last executing test programs: 3m7.984108531s ago: executing program 2 (id=180): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x24) fsetxattr$system_posix_acl(r2, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {}, [{}], {}, [], {0x10, 0x7}}, 0x2c, 0x0) mkdirat(r2, &(0x7f0000000100)='./file1\x00', 0x20) r3 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r3, &(0x7f0000000740)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1, 0x68, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@redirect_dir_follow}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) ioctl$SIOCSIFHWADDR(r1, 0x89f2, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x800000, 0x0) write$tun(r4, &(0x7f0000000180)={@void, @val={0x1, 0x4, 0x9, 0xffff, 0xfffe, 0x3}, @ipv4=@igmp={{0x8, 0x4, 0x0, 0x10, 0xc3, 0x68, 0x0, 0x7, 0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, {[@ssrr={0x89, 0x7, 0x43, [@empty]}, @ra={0x94, 0x4}]}}, {0x17, 0x3, 0x0, @private=0xa010102, "57da6e092995016935f5a97d5db7939bad1f67f2a2c1e3a4a0d532d2e2c8859f0a73e676c5a256753a96d23752942664f8bcbf17342d7dc89f1641f279af53d2f451ab6a47b4aba86a6b8ae763ea3aac2ea6975833d273280c7c8afaefc43b60596dc0914e9886b8b062bdd325346cf3d403b8b8042de24bb8debc245c6e877b5c597efca7cd1b6e57f58dd9f3f485e7796e32aa57bcf6d67ef18f"}}}, 0xcd) 3m7.846236918s ago: executing program 2 (id=182): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000cc0), r0) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, r1, 0x325}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000c40)="af", 0x1}], 0x1, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [r4]}}], 0x18}, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r7 = dup3(r6, r4, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r7, 0xc00c6211, 0x0) splice(r4, 0x0, r3, 0x0, 0x80, 0x0) iopl(0x3) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x34, r2, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x94) 3m7.845914713s ago: executing program 2 (id=183): r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$sndseq(r1, &(0x7f0000000040)=[{0x10, 0x0, 0x0, 0xfd, @time, {}, {0xe}, @control}], 0x1c) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x110, &(0x7f0000000280)={'trans=virtio,', {[{@noxattr}]}}) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r3, &(0x7f0000001b80)=""/4084, 0xff4, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x800, 0x0) r5 = dup3(r4, r2, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f0000000380)={r7, 0x0, 0x0, 0x36d7, 0x400, 0xfff, 0x5, 0xca, 0x6, 0x5, 0x4, 0x9}) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r5, 0x800455d1, &(0x7f0000000080)) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)=ANY=[]) 3m7.775568108s ago: executing program 2 (id=185): r0 = epoll_create1(0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/55, 0x37}, {&(0x7f0000000100)=""/23, 0x17}, {&(0x7f0000000240)=""/136, 0x88}, {&(0x7f0000003d80)=""/4112, 0x1010}, {&(0x7f0000000300)=""/76, 0x4c}], 0x5, 0xfffffff4, 0x101) chdir(0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002d40)={&(0x7f0000002bc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@struct={0x1, 0x2, 0x0, 0x4, 0x1, 0x5, [{0x4, 0x1, 0x3}, {0x0, 0x1, 0x1}]}]}, {0x0, [0x5f, 0x0, 0x2e, 0x2e]}}, 0x0, 0x42, 0x0, 0x1, 0xfffffc00, 0x0, @void, @value}, 0x20) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000004c0)={0x3c, @dev={0xac, 0x14, 0x14, 0x43}, 0x4e24, 0x3, 'lc\x00', 0xcecceb29f159ddce, 0x0, 0x28}, 0x2c) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000440)='memory.pressure\x00', 0x2, 0x0) pread64(r3, &(0x7f0000001180)=""/4096, 0x1000, 0x9) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)}, 0x0) r6 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x204000, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0x4, 0x4, {}, {0x0}, 0x1, 0xfffffffffffffffc}) quotactl_fd$Q_GETFMT(r6, 0xffffffff80000400, r7, &(0x7f0000000480)) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[], 0x34}}, 0x0) mount_setattr(r3, &(0x7f0000000500)='./cgroup/../file0\x00', 0x800, &(0x7f00000005c0)={0xa, 0x10007d, 0x160000, {r6}}, 0x20) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) 3m7.704072866s ago: executing program 2 (id=189): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x1000) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000280)={r4, 0x11, 0x6}, 0x10) r5 = syz_io_uring_setup(0xd5, &(0x7f0000000480)={0x0, 0x3}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_MADVISE={0x19, 0x44, 0x0, 0x0, 0x0, &(0x7f0000795000/0x1000)=nil, 0x1000, 0x16, 0x1}) ioctl$VFAT_IOCTL_READDIR_SHORT(r5, 0x82307202, &(0x7f0000000500)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000fc0)=ANY=[@ANYBLOB="726177020000000000000066490000000000000000000000000000000000000002"], 0x48) 3m7.433924253s ago: executing program 2 (id=193): prctl$PR_MCE_KILL_GET(0x22) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x3, 0x0, &(0x7f0000fd7ff0), &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) r4 = socket$netlink(0x10, 0x3, 0xa) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000000000010"]) syz_emit_ethernet(0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff1704bf0200000000000000640000000000019078ac1e0001ac1414aa0587a178e03c1f00000000000009000000110000ac1414aa6401010283edff060300442c0003ac1414bb000000000000000000000000ac14140000000006ac14c1a300000000ac149400004cc83d1c3d"], 0x0) 3m7.420211029s ago: executing program 32 (id=193): prctl$PR_MCE_KILL_GET(0x22) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x3, 0x0, &(0x7f0000fd7ff0), &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) r4 = socket$netlink(0x10, 0x3, 0xa) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000000000010"]) syz_emit_ethernet(0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff1704bf0200000000000000640000000000019078ac1e0001ac1414aa0587a178e03c1f00000000000009000000110000ac1414aa6401010283edff060300442c0003ac1414bb000000000000000000000000ac14140000000006ac14c1a300000000ac149400004cc83d1c3d"], 0x0) 3m5.264151549s ago: executing program 3 (id=213): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@ipv6_getnexthop={0x17, 0x6a, 0x1, 0x0, 0x0, {}, [@NHA_GROUPS={0x4}]}, 0x1c}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000040)=0x5, 0x4) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@ipv6_getnexthop={0x17, 0x6a, 0x1, 0x0, 0x0, {}, [@NHA_GROUPS={0x4}]}, 0x1c}}, 0x0) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000040)=0x5, 0x4) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) (async) 3m5.179905467s ago: executing program 3 (id=214): r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0xe769, 0xa2000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000f, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = syz_open_dev$vbi(&(0x7f0000000840), 0x0, 0x2) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f0000000300)={0x3, "356d2d52c9f35603ff11cf8195f54095822f50f68991ba90bf235582fde86834", 0x2, 0x7, 0x1, 0x20000, 0x10000, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x80984120, &(0x7f0000000240)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) mremap(&(0x7f0000682000/0x3000)=nil, 0x3000, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'bridge_slave_1\x00', 0x200}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x121303, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000006c0)=0x410) r3 = socket$kcm(0x10, 0x5, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c00000014006b0300000000006c1d0010047e0c8131a6080c000af32c6e020075f800250002000f00e5aa000017d34460bc24eab556a705251e6182949a36c2d13b48dfffa600000000ecb8f6ec63c9f4d4938037e786a6d1bdd700", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = dup(r3) write$FUSE_INIT(r4, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="042c11ffc90006000800ce0703"], 0x14) fsopen(&(0x7f00000011c0)='9p\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000480)='Y\xc8\x84R\xb4;J\xcd\x00\x00\x00\x00\x00\x00\x1a\xc11', &(0x7f00000009c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfaes\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80\xd2\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9kUg\xedh\xaa\xbe\xd2VAA\xe10\xd3^\x8an\xe7\x0e\xec\x19vK\x8e\x02?Q2y\xfanNfXl\xf7\xea\x92\x90K\x12\x03\xf7l\xde\xe3\x8b\xddV\x8f!\xe2y|\xd9\xab\x90b\n\xf0\xea\xab\x8a\xe9\x03\xc3~\x94\xd8\tq2W\xcd\x94\xbf\x99\xd2\xf9&\xfb@\x02A00\x0e\x01\n#\xe3u\xcb\xea\xf3n\x8d\xa8AMI\n\xdal\'\a\xe5\xc9\xe9\x14\x00Sg\x99\f\xad\x8f#\xd7\xaa\fM\x1b|ia\xdb\xad\xdcr', 0x0) write$nci(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000680)={'nicvf0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}) syz_clone3(&(0x7f0000000940)={0x8000000, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400), {0x16}, &(0x7f0000000580)=""/210, 0xd2, &(0x7f0000000700)=""/66, &(0x7f0000000800)=[0x0], 0x1}, 0x58) write$tun(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="000086dd0203050009000a004000623d885d000c1101fc000000000000000000000000000000ff0200000000000000000000000000014e224e21000c907801000001171ee43d5566e8c716d078"], 0x42) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r6, 0x26, 0x0) prlimit64(r6, 0xe, 0x0, &(0x7f0000000140)) 3m4.975042633s ago: executing program 3 (id=216): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') keyctl$join(0x1, 0xfffffffffffffffd) chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x6, 0x7fffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = gettid() r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) sendmsg$netlink(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000580)=ANY=[], 0x1f88}], 0x1}, 0x0) tkill(r1, 0x7) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) 3m4.895729851s ago: executing program 3 (id=217): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) move_mount(r0, &(0x7f0000000080)='./file0/file0\x00', r0, &(0x7f0000000040)='./file0/../file0\x00', 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x12f451, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB="6664bd", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 3m4.895148151s ago: executing program 3 (id=218): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000340)='\xcd\xd4\xdc\x8b\'\x00\xb9\x11JX\xc2\x0eP\va\x84\xcb\xa0\xa1r\xab\xd2\xaf\x81\xfd\x14M\xf4\x844z\xc8\xf8x\xa5&v\xe1\x12\xbb\x95\xae u\x1b\xeb\x11\xed\x9a\x83n\xc30L \a\xa7\xf6\xeb\xcb+\xa0\xc8\xb8eo\xb8\x89\xfaWy2\xee\x88\xab\xfb\f \x88\x95C_\r!\xd4\xc2\xa5c\xc6\x1f\x95\x83\x04\xa5\xeb\xa16\xba\a\xe7', &(0x7f0000000780)='&\b\x1a\x16\xd7\xd3K\x18YquL\xf1y\x14\x96:\xfco3\xe2\a\b\xd0\xe3\xd9\x1c!\x8f\xca\x9b\xaf\xc1\xeb\xe4\xde\xbb7O\xf1O\xb8\x05_\x11\x04\a\x82\x1c7h\xfbU\x03T\xf4\xc1\xe2\xd1\xcd<\f\x8bOHb#\x9d\x192\x9aAX\xa2\'\xd8\xb2U\xdbb\xba\xa9C\x8a/\x8d\xdb\x96\xed;A\x8aX\xc4\x14\xb0\x90\xfa4\x16\xdb\xb7\xd8\x05\xb42\x01\xb7\xa1S@\t\xb8.d\x9bT\f\xfa\xbe\xd5qT\xb6\x1e\xcc\xed\xa1\x8c\xa2\x0e\xda\x0fSk\x86\xe7W\xc5\x95\xf6\xda\x8f\xadRt\x9c\xed\xe97\x9dk\x8b\xb8\xc4+l>\x05\xdeJ\xd6\xe9\xb3g\xc050q\x82LL\xe9\xd6\x0e\xd7\x12\xf8\x8f\x1e\x9fj\x0f/\xc7\x91U\xcd\xb0k\x10\xa3#6a\t\xb9\xd3\xbe\xbc\x1f\xfd@\xdd\xb6\x02UJ\xb6\x90\x98\xbed\x1e\xfa\x81 \x0fh?\xb0G\xd2\xa0:$`a\xfd\t\xed\x9aF\\\xdd\xe6*\x1bR;\xe8D\x95\x12uw\xdc8\x06\xfel\xd6\xc7\xc0\xd9)J^\x1b\x14\v\xfc\x9d\xc8\xa1\x89C\xdcH\xb2\x03\x9a\x18\xd93\xd4\xda\x9d\x94\x18\x15\xc54\x8bf\x01\xff\xd1\\\xa6\xdb\xa6\x83\xdc\xcf\xbf\xf1p\xec\x82\xf3\x01\x88\xd4\x87\x02\xf1\xb0[\xbf\x1cr\xc3_1\xd6\xb3Z\xaa\xd7\x81L\xc2{\xfeuIk\xa7\x15\x15', 0x0) mq_unlink(&(0x7f0000000340)='/th0\x00') ioctl$sock_SIOCETHTOOL(r0, 0x89fb, &(0x7f00000000c0)={'bond0\x00', &(0x7f0000000000)=@ethtool_cmd={0x1, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7}}) 3m4.60611601s ago: executing program 3 (id=222): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000000c0)=0x4089, 0x4) (async) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0x400017e) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x0, 0xa888, 0x0, 0x5000000}}]}}]}, 0x48}}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x2) getsockname(r4, &(0x7f0000000d00)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000c80)=0x80) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000810500"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012800a00010063616e"], 0x48}}, 0x0) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0xa, r3, 0x40000d, r1}, 0x10) (async) r7 = syz_open_procfs(0x0, &(0x7f0000000340)='fdinfo/3\x00') (async) r8 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x409c884, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) (async) sendto$inet6(r8, &(0x7f0000003240)="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", 0x586, 0x6d91fb6106d8d10c, 0x0, 0x0) (async) sendto$inet6(r8, &(0x7f0000000000)='I', 0x1, 0x0, 0x0, 0x0) read$FUSE(r7, &(0x7f0000001640)={0x2020}, 0x2020) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e999000000000000000000000000000000000000ffff00000000ac1414bb00000000000000000000000000000000000000000200202000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000f7b9dd64b43955d16dd67ad5db72b81d7962c41dc45e059214186fc1cbd7afbcaa2991393e2453a4f24f8f5b672c0ba1970ae73eff3b967f4029c7db60662a992726684b1976f4107d242eb4357919b63224968b8928eaafb5c71e4ad22c8cda5a236f523eeb4142c813827816cc4d495f639efaf913d6e67ed3e3a295739947fd583559478b4dbf"], 0xb8}}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) 3m4.592330486s ago: executing program 33 (id=222): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000000c0)=0x4089, 0x4) (async) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0x400017e) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x0, 0xa888, 0x0, 0x5000000}}]}}]}, 0x48}}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x2) getsockname(r4, &(0x7f0000000d00)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000c80)=0x80) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000810500"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012800a00010063616e"], 0x48}}, 0x0) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0xa, r3, 0x40000d, r1}, 0x10) (async) r7 = syz_open_procfs(0x0, &(0x7f0000000340)='fdinfo/3\x00') (async) r8 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x409c884, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) (async) sendto$inet6(r8, &(0x7f0000003240)="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", 0x586, 0x6d91fb6106d8d10c, 0x0, 0x0) (async) sendto$inet6(r8, &(0x7f0000000000)='I', 0x1, 0x0, 0x0, 0x0) read$FUSE(r7, &(0x7f0000001640)={0x2020}, 0x2020) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e999000000000000000000000000000000000000ffff00000000ac1414bb00000000000000000000000000000000000000000200202000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000f7b9dd64b43955d16dd67ad5db72b81d7962c41dc45e059214186fc1cbd7afbcaa2991393e2453a4f24f8f5b672c0ba1970ae73eff3b967f4029c7db60662a992726684b1976f4107d242eb4357919b63224968b8928eaafb5c71e4ad22c8cda5a236f523eeb4142c813827816cc4d495f639efaf913d6e67ed3e3a295739947fd583559478b4dbf"], 0xb8}}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) 2m2.25495318s ago: executing program 5 (id=973): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) inotify_init() mount(&(0x7f0000000080)=@sr0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='hfs\x00', 0x483, 0x0) 2m2.180418511s ago: executing program 5 (id=977): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000500000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000005002100030000001400"], 0x3c}}, 0x0) 2m2.179610317s ago: executing program 5 (id=978): prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) futex(&(0x7f000000cffc)=0x1, 0x4, 0x1, 0x0, &(0x7f0000000200), 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) mount$binderfs(0x0, &(0x7f0000000d40)='./binderfs\x00', &(0x7f0000000d80), 0xc0, &(0x7f0000000dc0)={[], [{@defcontext={'defcontext', 0x3d, 'root'}}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) r5 = signalfd4(r4, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000000)={0x54, 0xa, 0xdf7b7a5625e873de, "d9c2955351f9acb1ee54ecc4b00f11f11867b5302c11500e8b8152682b7afe20"}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000080)="020000ffffffba000040000086dd", 0xe, 0x0, &(0x7f0000000000)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @random="6d6eb1f60783"}, 0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100"/20, @ANYRES32=0x0, @ANYBLOB="0008000af200000000000000", @ANYRES32=r2, @ANYBLOB="1400350064756d6d793000"/20], 0x3c}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', &(0x7f0000000240)={0x705141, 0x138}, 0x18) ioctl$DRM_IOCTL_MODE_SETPLANE(r8, 0xc03064b7, &(0x7f0000000040)={r9, 0x0, r9, 0x8dd, 0x9c0, 0xffffffff, 0x8, 0x4, 0x0, 0x40000000, 0x200, 0xfffffffc}) r10 