0x3c}], 0x3}}, {{&(0x7f000001c400)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x80, &(0x7f0000001a00)=[{&(0x7f000001c480)="77038af30c2155d578dcc682f8caf2052ee9bd59fdeb68e3001ce2c457fde6e079c4015d3e3a93320d5251519488a3bdb2499ba3db9bdffb4a2da94a18781d846ef29f1adaf8d732d000d33f830d729071c299d7902b9faaec5c091a62a11dd8f36d3841bfda74f91ddb901141271dc78117902257843e803b8ad33b4e05ff6fc9fcfc5b46e0c9fa3e55cd929701adb6d8ee635b799f2a971d1d82e2a7a4437df424ff473f5feebb326ddb9666412bcfdefe90d64169df8613c5089fdcb2ead13efba81175a41135374ef44cd6213d3a653e3e99106bf4748347", 0xda}, {&(0x7f000001c580)="cc92a1094425e95aa45475d2176021580d5876edfae80054c4c1b01b4e4376acce0bb4a3a14f77958f964f499037f9e2b8cfbdf2c06c82c7cd42c7a64bb69e4038c274616278f0079b07a6", 0x4b}], 0x2}}], 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000004c0)={0x79, 0x0, 0x3}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000002540)={0x2000, 0xffff1000, 0x1, 0x358cfa5c6090f344, 0x87f2}) r2 = socket$key(0xf, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ppoll(&(0x7f0000000000)=[{r3, 0x8108}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000640)=0x10) mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000b, 0x8012, r3, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f00000001c0)=0x5) sendmsg$key(0xffffffffffffffff, &(0x7f00000002c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[], 0x80}}, 0x8040050) sendmmsg(r2, &(0x7f0000000300)=[{{&(0x7f0000000080)=@qipcrtr={0x2a, 0x3, 0x3fff}, 0x80, &(0x7f0000001740), 0x0, &(0x7f0000001800)=ANY=[@ANYBLOB="d8000000000000000e010000d6ba00009272d399157c6c002b3a5e40ec219886c22c7e23f1034b1468f902442c97561f2cf76ededa809d8d5f1bb0a197151bfa293a7c33ef14e866512bac1883eff309bb5ab328c5324ef6703296465fa71507276c16087736e85d91aef939b4167a0fbf14f2547e921f84e7c002016afe532d1d3f62d54387765cb321fb455909f24cdc2bc8958845bb6e52b603e45da47fb82b11f4e5417c58d89b28610fc14572e13e2ea8fbd57c326aca1578219680c89ef2c3d2def9ec54ebe16c6123f69be0447d00000000000000"], 0xd8}}], 0x1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) 5.127178188s ago: executing program 0 (id=2885): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@arm64={0xe, 0x7, 0x7, '\x00', 0x101}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.428112265s ago: executing program 0 (id=2886): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x41, &(0x7f0000000200)={0xa, 0x4e23, 0x10001, @loopback, 0xe}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) sendto$inet6(r0, &(0x7f0000000700)='\x00', 0x1, 0x4090, 0x0, 0x0) writev(r0, &(0x7f0000001880)=[{&(0x7f0000001900)='P', 0x1}], 0x1) writev(r0, &(0x7f00000003c0)=[{0x0}], 0x1) 4.132444188s ago: executing program 0 (id=2887): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f00000007c0)=""/160, 0xa0) writev(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/stat\x00', 0x0, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, &(0x7f00000000c0), 0x0) recvfrom$inet_nvme(r5, 0x0, 0x0, 0x2, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000040601020000000000000000020000020500010007000000c40e9d1680f29bfbdb698999759b6a826d9406af66d52fd0f62553a34de9f9ec2d384d95937d1ffef3886b81c75805ca6af2e4846d5c7286f92a3e54aff04412e5"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) syz_io_uring_setup(0x57a, 0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0xffffffffffffffff], 0x1}) unshare(0x24020400) socket$phonet_pipe(0x23, 0x5, 0x2) 4.010251788s ago: executing program 4 (id=2888): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002240)=""/102392, 0x18ff8) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24008040) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x301, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24000010}, 0x8000) r3 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f0000000580)={0x0, 0x2a, 0x80, 0x20203843, 0x3, [0x2], [0x80ffff], [], [0x0, 0x8000000000000000]}) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r5) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0) r9 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r9, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r7}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYRES32=r10, @ANYBLOB="0000000000000000b7080000200000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100"], 0x0, 0x5, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, r8}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="071800000000000000e70500000008000300", @ANYRES32=r11, @ANYBLOB="0800050009000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x7c, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x51, 0xe, {{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @random=0x8, 0x1, @val, @void, @val={0x3, 0x1, 0x84}, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x2, 0x0, 0x7, 0x0, {0x6, 0x2, 0x0, 0xbc}, 0x400, 0x3, 0x9}}, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x4}], @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) ioctl$SG_NEXT_CMD_LEN(r4, 0x2283, &(0x7f0000000080)=0xe1) ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f0000000040)=0x2) 3.139586098s ago: executing program 0 (id=2889): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x3f}, @void, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008001}, 0x814) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) fsopen(0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a78000000060a010400000000000000000200000038000480340001800a0001006d617463680000002400028008000100756470000e0003007acc6338a90000b03bd9000008000240000000000900010073797a30000000000900020073797a320000000014000580"], 0xa0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x402}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000000c0)='%pI4 \x00'}, 0x20) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r4}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40000000e, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000000)={0x3a, 0x2, 0x457f1c9146f8f874, "464905e100000000000000007f00", 0xb5315241}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x401, 0x70bd2c, 0x1800, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x8200}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0xa10d}, @IFLA_MACSEC_REPLAY_PROTECT={0x5, 0xc, 0x5}, @IFLA_MACSEC_INC_SCI={0x5, 0x9, 0xa}, @IFLA_MACSEC_ENCRYPT={0x5, 0x7, 0x10}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 2.871679429s ago: executing program 0 (id=2890): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20, 0x0, 0x4, {0x0, 0x0, 0x2}}, 0x0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0x7, 0x2}) 2.107205401s ago: executing program 7 (id=2891): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0x800) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CAP_HYPERV_SYNIC2(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) r1 = syz_open_procfs(0x0, 0x0) r2 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x0, 0x10100}, 0x0, 0x0) io_uring_enter(r2, 0x207a98, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) getdents(r1, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettaction={0x20, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}}, 0x0) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r5, 0xfffffffffffffffe, r5, 0x1) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x4044840) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x40040, 0x0) 1.627762509s ago: executing program 0 (id=2892): renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x2641) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) 1.196209714s ago: executing program 4 (id=2893): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getpgid(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_pts(0xffffffffffffffff, 0x800) ioctl$GIO_CMAP(r3, 0x4b70, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r4) mkdir(0x0, 0x0) pipe(0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292", 0xc) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000000)=0x3, 0xf, 0x0) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x403f, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7ffff040, 0x1200000000000000) 0s ago: executing program 4 (id=2894): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000100)={0x1, 0x0, 0x40, 0x10, 0x0, 0xfffffffd, 0x10, 0x800, 0x1, 0x9, 0x10, 0xa, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): hci5: unexpected cc 0x0c25 length: 249 > 3 [ 968.508435][ T4283] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 969.733574][T11245] xt_CT: You must specify a L4 protocol and not use inversions on it [ 970.274305][ T4339] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 970.564710][ T4278] Bluetooth: hci5: command 0x0409 tx timeout [ 970.945882][ T4339] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 971.194272][ T4339] usb 5-1: config 0 has no interface number 0 [ 971.221996][ T4339] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 971.236231][ T4339] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.246345][ T4339] usb 5-1: Product: syz [ 971.250536][ T4339] usb 5-1: Manufacturer: syz [ 971.255510][ T4339] usb 5-1: SerialNumber: syz [ 971.278757][ T4339] usb 5-1: config 0 descriptor?? [ 971.323573][T11230] chnl_net:caif_netlink_parms(): no params data found [ 971.496580][ T4339] dvb_usb_ec168: probe of 5-1:0.1 failed with error -32 [ 971.511463][ T4339] usb 5-1: USB disconnect, device number 6 [ 971.739383][T11267] [U] „ [ 971.745402][T11230] bridge0: port 1(bridge_slave_0) entered blocking state [ 971.752557][T11230] bridge0: port 1(bridge_slave_0) entered disabled state [ 972.492653][T11230] device bridge_slave_0 entered promiscuous mode [ 972.644427][ T4278] Bluetooth: hci5: command 0x041b tx timeout [ 973.265123][T11230] bridge0: port 2(bridge_slave_1) entered blocking state [ 973.272250][T11230] bridge0: port 2(bridge_slave_1) entered disabled state [ 973.285525][T11230] device bridge_slave_1 entered promiscuous mode [ 973.428708][T11230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 973.461729][T11281] tipc: Enabled bearer , priority 0 [ 973.486097][T11287] device syzkaller0 entered promiscuous mode [ 974.597587][ T4431] tipc: Node number set to 3218889289 [ 974.616279][T11230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 974.625484][T11300] xt_CT: You must specify a L4 protocol and not use inversions on it [ 974.674031][T11287] tipc: Resetting bearer [ 974.836895][ T4278] Bluetooth: hci5: command 0x040f tx timeout [ 975.665568][T11280] tipc: Resetting bearer [ 976.039809][T11280] tipc: Disabling bearer [ 976.318738][T11230] team0: Port device team_slave_0 added [ 976.386523][T11230] team0: Port device team_slave_1 added [ 976.538461][T11230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 976.707504][T11230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 976.983632][ T4283] Bluetooth: hci5: command 0x0419 tx timeout [ 977.204206][T11230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 977.275664][T11230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 977.282694][T11230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 978.462266][T11230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 980.634540][T11343] xt_CT: You must specify a L4 protocol and not use inversions on it [ 980.739204][T11230] device hsr_slave_0 entered promiscuous mode [ 980.827657][T11230] device hsr_slave_1 entered promiscuous mode [ 980.867957][T11230] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 980.904773][T11230] Cannot create hsr debugfs directory [ 980.936721][ T4353] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 982.976608][ T4278] Bluetooth: hci4: command 0x1003 tx timeout [ 982.991987][ T4283] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 984.238071][ T28] device hsr_slave_0 left promiscuous mode [ 984.254433][ T28] device hsr_slave_1 left promiscuous mode [ 984.363270][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 984.373360][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 984.418219][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 984.438591][ T28] device bridge_slave_1 left promiscuous mode [ 984.453156][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 984.634423][ T28] device bridge_slave_0 left promiscuous mode [ 984.640793][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 985.769706][ T28] device veth1_macvtap left promiscuous mode [ 985.776054][ T28] device veth0_macvtap left promiscuous mode [ 985.782205][ T28] device veth1_vlan left promiscuous mode [ 985.794173][ T28] device veth0_vlan left promiscuous mode [ 985.928431][T11398] xt_CT: You must specify a L4 protocol and not use inversions on it [ 988.232938][ T4887] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 989.413030][ T28] team0 (unregistering): Port device team_slave_1 removed [ 989.706647][ T28] team0 (unregistering): Port device team_slave_0 removed [ 989.793042][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 990.255488][ T4283] Bluetooth: hci4: command 0x1003 tx timeout [ 990.261962][ T4278] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 990.748662][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 991.783390][T11451] xt_CT: You must specify a L4 protocol and not use inversions on it [ 992.954709][T11467] 9pnet_virtio: no channels available for device 127.0.0.1 [ 992.979925][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.849125][T11456] syz.0.1886 (11456): drop_caches: 2 [ 994.517828][ T28] bond0 (unregistering): Released all slaves [ 994.843689][T11482] ptrace attach of "./syz-executor exec"[4267] was attempted by "./syz-executor exec"[11482] [ 995.090234][T11489] xt_CT: You must specify a L4 protocol and not use inversions on it [ 995.862862][T11490] trusted_key: encrypted_key: key user:syz not found [ 996.882606][T11506] 9pnet_virtio: no channels available for device 127.0.0.1 [ 998.058445][T11230] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 998.186943][T11230] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 998.198838][T11230] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 998.304451][ T41] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 998.337994][T11230] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 998.607575][ T41] usb 3-1: Using ep0 maxpacket: 8 [ 998.754433][ T41] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 998.815578][ T41] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 998.984810][ T41] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 999.051815][ T41] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 999.063021][ T41] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 999.076026][ T41] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 999.089581][ T41] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 999.097936][ T41] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 999.144397][ T41] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 999.175588][ T41] usb 3-1: string descriptor 0 read error: -22 [ 999.200244][ T41] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 999.221431][ T41] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.268432][ T41] adutux 3-1:168.0: interrupt endpoints not found [ 999.420301][T11230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 999.440271][T11230] 8021q: adding VLAN 0 to HW filter on device team0 [ 999.490125][T11230] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 999.500902][T11230] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 999.520760][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 999.533436][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 999.550645][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 999.562845][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 999.571656][ T4493] bridge0: port 1(bridge_slave_0) entered blocking state [ 999.578836][ T4493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 999.588009][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 999.597027][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 999.670493][ T4493] bridge0: port 2(bridge_slave_1) entered blocking state [ 999.677766][ T4493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1001.003836][ T41] usb 3-1: USB disconnect, device number 12 [ 1001.101458][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1001.253764][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1001.392369][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1001.577329][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1001.736988][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1001.891865][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1002.057886][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1002.231807][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1002.386454][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1002.510973][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1002.645546][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1002.787426][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1002.894656][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1004.275194][T11560] trusted_key: encrypted_key: key user:syz not found [ 1004.888856][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1004.905033][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1005.433407][T11230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1005.985195][T11566] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1911'. [ 1010.582697][T11619] trusted_key: encrypted_key: key user:syz not found [ 1012.984872][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1013.187024][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1014.007161][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1014.035293][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1014.130278][T11230] device veth0_vlan entered promiscuous mode [ 1014.145143][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1014.154972][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1014.175165][T11230] device veth1_vlan entered promiscuous mode [ 1014.257019][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1014.289770][T11645] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1014.309492][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1014.387896][T11230] device veth0_macvtap entered promiscuous mode [ 1014.432216][T11230] device veth1_macvtap entered promiscuous mode [ 1014.476341][T11230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1014.487769][T11230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1014.498571][T11230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1014.510338][T11230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1014.520790][T11230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1014.532765][T11230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1014.543186][T11230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1014.564615][T11230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1014.604039][T11230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1014.660134][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1014.691717][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1015.325390][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1015.484088][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1015.606992][T11230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1015.811623][T11230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1015.948503][T11230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1016.054768][T11230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1016.065517][T11230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1016.103781][T11230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1016.251323][T11230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1016.444335][T11230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1016.520086][T11230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1016.694231][ T4887] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1016.889531][ T4887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1016.953536][T11230] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.990537][T11230] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.041073][T11230] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.080526][T11230] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1018.597378][ T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1018.647411][ T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1018.736099][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1018.757174][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1018.797534][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1018.842719][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1019.192612][T11694] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1933'. [ 1019.271036][T11697] trusted_key: encrypted_key: key user:syz not found [ 1021.665606][T11713] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1935'. [ 1023.841900][T11725] ptrace attach of "./syz-executor exec"[4268] was attempted by ""[11725] [ 1027.524041][T11750] trusted_key: encrypted_key: key user:syz not found [ 1030.622963][T11762] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1030.955434][T11765] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1949'. [ 1035.227013][T11801] ptrace attach of "./syz-executor exec"[4266] was attempted by ""[11801] [ 1035.807821][T11808] trusted_key: encrypted_key: key user:syz not found [ 1036.477694][T11815] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1036.779587][T11818] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1962'. [ 1042.942818][T11871] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1043.752242][T11877] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1976'. [ 1044.569485][T11878] trusted_key: encrypted_key: key user:syz not found [ 1045.724700][T11897] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1981'. [ 1046.668035][T11895] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1050.193486][T11933] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1989'. [ 1050.204791][T11931] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1051.331283][T11947] trusted_key: encrypted_key: key user:syz not found [ 1051.808485][T11948] ptrace attach of "./syz-executor exec"[4268] was attempted by " [ 1052.781879][T11959] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1994'. [ 1054.631385][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1057.130133][ T4493] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.438091][ T4493] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.891001][T11994] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2000'. [ 1058.795246][ T4278] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1058.814429][ T4278] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1058.822747][ T4278] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1058.831110][ T4278] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1058.845127][ T4278] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1058.856455][ T4278] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1058.878466][ T4493] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.307416][ T4493] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.885750][ T4278] Bluetooth: hci2: command 0x0409 tx timeout [ 1062.731979][ T4493] tipc: Left network mode [ 1063.054189][ T4278] Bluetooth: hci2: command 0x041b tx timeout [ 1063.227444][T12043] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1063.289968][T11997] chnl_net:caif_netlink_parms(): no params data found [ 1064.532050][T12060] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2012'. [ 1064.981200][T11997] bridge0: port 1(bridge_slave_0) entered blocking state [ 1065.054569][T11997] bridge0: port 1(bridge_slave_0) entered disabled state [ 1065.124466][ T4278] Bluetooth: hci2: command 0x040f tx timeout [ 1065.134713][T11997] device bridge_slave_0 entered promiscuous mode [ 1065.192104][T11997] bridge0: port 2(bridge_slave_1) entered blocking state [ 1065.244422][T11997] bridge0: port 2(bridge_slave_1) entered disabled state [ 1065.252758][T11997] device bridge_slave_1 entered promiscuous mode [ 1065.708903][T11997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1065.751045][T11997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1066.549405][T11997] team0: Port device team_slave_0 added [ 1066.567341][T11997] team0: Port device team_slave_1 added [ 1067.226130][ T4278] Bluetooth: hci2: command 0x0419 tx timeout [ 1067.945646][T11997] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1068.013839][T11997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1068.295354][T11997] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1070.321636][T11997] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1070.364389][T11997] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1070.624142][T11997] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1071.744479][T12127] ptrace attach of "./syz-executor exec"[4268] was attempted by " [ 1072.167158][ T4493] device hsr_slave_0 left promiscuous mode [ 1073.837421][T12149] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1073.948779][ T4493] device hsr_slave_1 left promiscuous mode [ 1074.063713][ T4493] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1074.194860][ T4493] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1074.297514][ T4493] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1074.364258][ T4493] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1074.408908][ T4493] device bridge_slave_1 left promiscuous mode [ 1074.424720][ T4493] bridge0: port 2(bridge_slave_1) entered disabled state [ 1074.483114][ T4493] device bridge_slave_0 left promiscuous mode [ 1074.509624][ T4493] bridge0: port 1(bridge_slave_0) entered disabled state [ 1074.603287][ T4493] device veth1_macvtap left promiscuous mode [ 1074.613080][ T4493] device veth0_macvtap left promiscuous mode [ 1074.716141][T12156] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1075.148685][ T4493] device veth1_vlan left promiscuous mode [ 1075.154821][ T4493] device veth0_vlan left promiscuous mode [ 1082.760149][T12202] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1085.729953][ T4493] team0 (unregistering): Port device team_slave_1 removed [ 1086.059251][T12225] program syz.0.2048 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1086.709740][ T4493] team0 (unregistering): Port device team_slave_0 removed [ 1086.933143][ T4493] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1086.991477][ T4493] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1092.399160][ T4278] Bluetooth: hci5: command 0x0406 tx timeout [ 1093.154583][ T4493] bond0 (unregistering): Released all slaves [ 1093.890327][T11997] device hsr_slave_0 entered promiscuous mode [ 1093.937161][T11997] device hsr_slave_1 entered promiscuous mode [ 1093.972101][T11997] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1093.999027][T11997] Cannot create hsr debugfs directory [ 1094.230667][T12291] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1094.435716][T12280] Set syz0 is full, maxelem 0 reached [ 1094.632864][T11997] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1094.695339][T11997] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1094.735238][T11997] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1094.797029][T11997] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1095.127240][T11997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1095.170995][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1095.185307][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1095.223942][T11997] 8021q: adding VLAN 0 to HW filter on device team0 [ 1095.253509][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1095.272516][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1095.293262][ T4493] bridge0: port 1(bridge_slave_0) entered blocking state [ 1095.300491][ T4493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1095.415147][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1095.442851][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1095.479629][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1095.650198][ T4493] bridge0: port 2(bridge_slave_1) entered blocking state [ 1095.657522][ T4493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1096.407603][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1096.417283][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1096.476514][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1096.756886][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1096.875412][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1096.994468][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1097.013714][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1097.066549][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1097.091410][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1097.133220][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1097.157627][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1097.186928][T11997] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1099.662359][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1100.441736][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1101.994529][T11997] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1103.477347][T12385] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1104.544499][T12392] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1105.689907][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1105.830287][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1106.015252][T11997] device veth0_vlan entered promiscuous mode [ 1106.095270][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1106.131952][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1106.230560][T11997] device veth1_vlan entered promiscuous mode [ 1106.241185][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1106.270372][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1106.293592][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1106.486217][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1106.496352][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1106.901930][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1107.140105][T11997] device veth0_macvtap entered promiscuous mode [ 1107.169807][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1107.212871][T11997] device veth1_macvtap entered promiscuous mode [ 1107.369017][T11997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1107.424635][T11997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1107.476035][T11997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1107.594196][T12425] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1108.001803][T11997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.012275][T11997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1108.022925][T11997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.032893][T11997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1108.043444][T11997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.065725][T11997] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1108.074627][ T6567] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1108.121944][ T6567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1108.158581][T11997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1108.185310][T11997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.224292][T11997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1108.252618][T11997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.324614][T11997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1108.344175][T11997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.384178][T11997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1108.417255][T11997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.457986][T11997] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1108.484911][T11879] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1108.505249][T11879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1108.597135][T11997] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.636262][T11997] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.696758][T11997] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.765265][T11997] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1110.199585][ T4887] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1110.456744][ T4887] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1110.754305][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1110.856803][ T4484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1110.904164][ T4484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1111.874115][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1114.687586][T12472] wlan0 speed is unknown, defaulting to 1000 [ 1114.794798][T12472] wlan0 speed is unknown, defaulting to 1000 [ 1114.808219][T12472] wlan0 speed is unknown, defaulting to 1000 [ 1114.881205][T12472] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1115.044637][T12479] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1115.492261][T12472] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1115.849081][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.113350][T12488] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1117.132870][T12472] wlan0 speed is unknown, defaulting to 1000 [ 1117.681863][ T4278] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1117.693718][ T4278] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1117.702835][ T4278] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1117.712771][ T4278] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1117.721060][ T4278] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1117.730367][ T4278] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1117.788667][ T4484] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1118.180878][T12472] wlan0 speed is unknown, defaulting to 1000 [ 1118.250369][T12472] wlan0 speed is unknown, defaulting to 1000 [ 1118.578644][ T4484] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1118.708909][T12472] wlan0 speed is unknown, defaulting to 1000 [ 1118.728100][T12499] wlan0 speed is unknown, defaulting to 1000 [ 1118.818928][ T4484] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1118.853262][T12472] wlan0 speed is unknown, defaulting to 1000 [ 1118.999748][ T4484] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1119.764568][ T8287] Bluetooth: hci2: command 0x0409 tx timeout [ 1122.032955][T12545] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1122.429277][ T8287] Bluetooth: hci2: command 0x041b tx timeout [ 1124.637800][T12499] chnl_net:caif_netlink_parms(): no params data found [ 1124.808706][ T4283] Bluetooth: hci2: command 0x040f tx timeout [ 1124.898969][T12565] ieee802154 phy1 wpan1: encryption failed: -22 [ 1125.184554][T12499] bridge0: port 1(bridge_slave_0) entered blocking state [ 1125.241725][T12499] bridge0: port 1(bridge_slave_0) entered disabled state [ 1125.274738][T12499] device bridge_slave_0 entered promiscuous mode [ 1125.400017][T12499] bridge0: port 2(bridge_slave_1) entered blocking state [ 1126.004469][T12499] bridge0: port 2(bridge_slave_1) entered disabled state [ 1126.015679][T12499] device bridge_slave_1 entered promiscuous mode [ 1126.508021][T12499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1126.666108][T12499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1126.964416][ T4283] Bluetooth: hci2: command 0x0419 tx timeout [ 1128.287232][T12499] team0: Port device team_slave_0 added [ 1128.475318][ T4484] device hsr_slave_0 left promiscuous mode [ 1128.504397][ T4484] device hsr_slave_1 left promiscuous mode [ 1128.527286][ T4484] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1128.552947][ T4484] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1128.603248][ T4484] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1128.625953][ T4484] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1128.666103][ T4484] device bridge_slave_1 left promiscuous mode [ 1128.672418][ T4484] bridge0: port 2(bridge_slave_1) entered disabled state [ 1128.682627][T12601] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1128.754420][ T4484] device bridge_slave_0 left promiscuous mode [ 1128.760757][ T4484] bridge0: port 1(bridge_slave_0) entered disabled state [ 1129.039756][ T4484] device veth1_macvtap left promiscuous mode [ 1129.438475][T12612] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1129.571531][ T4484] device veth0_macvtap left promiscuous mode [ 1129.581524][ T4484] device veth1_vlan left promiscuous mode [ 1129.595380][ T4484] device veth0_vlan left promiscuous mode [ 1133.996152][T12640] [U] „ [ 1136.526999][ T4484] team0 (unregistering): Port device team_slave_1 removed [ 1136.713617][T12656] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1137.251840][ T4484] team0 (unregistering): Port device team_slave_0 removed [ 1138.686348][ T4484] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1139.921052][ T4484] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1140.894944][T12684] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1142.689973][ T4484] bond0 (unregistering): Released all slaves [ 1142.793059][T12700] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1143.273544][T12499] team0: Port device team_slave_1 added [ 1143.342132][T12499] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1143.352435][T12499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1143.387662][T12499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1143.411307][T12499] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1143.421324][T12499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1143.494227][T12499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1145.040588][T12708] [U] „ [ 1145.593642][T12499] device hsr_slave_0 entered promiscuous mode [ 1145.615295][T12499] device hsr_slave_1 entered promiscuous mode [ 1145.631822][T12499] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1145.640784][T12499] Cannot create hsr debugfs directory [ 1146.839674][T12729] ptrace attach of "./syz-executor exec"[11230] was attempted by " [ 1148.017894][T12745] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1148.343555][T12753] autofs4:pid:12753:autofs_fill_super: called with bogus options [ 1148.968964][T12755] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1151.297305][T12775] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2153'. [ 1151.306365][T12775] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2153'. [ 1154.046511][T12499] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1154.136381][T12499] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1154.286695][T12499] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1154.317504][T12499] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1157.232705][T12499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1157.358174][ T4718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1157.383940][ T4718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1157.450814][T12499] 8021q: adding VLAN 0 to HW filter on device team0 [ 1157.517459][T11879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1157.552398][T11879] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1157.737389][T12831] autofs4:pid:12831:autofs_fill_super: called with bogus options [ 1158.185883][T11879] bridge0: port 1(bridge_slave_0) entered blocking state [ 1158.193249][T11879] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1158.293194][T11879] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1158.347023][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1160.851976][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1160.896342][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 1160.903650][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1160.914734][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1161.320349][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1161.362442][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1162.445865][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1162.454865][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1162.590216][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1162.635253][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1162.665700][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1162.880032][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1163.399841][T12499] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1163.460828][T12499] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1163.471621][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1163.529322][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1164.906886][ T4283] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1164.917823][ T4283] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1164.928586][ T4283] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1164.937024][ T4283] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1164.948449][ T4283] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1164.957616][ T4283] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1165.034842][ T4484] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1165.108990][T12897] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1165.161865][ T4484] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1165.198995][T12889] wlan0 speed is unknown, defaulting to 1000 [ 1165.283748][ T4484] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1165.411207][ T4484] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1165.513534][T11879] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1165.549615][T11879] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1165.587607][T12499] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1167.044471][ T8287] Bluetooth: hci4: command 0x0409 tx timeout [ 1167.345214][T12889] chnl_net:caif_netlink_parms(): no params data found [ 1169.124887][ T8287] Bluetooth: hci4: command 0x041b tx timeout [ 1169.862145][T12889] bridge0: port 1(bridge_slave_0) entered blocking state [ 1169.906644][T12889] bridge0: port 1(bridge_slave_0) entered disabled state [ 1169.920464][T12889] device bridge_slave_0 entered promiscuous mode [ 1170.281214][T12889] bridge0: port 2(bridge_slave_1) entered blocking state [ 1170.638537][T12889] bridge0: port 2(bridge_slave_1) entered disabled state [ 1170.878747][T12889] device bridge_slave_1 entered promiscuous mode [ 1171.329214][ T8287] Bluetooth: hci4: command 0x040f tx timeout [ 1172.717942][T12889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1173.170261][T12889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1173.481690][ T8287] Bluetooth: hci4: command 0x0419 tx timeout [ 1175.923983][T12889] team0: Port device team_slave_0 added [ 1175.959795][T12889] team0: Port device team_slave_1 added [ 1175.991659][ T8287] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1176.002329][ T8287] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1176.014260][ T8287] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1176.023367][ T8287] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1176.031200][ T8287] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1176.038696][ T8287] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1176.261278][T13013] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1176.325333][T12889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1176.332488][T12889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1176.446594][T12889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1176.699000][T13005] wlan0 speed is unknown, defaulting to 1000 [ 1176.708119][T12889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1176.715643][T12889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1176.766170][T12889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1177.100996][T12889] device hsr_slave_0 entered promiscuous mode [ 1177.116344][T12889] device hsr_slave_1 entered promiscuous mode [ 