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r10, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r10, @ANYRES32=0xee01, @ANYRES32=0x0], 0xb8}, 0x1, 0x0, 0x0, 0x24044880}, 0x813) 2m2.07737643s ago: executing program 5 (id=979): bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000000)={0x0, 0x0}) (async) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x28011, r0, 0x0) (async) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="e49a00000000000000000000000000000000000028d0f5bc8cd02d0e61e4e70c05b9041a68f4528f24d550bd6ea594dbb17f4e69224fab23a6e16a8b0a89c32fab9d9ba5a86992df106f19279a97c526814c74c58140aa7e035ba83120284ce2f64911a6385f8ce3cc3860b4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000020000000200"/28], 0x50) (async) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) (async) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x401, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f0000000040)={0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8, 0x6, 0x0, 0xdd2fcb245114ab72}}) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r1, @ANYBLOB="09000000000000000021b1000000000000000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="04000000010000000500"/28], 0x50) r4 = dup(r0) (async) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) (async) r6 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r6) (async) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1, r6}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000005c0)=""/99, &(0x7f00000006c0)=""/74, 0xdddd0000}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x1) (async) connect$ax25(0xffffffffffffffff, &(0x7f0000000380)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4}, [@bcast, @null, @bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default]}, 0x48) (async) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000100)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffff}, 0x10007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000140), 0x2, &(0x7f0000000080)=ANY=[@ANYRESOCT=r3]) (async) read$FUSE(r7, &(0x7f0000003040)={0x2020}, 0x2020) (async) r8 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') (async) r9 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r9, r8, 0x0, 0x80000000) 2m2.077266993s ago: executing program 5 (id=980): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f8c0000000c0a01080000000000000000010000000900020073797a3200000000600003805c000080080003400000000250000b80200001800a00010071756f7461000000100002800c0001400000000000000000140001800c000100636f756e74657200000000000000058011e70000666c6f775f6f66666c6f6164000000000900010073797a30"], 0x110}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @pix={0x3, 0x7, 0x58565559, 0x0, 0x8000, 0x3, 0x6, 0xf, 0x1, 0x7, 0x0, 0x1}}) 2m1.980973703s ago: executing program 5 (id=982): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000400)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={0x0, 0x34}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) mkdirat(r3, &(0x7f0000000280)='./file0\x00', 0xce) (async) mkdirat(r3, &(0x7f0000000280)='./file0\x00', 0xce) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000186800000000000090737c73267beee600000000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r6}, 0x10) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) rt_sigqueueinfo(r7, 0x31, &(0x7f0000000ac0)={0x0, 0xc4, 0xff7ffffe}) syz_clone(0x2100000, &(0x7f0000000500)="fe6943", 0x3, &(0x7f0000000540), &(0x7f0000000640), &(0x7f0000000680)="71c4c4df0aa7304bc215d9d67da6df4228e9785e3110f149df6b934406add3edc77266f938b23b9224f2cb842a53369a8166f24aa4632175c109524d1ab6a7f03f0705285cd01efbc6c8d625dc9f8f7996f19bf8426e97da880714a67f1f01595b6a19cb2a041fa157069b4b7620618d07a9decacf96bb95801f7f2177624738dc05a6236b43da631f3a5ac2a35dc08591f7c6dbe38a98b5ddc83b03885587686ddbc0bc6a35dd433e953dedc0813affbd02537022cccaa0b7b736be169dedd11c16b7") (async) r8 = syz_clone(0x2100000, &(0x7f0000000500)="fe6943", 0x3, &(0x7f0000000540), &(0x7f0000000640), &(0x7f0000000680)="71c4c4df0aa7304bc215d9d67da6df4228e9785e3110f149df6b934406add3edc77266f938b23b9224f2cb842a53369a8166f24aa4632175c109524d1ab6a7f03f0705285cd01efbc6c8d625dc9f8f7996f19bf8426e97da880714a67f1f01595b6a19cb2a041fa157069b4b7620618d07a9decacf96bb95801f7f2177624738dc05a6236b43da631f3a5ac2a35dc08591f7c6dbe38a98b5ddc83b03885587686ddbc0bc6a35dd433e953dedc0813affbd02537022cccaa0b7b736be169dedd11c16b7") getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000780)={0x0}, &(0x7f00000007c0)=0xc) sendmsg$nl_route(r3, &(0x7f0000000900)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x220000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)=@RTM_NEWNSID={0x34, 0x58, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NETNSA_PID={0x8, 0x2, r7}, @NETNSA_PID={0x8, 0x2, r8}, @NETNSA_PID={0x8, 0x2, r9}, @NETNSA_FD={0x8, 0x3, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x41) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000200020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='9p_protocol_dump\x00', r10}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='9p_protocol_dump\x00', r10}, 0x10) mount$9p_fd(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) (async) mount$9p_fd(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x4}, @IFLA_GTP_FD0={0x8, 0x1, @udp=r1}, @IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_FD0={0x8, 0x1, @udp6=r1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x4}, @IFLA_GTP_FD0={0x8, 0x1, @udp=r1}, @IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_FD0={0x8, 0x1, @udp6=r1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}}, 0x0) 1m45.984610502s ago: executing program 34 (id=982): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000400)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={0x0, 0x34}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) mkdirat(r3, &(0x7f0000000280)='./file0\x00', 0xce) (async) mkdirat(r3, &(0x7f0000000280)='./file0\x00', 0xce) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000186800000000000090737c73267beee600000000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r6}, 0x10) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) rt_sigqueueinfo(r7, 0x31, &(0x7f0000000ac0)={0x0, 0xc4, 0xff7ffffe}) syz_clone(0x2100000, &(0x7f0000000500)="fe6943", 0x3, &(0x7f0000000540), &(0x7f0000000640), &(0x7f0000000680)="71c4c4df0aa7304bc215d9d67da6df4228e9785e3110f149df6b934406add3edc77266f938b23b9224f2cb842a53369a8166f24aa4632175c109524d1ab6a7f03f0705285cd01efbc6c8d625dc9f8f7996f19bf8426e97da880714a67f1f01595b6a19cb2a041fa157069b4b7620618d07a9decacf96bb95801f7f2177624738dc05a6236b43da631f3a5ac2a35dc08591f7c6dbe38a98b5ddc83b03885587686ddbc0bc6a35dd433e953dedc0813affbd02537022cccaa0b7b736be169dedd11c16b7") (async) r8 = syz_clone(0x2100000, &(0x7f0000000500)="fe6943", 0x3, &(0x7f0000000540), &(0x7f0000000640), &(0x7f0000000680)="71c4c4df0aa7304bc215d9d67da6df4228e9785e3110f149df6b934406add3edc77266f938b23b9224f2cb842a53369a8166f24aa4632175c109524d1ab6a7f03f0705285cd01efbc6c8d625dc9f8f7996f19bf8426e97da880714a67f1f01595b6a19cb2a041fa157069b4b7620618d07a9decacf96bb95801f7f2177624738dc05a6236b43da631f3a5ac2a35dc08591f7c6dbe38a98b5ddc83b03885587686ddbc0bc6a35dd433e953dedc0813affbd02537022cccaa0b7b736be169dedd11c16b7") getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000780)={0x0}, &(0x7f00000007c0)=0xc) sendmsg$nl_route(r3, &(0x7f0000000900)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x220000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)=@RTM_NEWNSID={0x34, 0x58, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NETNSA_PID={0x8, 0x2, r7}, @NETNSA_PID={0x8, 0x2, r8}, @NETNSA_PID={0x8, 0x2, r9}, @NETNSA_FD={0x8, 0x3, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x41) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000200020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='9p_protocol_dump\x00', r10}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='9p_protocol_dump\x00', r10}, 0x10) mount$9p_fd(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) (async) mount$9p_fd(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x4}, @IFLA_GTP_FD0={0x8, 0x1, @udp=r1}, @IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_FD0={0x8, 0x1, @udp6=r1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x4}, @IFLA_GTP_FD0={0x8, 0x1, @udp=r1}, @IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_FD0={0x8, 0x1, @udp6=r1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}}, 0x0) 1m22.777339138s ago: executing program 6 (id=1226): r0 = syz_usbip_server_init(0x4) getdents(r0, &(0x7f0000000140)=""/134, 0x86) syz_usb_connect(0x1, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$vga_arbiter(r1, &(0x7f00000000c0)=@other={'unlock', ' ', 'none'}, 0xc) write$usbip_server(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000003"], 0x38) 1m21.505343271s ago: executing program 6 (id=1228): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10201, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_usb_connect$printer(0x4, 0x2d, 0x0, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaa6acf7427c100000000000000000000ff020000003c4b899e0000000000000173009078000000000c79ef1cfb698e35cb7c556097"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$char_usb(r4, &(0x7f00000001c0)=""/4068, 0xfe4) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080), 0x480000, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r5, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$KVM_RUN(r6, 0xae80, 0x0) openat$cgroup(r6, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x220c) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) syz_clone3(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, {0x2f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) 1m20.708856511s ago: executing program 6 (id=1229): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xe) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x66e80, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x1d, 0x1, 0x2}, [@CGW_DST_IF={0x8, 0xa, r3}, @CGW_SRC_IF={0x8, 0x9, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000500000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000005002100030000001400350064756d6d7930"], 0x3c}}, 0x0) 1m18.908519954s ago: executing program 6 (id=1232): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@ipv6_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0xa}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x1, 0x8}}]}, 0x38}}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x10100, 0x0) ioctl$KDFONTOP_COPY(r3, 0x4b72, &(0x7f0000000080)={0x3, 0x1, 0x1, 0x1c, 0x130, &(0x7f0000000640)}) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) 1m18.831458028s ago: executing program 6 (id=1235): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x80) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1607010, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x87, r1}, './file0\x00'}) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT_IN6(r2, 0x89e1, &(0x7f0000000000)={@private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2e}}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000911053000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x55, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1m18.716078895s ago: executing program 6 (id=1236): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0x19, 0x1b, &(0x7f0000001800)="63ec0adf33c9f7b9860000000000", 0x0, 0xc69a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) read$FUSE(r1, &(0x7f0000000100)={0x2020}, 0x2020) r3 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x40580) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, &(0x7f00000000c0)={0x8000005, 0x0, "679c51ecbc83d1e22e845e3ede57135adc714d432546da16827000"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x8, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000000000000c6000100250000008510000001000000950000000000000018400008ffffffff000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$VIDIOC_TRY_ENCODER_CMD(r3, 0xc028564e, &(0x7f0000000000)={0x2, 0x1, [0x3, 0x400, 0x9, 0xe47a, 0x2, 0x40, 0x8, 0x10001]}) 1m2.031202342s ago: executing program 35 (id=1236): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0x19, 0x1b, &(0x7f0000001800)="63ec0adf33c9f7b9860000000000", 0x0, 0xc69a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) read$FUSE(r1, &(0x7f0000000100)={0x2020}, 0x2020) r3 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x40580) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, &(0x7f00000000c0)={0x8000005, 0x0, "679c51ecbc83d1e22e845e3ede57135adc714d432546da16827000"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x8, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000000000000c6000100250000008510000001000000950000000000000018400008ffffffff000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$VIDIOC_TRY_ENCODER_CMD(r3, 0xc028564e, &(0x7f0000000000)={0x2, 0x1, [0x3, 0x400, 0x9, 0xe47a, 0x2, 0x40, 0x8, 0x10001]}) 52.382998797s ago: executing program 1 (id=720): r0 = io_uring_setup(0x1de0, &(0x7f0000000440)={0x0, 0x0, 0x80, 0x0, 0xfffffffb}) socket$packet(0x11, 0xa, 0x300) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x2b0, 0x150, 0x150, 0x0, 0xf8010000, 0x380, 0x238, 0x238, 0x380, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x248, 0x2b0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'batadv0\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x4}}}, @common=@inet=@sctp={{0x148}, {[], [], [], 0x5, [], 0x0, 0x6}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) r2 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r2, &(0x7f00000004c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xa}, 0x2}, 0x1c) write$binfmt_misc(r2, &(0x7f00000000c0), 0xfff7) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r3}, 0x38) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x21, 0x20000038, r4) 44.534480471s ago: executing program 1 (id=720): r0 = io_uring_setup(0x1de0, &(0x7f0000000440)={0x0, 0x0, 0x80, 0x0, 0xfffffffb}) socket$packet(0x11, 0xa, 0x300) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x2b0, 0x150, 0x150, 0x0, 0xf8010000, 0x380, 0x238, 0x238, 0x380, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x248, 0x2b0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'batadv0\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x4}}}, @common=@inet=@sctp={{0x148}, {[], [], [], 0x5, [], 0x0, 0x6}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) r2 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r2, &(0x7f00000004c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xa}, 0x2}, 0x1c) write$binfmt_misc(r2, &(0x7f00000000c0), 0xfff7) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r3}, 0x38) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x21, 0x20000038, r4) 44.009294641s ago: executing program 0 (id=1103): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc", 0x68}], 0x1, 0x0, 0x6b}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup2(r0, r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @local, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {}]}]}}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000180)="34a73b3b6784617c23c29fc88a19d0c38cf121ffd3b05ba48d382383dda61460b4e58b099d1bd0903cb3685e1be6349d69670c947e7a5da30b61524ecdc0aa814f13779b240ce4280b245b6b4e71d0a2b7c805f1f2516ad2da8f878a06ef05e220ca7dbc8e40a6d89bfa4b9f5423812c2f0e8514f8badf8992bbf6dea833473fe38eedfaf26f95b354ed0b62f9d9429a06524477e17f5ea79caefc27c53ea86b6b4ed86e831928069976497f91afaf04616beb06ac641616d24b698c9548885cbdcc6970e1f688c2b4b669bc708fae3518d43f00e076") ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r3, 0x4068aea3, &(0x7f0000000000)={0xc4, 0x0, 0xfffffffffffffffd}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x4, [{0x11}, {0x0, 0x100000000000000}]}, 0x68) r4 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r4, &(0x7f0000000000)=@in6={0x21, 0x1000, 0x2, 0x0, {0xa, 0x4e22, 0xc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xc915}}, 0x4f) 36.399037817s ago: executing program 1 (id=720): r0 = io_uring_setup(0x1de0, &(0x7f0000000440)={0x0, 0x0, 0x80, 0x0, 0xfffffffb}) socket$packet(0x11, 0xa, 0x300) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x2b0, 0x150, 0x150, 0x0, 0xf8010000, 0x380, 0x238, 0x238, 0x380, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x248, 0x2b0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'batadv0\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x4}}}, @common=@inet=@sctp={{0x148}, {[], [], [], 0x5, [], 0x0, 0x6}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) r2 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r2, &(0x7f00000004c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xa}, 0x2}, 