1177.133475][T12889] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1177.144281][T12889] Cannot create hsr debugfs directory [ 1177.257873][ T4484] device hsr_slave_0 left promiscuous mode [ 1177.273485][ T4484] device hsr_slave_1 left promiscuous mode [ 1177.288868][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.295594][ T4484] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1177.306949][ T4484] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1177.323277][ T4484] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1177.350650][ T4484] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1177.373253][ T4484] device bridge_slave_1 left promiscuous mode [ 1177.397628][ T4484] bridge0: port 2(bridge_slave_1) entered disabled state [ 1177.411251][ T4484] device bridge_slave_0 left promiscuous mode [ 1177.422622][ T4484] bridge0: port 1(bridge_slave_0) entered disabled state [ 1177.524824][ T4484] device veth1_macvtap left promiscuous mode [ 1177.531027][ T4484] device veth0_macvtap left promiscuous mode [ 1177.537592][ T4484] device veth1_vlan left promiscuous mode [ 1177.548935][ T4484] device veth0_vlan left promiscuous mode [ 1178.084497][ T8287] Bluetooth: hci5: command 0x0409 tx timeout [ 1180.164260][ T8287] Bluetooth: hci5: command 0x041b tx timeout [ 1181.840597][ T4484] team0 (unregistering): Port device team_slave_1 removed [ 1182.093991][ T4484] team0 (unregistering): Port device team_slave_0 removed [ 1182.247664][ T8287] Bluetooth: hci5: command 0x040f tx timeout [ 1182.258359][ T4484] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1182.339749][ T4484] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1182.916678][ T4484] bond0 (unregistering): Released all slaves [ 1183.702274][T13075] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1183.820841][T12889] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1183.873713][T12889] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1183.917730][T12889] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1183.979268][T12889] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1184.021565][T13005] chnl_net:caif_netlink_parms(): no params data found [ 1184.324384][ T8287] Bluetooth: hci5: command 0x0419 tx timeout [ 1184.543530][T13005] bridge0: port 1(bridge_slave_0) entered blocking state [ 1184.581211][T13005] bridge0: port 1(bridge_slave_0) entered disabled state [ 1184.610380][T13005] device bridge_slave_0 entered promiscuous mode [ 1184.667852][T13005] bridge0: port 2(bridge_slave_1) entered blocking state [ 1184.681122][T13005] bridge0: port 2(bridge_slave_1) entered disabled state [ 1184.693090][T13005] device bridge_slave_1 entered promiscuous mode [ 1184.712286][T12889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1184.783942][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1184.806110][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1184.892459][T12889] 8021q: adding VLAN 0 to HW filter on device team0 [ 1184.907346][T13005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1184.951504][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1184.975240][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1185.004885][ T4485] bridge0: port 1(bridge_slave_0) entered blocking state [ 1185.012144][ T4485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1185.331573][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1185.487374][T13005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1185.643831][ T6567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1185.663408][ T6567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1185.683435][ T6567] bridge0: port 2(bridge_slave_1) entered blocking state [ 1185.690700][ T6567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1185.724815][ T6567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1185.747984][ T6567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1185.887974][T13005] team0: Port device team_slave_0 added [ 1185.932701][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1185.977568][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1186.298283][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1186.900350][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1186.961375][T12889] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1186.972368][T12889] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1187.147305][T13005] team0: Port device team_slave_1 added [ 1187.925842][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1187.948167][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1187.957309][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1187.967399][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1187.986671][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1188.014982][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1188.110281][T13005] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1188.137525][T13005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1188.283947][T13005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1188.335673][T13005] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1188.342688][T13005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1188.381973][T13005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1188.507738][T13005] device hsr_slave_0 entered promiscuous mode [ 1188.544203][T13005] device hsr_slave_1 entered promiscuous mode [ 1188.554667][T13005] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1188.583214][T13005] Cannot create hsr debugfs directory [ 1189.374591][T13131] [U] „ [ 1189.443654][T13151] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1189.558701][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1189.571722][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1189.606305][T12889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1190.058227][ T4484] device hsr_slave_0 left promiscuous mode [ 1190.088925][ T4484] device hsr_slave_1 left promiscuous mode [ 1190.132607][ T4484] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1190.160864][ T4484] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1190.185258][ T4484] device bridge_slave_1 left promiscuous mode [ 1190.191695][ T4484] bridge0: port 2(bridge_slave_1) entered disabled state [ 1190.252810][ T4484] device bridge_slave_0 left promiscuous mode [ 1190.264291][ T4484] bridge0: port 1(bridge_slave_0) entered disabled state [ 1191.117814][ T4484] team0 (unregistering): Port device team_slave_1 removed [ 1191.326618][ T4484] team0 (unregistering): Port device team_slave_0 removed [ 1191.805157][ T4484] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1192.360470][ T4484] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1196.031320][ T4484] bond0 (unregistering): Released all slaves [ 1196.113858][T13005] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1196.298121][T13005] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1196.322369][T13005] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1196.376896][T13005] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1196.560125][T13211] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1196.937623][T13005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1196.961484][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1196.980678][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1197.018089][T13005] 8021q: adding VLAN 0 to HW filter on device team0 [ 1197.066553][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1197.103627][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1197.121365][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 1197.128851][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1197.201029][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1197.225976][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1197.254781][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 1197.262104][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1197.355335][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1197.386619][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1197.436311][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1197.472741][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1197.488518][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1197.509635][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1197.611497][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1197.753080][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1197.929761][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1198.051433][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1198.243617][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1198.362793][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1198.371438][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1198.380528][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1198.446722][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1198.504503][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1198.566072][T12889] device veth0_vlan entered promiscuous mode [ 1198.622216][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1198.651269][T13203] [U] „ [ 1198.669851][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1198.719267][T12889] device veth1_vlan entered promiscuous mode [ 1198.816581][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1198.890246][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1198.915069][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1198.955044][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1198.997102][T12889] device veth0_macvtap entered promiscuous mode [ 1199.038246][T12889] device veth1_macvtap entered promiscuous mode [ 1199.103405][T12889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1199.179338][T12889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1199.205884][T12889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1199.226720][T12889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1199.247472][T12889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1199.268353][T12889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1199.325926][T12889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1199.345742][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1199.385296][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1199.425879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1199.441268][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1199.460342][T12889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1199.545245][T12889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1199.718344][T12889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1199.894991][T12889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1200.074735][T12889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1200.199129][T12889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1200.211819][T12889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1200.347034][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1200.364978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1200.396855][T12889] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1200.431309][T12889] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1200.448310][T12889] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1200.470586][T12889] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1200.520387][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1200.538210][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1200.651182][T13005] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1201.915562][T13047] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1201.923770][T13047] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1202.323739][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1202.482657][ T4351] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1202.513540][ T4351] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1202.573053][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1206.635878][T13310] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1207.928943][T13325] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1208.481257][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1208.871178][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1209.131054][T13005] device veth0_vlan entered promiscuous mode [ 1209.158654][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1209.179023][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1209.264907][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1209.283642][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1209.390643][T13005] device veth1_vlan entered promiscuous mode [ 1209.485914][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1209.536829][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1209.790104][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1209.966162][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1210.028665][T13005] device veth0_macvtap entered promiscuous mode [ 1210.070528][T13005] device veth1_macvtap entered promiscuous mode [ 1210.165442][T13005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1210.199186][T13005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1210.224420][T13005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1210.258450][T13005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1210.504145][T13005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1210.668634][T13005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1210.763668][T13319] [U] „ [ 1210.825529][T13005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1210.995633][T13005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1211.109863][T13005] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1211.168840][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1211.185113][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1211.218125][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1211.229597][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1211.477316][T13005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1211.957807][T13005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1211.973684][T13005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1211.984450][T13005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1212.003369][T13005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1212.822427][T13005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1212.841070][T13005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1212.864194][T13005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1212.936099][T13005] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1212.945470][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1212.987811][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1213.583918][T13005] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1214.987841][T13005] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1214.998876][T13005] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1215.009496][T13005] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1216.361843][T12516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1216.424115][T12516] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1216.490057][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1216.562565][T11879] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1217.105845][T11879] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1217.132934][T11879] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1225.776086][T13471] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1227.374185][ T4431] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1228.064135][ T4431] usb 8-1: Using ep0 maxpacket: 8 [ 1228.071455][ T4431] usb 8-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1228.124338][ T4431] usb 8-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1231.044832][ T4431] usb 8-1: unable to read config index 1 descriptor/start: -71 [ 1231.052658][ T4431] usb 8-1: can't read configurations, error -71 [ 1237.468859][T13549] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2295'. [ 1237.928838][ T4431] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1238.274813][ T4431] usb 4-1: Using ep0 maxpacket: 8 [ 1238.413702][T13568] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1239.166867][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.213833][ T4431] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1239.244190][ T4431] usb 4-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1239.289172][ T4431] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1239.315595][ T4431] usb 4-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1239.666112][ T4431] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1240.430336][ T4431] usb 4-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1240.473957][ T4431] usb 4-1: string descriptor 0 read error: -22 [ 1240.486222][ T4431] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1240.495756][ T4431] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1240.520931][ T4431] adutux 4-1:168.0: interrupt endpoints not found [ 1240.630255][ T6542] usb 4-1: USB disconnect, device number 3 [ 1244.541984][T13624] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1245.634117][ T14] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1246.414173][ T14] usb 4-1: Using ep0 maxpacket: 8 [ 1246.421139][ T14] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1246.454501][ T14] usb 4-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1246.703163][ T14] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1246.742436][ T14] usb 4-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1247.558656][ T14] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1247.574451][ T14] usb 4-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1247.600941][ T14] usb 4-1: string descriptor 0 read error: -22 [ 1247.618269][ T14] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1247.634172][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1247.655930][ T14] adutux 4-1:168.0: interrupt endpoints not found [ 1247.853064][ T6542] usb 4-1: USB disconnect, device number 4 [ 1254.266452][T13693] [U] „ [ 1255.674372][ T14] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1255.866516][T13732] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2337'. [ 1256.223582][ T14] usb 8-1: Using ep0 maxpacket: 8 [ 1256.493325][ T14] usb 8-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1256.564183][ T14] usb 8-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1256.621445][ T14] usb 8-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1256.669536][ T14] usb 8-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1256.783803][ T14] usb 8-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1256.842275][ T14] usb 8-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1256.913954][ T14] usb 8-1: string descriptor 0 read error: -22 [ 1257.055461][ T14] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1257.416229][ T14] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1257.973011][ T14] adutux 8-1:168.0: interrupt endpoints not found [ 1258.047875][ T14] usb 8-1: USB disconnect, device number 4 [ 1268.019298][T13812] [U] „ [ 1269.331688][T13844] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1275.652169][T13898] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1283.395923][T13940] usb usb8: usbfs: process 13940 (syz.3.2392) did not claim interface 0 before use [ 1284.661328][T13953] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1284.842276][T13957] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2394'. [ 1292.004412][ T8287] Bluetooth: hci4: command 0x0406 tx timeout [ 1295.435726][T14020] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2409'. [ 1300.168669][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.268745][T14054] [U] „ [ 1310.026146][T14128] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1313.085060][T14150] autofs4:pid:14150:autofs_fill_super: called with bogus options [ 1314.214110][T14062] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1314.514093][T14062] usb 8-1: Using ep0 maxpacket: 8 [ 1314.525972][T14062] usb 8-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1314.538396][T14062] usb 8-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1314.676266][T14062] usb 8-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1314.687357][T14062] usb 8-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1314.746232][T14062] usb 8-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1314.756982][T14062] usb 8-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1314.780450][T14062] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1314.790070][T14062] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1314.821311][T14062] usb 8-1: Product: syz [ 1314.972101][T14062] usb 8-1: Manufacturer: syz [ 1314.992573][T14062] usb 8-1: SerialNumber: syz [ 1315.265240][T14062] adutux 8-1:168.0: interrupt endpoints not found [ 1316.274814][T14062] usb 8-1: USB disconnect, device number 5 [ 1319.324311][T14188] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1321.634735][T14207] autofs4:pid:14207:autofs_fill_super: called with bogus options [ 1322.735061][T14218] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2454'. [ 1323.374100][ T5717] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1324.241429][T14238] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1324.378675][T14230] [U] „ [ 1324.586416][ T5717] usb 1-1: Using ep0 maxpacket: 8 [ 1324.663406][ T5717] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1324.922664][ T5717] usb 1-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1325.134865][ T5717] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1325.165181][ T5717] usb 1-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1330.374324][ T5717] usb 1-1: unable to read config index 2 descriptor/start: -71 [ 1330.382769][ T5717] usb 1-1: can't read configurations, error -71 [ 1333.720964][T14287] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1335.724364][T14298] [U] „ [ 1337.194101][ T5717] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1339.104820][ T5717] usb 7-1: Using ep0 maxpacket: 8 [ 1339.801231][ T5717] usb 7-1: device descriptor read/all, error -71 [ 1339.875617][T14334] netlink: 'syz.7.2485': attribute type 1 has an invalid length. [ 1339.894410][T14334] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2485'. [ 1345.375926][T14371] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2491'. [ 1346.054248][ T6542] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1346.247420][ T6542] usb 1-1: Using ep0 maxpacket: 8 [ 1346.260243][ T6542] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1346.271580][ T6542] usb 1-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1346.326908][T14381] netlink: 'syz.4.2495': attribute type 2 has an invalid length. [ 1346.820159][ T6542] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1346.834773][ T6542] usb 1-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1346.869792][ T6542] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1346.912608][ T6542] usb 1-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1346.943277][ T6542] usb 1-1: string descriptor 0 read error: -22 [ 1346.965905][ T6542] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1346.978501][ T6542] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1347.005437][ T6542] adutux 1-1:168.0: interrupt endpoints not found [ 1347.968419][ T4332] usb 1-1: USB disconnect, device number 12 [ 1358.790278][T14488] process 'syz.4.2517' launched '/dev/fd/-1' with NULL argv: empty string added [ 1361.742312][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1366.158647][T14531] [U] „ [ 1368.613945][T14566] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1372.950788][T14585] [U] „ [ 1378.855757][T14633] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1394.256239][T14737] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1396.375016][T14748] netlink: 16178 bytes leftover after parsing attributes in process `syz.7.2581'. [ 1398.282850][T14763] comedi comedi0: mpc624: I/O port conflict (0xee,16) [ 1399.960590][T14775] netlink: 'syz.7.2587': attribute type 2 has an invalid length. [ 1403.834622][T14802] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1407.481583][T14827] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1408.757139][T10000] nbd_handle_cmd: 2 callbacks suppressed [ 1408.757163][T10000] block nbd4: Attempted send on invalid socket [ 1408.769069][T10000] blk_print_req_error: 2 callbacks suppressed [ 1408.769081][T10000] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1408.794181][T14833] (syz.4.2599,14833,0):ocfs2_get_sector:1771 ERROR: status = -5 [ 1408.802455][T14833] (syz.4.2599,14833,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 1408.812234][T14833] (syz.4.2599,14833,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1408.824934][T14833] (syz.4.2599,14833,0):ocfs2_fill_super:1176 ERROR: status = -5 [ 1410.619487][T14853] netlink: 'syz.0.2603': attribute type 4 has an invalid length. [ 1410.705817][T14856] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1411.706239][ T4283] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1411.728341][ T4283] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1411.737065][ T4283] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1411.755042][ T4278] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1411.762652][ T4278] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1411.771500][ T4278] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1413.844157][ T8287] Bluetooth: hci2: command 0x0409 tx timeout [ 1414.406316][ T4485] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1414.579221][T14880] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1414.967879][T14864] wlan0 speed is unknown, defaulting to 1000 [ 1415.212087][ T4485] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1415.851681][ T4485] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1415.934133][ T8287] Bluetooth: hci2: command 0x041b tx timeout [ 1418.014137][ T4278] Bluetooth: hci2: command 0x040f tx timeout [ 1418.865879][ T4485] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1419.676682][T14918] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1420.085236][ T4278] Bluetooth: hci2: command 0x0419 tx timeout [ 1421.235578][T10000] block nbd4: Attempted send on invalid socket [ 1421.527068][T10000] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1421.584110][T14936] (syz.4.2618,14936,1):ocfs2_get_sector:1771 ERROR: status = -5 [ 1421.619496][T14936] (syz.4.2618,14936,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 1421.636383][T14936] (syz.4.2618,14936,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1421.699378][T14936] (syz.4.2618,14936,0):ocfs2_fill_super:1176 ERROR: status = -5 [ 1421.699574][T14929] wlan0 speed is unknown, defaulting to 1000 [ 1421.728562][T14864] chnl_net:caif_netlink_parms(): no params data found [ 1422.202897][T14941] sctp: [Deprecated]: syz.0.2619 (pid 14941) Use of int in maxseg socket option. [ 1422.202897][T14941] Use struct sctp_assoc_value instead [ 1423.049831][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1426.643600][T14864] bridge0: port 1(bridge_slave_0) entered blocking state [ 1426.654810][T14864] bridge0: port 1(bridge_slave_0) entered disabled state [ 1426.839427][T14864] device bridge_slave_0 entered promiscuous mode [ 1427.722242][T14864] bridge0: port 2(bridge_slave_1) entered blocking state [ 1427.851824][T14864] bridge0: port 2(bridge_slave_1) entered disabled state [ 1427.870841][T14864] device bridge_slave_1 entered promiscuous mode [ 1428.839322][T14982] xt_CT: No such helper "pptp" [ 1428.852040][T14990] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1428.860077][T14864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1429.346163][T14864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1429.723365][T14864] team0: Port device team_slave_0 added [ 1429.771039][T14864] team0: Port device team_slave_1 added [ 1429.789923][T14995] netlink: 'syz.0.2630': attribute type 2 has an invalid length. [ 1430.249584][ T4485] device hsr_slave_0 left promiscuous mode [ 1430.278414][ T4485] device hsr_slave_1 left promiscuous mode [ 1430.303923][ T4485] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1430.341663][ T4485] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1430.873847][ T4485] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1430.882259][ T4485] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1430.934441][ T4485] device bridge_slave_1 left promiscuous mode [ 1430.941601][ T4485] bridge0: port 2(bridge_slave_1) entered disabled state [ 1431.016423][ T4485] device bridge_slave_0 left promiscuous mode [ 1431.022746][ T4485] bridge0: port 1(bridge_slave_0) entered disabled state [ 1431.756821][ T4485] device veth1_macvtap left promiscuous mode [ 1431.782379][T15013] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2635'. [ 1431.858100][ T4485] device veth0_macvtap left promiscuous mode [ 1431.866269][ T4485] device veth1_vlan left promiscuous mode [ 1431.872219][ T4485] device veth0_vlan left promiscuous mode [ 1433.765734][ T4485] team0 (unregistering): Port device team_slave_1 removed [ 1433.840759][ T4485] team0 (unregistering): Port device team_slave_0 