0x1c) write$binfmt_misc(r2, &(0x7f00000000c0), 0xfff7) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r3}, 0x38) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x21, 0x20000038, r4) 36.094751897s ago: executing program 0 (id=1103): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc", 0x68}], 0x1, 0x0, 0x6b}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup2(r0, r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @local, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {}]}]}}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000180)="34a73b3b6784617c23c29fc88a19d0c38cf121ffd3b05ba48d382383dda61460b4e58b099d1bd0903cb3685e1be6349d69670c947e7a5da30b61524ecdc0aa814f13779b240ce4280b245b6b4e71d0a2b7c805f1f2516ad2da8f878a06ef05e220ca7dbc8e40a6d89bfa4b9f5423812c2f0e8514f8badf8992bbf6dea833473fe38eedfaf26f95b354ed0b62f9d9429a06524477e17f5ea79caefc27c53ea86b6b4ed86e831928069976497f91afaf04616beb06ac641616d24b698c9548885cbdcc6970e1f688c2b4b669bc708fae3518d43f00e076") ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r3, 0x4068aea3, &(0x7f0000000000)={0xc4, 0x0, 0xfffffffffffffffd}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x4, [{0x11}, {0x0, 0x100000000000000}]}, 0x68) r4 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r4, &(0x7f0000000000)=@in6={0x21, 0x1000, 0x2, 0x0, {0xa, 0x4e22, 0xc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xc915}}, 0x4f) 27.578301399s ago: executing program 0 (id=1103): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc", 0x68}], 0x1, 0x0, 0x6b}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup2(r0, r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @local, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {}]}]}}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000180)="34a73b3b6784617c23c29fc88a19d0c38cf121ffd3b05ba48d382383dda61460b4e58b099d1bd0903cb3685e1be6349d69670c947e7a5da30b61524ecdc0aa814f13779b240ce4280b245b6b4e71d0a2b7c805f1f2516ad2da8f878a06ef05e220ca7dbc8e40a6d89bfa4b9f5423812c2f0e8514f8badf8992bbf6dea833473fe38eedfaf26f95b354ed0b62f9d9429a06524477e17f5ea79caefc27c53ea86b6b4ed86e831928069976497f91afaf04616beb06ac641616d24b698c9548885cbdcc6970e1f688c2b4b669bc708fae3518d43f00e076") ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r3, 0x4068aea3, &(0x7f0000000000)={0xc4, 0x0, 0xfffffffffffffffd}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x4, [{0x11}, {0x0, 0x100000000000000}]}, 0x68) r4 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r4, &(0x7f0000000000)=@in6={0x21, 0x1000, 0x2, 0x0, {0xa, 0x4e22, 0xc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xc915}}, 0x4f) 27.456845235s ago: executing program 1 (id=720): r0 = io_uring_setup(0x1de0, &(0x7f0000000440)={0x0, 0x0, 0x80, 0x0, 0xfffffffb}) socket$packet(0x11, 0xa, 0x300) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x2b0, 0x150, 0x150, 0x0, 0xf8010000, 0x380, 0x238, 0x238, 0x380, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x248, 0x2b0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'batadv0\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x4}}}, @common=@inet=@sctp={{0x148}, {[], [], [], 0x5, [], 0x0, 0x6}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) r2 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r2, &(0x7f00000004c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xa}, 0x2}, 0x1c) write$binfmt_misc(r2, &(0x7f00000000c0), 0xfff7) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r3}, 0x38) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x21, 0x20000038, r4) 19.65630047s ago: executing program 0 (id=1103): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc", 0x68}], 0x1, 0x0, 0x6b}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup2(r0, r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @local, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {}]}]}}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000180)="34a73b3b6784617c23c29fc88a19d0c38cf121ffd3b05ba48d382383dda61460b4e58b099d1bd0903cb3685e1be6349d69670c947e7a5da30b61524ecdc0aa814f13779b240ce4280b245b6b4e71d0a2b7c805f1f2516ad2da8f878a06ef05e220ca7dbc8e40a6d89bfa4b9f5423812c2f0e8514f8badf8992bbf6dea833473fe38eedfaf26f95b354ed0b62f9d9429a06524477e17f5ea79caefc27c53ea86b6b4ed86e831928069976497f91afaf04616beb06ac641616d24b698c9548885cbdcc6970e1f688c2b4b669bc708fae3518d43f00e076") ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r3, 0x4068aea3, &(0x7f0000000000)={0xc4, 0x0, 0xfffffffffffffffd}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x4, [{0x11}, {0x0, 0x100000000000000}]}, 0x68) r4 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r4, &(0x7f0000000000)=@in6={0x21, 0x1000, 0x2, 0x0, {0xa, 0x4e22, 0xc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xc915}}, 0x4f) 19.172248571s ago: executing program 1 (id=720): r0 = io_uring_setup(0x1de0, &(0x7f0000000440)={0x0, 0x0, 0x80, 0x0, 0xfffffffb}) socket$packet(0x11, 0xa, 0x300) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x2b0, 0x150, 0x150, 0x0, 0xf8010000, 0x380, 0x238, 0x238, 0x380, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x248, 0x2b0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'batadv0\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x4}}}, @common=@inet=@sctp={{0x148}, {[], [], [], 0x5, [], 0x0, 0x6}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) r2 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r2, &(0x7f00000004c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xa}, 0x2}, 0x1c) write$binfmt_misc(r2, &(0x7f00000000c0), 0xfff7) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r3}, 0x38) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x21, 0x20000038, r4) 11.994362127s ago: executing program 0 (id=1103): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc", 0x68}], 0x1, 0x0, 0x6b}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup2(r0, r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @local, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {}]}]}}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000180)="34a73b3b6784617c23c29fc88a19d0c38cf121ffd3b05ba48d382383dda61460b4e58b099d1bd0903cb3685e1be6349d69670c947e7a5da30b61524ecdc0aa814f13779b240ce4280b245b6b4e71d0a2b7c805f1f2516ad2da8f878a06ef05e220ca7dbc8e40a6d89bfa4b9f5423812c2f0e8514f8badf8992bbf6dea833473fe38eedfaf26f95b354ed0b62f9d9429a06524477e17f5ea79caefc27c53ea86b6b4ed86e831928069976497f91afaf04616beb06ac641616d24b698c9548885cbdcc6970e1f688c2b4b669bc708fae3518d43f00e076") ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r3, 0x4068aea3, &(0x7f0000000000)={0xc4, 0x0, 0xfffffffffffffffd}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x4, [{0x11}, {0x0, 0x100000000000000}]}, 0x68) r4 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r4, &(0x7f0000000000)=@in6={0x21, 0x1000, 0x2, 0x0, {0xa, 0x4e22, 0xc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xc915}}, 0x4f) 8.171069826s ago: executing program 1 (id=720): r0 = io_uring_setup(0x1de0, &(0x7f0000000440)={0x0, 0x0, 0x80, 0x0, 0xfffffffb}) socket$packet(0x11, 0xa, 0x300) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x2b0, 0x150, 0x150, 0x0, 0xf8010000, 0x380, 0x238, 0x238, 0x380, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x248, 0x2b0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'batadv0\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x4}}}, @common=@inet=@sctp={{0x148}, {[], [], [], 0x5, [], 0x0, 0x6}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) r2 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r2, &(0x7f00000004c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xa}, 0x2}, 0x1c) write$binfmt_misc(r2, &(0x7f00000000c0), 0xfff7) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r3}, 0x38) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x21, 0x20000038, r4) 2.384263598s ago: executing program 4 (id=1508): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000400)=[{&(0x7f0000000080)="db", 0x1}], 0x1, 0x2, 0x21d1873d, 0x4) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x28, 0x3f7, 0x4, 0x70bd2d, 0x25dfdbfd, {0x7, 0x7, './file0', './file0'}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0xd96977cc9696299}, 0x0) syz_usb_connect(0x2, 0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000092df5510ac05269289b201020301090222000100000000090400120103e90000097c000000000000000705", @ANYRES32], 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100fffe08000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f840000000c0a01030000000000000000010000000900020073797a32000000005800038054000080080003400000000248000b80200001800a00010071756f7461000000100002800c0001400000000000000000100001800c000100636f756e74657200140001800a00010072616e6765000000040002800900010073797a30"], 0x108}}, 0x0) r3 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x5, 0x2, 0x0, 0x6}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r6, 0x8b32, &(0x7f0000000040)) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={0xffffffffffffffff, r5, 0x25, 0x14, @val=@netfilter={0x2, 0x1, 0x83}}, 0x20) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000dc0)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x0, 0x1c8, 0xf0, 0x328, 0xf0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth0_to_bridge\x00', {}, {0xff}, 0x0, 0xff, 0x1}, 0x0, 0xa8, 0xf0, 0x0, {0x0, 0x3a010000}}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@private0, 0x2a, 0x7, 0x7ee}}}, {{@ipv6={@private1, @loopback, [0xff, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0x0, 0xffffffff], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x0, 0x4}, {0x4, 0x6, 0x4}, 0xe, 0x1}}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00'}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x3, 0x0, 0x0, @loopback, @local, @mcast2, [], [0x0, 0x0, 0xff]}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x0, 0x9}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x5e, 0x0, 0x0, 0x2, 0x0, @dev={0xfe, 0x80, '\x00', 0x3c}, @private0, @local, [0x0, 0xff], [0x0, 0x0, 0x0, 0xffffffff]}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) ioctl$FBIOBLANK(r3, 0x4611, 0x0) 2.243683903s ago: executing program 7 (id=1511): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x402000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000001e0001002bbd7000ffdbdf25e0000001000000000000000000000000000004d302003c00ff0200000000004119000000000000000001090000000335000024000900ff7f0000000000000700000000000000ff010000000000000000000000010000"], 0x64}, 0x1, 0x0, 0x0, 0x20}, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='freezer.self_freezing\x00', 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = fanotify_init(0x200, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r5, 0x455, 0x8000003, r6, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r7, &(0x7f0000000080), 0x8) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}]}]}]}], {0x14}}, 0x80}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000880)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff88644500003c000000210006907800000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000001ae0af7205f801f8942d19ab3ee2503389c7fa3bd92ae4d7bf00727505"], 0x0) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f00000000c0)="240000001e005f3814fffffffffffff8070000000000090000000000060005000d101000", 0x24) getsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f0000000340)={@private2, 0x0}, &(0x7f0000000580)=0x14) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000bc7ef9642d29ba564165605dca29708efdf9b15a5c10a126121b2751f642635bcd9a8bf7a928a5d054b0d2c54d519ea75c52f41ed6f2886973626b684c8bd9108c0b0b2ea7e556948f0367aff4fbcede3294f6e73d06ad16dc2d26725ff833b5f83b499918e6a6ec245b781d41aee9624c847e2f2312d6b9db45bad354fc1a3f20407ffe406483a0524937ee7559e4bf70136746b37fdfbbb152758d37ed8bcac41fb7243bdcd536249c7996e898b61927eaa5a8790054ba13d3ade593220f96027090a34aaf7ea92f41aab73e7a85eef87e956bb7c5c76a347264fd99359f4e57b0dcc2bcc188ea880a4b11a8bb81eb22b0ddfc689e3218cf310dcc61cab354149d9107d8a88b0aa5b5661555f00443aee5e714009e52cee5e88f008148ddbc0fa81bf938bed4a1ac778d5337cc0311d0772eeac3eab38426e8d1472ff514aa5379ed21551790cc10148410b4fc27582fd7106a8887a9a0b613dfe10aee77542d887208f5534f5dce4d43f258fc9ef975834e1917666e2aff1cebfc3ce2c1e8ff66bba1d9050000000000000078db7024bf321636bede8651e672ed4f01ba5da2c3f9042a8552bd3f2c9ad546ad0ea20b4d35fb0a15c6239f67c7747a40fe26a88adf727fd1b801b4e56fbffcad99ce68fe2af0d94fdc78d27268de435021dca51acaa7a9e0944bdf579c170db6405944b6791a7713ee54f650fdf71b57c3629fb185efce700620ef5744623be08ec935dd563e6ba0b461bda98b364acf3dcdafa9b0e68c21ea509212c2938aa09cc31aa4ee5bfb8e507181909f5854b13997af4888cd61c8aab5fdfd701a16d546e5a533cd9b985dcc582b67979551dcc750fc51f2c9b6814edeffc76a86ea9f58b7c66fa24540daf14c2163d064f8cf0b4878f81e6b8bc4dabc10dac82b39e033963a6d02434cb783a198829d1373790a85c0e01a362d89e80165d280283af3c2060000000000000034b12a73b0c53bfae5d2f6e55728052247adfe0966c6c5eca57918c4540c979a70a281ba00e408c9fe1b20fa208976dd6a56f9bd9a74d81447c9b265d8c23f0e983e0b1d2d62d1e57c9188e4882634476e62ab1b7415a58208eaaf166d14720092f79a6197fe8b4ea7d5485cc6b3630afed8d3403cfa4d7bf48efb371706e0e65901eea3743c98261cbb7a246cf62f99bbc918741d32539ec0754e7d7f08dd45aaf49623342eabf466e54d8da4346e73da54ba2e4b5e2ae2823864d4147b490e55c9509f75c8828500ac32cab11b0262e75fa9e39e3792d01e0b210fdfb686bfffdc677432f6332c1a27502b43997060acdf7784c79fed0325e06f6b64b6434ebf4730509bcf95b9a1d0ba7c469d55351cc1dce6c90f5872e7ad5eed5f850d9d1f928b4e0263b241e8fe03e5e66252c8a3bd320e8deee5b91c653b8f22f58cff36c2ba4d6774f14229939595d2beb998c9312212de00468fc488591aca07ab75fba4a318d3ee4581711927b77a7f14dbcd639892f8cb0000000000000080411736eb1ee86eec338197a56293c9cdb72e84155681553b896d58b62a96852320e74dc4c9b41d6f90d2353dc573a94a092a84209c12da57f8c78e161b0899eb1c8b694d26c5fbf7f65fefacdbf39151f335dddc3b179a13f6de93ffb338e94738c86e35e9fcc654e4d6618dc1201cbd16e1281df911e6c699da16fbbb7a2e5c77966c98d3e7edd58cabfe6bf1bb7f6329084e3e4a2a36da07bbac3ebc00472f55b7966f250109fcce0ad5d4526d20ef74d1a634d724"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x1, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000002040)=ANY=[@ANYBLOB="1802000000000000000800000000000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r12, r11, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@getaddr={0x14, 0x16, 0x100, 0x70bd2a, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) r13 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r13, &(0x7f0000000400)={'#! ', './file0'}, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x24, &(0x7f0000000900)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000001800000040000000000000004000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000101000085000000060000008500000034000000dc0bfeff000000001d70f0ff010000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x9, 0x68, &(0x7f0000000640)=""/104, 0x41000, 0x58, '\x00', r9, @fallback=0x2f, r3, 0x8, &(0x7f00000006c0)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000700)={0x5, 0x5, 0x1ff}, 0x10, r12, 0xffffffffffffffff, 0x4, &(0x7f0000000740)=[r3, r3, r3, r3, r3, 0x1, r3, r3, r13], &(0x7f0000000780)=[{0x2, 0x5, 0x2}, {0x5, 0x2, 0x8, 0x4}, {0x2, 0x2, 0x0, 0xc}, {0x1, 0x2, 0xb, 0x7}], 0x10, 0x8, @void, @value}, 0x94) preadv2(r3, &(0x7f0000000380)=[{&(0x7f00000005c0)=""/99, 0x63}], 0x1, 0x0, 0x0, 0x0) r14 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r14, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 2.223732146s ago: executing program 0 (id=1103): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc", 0x68}], 0x1, 0x0, 0x6b}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup2(r0, r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @local, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {}]}]}}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000180)="34a73b3b6784617c23c29fc88a19d0c38cf121ffd3b05ba48d382383dda61460b4e58b099d1bd0903cb3685e1be6349d69670c947e7a5da30b61524ecdc0aa814f13779b240ce4280b245b6b4e71d0a2b7c805f1f2516ad2da8f878a06ef05e220ca7dbc8e40a6d89bfa4b9f5423812c2f0e8514f8badf8992bbf6dea833473fe38eedfaf26f95b354ed0b62f9d9429a06524477e17f5ea79caefc27c53ea86b6b4ed86e831928069976497f91afaf04616beb06ac641616d24b698c9548885cbdcc6970e1f688c2b4b669bc708fae3518d43f00e076") ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r3, 0x4068aea3, &(0x7f0000000000)={0xc4, 0x0, 0xfffffffffffffffd}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x4, [{0x11}, {0x0, 0x100000000000000}]}, 0x68) r4 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r4, &(0x7f0000000000)=@in6={0x21, 0x1000, 0x2, 0x0, {0xa, 0x4e22, 0xc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xc915}}, 0x4f) 622.126475ms ago: executing program 4 (id=1512): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fsopen(&(0x7f00000003c0)='jfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000280)='uid', &(0x7f0000000400)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000c40)=ANY=[@ANYBLOB="580000001000010009000000000000000000ffff", @ANYRES32=r0, @ANYBLOB="00000000da44000024001a8020000a8014000700fe80000000000000000200400000000005000800020000"], 0x58}}, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r0, 0x2, &(0x7f0000000000)={0x3, 0x8000000000000000}, 0x0) 576.392893ms ago: executing program 7 (id=1513): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = dup(r5) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000001c7a0000cade1533b70002006e00"/38], 0x2c}}, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xaece, 0x0) pipe2$9p(&(0x7f0000000200), 0x80) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000500)=""/237, 0xed}], 0x1, 0x4000000, 0x5) futex(&(0x7f0000000180), 0x5, 0x0, 0x0, &(0x7f0000004000)=0x10, 0x24000002) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000340)=ANY=[@ANYRESOCT=0x0, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0) r10 = accept4(r9, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[], 0x2dc}, 0x1, 0x0, 0x0, 0x4000000}, 0x10000000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r11, &(0x7f0000891000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000600)="646652f3bb659c0fc7ab0300670f0020baf80cb4b4b88e03560f2311fc0cecf30fc736e50080665300f30fc7316466d84885651fbaf80c66b820169b8966efbafc0c66ed", 0x45}], 0xaaaaaaaaaaaabbd, 0x52, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002540)=""/216, 0xd8}}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) 571.076955ms ago: executing program 4 (id=1514): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0x511e36599023622}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000000)={{0x80}, 'port1\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 570.777157ms ago: executing program 4 (id=1515): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x11) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f0000000200)='./bus\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xb) copy_file_range(r1, &(0x7f0000000080), r0, &(0x7f0000000100), 0xfffffffffffffff8, 0x0) 491.078616ms ago: executing program 4 (id=1516): unshare(0x62040200) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"]}, 0x1d9) recvmmsg(0xffffffffffffffff, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f0000000640)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) socket(0x2a, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000c40)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_conn_req={{0x2, 0x6, 0x4}, {0x7, 0x3ff}}]}}, 0x11) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000840)=""/4096) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r3, 0x327}, 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x4, 0x9, 0x3, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @loopback, 0x700, 0x20, 0x8, 0x3}}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x88000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x20000041) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [], 0x0, 0x0, 0x0}, 0x1e8) 288.575108ms ago: executing program 4 (id=1517): r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) getpeername$qrtr(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xc) socket$inet6_sctp(0xa, 0x1, 0x84) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000040)={0x1, 0x0, 0x7, &(0x7f0000000140)={0xc, "b7fc741714bd8325de9540e3cfc840d0b9358338de5fdb7ad189aa80277f6cd2e2"}}) r2 = socket$rxrpc(0x21, 0x2, 0xa) syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @remote}}, 0x24) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) recvfrom$rxrpc(r2, 0x0, 0x0, 0xe8ce25b3ffff0000, 0x0, 0x0) 202.784194ms ago: executing program 7 (id=1518): sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x8040) (async) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x8040) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) (async) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r0, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x7fffffff}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x6000040) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x1406, 0x400, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x11) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000380), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LISTALL(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r2, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x801) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_TX_TS(r3, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x58, r4, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x19d, 0x70}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x4}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x2}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0xc000}, 0x20050081) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000640)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000006c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r5, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x90100920}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x44, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x2, 0x3c}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "a0a6043670"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x11}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000840), r3) (async) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000840), r3) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r3, &(0x7f0000000980)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0x88, r7, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40000c0}, 0x40040) (async) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r3, &(0x7f0000000980)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0x88, r7, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40000c0}, 0x40040) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000a00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x28, r4, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x8, 0x54}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004000}, 0x8000) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000000b00)=@generic={0x0, 0x6, 0x7}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONNECT(r9, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x800000a}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x28, r4, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x220, 0x3a}}}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x91}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r9, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x800000a}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x28, r4, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x220, 0x3a}}}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x91}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000c40), r5) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000000c40), r5) write$cgroup_int(r5, &(0x7f0000000c80)=0x9, 0x12) nanosleep(&(0x7f0000000cc0), &(0x7f0000000d00)) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000ec0)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000d80)={0xc4, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe}]}, @TIPC_NLA_SOCK={0x9c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x100}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x49a8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5d}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x66}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc1d9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x416}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd9}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xe9}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40440}, 0x4008001) writev(r5, &(0x7f0000001500)=[{&(0x7f0000000f00)="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", 0xfd}, {&(0x7f0000001000)="ef149cb8947fd234dc52475c049de676ad63eaf54c035d303f563f81fe8141bfbf11ae36b3390ff59ff0fa1930480e4658dce636a394f6366d6f7ca302a51d1127ac97675c007fdd8eda35f1f5ae15eedd190634664341a706d324c37f36452a5bc76b94070711dd71e7f0b95af57085ceaad658dbba50a3eeddc0258e921786c2d03ab8def9ac7307169e007e", 0x8d}, {&(0x7f00000010c0)="bd103442b62afcdeaa6db09f23aa56bf22b6923afe24d3c118f3bb69bde2ee079d77e2557a9eb74493721f9d2896c6e0ccd6a6df41a66a9f5d3736bcddebd61997c459449024162072935da5cd441e1cd2ac4debddef68a1e873d24e2e205cbc6a5632db7aee0fcea0fcacd14575a0e4a143b168cf", 0x75}, {&(0x7f0000001140)="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", 0xfb}, {&(0x7f0000001240)="82d1fb318306e6174507aa0c2d7b3ce85c54c517f8fa8e9567f27cfe79bcfc19d98379defe8c4cff413b98cc967ca6cc3557e5290497c13dc5c11ee010d0b2f99c9c1f085abde82105703195f5b39ab67e18d81a88b2214f030e20fa6043cea3035d517be5e22c6ff1589b8548af250f2a7901b1a5485149fb12f82e6a7ae0cc81426338eb181836b03abaf2aad8fc9e3231c59fdf5065dfbcb7", 0x9a}, {&(0x7f0000001300)="92c37de5f5f4f252d788566b4c4acd450d48320ac035011321fda39fb2204b0e4784e8b024e29781b494c847c5484c18c9055720918dc3b92cfa1b53324e126c80479d4ea75903c94d4913db1c273757ac50607d22bdbd9a671629ebd146fd8eb1c5d0ad351a8cf92ada92f715b45cef0da904df15431bcfab9cadf812de51ec6f22a687ba8bfbd3d5e664afffb7d6420ae013394c16d783cbd06b1b13e7e5b8736c0f6d1dcab87832b81dfa301850bc8abec2c73c98ccd99f328906a7b3e3fec4f75cb1fb647ae4483e33522267e22e3e1a426d666548887f", 0xd9}, {&(0x7f0000001400)}, {&(0x7f0000001440)}, {&(0x7f0000001480)="edc1ceedfdd7bc4c22e277826e6e7e3ecd3742460e2c0e78146a7e401ab23755bc3753a93ef76cc684eb1a5fcc79aa61447c187fd380db51338e06a0adeff80881dc7ce380d21b5d508a1fe6e6f2cbd3275beef7ca67a91f76a6543a7eb4", 0x5e}], 0x9) (async) writev(r5, &(0x7f0000001500)=[{&(0x7f0000000f00)="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", 0xfd}, {&(0x7f0000001000)="ef149cb8947fd234dc52475c049de676ad63eaf54c035d303f563f81fe8141bfbf11ae36b3390ff59ff0fa1930480e4658dce636a394f6366d6f7ca302a51d1127ac97675c007fdd8eda35f1f5ae15eedd190634664341a706d324c37f36452a5bc76b94070711dd71e7f0b95af57085ceaad658dbba50a3eeddc0258e921786c2d03ab8def9ac7307169e007e", 0x8d}, {&(0x7f00000010c0)="bd103442b62afcdeaa6db09f23aa56bf22b6923afe24d3c118f3bb69bde2ee079d77e2557a9eb74493721f9d2896c6e0ccd6a6df41a66a9f5d3736bcddebd61997c459449024162072935da5cd441e1cd2ac4debddef68a1e873d24e2e205cbc6a5632db7aee0fcea0fcacd14575a0e4a143b168cf", 0x75}, {&(0x7f0000001140)="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", 0xfb}, {&(0x7f0000001240)="82d1fb318306e6174507aa0c2d7b3ce85c54c517f8fa8e9567f27cfe79bcfc19d98379defe8c4cff413b98cc967ca6cc3557e5290497c13dc5c11ee010d0b2f99c9c1f085abde82105703195f5b39ab67e18d81a88b2214f030e20fa6043cea3035d517be5e22c6ff1589b8548af250f2a7901b1a5485149fb12f82e6a7ae0cc81426338eb181836b03abaf2aad8fc9e3231c59fdf5065dfbcb7", 0x9a}, {&(0x7f0000001300)="92c37de5f5f4f252d788566b4c4acd450d48320ac035011321fda39fb2204b0e4784e8b024e29781b494c847c5484c18c9055720918dc3b92cfa1b53324e126c80479d4ea75903c94d4913db1c273757ac50607d22bdbd9a671629ebd146fd8eb1c5d0ad351a8cf92ada92f715b45cef0da904df15431bcfab9cadf812de51ec6f22a687ba8bfbd3d5e664afffb7d6420ae013394c16d783cbd06b1b13e7e5b8736c0f6d1dcab87832b81dfa301850bc8abec2c73c98ccd99f328906a7b3e3fec4f75cb1fb647ae4483e33522267e22e3e1a426d666548887f", 0xd9}, {&(0x7f0000001400)}, {&(0x7f0000001440)}, {&(0x7f0000001480)="edc1ceedfdd7bc4c22e277826e6e7e3ecd3742460e2c0e78146a7e401ab23755bc3753a93ef76cc684eb1a5fcc79aa61447c187fd380db51338e06a0adeff80881dc7ce380d21b5d508a1fe6e6f2cbd3275beef7ca67a91f76a6543a7eb4", 0x5e}], 0x9) sendmsg$NL80211_CMD_SET_PMKSA(r3, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x1c, r4, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x801) (async) sendmsg$NL80211_CMD_SET_PMKSA(r3, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x1c, r4, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x801) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r5, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x28, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x7fff, 0x50}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x71f55b1836a8b2b3}, 0x40000) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_NAN(r11, &(0x7f0000001900)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x68, r4, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xa, 0x1a}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x9}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xd}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xe6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4000) (async) sendmsg$NL80211_CMD_START_NAN(r11, &(0x7f0000001900)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x68, r4, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xa, 0x1a}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x9}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xd}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xe6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4000) 138.926767ms ago: executing program 7 (id=1519): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/mem_sleep', 0x149a82, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x58}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) sendfile(r0, r0, 0x0, 0x5) 138.511413ms ago: executing program 7 (id=1520): io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x1f, &(0x7f00000004c0)={0x0}, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000300)={0x0, 0x0}) syz_open_procfs(r2, &(0x7f0000000340)='net/protocols\x00') r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000000500)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$KVM_CREATE_PIT2(r1, 0x4188aec6, &(0x7f0000000040)) pwritev2(r3, &(0x7f00000002c0)=[{&(0x7f0000000080)="75a7f12af66ec3ee553be460f196992b2dba35bfdcb22073ae6b91422fe9b4984900f340f6f24a045bd16e786f9c4638ff0372907befe0b0c7efad1465ef", 0x3e}, {&(0x7f00000000c0)="6453de792b81feab059ea9f7b5527ed66b41450b24230caed9ec68fbce0563a1cc883faf37899ecdaee9ec6327f0ab705e4a5b2469b13498d3c0f2bdff35efafc7e9cca871df20c6d76c598fb04ef1f50943dba470b77663c85392b774d1da2eb408ec8e4b8ac9f6eccc3c390041afc24fd8be4c3b5c09b6f2785ea6b3f7086811e6451c9b1458076f12db9b591688b72856acd753f2b884474140e97075c0b7c55200534aaeb17ba079fb45ceb57f984ca1d41364423c2040c544eccae7439777e84dca82add817b71ac8b5819ecc2d7cc098d0ca5e0224", 0xd8}, {&(0x7f00000001c0)="24916cc4aa3eb2515efd18a94064b935837cf60959f97c42e3eefbbec2da6018d192f47cd2f2c41d4a", 0x29}, {&(0x7f0000000200)="c504dbda990e9d76817b41c026f1ee8caeadd1eb2d556cce7be5c1e969d2082dd578683635064ab7943173de3805104c34cedf602c113d6b7f540a8dd0c9dc8f956601cc4aaa9b903da10cb7c42c78b27b9a70e8ea0a76576fabc678eb0b8d3cb753df7af0329ccd59a41076dddfd50a0af49f0006e1899f1801330e5c4300d6559b121d88a4507e43702b1a1621c01d12469cc399d429b3f29e7c106ad1b1", 0x9f}], 0x4, 0x34, 0x7, 0x1a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 7 (id=1521): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x21, &(0x7f00000056c0), 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x3, &(0x7f0000000040)=@framed={{}, [], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0xf) r1 = socket$inet(0xa, 0x801, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000c000500ff000000000000000c0002000000020000000000040007800c000800000000000000000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r4, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') pwritev(r5, &(0x7f0000000400)=[{&(0x7f0000000000)='8', 0x1}, {&(0x7f0000000480)="2a7faa404ffc716e7e10da7326e686da8e044a5926be6bf722bfcfa594ef7242a93cb15205ebcc189af3042b69928eaa632ab65b7caddc39f4f8d4e5cbb5ba187d8e1db53796b64fc4eb7a737fe73120f7e67b63af9785b2b1", 0xfffffffffffffea7}, {&(0x7f0000000200)="9da54af1324e102953f5d86d8cbbbf4d1f9555a19fea7da2e5bfb7c826c732c4f81dad318047b2373b811f6625662ededc3a7ceab2cc42c4c6ce2ed55467fe6e5ea04d", 0x43}], 0x3, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r7, 0x8010aebb, &(0x7f0000000980)={0x2, 0x0, @ioapic={0x0, 0x296a, 0xf7c, 0x3, 0x0, [{0x98, 0x27, 0x81, '\x00', 0x7f}, {0x1, 0xc, 0x81, '\x00', 0xf5}, {0xe9, 0x4, 0x9, '\x00', 0xd}, {0x1, 0x8, 0x3, '\x00', 0x8f}, {0xff, 0x80, 0xb1, '\x00', 0x7}, {0xf, 0x2, 0x28, '\x00', 0x2}, {0x7f, 0x8, 0x3, '\x00', 0xe9}, {0x2, 0x3, 0x2, '\x00', 0x67}, {0x2, 0x7, 0x91, '\x00', 0xc0}, {0x8, 0x3, 0x43, '\x00', 0x80}, {0xfc, 0x8, 0x8, '\x00', 0x3}, {0x2, 0x13, 0x3, '\x00', 0x8}, {0x6, 0x6, 0x8, '\x00', 0xa6}, {0x8, 0x0, 0xa, '\x00', 0x9}, {0x1, 0x4e, 0x9}, {0x8, 0x5e, 0x5, '\x00', 0x3}, {0x5, 0x5, 0x7, '\x00', 0x5}, {0x0, 0x3, 0x3, '\x00', 0xff}, {0x5, 0x0, 0xb, '\x00', 0x1}, {0x4, 0x6, 0xb, '\x00', 0x3}, {0x40, 0xf1, 0x7, '\x00', 0x4}, {0x4, 0x40, 0x9, '\x00', 0x10}, {0x8f, 0x8, 0x1, '\x00', 0x6}, {0x2, 0xc, 0x8f, '\x00', 