removed [ 1433.908160][ T4485] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1433.985073][ T4485] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1436.392975][ T4485] bond0 (unregistering): Released all slaves [ 1436.544471][T14864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1436.551484][T14864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1436.578526][T14864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1436.690006][T15011] wlan0 speed is unknown, defaulting to 1000 [ 1436.707264][T14864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1436.734174][T14864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1436.802744][T14864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1437.006405][T14864] device hsr_slave_0 entered promiscuous mode [ 1437.011852][ T4278] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1437.028951][ T4278] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1437.063872][T14864] device hsr_slave_1 entered promiscuous mode [ 1437.070318][ T4278] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1437.080137][ T4278] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1437.089165][ T4278] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1437.100895][ T4278] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1437.104254][T14864] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1437.170038][T14864] Cannot create hsr debugfs directory [ 1437.313591][T15040] wlan0 speed is unknown, defaulting to 1000 [ 1437.666765][T15051] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 1437.673748][T15051] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1437.686120][T15051] vhci_hcd vhci_hcd.0: Device attached [ 1437.764523][T15052] vhci_hcd: connection closed [ 1437.767874][ T4718] vhci_hcd: stop threads [ 1437.795519][ T4718] vhci_hcd: release socket [ 1437.837257][ T4718] vhci_hcd: disconnect device [ 1437.884257][T14735] vhci_hcd: vhci_device speed not set [ 1438.241696][ T4485] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1438.263743][T14864] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1438.291974][T14864] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1438.475470][T14864] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1439.204208][ T8287] Bluetooth: hci5: command 0x0409 tx timeout [ 1439.247685][T15040] chnl_net:caif_netlink_parms(): no params data found [ 1440.836719][T14864] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1441.068590][T15077] netlink: 'syz.0.2648': attribute type 2 has an invalid length. [ 1441.306163][ T4278] Bluetooth: hci5: command 0x041b tx timeout [ 1441.685598][ T4485] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1442.787323][ T4485] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1442.946870][ T4485] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1443.048108][T15040] bridge0: port 1(bridge_slave_0) entered blocking state [ 1443.057953][T15040] bridge0: port 1(bridge_slave_0) entered disabled state [ 1443.072435][T15040] device bridge_slave_0 entered promiscuous mode [ 1443.117338][T15040] bridge0: port 2(bridge_slave_1) entered blocking state [ 1443.131281][T15040] bridge0: port 2(bridge_slave_1) entered disabled state [ 1443.151662][T15040] device bridge_slave_1 entered promiscuous mode [ 1443.310573][T15040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1443.341915][T14864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1443.364053][ T4278] Bluetooth: hci5: command 0x040f tx timeout [ 1443.418081][T15040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1443.627053][T15040] team0: Port device team_slave_0 added [ 1443.895242][T15040] team0: Port device team_slave_1 added [ 1443.906747][ T4485] tipc: Left network mode [ 1443.912687][ T4718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1443.993499][ T4718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1444.010616][T14864] 8021q: adding VLAN 0 to HW filter on device team0 [ 1444.737042][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1444.783687][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1444.807195][ T4445] bridge0: port 1(bridge_slave_0) entered blocking state [ 1444.814526][ T4445] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1444.840669][T15040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1444.869738][T15040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1445.254916][T15040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1445.278222][T15040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1445.285571][T15040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1446.466280][T15040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1446.511976][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1446.521077][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1446.603438][ T4278] Bluetooth: hci5: command 0x0419 tx timeout [ 1446.629667][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1446.642239][ T4445] bridge0: port 2(bridge_slave_1) entered blocking state [ 1446.649469][ T4445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1446.659716][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1446.669157][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1448.219364][T15130] netlink: 'syz.0.2659': attribute type 2 has an invalid length. [ 1448.478772][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1448.737657][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1448.765104][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1448.784769][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1448.804751][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1448.823664][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1448.832604][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1448.842347][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1448.851595][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1450.173855][T14864] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1450.401110][T15040] device hsr_slave_0 entered promiscuous mode [ 1450.446926][T15040] device hsr_slave_1 entered promiscuous mode [ 1450.467539][T15040] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1450.488081][T15040] Cannot create hsr debugfs directory [ 1455.704544][T15184] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2669'. [ 1456.592840][T15040] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1456.982882][T15040] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1458.820532][ T4485] device hsr_slave_0 left promiscuous mode [ 1458.903523][ T4485] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1458.913119][ T4485] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1458.922414][ T4485] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1458.931574][ T4485] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1458.959889][ T4485] device bridge_slave_1 left promiscuous mode [ 1458.974348][ T4485] bridge0: port 2(bridge_slave_1) entered disabled state [ 1458.999161][ T4485] device bridge_slave_0 left promiscuous mode [ 1459.152855][ T4485] bridge0: port 1(bridge_slave_0) entered disabled state [ 1460.166269][ T4485] device veth1_macvtap left promiscuous mode [ 1460.172370][ T4485] device veth0_macvtap left promiscuous mode [ 1460.192319][ T4485] device veth1_vlan left promiscuous mode [ 1460.237549][ T4485] device veth0_vlan left promiscuous mode [ 1461.612204][T15223] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2677'. [ 1462.004743][T15226] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1463.803184][ T4485] team0 (unregistering): Port device team_slave_1 removed [ 1463.881863][ T4485] team0 (unregistering): Port device team_slave_0 removed [ 1463.934985][ T4485] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1464.001059][ T4485] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1465.117171][ T4485] bond0 (unregistering): Released all slaves [ 1465.201714][T15040] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1465.391275][T15040] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1465.966343][T15040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1466.168424][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1466.234708][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1466.245383][ T8287] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1466.283528][ T8287] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1466.292570][ T8287] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1466.301193][ T8287] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1466.311248][T15040] 8021q: adding VLAN 0 to HW filter on device team0 [ 1466.318789][ T8287] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1466.326405][ T8287] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1466.563703][T15269] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1466.981063][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1467.017746][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1467.046862][ T4445] bridge0: port 1(bridge_slave_0) entered blocking state [ 1467.054165][ T4445] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1467.917156][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1467.977732][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1468.047824][ T4445] bridge0: port 2(bridge_slave_1) entered blocking state [ 1468.055187][ T4445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1468.549071][ T4278] Bluetooth: hci1: command 0x0409 tx timeout [ 1468.628883][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1468.764431][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1468.805119][T15261] wlan0 speed is unknown, defaulting to 1000 [ 1468.887133][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1468.907830][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1468.959894][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1470.536607][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1470.564224][ T4278] Bluetooth: hci1: command 0x041b tx timeout [ 1470.571425][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1470.590745][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1470.611857][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1470.621429][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1470.636121][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1470.650181][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1470.688875][T15040] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1472.644402][ T8287] Bluetooth: hci1: command 0x040f tx timeout [ 1472.728517][T15261] chnl_net:caif_netlink_parms(): no params data found [ 1473.056039][T12516] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1473.073473][T12516] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1473.103356][T15040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1473.489339][T15261] bridge0: port 1(bridge_slave_0) entered blocking state [ 1473.551117][T15339] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1473.959208][T15261] bridge0: port 1(bridge_slave_0) entered disabled state [ 1473.986766][T15261] device bridge_slave_0 entered promiscuous mode [ 1474.128322][T15261] bridge0: port 2(bridge_slave_1) entered blocking state [ 1474.141629][T15261] bridge0: port 2(bridge_slave_1) entered disabled state [ 1474.150757][T15261] device bridge_slave_1 entered promiscuous mode [ 1475.386476][ T8287] Bluetooth: hci1: command 0x0419 tx timeout [ 1476.111035][T15261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1476.485695][T15261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1477.231352][T15261] team0: Port device team_slave_0 added [ 1477.985307][T15261] team0: Port device team_slave_1 added [ 1478.084770][ T14] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1478.785833][T15261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1478.800990][T15261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1479.268884][T15261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1481.055366][T15261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1481.085342][T15261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1481.343572][T15261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1482.128643][T15261] device hsr_slave_0 entered promiscuous mode [ 1482.146873][T15261] device hsr_slave_1 entered promiscuous mode [ 1482.184252][ T6567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1482.207039][ T6567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1483.576795][ T4485] device hsr_slave_0 left promiscuous mode [ 1483.598870][ T4485] device hsr_slave_1 left promiscuous mode [ 1483.629187][ T4485] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1483.644459][ T4485] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1483.680124][ T4485] device bridge_slave_1 left promiscuous mode [ 1483.723806][ T4485] bridge0: port 2(bridge_slave_1) entered disabled state [ 1483.769304][ T4485] device bridge_slave_0 left promiscuous mode [ 1483.784708][ T4485] bridge0: port 1(bridge_slave_0) entered disabled state [ 1484.601965][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.681808][ T4485] team0 (unregistering): Port device team_slave_1 removed [ 1487.259284][ T4485] team0 (unregistering): Port device team_slave_0 removed [ 1487.941013][ T4325] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1488.018522][ T6624] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1488.050439][ T4485] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1488.113625][ T4485] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1489.415328][T15466] xt_CT: No such helper "pptp" [ 1489.696962][T15471] user requested TSC rate below hardware speed [ 1489.697819][ T4485] bond0 (unregistering): Released all slaves [ 1489.792730][T14678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1489.803539][T14678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1490.013568][T14678] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1490.056098][T14678] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1490.086878][T15040] device veth0_vlan entered promiscuous mode [ 1490.139637][T15040] device veth1_vlan entered promiscuous mode [ 1490.335267][T15040] device veth0_macvtap entered promiscuous mode [ 1490.526730][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1490.937810][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1490.985111][T15040] device veth1_macvtap entered promiscuous mode [ 