0x8}]}}) bind$netlink(r5, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfb, 0x1000}, 0xc) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet6(0xa, 0x800000000000002, 0x0) getsockopt$inet6_int(r9, 0x29, 0x2, 0x0, &(0x7f0000000180)) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="ae74978a3c5097131dc2c40165330298d1aa2248bdae45f4b27f699f7e10460bbcbf76e188d7f49e89f5c7477421b7fdd4c0cf0859a783ea1a4f8e6680aa5da73554e413cc750da175ba4347443a2c08ca48829bd4e310ebfca08c9b482c12f61e8faf1c84c277cdd696661f44bf34b652508ce108aac5ed3210bcc73d1768136412bb8d10f9e7a1127dc9da82a6dcb3b8ba28e4e5f93be87164ee1796fe96759ebc4056ab6c17064a3afec0c9f245c70c120bb17a3631bb5cf821c35e1336abdf9ae22db96007d224d16a0078af10", @ANYRES16=r8, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = socket$inet(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff01c}, {0x6}]}, 0x10) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2b4501, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) creat(&(0x7f0000000280)='./bus\x00', 0x2) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)={'#! ', './bus'}, 0x9) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') kernel console output (not intermixed with test programs): devsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.803686][T11524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.810032][T11524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.850761][T11524] team0: Port device team_slave_0 added [ 197.861035][T11562] xt_hashlimit: size too large, truncated to 1048576 [ 197.876820][T11524] team0: Port device team_slave_1 added [ 197.944336][ T45] bridge_slave_1: left allmulticast mode [ 197.945930][ T45] bridge_slave_1: left promiscuous mode [ 197.947519][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.950517][ T45] bridge_slave_0: left allmulticast mode [ 197.952028][ T45] bridge_slave_0: left promiscuous mode [ 197.953553][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.269635][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.275333][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.281902][ T45] bond0 (unregistering): Released all slaves [ 198.411647][T11524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.413476][T11524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.420142][T11524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.461558][T11524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.463422][T11524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.474123][T11524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.500703][T11524] hsr_slave_0: entered promiscuous mode [ 198.503171][T11524] hsr_slave_1: entered promiscuous mode [ 198.505107][T11524] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 198.507014][T11524] Cannot create hsr debugfs directory [ 198.711927][ T45] hsr_slave_0: left promiscuous mode [ 198.714278][ T45] hsr_slave_1: left promiscuous mode [ 198.716747][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.718648][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.720861][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.722836][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.757372][ T45] veth1_macvtap: left promiscuous mode [ 198.758989][ T45] veth0_macvtap: left promiscuous mode [ 198.760443][ T45] veth1_vlan: left promiscuous mode [ 198.761858][ T45] veth0_vlan: left promiscuous mode [ 198.880038][ T5940] Bluetooth: hci3: command tx timeout [ 199.179072][T11573] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1323'. [ 199.617163][ T45] team0 (unregistering): Port device team_slave_1 removed [ 199.656564][ T5940] Bluetooth: hci4: command tx timeout [ 199.735012][ T45] team0 (unregistering): Port device team_slave_0 removed [ 200.426573][T11573] IPVS: Unknown mcast interface: vcan0 [ 200.451141][T11510] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 200.488908][T11524] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.496035][T11510] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 200.502031][T11510] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 200.505492][T11510] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 200.530761][T11583] syzkaller1: entered promiscuous mode [ 200.532204][T11583] syzkaller1: entered allmulticast mode [ 200.540864][T11583] netlink: 'syz.4.1326': attribute type 2 has an invalid length. [ 200.542886][T11583] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1326'. [ 200.556223][T11524] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.568560][T11583] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 200.573316][ T39] audit: type=1400 audit(1733529677.014:1098): avc: denied { watch } for pid=11582 comm="syz.4.1326" path="/396/file0" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 200.576063][T11510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.585635][T11510] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.590591][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.592382][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.627543][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.629373][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.662155][T11524] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.750281][T11510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.762097][T11598] random: crng reseeded on system resumption [ 200.768318][ T39] audit: type=1400 audit(1733529677.191:1099): avc: denied { append } for pid=11597 comm="syz.4.1328" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 200.797863][T11524] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.808742][T11510] veth0_vlan: entered promiscuous mode [ 200.812804][T11510] veth1_vlan: entered promiscuous mode [ 200.823304][T11510] veth0_macvtap: entered promiscuous mode [ 200.826260][T11510] veth1_macvtap: entered promiscuous mode [ 200.831842][T11510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.834869][T11510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.837344][T11510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.839972][T11510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.842400][T11510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.845975][T11510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.848438][T11510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.851018][T11510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.854247][T11510] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.858677][T11510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.861338][T11510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.863825][T11510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.867856][T11510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.870358][T11510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.873011][T11510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.875942][T11510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.878904][T11510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.882005][T11510] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.885773][T11510] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.888237][T11510] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.890562][T11510] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.892790][T11510] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.953777][T11604] netlink: 'syz.7.1331': attribute type 9 has an invalid length. [ 200.979346][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.981438][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.013416][T11606] netlink: 'syz.4.1332': attribute type 13 has an invalid length. [ 201.013625][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.016579][ T12] bridge_slave_1: left allmulticast mode [ 201.019451][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.021702][ T12] bridge_slave_1: left promiscuous mode [ 201.024007][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.028837][ T12] bridge_slave_0: left allmulticast mode [ 201.030270][ T12] bridge_slave_0: left promiscuous mode [ 201.031222][T11608] afs: Unknown parameter 'dfn' [ 201.031256][ T39] audit: type=1400 audit(1733529677.444:1100): avc: denied { mounton } for pid=11607 comm="syz.7.1333" path="/30/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 201.031726][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.073046][T11610] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1334'. [ 201.110514][ T5940] Bluetooth: hci3: command tx timeout [ 201.284506][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.330944][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.334989][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.338540][ T12] bond0 (unregistering): Released all slaves [ 201.342876][T11524] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 201.351812][T11610] nlmon0: Master is either lo or non-ether device [ 201.353886][T11524] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 201.361222][T11524] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 201.368138][T11524] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 201.472588][T11623] binder: 11622:11623 ioctl 40046205 0 returned -22 [ 201.480432][T11524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.489496][T11524] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.496155][ T1201] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.498104][ T1201] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.502777][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.504687][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.622897][T11524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.657303][ T39] audit: type=1400 audit(1733529678.033:1101): avc: denied { mounton } for pid=11629 comm="syz.4.1339" path="/402/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 201.664898][T11524] veth0_vlan: entered promiscuous mode [ 201.686846][T11524] veth1_vlan: entered promiscuous mode [ 201.697544][ T12] hsr_slave_0: left promiscuous mode [ 201.699557][ T12] hsr_slave_1: left promiscuous mode [ 201.701473][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.703628][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.705904][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.707805][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.711771][T11634] overlay: ./file0 is not a directory [ 201.716124][T11634] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1339'. [ 201.742305][ T12] veth1_macvtap: left promiscuous mode [ 201.743787][ T12] veth0_macvtap: left promiscuous mode [ 201.745253][ T12] veth1_vlan: left promiscuous mode [ 201.746694][ T12] veth0_vlan: left promiscuous mode [ 201.880191][ T5940] Bluetooth: hci4: command tx timeout [ 201.947588][T11645] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1343'. [ 202.317724][ T39] audit: type=1400 audit(1733529678.651:1102): avc: denied { map } for pid=11663 comm="syz.4.1347" path="/406/file0/cgroup.kill" dev="9p" ino=40239542 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 202.667085][ T12] team0 (unregistering): Port device team_slave_1 removed [ 202.769832][ T12] team0 (unregistering): Port device team_slave_0 removed [ 203.444858][T11667] batman_adv: batadv0: Adding interface: erspan1 [ 203.446514][T11667] batman_adv: batadv0: Not using interface erspan1 (retrying later): interface not active [ 203.455707][T11524] veth0_macvtap: entered promiscuous mode [ 203.458698][T11524] veth1_macvtap: entered promiscuous mode [ 203.476002][T11524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.478584][T11524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.481031][T11524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.483612][T11524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.486129][T11524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.488775][T11524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.491178][T11524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.493764][T11524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.502543][T11524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.505810][T11524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.508347][T11524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.510011][ T39] audit: type=1326 audit(1733529679.764:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11689 comm="syz.7.1355" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18677fed9 code=0x7ffc0000 [ 203.510736][T11524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.519881][T11524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.521128][ T39] audit: type=1326 audit(1733529679.773:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11689 comm="syz.7.1355" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18677fed9 code=0x7ffc0000 [ 203.522794][T11524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.532372][ T39] audit: type=1326 audit(1733529679.773:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11689 comm="syz.7.1355" exe="/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd18677fed9 code=0x7ffc0000 [ 203.533718][T11524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.538947][ T39] audit: type=1326 audit(1733529679.773:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11689 comm="syz.7.1355" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18677fed9 code=0x7ffc0000 [ 203.542419][T11524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.547711][ T39] audit: type=1326 audit(1733529679.773:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11689 comm="syz.7.1355" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd18677fed9 code=0x7ffc0000 [ 203.550613][T11524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.558985][ T39] audit: type=1326 audit(1733529679.773:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11689 comm="syz.7.1355" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18677fed9 code=0x7ffc0000 [ 203.561826][T11524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.565049][ T39] audit: type=1326 audit(1733529679.773:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11689 comm="syz.7.1355" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18677fed9 code=0x7ffc0000 [ 203.571534][T11524] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.573573][ T39] audit: type=1326 audit(1733529679.773:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11689 comm="syz.7.1355" exe="/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fd18677fed9 code=0x7ffc0000 [ 203.575391][T11524] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.583881][T11524] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.586531][T11524] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.613609][T11694] tipc: Started in network mode [ 203.617189][T11694] tipc: Node identity 7f000001, cluster identity 4711 [ 203.623503][T11694] tipc: Enabled bearer , priority 10 [ 203.704162][T11704] netlink: 'syz.4.1357': attribute type 1 has an invalid length. [ 203.706384][T11704] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1357'. [ 203.710098][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.712043][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.748280][ T1201] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.751340][ T1201] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.932860][T11717] nbd7: detected capacity change from 0 to 32 [ 203.939165][T11718] block nbd7: shutting down sockets [ 203.939323][ T6753] blk_print_req_error: 121 callbacks suppressed [ 203.939337][ T6753] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 203.947682][ T6753] buffer_io_error: 91 callbacks suppressed [ 203.947695][ T6753] Buffer I/O error on dev nbd7, logical block 0, async page read [ 203.965343][ T69] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 203.967929][ T69] Buffer I/O error on dev nbd7, logical block 0, async page read [ 203.971446][ T6753] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 203.975041][ T6753] Buffer I/O error on dev nbd7, logical block 0, async page read [ 203.978161][ T6753] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 203.981173][ T6753] Buffer I/O error on dev nbd7, logical block 0, async page read [ 203.983748][ T6753] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 203.987832][ T6753] Buffer I/O error on dev nbd7, logical block 0, async page read [ 203.989949][ T6753] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 203.992302][ T6753] Buffer I/O error on dev nbd7, logical block 0, async page read [ 203.994386][ T6753] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 203.996752][ T6753] Buffer I/O error on dev nbd7, logical block 0, async page read [ 203.999257][ T6753] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 204.001542][ T6753] Buffer I/O error on dev nbd7, logical block 0, async page read [ 204.003586][ T6753] ldm_validate_partition_table(): Disk read failed. [ 204.005276][ T6753] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 204.008508][ T6753] Buffer I/O error on dev nbd7, logical block 0, async page read [ 204.010522][ T6753] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 204.012807][ T6753] Buffer I/O error on dev nbd7, logical block 0, async page read [ 204.014869][ T6753] Dev nbd7: unable to read RDB block 0 [ 204.016477][ T6753] nbd7: unable to read partition table [ 204.020475][ T6753] ldm_validate_partition_table(): Disk read failed. [ 204.022560][ T6753] Dev nbd7: unable to read RDB block 0 [ 204.024132][ T6753] nbd7: unable to read partition table [ 204.122372][ T1137] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.565488][ T5936] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 204.569009][ T5936] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 204.572884][ T5936] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 204.575558][ T5936] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 204.578215][ T5936] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 204.580115][ T5936] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 204.674925][T11720] chnl_net:caif_netlink_parms(): no params data found [ 204.727433][T11720] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.729324][T11720] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.731157][T11720] bridge_slave_0: entered allmulticast mode [ 204.733146][T11720] bridge_slave_0: entered promiscuous mode [ 204.736382][T11720] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.738279][T11720] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.740174][T11720] bridge_slave_1: entered allmulticast mode [ 204.742211][T11720] bridge_slave_1: entered promiscuous mode [ 204.769748][T11720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.775160][T11720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.815146][T11720] team0: Port device team_slave_0 added [ 204.820978][T11720] team0: Port device team_slave_1 added [ 204.831895][T11308] tipc: Node number set to 2130706433 [ 204.849616][T11720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.852013][T11720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.860278][T11720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.866762][T11720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.868978][T11720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.877706][T11720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.906927][T11720] hsr_slave_0: entered promiscuous mode [ 204.909464][T11720] hsr_slave_1: entered promiscuous mode [ 204.911370][T11720] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 204.913425][T11720] Cannot create hsr debugfs directory [ 205.511148][ T5936] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 205.513979][ T5936] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 205.517143][ T5936] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 205.525243][ T5936] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 205.527617][ T5936] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 205.529601][ T5936] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 205.560682][ T1137] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.663099][ T1137] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.713093][T11737] chnl_net:caif_netlink_parms(): no params data found [ 205.734879][ T1137] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.778968][T11737] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.780924][T11737] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.783020][T11737] bridge_slave_0: entered allmulticast mode [ 205.785077][T11737] bridge_slave_0: entered promiscuous mode [ 205.787960][T11737] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.789729][T11737] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.791585][T11737] bridge_slave_1: entered allmulticast mode [ 205.793695][T11737] bridge_slave_1: entered promiscuous mode [ 205.816304][T11737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.821495][T11737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.869397][T11737] team0: Port device team_slave_0 added [ 205.886281][T11737] team0: Port device team_slave_1 added [ 205.906076][ T1137] bridge_slave_1: left allmulticast mode [ 205.908043][ T1137] bridge_slave_1: left promiscuous mode [ 205.909620][ T1137] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.912973][ T1137] bridge_slave_0: left allmulticast mode [ 205.914817][ T1137] bridge_slave_0: left promiscuous mode [ 205.916386][ T1137] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.206067][ T1137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.210227][ T1137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.213972][ T1137] bond0 (unregistering): Released all slaves [ 206.256919][T11737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.258793][T11737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.284673][T11737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.288681][T11737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.290564][T11737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.299528][T11737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.370921][T11737] hsr_slave_0: entered promiscuous mode [ 206.372922][T11737] hsr_slave_1: entered promiscuous mode [ 206.374795][T11737] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 206.377032][T11737] Cannot create hsr debugfs directory [ 206.560735][T11774] syz.4.1372: attempt to access beyond end of device [ 206.560735][T11774] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 206.565499][T11774] efs: cannot read volume header [ 206.626505][T11786] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1373'. [ 206.630534][T11786] netlink: 'syz.7.1373': attribute type 25 has an invalid length. [ 206.634029][ T1137] hsr_slave_0: left promiscuous mode [ 206.647041][ T1137] hsr_slave_1: left promiscuous mode [ 206.652230][ T1137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.654719][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.657537][ T1137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.664465][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.696960][ T1137] veth1_macvtap: left promiscuous mode [ 206.698396][ T1137] veth0_macvtap: left promiscuous mode [ 206.699862][ T1137] veth1_vlan: left promiscuous mode [ 206.701315][ T1137] veth0_vlan: left promiscuous mode [ 206.747336][ T5940] Bluetooth: hci3: command tx timeout [ 207.459603][ T1137] team0 (unregistering): Port device team_slave_1 removed [ 207.567590][ T68] Bluetooth: hci5: Frame reassembly failed (-84) [ 207.571496][ T1137] team0 (unregistering): Port device team_slave_0 removed [ 207.626902][T11797] Bluetooth: hci5: Frame reassembly failed (-84) [ 207.783250][ T5936] Bluetooth: hci4: command tx timeout [ 208.227094][T11786] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.230311][T11786] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.232594][T11786] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.234832][T11786] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.294741][T11737] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.319094][T11801] bond0: Device is already in use. [ 208.362657][T11737] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.399984][T11806] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1379'. [ 208.401718][T11807] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 208.427150][T11807] mac80211_hwsim hwsim55 wlan1: entered allmulticast mode [ 208.443012][T11737] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.459955][T11810] 9pnet: Found fid 0 not clunked [ 208.543594][T11737] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.691832][ T39] kauditd_printk_skb: 7 callbacks suppressed [ 208.691842][ T39] audit: type=1400 audit(1733529684.618:1118): avc: denied { append } for pid=11821 comm="syz.7.1384" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 208.699772][T11823] autofs4:pid:11823:validate_dev_ioctl: path string terminator missing for cmd(0xc018937d) [ 208.702666][T11823] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1384'. [ 208.705013][T11823] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1384'. [ 208.706106][T11720] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 208.715497][T11720] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 208.737111][T11720] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 208.741114][T11720] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 208.761867][ T1137] bridge_slave_1: left allmulticast mode [ 208.763373][ T1137] bridge_slave_1: left promiscuous mode [ 208.765289][ T1137] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.768114][ T1137] bridge_slave_0: left allmulticast mode [ 208.769586][ T1137] bridge_slave_0: left promiscuous mode [ 208.771073][ T1137] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.843853][T11825] netlink: 'syz.7.1385': attribute type 10 has an invalid length. [ 208.855866][ T45] Bluetooth: hci6: Frame reassembly failed (-84) [ 208.979540][ T5932] Bluetooth: hci3: command tx timeout [ 209.061717][ T1137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.069076][ T1137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.072522][ T1137] bond0 (unregistering): Released all slaves [ 209.085690][T11825] mac80211_hwsim hwsim55 wlan1: entered promiscuous mode [ 209.089469][T11825] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 209.092670][T11737] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 209.096566][T11737] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 209.107591][T11737] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 209.110692][T11737] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 209.157754][T11720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.172768][T11720] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.177759][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.179633][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.199987][T11737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.204180][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.206095][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.213548][T11737] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.222109][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.224385][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.231861][ T1201] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.234378][ T1201] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.352245][ T1137] hsr_slave_0: left promiscuous mode [ 209.354279][ T1137] hsr_slave_1: left promiscuous mode [ 209.356115][ T1137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.358107][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.360467][ T1137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.362400][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.408690][ T1137] veth1_macvtap: left promiscuous mode [ 209.410205][ T1137] veth0_macvtap: left promiscuous mode [ 209.411685][ T1137] veth1_vlan: left promiscuous mode [ 209.413081][ T1137] veth0_vlan: left promiscuous mode [ 209.738275][ T5940] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 209.738286][ T5932] Bluetooth: hci5: command 0xfc11 tx timeout [ 209.836405][T11836] program syz.4.1386 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 209.914077][T11839] 9pnet_fd: Insufficient options for proto=fd [ 210.005054][ T5940] Bluetooth: hci4: command tx timeout [ 210.202785][ T1137] team0 (unregistering): Port device team_slave_1 removed [ 210.292686][ T1137] team0 (unregistering): Port device team_slave_0 removed [ 210.603816][ T5940] Bluetooth: hci0: command tx timeout [ 210.959858][T11720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.980076][T11737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.987669][T11720] veth0_vlan: entered promiscuous mode [ 210.994414][T11720] veth1_vlan: entered promiscuous mode [ 211.032236][ T5940] Bluetooth: hci6: command 0xfc11 tx timeout [ 211.034813][ T5936] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 211.066341][T11720] veth0_macvtap: entered promiscuous mode [ 211.069808][T11720] veth1_macvtap: entered promiscuous mode [ 211.084406][T11720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.084420][T11720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.084427][T11720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.084434][T11720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.084439][T11720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.084446][T11720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.096275][T11720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.098135][T11720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.118113][T11720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.120636][T11720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.123241][T11720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.125734][T11720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.128623][T11720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.138667][T11720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.143504][T11737] veth0_vlan: entered promiscuous mode [ 211.147279][T11737] veth1_vlan: entered promiscuous mode [ 211.151707][T11720] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.153967][T11720] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.156326][T11720] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.158547][T11720] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.191686][ T5936] Bluetooth: hci3: command tx timeout [ 211.192795][T11844] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1388'. [ 211.198744][T11737] veth0_macvtap: entered promiscuous mode [ 211.203419][T11844] geneve2: entered promiscuous mode [ 211.204782][T11844] geneve2: entered allmulticast mode [ 211.238146][T11737] veth1_macvtap: entered promiscuous mode [ 211.251794][T11737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.254516][T11737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.257770][T11737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.260463][T11737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.262992][T11737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.265701][T11737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.270076][T11737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.272774][T11737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.275928][T11737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.276387][T11848] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1389'. [ 211.279724][T11737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.280957][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.283600][T11737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.283615][T11737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.285658][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.288537][T11737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.295456][T11737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.298146][T11737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.300736][T11737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.303398][T11737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.306469][T11737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.311749][T11737] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.314040][T11737] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.316293][T11737] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.318547][T11737] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.346864][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.349365][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.356522][T11848] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.438767][ T1201] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.440798][ T1201] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.482355][ T1201] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.485185][ T1201] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.512960][T11854] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1391'. [ 211.538828][T11854] gre1: entered promiscuous mode [ 211.540833][T11854] team0: Device gre1 is of different type [ 211.727774][T11861] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1393'. [ 212.330325][ T1137] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.475226][ T5940] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 