1491.014585][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1491.100204][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1491.285141][T15040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1491.310604][T15040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1491.351820][T15040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1491.386572][T15040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1491.464652][T15040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1491.502723][T15040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1491.556833][T15040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1491.573097][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1491.592499][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1491.665296][T15040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1491.683892][T15040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1491.719681][T15040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1491.739562][T15040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1491.765078][T15040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1491.790442][T15040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1491.853510][T15040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1491.870746][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1491.912338][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1491.938610][T15040] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1491.972538][T15040] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1492.002418][T15040] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1492.043514][T15040] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1493.943278][ T4351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1493.983469][ T4351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1495.124225][ T4718] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1496.198239][T15261] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1496.220321][ T4718] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1496.258351][ T4718] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1496.342450][T15261] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1496.575923][T12516] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1497.314597][ T127] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1497.349358][T15261] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1497.445510][T15261] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1497.987133][T15261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1498.918387][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1499.034811][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1499.079099][T15261] 8021q: adding VLAN 0 to HW filter on device team0 [ 1499.109787][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1499.144531][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1499.291987][ T4351] bridge0: port 1(bridge_slave_0) entered blocking state [ 1499.299211][ T4351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1499.837311][ T4278] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1499.849001][ T4278] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1499.858619][ T4278] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1499.869603][ T4278] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1499.880163][ T4278] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1499.888443][ T4278] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1500.086674][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1500.098552][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1500.164679][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1500.204301][ T4351] bridge0: port 2(bridge_slave_1) entered blocking state [ 1500.211469][ T4351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1501.322337][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1501.352011][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1501.370311][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1501.394245][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1501.411971][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1501.463489][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1501.566565][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1501.716938][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1502.070666][ T4278] Bluetooth: hci2: command 0x0409 tx timeout [ 1502.115267][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1502.158463][T15542] wlan0 speed is unknown, defaulting to 1000 [ 1502.163740][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1502.197970][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1502.235124][T15261] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1502.620154][T12516] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1503.151497][T12516] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1503.472670][T15585] autofs4:pid:15585:autofs_fill_super: called with bogus options [ 1503.597396][T12516] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1503.748151][T12516] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1504.084235][ T4278] Bluetooth: hci2: command 0x041b tx timeout [ 1505.851876][T15542] chnl_net:caif_netlink_parms(): no params data found [ 1506.148291][ T4718] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1506.164207][ T4278] Bluetooth: hci2: command 0x040f tx timeout [ 1506.170965][ T4718] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1507.547434][T14735] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1507.787678][T15261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1507.867004][ T4325] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1507.973379][T15542] bridge0: port 1(bridge_slave_0) entered blocking state [ 1508.002426][T15542] bridge0: port 1(bridge_slave_0) entered disabled state [ 1508.161566][T15542] device bridge_slave_0 entered promiscuous mode [ 1508.984829][ T4278] Bluetooth: hci2: command 0x0419 tx timeout [ 1509.721698][T15542] bridge0: port 2(bridge_slave_1) entered blocking state [ 1509.751895][T15542] bridge0: port 2(bridge_slave_1) entered disabled state [ 1509.789593][T15542] device bridge_slave_1 entered promiscuous mode [ 1510.147418][T10000] block nbd7: Attempted send on invalid socket [ 1510.160948][T10000] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1510.257283][T15647] (syz.7.2755,15647,0):ocfs2_get_sector:1771 ERROR: status = -5 [ 1510.265288][T15647] (syz.7.2755,15647,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 1510.272766][T15647] (syz.7.2755,15647,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1510.281686][T15647] (syz.7.2755,15647,0):ocfs2_fill_super:1176 ERROR: status = -5 [ 1510.591323][T15542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1510.699960][T15542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1510.868184][T15542] team0: Port device team_slave_0 added [ 1510.949771][T15542] team0: Port device team_slave_1 added [ 1511.123534][T15542] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1511.141856][T15542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1511.749774][T15542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1512.017618][T15542] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1512.034016][T15542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1513.043055][T15542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1513.066593][T15679] autofs4:pid:15679:autofs_fill_super: called with bogus options [ 1515.115315][T12516] device hsr_slave_0 left promiscuous mode [ 1515.125923][T12516] device hsr_slave_1 left promiscuous mode [ 1515.188984][T12516] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1515.214520][T12516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1515.274394][T12516] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1515.411900][T15691] tmpfs: Unknown parameter 'noswap' [ 1515.515846][T12516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1517.101701][T12516] device bridge_slave_1 left promiscuous mode [ 1517.124622][ T14] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1517.241001][T12516] bridge0: port 2(bridge_slave_1) entered disabled state [ 1517.306150][T12516] device bridge_slave_0 left promiscuous mode [ 1517.312487][T12516] bridge0: port 1(bridge_slave_0) entered disabled state [ 1518.044500][T12516] device veth1_macvtap left promiscuous mode [ 1518.051109][T12516] device veth0_macvtap left promiscuous mode [ 1518.085617][T12516] device veth1_vlan left promiscuous mode [ 1518.093812][T12516] device veth0_vlan left promiscuous mode [ 1519.758964][T15729] autofs4:pid:15729:autofs_fill_super: called with bogus options [ 1523.499563][T12516] team0 (unregistering): Port device team_slave_1 removed [ 1523.795226][T12516] team0 (unregistering): Port device team_slave_0 removed [ 1524.669710][T12516] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1524.799371][T15769] autofs4:pid:15769:autofs_fill_super: called with bogus options [ 1526.269818][T12516] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1529.054813][ T4325] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1529.095745][T14735] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1529.178407][ T8287] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1529.212166][ T8287] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1529.221605][ T8287] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1529.230063][ T4283] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1529.244250][ T4283] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1529.251825][ T4283] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1529.590552][T15802] sctp: [Deprecated]: syz.0.2789 (pid 15802) Use of int in maxseg socket option. [ 1529.590552][T15802] Use struct sctp_assoc_value instead [ 1530.367606][T12516] bond0 (unregistering): Released all slaves [ 1530.711628][T15542] device hsr_slave_0 entered promiscuous mode [ 1530.762286][T15542] device hsr_slave_1 entered promiscuous mode [ 1530.800720][T15542] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1530.850214][T15542] Cannot create hsr debugfs directory [ 1531.179865][T15807] device veth1_to_bond entered promiscuous mode [ 1531.186982][T15807] device veth1_to_bond left promiscuous mode [ 1531.284106][ T4283] Bluetooth: hci5: command 0x0409 tx timeout [ 1531.419747][T15796] wlan0 speed is unknown, defaulting to 1000 [ 1533.366927][ T4278] Bluetooth: hci5: command 0x041b tx timeout [ 1535.444154][ T4278] Bluetooth: hci5: command 0x040f tx timeout [ 1537.526920][ T4278] Bluetooth: hci5: command 0x0419 tx timeout [ 1537.762444][T15847] sctp: [Deprecated]: syz.4.2798 (pid 15847) Use of int in maxseg socket option. [ 1537.762444][T15847] Use struct sctp_assoc_value instead [ 1538.266719][ T6603] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1542.864275][T14735] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1542.908844][T13749] block nbd0: Attempted send on invalid socket [ 1542.915227][T13749] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1542.925481][T15868] (syz.0.2802,15868,1):ocfs2_get_sector:1771 ERROR: status = -5 [ 1542.933297][T15868] (syz.0.2802,15868,1):ocfs2_sb_probe:749 ERROR: status = -5 [ 1542.941198][T15868] (syz.0.2802,15868,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1542.950053][T15868] (syz.0.2802,15868,1):ocfs2_fill_super:1176 ERROR: status = -5 [ 1544.271815][T15796] chnl_net:caif_netlink_parms(): no params data found [ 1545.742535][T15542] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1545.833833][T15542] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1545.917086][T15904] sctp: [Deprecated]: syz.0.2809 (pid 15904) Use of int in maxseg socket option. [ 1545.917086][T15904] Use struct sctp_assoc_value instead [ 1545.937595][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.348685][T15542] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1546.396891][T15542] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1546.529279][T15796] bridge0: port 1(bridge_slave_0) entered blocking state [ 1546.541076][T15796] bridge0: port 1(bridge_slave_0) entered disabled state [ 1546.560144][T15796] device bridge_slave_0 entered promiscuous mode [ 1548.317571][T15476] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1548.881130][T15476] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1548.924983][T15796] bridge0: port 2(bridge_slave_1) entered blocking state [ 1548.933313][T15796] bridge0: port 2(bridge_slave_1) entered disabled state [ 1548.978072][T15796] device bridge_slave_1 entered promiscuous mode [ 1549.093573][T15796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1549.174549][T15926] xt_CT: No such helper "pptp" [ 1549.273662][T15796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1550.500419][T15796] team0: Port device team_slave_0 added [ 1550.631284][T15796] team0: Port device team_slave_1 added [ 1552.527290][T14735] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1552.630824][T15796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1552.639968][T15796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1552.852416][T15796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1552.892603][T15542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1552.964235][ T14] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1552.985334][T15796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1553.001641][T15796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1553.033856][ T4887] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1553.081644][T15796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1553.167174][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1553.178098][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1553.199910][T15542] 8021q: adding VLAN 0 to HW filter on device team0 [ 1553.231787][T13749] block nbd0: Attempted send on invalid socket [ 1553.240173][T13749] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1553.249811][T15974] (syz.0.2821,15974,1):ocfs2_get_sector:1771 ERROR: status = -5 [ 1553.257866][T15974] (syz.0.2821,15974,1):ocfs2_sb_probe:749 ERROR: status = -5 [ 1553.265353][T15974] (syz.0.2821,15974,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1553.274081][T15974] (syz.0.2821,15974,1):ocfs2_fill_super:1176 ERROR: status = -5 [ 1553.530938][T14678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1553.551410][T14678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1554.022932][T14678] bridge0: port 1(bridge_slave_0) entered blocking state [ 1554.030225][T14678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1554.353535][T14678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1554.364820][T14678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1554.404746][T14678] bridge0: port 2(bridge_slave_1) entered blocking state [ 1554.411910][T14678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1554.438925][T14678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1555.578059][T15796] device