212.480122][ T5940] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 212.485470][ T5940] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 212.489789][ T5940] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 212.492055][ T5940] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 212.494091][ T5940] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 212.610548][T11883] chnl_net:caif_netlink_parms(): no params data found [ 212.681209][T11883] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.683119][T11883] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.685019][T11883] bridge_slave_0: entered allmulticast mode [ 212.687024][T11883] bridge_slave_0: entered promiscuous mode [ 212.689976][T11883] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.691888][T11883] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.693815][T11883] bridge_slave_1: entered allmulticast mode [ 212.695791][T11883] bridge_slave_1: entered promiscuous mode [ 212.717066][T11883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.722827][T11883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.745538][T11883] team0: Port device team_slave_0 added [ 212.749465][T11883] team0: Port device team_slave_1 added [ 212.768191][T11883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.770013][T11883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.777345][T11883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.780946][T11883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.782736][T11883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.791290][T11883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.815469][T11883] hsr_slave_0: entered promiscuous mode [ 212.821702][T11883] hsr_slave_1: entered promiscuous mode [ 212.823428][T11883] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 212.825276][T11883] Cannot create hsr debugfs directory [ 213.237773][ T1137] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.533281][ T5936] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 213.537785][ T5936] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 213.541094][ T5936] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 213.544809][ T5936] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 213.547939][ T5936] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 213.550558][ T5936] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 213.673129][T11892] chnl_net:caif_netlink_parms(): no params data found [ 213.747636][T11892] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.749559][T11892] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.751529][T11892] bridge_slave_0: entered allmulticast mode [ 213.753593][T11892] bridge_slave_0: entered promiscuous mode [ 213.756063][T11892] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.760141][T11892] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.762072][T11892] bridge_slave_1: entered allmulticast mode [ 213.764187][T11892] bridge_slave_1: entered promiscuous mode [ 213.793336][T11892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.797662][T11892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.824856][T11892] team0: Port device team_slave_0 added [ 213.828945][T11892] team0: Port device team_slave_1 added [ 213.847856][T11892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.850140][T11892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.857919][T11892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.861593][T11892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.863513][T11892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.871201][T11892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.894857][T11892] hsr_slave_0: entered promiscuous mode [ 213.898636][T11892] hsr_slave_1: entered promiscuous mode [ 213.900516][T11892] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.902666][T11892] Cannot create hsr debugfs directory [ 213.986612][ T1137] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.091794][ T1137] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.217726][ T1137] bridge_slave_1: left allmulticast mode [ 214.219219][ T1137] bridge_slave_1: left promiscuous mode [ 214.220980][ T1137] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.225384][ T1137] bridge_slave_0: left allmulticast mode [ 214.226841][ T1137] bridge_slave_0: left promiscuous mode [ 214.228997][ T1137] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.586323][ T1137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.590167][ T1137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.618447][ T1137] bond0 (unregistering): Released all slaves [ 214.713654][ T5940] Bluetooth: hci3: command tx timeout [ 214.787687][T11912] fuse: Unknown parameter 'user_id0000000000000000000000000000000000000000' [ 214.823864][T11917] netlink: 'syz.4.1401': attribute type 1 has an invalid length. [ 214.825957][T11917] netlink: 209828 bytes leftover after parsing attributes in process `syz.4.1401'. [ 215.034242][ T1137] hsr_slave_0: left promiscuous mode [ 215.036212][ T1137] hsr_slave_1: left promiscuous mode [ 215.039103][ T1137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.043245][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.047567][ T1137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.050295][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.096438][ T1137] veth1_macvtap: left promiscuous mode [ 215.097928][ T1137] veth0_macvtap: left promiscuous mode [ 215.099384][ T1137] veth1_vlan: left promiscuous mode [ 215.100759][ T1137] veth0_vlan: left promiscuous mode [ 215.435870][T11845] usb 9-1: new full-speed USB device number 29 using dummy_hcd [ 215.618807][T11845] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 215.621360][T11845] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 215.624315][T11845] usb 9-1: New USB device found, idVendor=056a, idProduct=0018, bcdDevice= 0.00 [ 215.626383][T11845] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.632574][T11845] usb 9-1: config 0 descriptor?? [ 215.735571][ T5940] Bluetooth: hci4: command tx timeout [ 216.019956][ T1137] team0 (unregistering): Port device team_slave_1 removed [ 216.139131][ T1137] team0 (unregistering): Port device team_slave_0 removed [ 216.848088][T11845] usbhid 9-1:0.0: can't add hid device: -71 [ 216.849744][T11845] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 216.855678][T11845] usb 9-1: USB disconnect, device number 29 [ 216.882912][T11892] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.932835][ T5940] Bluetooth: hci3: command tx timeout [ 216.971316][T11892] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.042652][T11953] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1408'. [ 217.056209][T11892] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.165023][T11892] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.281995][T11883] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 217.285763][T11883] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 217.288748][T11883] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 217.294614][T11883] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 217.328185][T11892] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 217.335455][T11892] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 217.339346][T11892] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 217.343404][T11892] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 217.389769][T11892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.394027][T11883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.401335][ T1137] bridge_slave_1: left allmulticast mode [ 217.403603][ T1137] bridge_slave_1: left promiscuous mode [ 217.405156][ T1137] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.408106][ T1137] bridge_slave_0: left allmulticast mode [ 217.409954][ T1137] bridge_slave_0: left promiscuous mode [ 217.411519][ T1137] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.413689][T11845] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 217.590692][T11845] usb 12-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 217.593100][T11845] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.595206][T11845] usb 12-1: Product: syz [ 217.596906][T11845] usb 12-1: Manufacturer: syz [ 217.598150][T11845] usb 12-1: SerialNumber: syz [ 217.602323][T11845] usb 12-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 217.715475][ T1137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.718243][ T9] usb 12-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 217.726770][ T1137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.730825][ T1137] bond0 (unregistering): Released all slaves [ 217.739596][T11883] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.757862][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.759620][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.762254][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.763962][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.769052][T11892] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.795415][ T1201] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.797245][ T1201] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.809907][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.811790][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.897514][T11883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.929376][T11892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.945821][T11883] veth0_vlan: entered promiscuous mode [ 217.952836][T11883] veth1_vlan: entered promiscuous mode [ 217.954861][T11892] veth0_vlan: entered promiscuous mode [ 217.959001][ T5940] Bluetooth: hci4: command tx timeout [ 217.965155][T11892] veth1_vlan: entered promiscuous mode [ 217.978131][T11883] veth0_macvtap: entered promiscuous mode [ 217.991399][T11883] veth1_macvtap: entered promiscuous mode [ 217.993800][T11892] veth0_macvtap: entered promiscuous mode [ 217.996708][T11892] veth1_macvtap: entered promiscuous mode [ 218.003795][T11892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.006497][T11892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.009017][T11892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.011721][T11892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.014288][T11892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.016972][T11892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.019493][T11892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.022175][T11892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.025296][T11892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.050925][T11892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.053811][T11892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.056765][T11892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.059812][T11892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.063107][T11892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.067411][T11892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.070691][T11892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.074194][T11892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.078288][T11892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.084361][T11892] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.088100][T11892] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.091036][T11892] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.093996][T11892] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.106742][T11883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.110655][T11883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.113214][T11883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.115893][T11883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.118400][T11883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.122084][T11883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.124762][T11883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.127482][T11883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.131504][T11883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.134238][T11883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.137960][T11883] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.153108][ T1137] hsr_slave_0: left promiscuous mode [ 218.156898][ T1137] hsr_slave_1: left promiscuous mode [ 218.163864][ T1137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.166406][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.169273][ T1137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.171264][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.214009][ T1137] veth1_macvtap: left promiscuous mode [ 218.215659][ T1137] veth0_macvtap: left promiscuous mode [ 218.217141][ T1137] veth1_vlan: left promiscuous mode [ 218.218508][ T1137] veth0_vlan: left promiscuous mode [ 218.419032][T11979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.421332][T11979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.423771][T11978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.426025][T11978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.514817][T11845] usb 12-1: USB disconnect, device number 3 [ 218.803596][ T9] ath9k_htc 12-1:1.0: ath9k_htc: Target is unresponsive [ 218.805784][ T9] ath9k_htc: Failed to initialize the device [ 218.825890][T11845] usb 12-1: ath9k_htc: USB layer deinitialized [ 219.105890][ T1137] team0 (unregistering): Port device team_slave_1 removed [ 219.147309][ T5940] Bluetooth: hci3: command tx timeout [ 219.213766][ T1137] team0 (unregistering): Port device team_slave_0 removed [ 219.890128][T11883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.893215][T11883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.898514][T11883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.901102][T11883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.903636][T11883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.906484][T11883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.909159][T11883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.911767][T11883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.914789][T11883] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.918448][T11883] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.920779][T11883] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.923162][T11883] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.925629][T11883] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.947378][T11998] pimreg: entered allmulticast mode [ 219.951595][T11998] pimreg: left allmulticast mode [ 219.951777][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.954987][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.985019][T12001] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1417'. [ 219.996596][ T1201] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.009337][ T1201] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.016685][ T39] audit: type=1326 audit(1733529695.207:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.7.1418" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18677fed9 code=0x7ffc0000 [ 220.023255][ T1201] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.025346][ T1201] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.025524][ T39] audit: type=1326 audit(1733529695.216:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.7.1418" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18677fed9 code=0x7ffc0000 [ 220.045304][ T39] audit: type=1326 audit(1733529695.216:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.7.1418" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd18677fed9 code=0x7ffc0000 [ 220.045573][ T1201] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.051964][ T39] audit: type=1326 audit(1733529695.216:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.7.1418" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18677fed9 code=0x7ffc0000 [ 220.053824][ T1201] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.061149][ T39] audit: type=1326 audit(1733529695.216:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.7.1418" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18677fed9 code=0x7ffc0000 [ 220.070536][ T39] audit: type=1326 audit(1733529695.216:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.7.1418" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd18677fed9 code=0x7ffc0000 [ 220.077266][ T39] audit: type=1326 audit(1733529695.216:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.7.1418" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18677fed9 code=0x7ffc0000 [ 220.096902][ T39] audit: type=1326 