hsr_slave_0 entered promiscuous mode [ 1555.627663][T15796] device hsr_slave_1 entered promiscuous mode [ 1555.635143][T15796] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1555.642864][T15796] Cannot create hsr debugfs directory [ 1555.855990][T14678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1557.311537][T14678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1557.784142][ T14] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1558.084605][ T4351] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1559.354901][ T4283] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1559.367913][ T4283] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1559.394205][ T4283] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1559.414268][ T4283] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1559.423730][ T4283] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1559.436193][ T4283] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1559.582080][T12516] device hsr_slave_0 left promiscuous mode [ 1559.629577][T12516] device hsr_slave_1 left promiscuous mode [ 1559.639857][T12516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1559.668254][T12516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1559.701239][T12516] device bridge_slave_1 left promiscuous mode [ 1559.766654][T12516] bridge0: port 2(bridge_slave_1) entered disabled state [ 1559.879028][T12516] device bridge_slave_0 left promiscuous mode [ 1559.953558][T12516] bridge0: port 1(bridge_slave_0) entered disabled state [ 1561.534449][ T4278] Bluetooth: hci1: command 0x0409 tx timeout [ 1561.925196][T14735] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1563.204591][ T4887] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1563.604081][ T4278] Bluetooth: hci1: command 0x041b tx timeout [ 1565.684001][ T4278] Bluetooth: hci1: command 0x040f tx timeout [ 1565.932720][T13749] block nbd4: Attempted send on invalid socket [ 1565.939472][T13749] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1565.949121][T16081] (syz.4.2843,16081,1):ocfs2_get_sector:1771 ERROR: status = -5 [ 1565.956851][T16081] (syz.4.2843,16081,1):ocfs2_sb_probe:749 ERROR: status = -5 [ 1565.964336][T16081] (syz.4.2843,16081,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1565.973070][T16081] (syz.4.2843,16081,1):ocfs2_fill_super:1176 ERROR: status = -5 [ 1566.270813][T12516] team0 (unregistering): Port device team_slave_1 removed [ 1567.046616][T15476] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1567.763993][ T4283] Bluetooth: hci1: command 0x0419 tx timeout [ 1567.771335][T12516] team0 (unregistering): Port device team_slave_0 removed [ 1567.904702][T12516] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1568.862085][ T6603] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1568.964679][ T4887] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1569.127515][T12516] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1571.340130][T16119] netlink: 'syz.7.2852': attribute type 2 has an invalid length. [ 1571.534053][ T14] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1572.248219][T12516] bond0 (unregistering): Released all slaves [ 1573.029506][T16032] wlan0 speed is unknown, defaulting to 1000 [ 1574.112374][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1576.401971][T15796] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1576.449433][T15796] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1576.538111][T16032] chnl_net:caif_netlink_parms(): no params data found [ 1576.749648][T15476] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1576.764392][T15796] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1576.805395][T15796] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1578.525187][T16032] bridge0: port 1(bridge_slave_0) entered blocking state [ 1578.534335][T16032] bridge0: port 1(bridge_slave_0) entered disabled state [ 1578.542997][T16032] device bridge_slave_0 entered promiscuous mode [ 1578.729379][T16032] bridge0: port 2(bridge_slave_1) entered blocking state [ 1578.744626][T16032] bridge0: port 2(bridge_slave_1) entered disabled state [ 1578.762041][T16032] device bridge_slave_1 entered promiscuous mode [ 1579.722619][T16032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1580.518779][ T4887] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1580.672023][T16208] sctp: [Deprecated]: syz.7.2868 (pid 16208) Use of int in maxseg socket option. [ 1580.672023][T16208] Use struct sctp_assoc_value instead [ 1581.058451][T16032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1581.124816][ T4887] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1581.194402][T15796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1581.335676][ T4887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1581.360246][T16213] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2871'. [ 1581.375028][ T4887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1581.426916][T16032] team0: Port device team_slave_0 added [ 1581.469338][T15796] 8021q: adding VLAN 0 to HW filter on device team0 [ 1581.809595][T16032] team0: Port device team_slave_1 added [ 1581.867633][T16221] netlink: 'syz.7.2872': attribute type 2 has an invalid length. [ 1581.886932][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1581.923478][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1581.968113][ T4493] bridge0: port 1(bridge_slave_0) entered blocking state [ 1581.975422][ T4493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1581.983394][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1581.997360][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1582.011632][ T4493] bridge0: port 2(bridge_slave_1) entered blocking state [ 1582.018883][ T4493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1582.595029][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1582.642249][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1582.868834][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1583.272600][T16032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1583.286296][T16032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1583.383999][T16032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1583.489307][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1583.573860][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1583.614453][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1583.658116][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1583.668059][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1583.678003][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1583.687734][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1583.809465][T16032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1583.845580][T16032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1583.876815][T16032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1584.912759][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1584.941769][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1585.518987][T15796] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1585.625447][T16032] device hsr_slave_0 entered promiscuous mode [ 1585.656276][T16032] device hsr_slave_1 entered promiscuous mode [ 1586.244519][ T4325] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1586.479963][ T4887] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1586.479963][ T4493] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1586.905851][T16261] sctp: [Deprecated]: syz.4.2879 (pid 16261) Use of int in maxseg socket option. [ 1586.905851][T16261] Use struct sctp_assoc_value instead [ 1587.392447][T16262] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2880'. [ 1588.165009][ T4325] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1588.244075][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1588.750311][T12516] device hsr_slave_0 left promiscuous mode [ 1588.857025][T12516] device hsr_slave_1 left promiscuous mode [ 1588.875636][T12516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1588.954331][T12516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1588.980980][T12516] device bridge_slave_1 left promiscuous mode [ 1589.007313][T12516] bridge0: port 2(bridge_slave_1) entered disabled state [ 1589.181257][T12516] device bridge_slave_0 left promiscuous mode [ 1589.251815][T12516] bridge0: port 1(bridge_slave_0) entered disabled state [ 1589.522505][ T4278] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1589.563317][ T4278] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1589.572339][ T4278] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1589.735683][ T4278] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1589.744837][ T8287] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1589.761356][ T8287] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1590.748941][T12516] team0 (unregistering): Port device team_slave_1 removed [ 1590.818196][T12516] team0 (unregistering): Port device team_slave_0 removed [ 1590.951057][T12516] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1591.008837][T16298] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2889'. [ 1591.183262][T12516] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1591.846182][ T4283] Bluetooth: hci2: command 0x0409 tx timeout [ 1592.014554][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1592.027459][ T4887] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1592.059670][T16305] netlink: 'syz.7.2891': attribute type 2 has an invalid length. [ 1592.470175][T12516] bond0 (unregistering): Released all slaves [ 1593.026007][T16284] wlan0 speed is unknown, defaulting to 1000 [ 1593.979850][ T4283] Bluetooth: hci2: command 0x041b tx timeout [ 1593.987856][ T14] general protection fault, probably for non-canonical address 0xdffffc0000000026: 0000 [#1] PREEMPT SMP KASAN [ 1593.999601][ T14] KASAN: null-ptr-deref in range [0x0000000000000130-0x0000000000000137] [ 1594.008060][ T14] CPU: 0 PID: 14 Comm: kworker/0:1 Not tainted 6.1.148-syzkaller #0 [ 1594.016228][ T14] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1594.026315][ T14] Workqueue: events l2cap_info_timeout [ 1594.031837][ T14] RIP: 0010:__lock_acquire+0xe8/0x7c50 [ 1594.037408][ T14] Code: 42 0f b6 04 00 84 c0 0f 85 53 65 00 00 83 3d 12 a2 bc 0c 00 0f 84 c0 27 00 00 83 3d 81 a3 3c 0b 00 74 29 48 89 d8 48 c1 e8 03 <42> 80 3c 00 00 74 12 48 89 df e8 89 f3 6d 00 49 b8 00 00 00 00 00 [ 1594.057066][ T14] RSP: 0018:ffffc90000137680 EFLAGS: 00010002 [ 1594.063348][ T14] RAX: 0000000000000026 RBX: 0000000000000130 RCX: 1ffff92000026ef4 [ 1594.071340][ T14] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000130 [ 1594.079329][ T14] RBP: ffffc900001378d0 R08: dffffc0000000000 R09: 0000000000000000 [ 1594.087322][ T14] R10: fffffbfff1c3ea96 R11: 1ffffffff1c3ea95 R12: ffff88813fec1dc0 [ 1594.095310][ T14] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 1594.103383][ T14] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1594.112340][ T14] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1594.118941][ T14] CR2: 0000556d1e572660 CR3: 000000000c88e000 CR4: 00000000003506f0 [ 1594.127054][ T14] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1594.135036][ T14] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1594.143015][ T14] Call Trace: [ 1594.146300][ T14] [ 1594.149235][ T14] ? __lock_acquire+0x7c50/0x7c50 [ 1594.154275][ T14] ? __rwlock_init+0x140/0x140 [ 1594.159140][ T14] ? debug_object_activate+0x490/0x490 [ 1594.164787][ T14] ? do_raw_spin_unlock+0x11d/0x230 [ 1594.169997][ T14] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 1594.175904][ T14] ? verify_lock_unused+0x140/0x140 [ 1594.181138][ T14] ? debug_object_assert_init+0x1ed/0x2f0 [ 1594.186868][ T14] ? timer_delete+0x11a/0x1b0 [ 1594.191564][ T14] lock_acquire+0x1b4/0x490 [ 1594.196091][ T14] ? l2cap_sock_ready_cb+0x41/0x120 [ 1594.201309][ T14] ? read_lock_is_recursive+0x10/0x10 [ 1594.206689][ T14] ? __cancel_work+0x1f4/0x2d0 [ 1594.211490][ T14] ? lockdep_hardirqs_on+0x94/0x140 [ 1594.216800][ T14] ? __cancel_work+0x26f/0x2d0 [ 1594.221581][ T14] lock_sock_nested+0x44/0x100 [ 1594.226351][ T14] ? l2cap_sock_ready_cb+0x41/0x120 [ 1594.231562][ T14] l2cap_sock_ready_cb+0x41/0x120 [ 1594.236594][ T14] l2cap_conn_start+0x7d7/0xe90 [ 1594.241468][ T14] ? l2cap_conn_update_id_addr+0x250/0x250 [ 1594.247370][ T14] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1594.253379][ T14] ? read_lock_is_recursive+0x10/0x10 [ 1594.258764][ T14] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 1594.264669][ T14] ? _raw_spin_unlock+0x40/0x40 [ 1594.269525][ T14] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1594.274736][ T14] ? process_one_work+0x7a1/0x1160 [ 1594.279850][ T14] process_one_work+0x898/0x1160 [ 1594.284800][ T14] ? worker_detach_from_pool+0x240/0x240 [ 1594.290544][ T14] ? _raw_spin_lock_irq+0xab/0xe0 [ 1594.295593][ T14] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 1594.300998][ T14] ? kthread_data+0x4b/0xc0 [ 1594.305559][ T14] worker_thread+0xaa2/0x1250 [ 1594.310255][ T14] ? __kthread_parkme+0x162/0x1c0 [ 1594.315381][ T14] kthread+0x29d/0x330 [ 1594.319477][ T14] ? worker_clr_flags+0x1a0/0x1a0 [ 1594.324506][ T14] ? kthread_blkcg+0xd0/0xd0 [ 1594.329196][ T14] ret_from_fork+0x1f/0x30 [ 1594.333647][ T14] [ 1594.336682][ T14] Modules linked in: [ 1594.340601][ T14] ---[ end trace 0000000000000000 ]--- [ 1594.346068][ T14] RIP: 0010:__lock_acquire+0xe8/0x7c50 [ 1594.351801][ T14] Code: 42 0f b6 04 00 84 c0 0f 85 53 65 00 00 83 3d 12 a2 bc 0c 00 0f 84 c0 27 00 00 83 3d 81 a3 3c 0b 00 74 29 48 89 d8 48 c1 e8 03 <42> 80 3c 00 00 74 12 48 89 df e8 89 f3 6d 00 49 b8 00 00 00 00 00 [ 1594.371508][ T14] RSP: 0018:ffffc90000137680 EFLAGS: 00010002 [ 1594.377620][ T14] RAX: 0000000000000026 RBX: 0000000000000130 RCX: 1ffff92000026ef4 [ 1594.385614][ T14] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000130 [ 1594.393598][ T14] RBP: ffffc900001378d0 R08: dffffc0000000000 R09: 0000000000000000 [ 1594.401591][ T14] R10: fffffbfff1c3ea96 R11: 1ffffffff1c3ea95 R12: ffff88813fec1dc0 [ 1594.409571][ T14] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 1594.417544][ T14] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1594.426476][ T14] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1594.433063][ T14] CR2: 0000556d1e572660 CR3: 000000000c88e000 CR4: 00000000003506f0 [ 1594.441066][ T14] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1594.449062][ T14] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1594.457307][ T14] Kernel panic - not syncing: Fatal exception [ 1594.463620][ T14] Kernel Offset: disabled [ 1594.467962][ T14] Rebooting in 86400 seconds..