audit(1733529695.216:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.7.1418" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd18677fed9 code=0x7ffc0000 [ 220.102914][ T39] audit: type=1326 audit(1733529695.216:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.7.1418" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18677fed9 code=0x7ffc0000 [ 220.120104][T12008] 9pnet_fd: Insufficient options for proto=fd [ 220.124204][ T39] audit: type=1326 audit(1733529695.216:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.7.1418" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd18677fed9 code=0x7ffc0000 [ 220.166788][ T6753] udevd[6753]: inotify_add_watch(7, /dev/pmem0p13, 10) failed: No such file or directory [ 220.331541][T12029] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 220.916399][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.031855][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.110453][ T5936] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 221.116544][ T5936] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 221.119869][ T5936] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 221.123073][ T5936] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 221.132267][ T5936] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 221.135295][ T5936] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 221.273329][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.387173][T12038] chnl_net:caif_netlink_parms(): no params data found [ 221.428886][T12038] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.430814][T12038] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.432805][T12038] bridge_slave_0: entered allmulticast mode [ 221.436966][T12038] bridge_slave_0: entered promiscuous mode [ 221.439469][T12038] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.441323][T12038] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.443269][T12038] bridge_slave_1: entered allmulticast mode [ 221.445348][T12038] bridge_slave_1: entered promiscuous mode [ 221.463116][T12038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.472353][T12038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.497236][T12038] team0: Port device team_slave_0 added [ 221.500979][T12038] team0: Port device team_slave_1 added [ 221.523509][T12038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.525410][T12038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.532646][T12038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.536364][T12038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.538227][T12038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.549764][T12038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.578202][T12038] hsr_slave_0: entered promiscuous mode [ 221.580187][T12038] hsr_slave_1: entered promiscuous mode [ 221.582086][T12038] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 221.587567][T12038] Cannot create hsr debugfs directory [ 222.447363][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.560710][ T12] bridge_slave_1: left allmulticast mode [ 222.562233][ T12] bridge_slave_1: left promiscuous mode [ 222.563773][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.570738][ T12] bridge_slave_0: left allmulticast mode [ 222.572239][ T12] bridge_slave_0: left promiscuous mode [ 222.573764][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.875854][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.880561][T12050] overlayfs: failed to decode file handle (len=7, type=251, flags=0, err=-22) [ 222.880821][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.891454][ T12] bond0 (unregistering): Released all slaves [ 222.930060][ T5940] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 222.940732][ T5940] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 222.943609][ T5940] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 222.947630][ T5940] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 222.950389][ T5940] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 222.954435][ T5940] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 223.116805][T12063] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1429'. [ 223.119220][T12063] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1429'. [ 223.161572][T12067] Cannot find del_set index 0 as target [ 223.186332][T12070] Cannot find del_set index 0 as target [ 223.244767][T12051] chnl_net:caif_netlink_parms(): no params data found [ 223.336368][ T5936] Bluetooth: hci3: command tx timeout [ 223.340073][T12051] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.341920][T12051] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.343800][T12051] bridge_slave_0: entered allmulticast mode [ 223.345843][T12051] bridge_slave_0: entered promiscuous mode [ 223.349993][T12051] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.351868][T12051] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.353695][T12051] bridge_slave_1: entered allmulticast mode [ 223.355655][T12051] bridge_slave_1: entered promiscuous mode [ 223.363278][ T12] hsr_slave_0: left promiscuous mode [ 223.365167][ T12] hsr_slave_1: left promiscuous mode [ 223.367239][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.374513][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.376814][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.378793][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.415021][ T12] veth1_macvtap: left promiscuous mode [ 223.416458][ T12] veth0_macvtap: left promiscuous mode [ 223.417929][ T12] veth1_vlan: left promiscuous mode [ 223.419254][ T12] veth0_vlan: left promiscuous mode [ 223.463755][T12085] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1432'. [ 223.485851][ T6244] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 223.650809][ T6244] usb 12-1: Using ep0 maxpacket: 8 [ 223.668453][ T6244] usb 12-1: config index 0 descriptor too short (expected 301, got 45) [ 223.671244][ T6244] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 223.674460][ T6244] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 223.677682][ T6244] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 223.680411][ T6244] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 223.683756][ T6244] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 223.686182][ T6244] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.692372][T12089] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1432'. [ 223.906503][ T6244] usb 12-1: GET_CAPABILITIES returned 0 [ 223.908062][ T6244] usbtmc 12-1:16.0: can't read capabilities [ 224.124255][ T1017] usb 12-1: USB disconnect, device number 4 [ 224.235667][ T12] team0 (unregistering): Port device team_slave_1 removed [ 224.320032][ T12] team0 (unregistering): Port device team_slave_0 removed [ 225.002859][T12051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.020582][T12051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.023114][T12038] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 225.068961][T12038] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 225.088565][T12051] team0: Port device team_slave_0 added [ 225.095002][T12051] team0: Port device team_slave_1 added [ 225.104526][T12038] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 225.108081][T12038] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 225.136228][T12051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.138283][T12051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.142935][ T5936] Bluetooth: hci4: command tx timeout [ 225.144991][T12051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.156485][T12051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.158784][T12051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.167439][T12051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.198260][T12103] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1436'. [ 225.200657][T12103] netlink: 'syz.7.1436': attribute type 7 has an invalid length. [ 225.202662][T12103] netlink: 'syz.7.1436': attribute type 8 has an invalid length. [ 225.204754][T12103] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1436'. [ 225.206844][T12051] hsr_slave_0: entered promiscuous mode [ 225.211514][T12051] hsr_slave_1: entered promiscuous mode [ 225.213736][T12051] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 225.216202][T12051] Cannot create hsr debugfs directory [ 225.301706][T12051] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.304113][T12108] fuse: Unknown parameter 'Ü:' [ 225.308866][T12108] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 225.310981][T12108] overlayfs: failed to set xattr on upper [ 225.312721][T12108] overlayfs: ...falling back to redirect_dir=nofollow. [ 225.319389][T12108] overlayfs: ...falling back to index=off. [ 225.321107][T12108] overlayfs: ...falling back to uuid=null. [ 225.332764][T12038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.342279][T12038] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.354761][T12038] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 225.357573][T12038] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 225.382024][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.383932][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.386875][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.388794][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.430586][T12051] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.453678][T12102] block nbd7: shutting down sockets [ 225.479795][T12038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.507408][T12051] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.540988][T12038] veth0_vlan: entered promiscuous mode [ 225.544783][T12038] veth1_vlan: entered promiscuous mode [ 225.556898][T12038] veth0_macvtap: entered promiscuous mode [ 225.559941][T12038] veth1_macvtap: entered promiscuous mode [ 225.571597][ T5936] Bluetooth: hci3: command tx timeout [ 225.577835][T12051] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.605224][T12038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.608618][T12038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.611791][T12038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.615486][T12038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.619092][T12038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.622488][T12038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.625753][T12038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.629167][T12038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.633093][T12038] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.638593][T12038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.642032][T12038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.645519][T12038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.649131][T12038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.652407][T12038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.655914][T12038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.659416][T12038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.662806][T12038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.667874][T12038] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.673933][T12038] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.677081][T12038] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.679957][T12038] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.682785][T12038] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.716720][ T12] bridge_slave_1: left allmulticast mode [ 225.718246][ T12] bridge_slave_1: left promiscuous mode [ 225.719811][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.733787][ T12] bridge_slave_0: left allmulticast mode [ 225.735339][ T12] bridge_slave_0: left promiscuous mode [ 225.736816][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.809194][T12129] cgroup: fork rejected by pids controller in /syz7 [ 225.849198][ T39] kauditd_printk_skb: 24 callbacks suppressed [ 225.849208][ T39] audit: type=1400 audit(1733529700.660:1153): avc: denied { append } for pid=12127 comm="syz.7.1444" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 226.077100][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.082512][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.087730][ T12] bond0 (unregistering): Released all slaves [ 226.130336][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.132446][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.166859][T12051] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 226.180863][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.180890][T12051] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 226.182923][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.194084][T12051] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 226.204454][T12051] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 226.335989][T12051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.343310][T12051] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.347386][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.349266][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.354569][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.356476][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.440113][T12051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.456701][T12051] veth0_vlan: entered promiscuous mode [ 226.462412][T12051] veth1_vlan: entered promiscuous mode [ 226.483546][ T12] hsr_slave_0: left promiscuous mode [ 226.485857][ T12] hsr_slave_1: left promiscuous mode [ 226.488136][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.491329][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.494155][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.496822][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.554580][ T12] veth1_macvtap: left promiscuous mode [ 226.556612][ T12] veth0_macvtap: left promiscuous mode [ 226.558608][ T12] veth1_vlan: left promiscuous mode [ 226.560436][ T12] veth0_vlan: left promiscuous mode [ 227.366976][ T5936] Bluetooth: hci4: command tx timeout [ 227.458008][ T12] team0 (unregistering): Port device team_slave_1 removed [ 227.567283][ T12] team0 (unregistering): Port device team_slave_0 removed [ 228.304510][T12051] veth0_macvtap: entered promiscuous mode [ 228.312598][T12051] veth1_macvtap: entered promiscuous mode [ 228.323492][T12051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.326213][T12051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.328902][T12051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.331550][T12051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.334048][T12051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.336817][T12051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.341167][T12051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.343866][T12051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.347055][T12051] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.351830][T12051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.354589][T12051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.357456][T12051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.360228][T12051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.368836][T12051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.371783][T12051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.374286][T12051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.377136][T12051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.380384][T12051] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.384888][T12051] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.387251][T12051] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.389543][T12051] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.391858][T12051] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.449576][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.452252][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.465500][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.470887][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.547207][T12276] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=47 sclass=netlink_tcpdiag_socket pid=12276 comm=syz.7.1448 [ 228.554367][T12276] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=12276 comm=syz.7.1448 [ 228.610916][T12280] netlink: 'syz.7.1449': attribute type 10 has an invalid length. [ 228.610916][T12281] netlink: 'syz.7.1449': attribute type 10 has an invalid length. [ 228.617446][T12281] batman_adv: batadv0: Adding interface: team0 [ 228.619142][T12281] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.625698][T12281] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 228.633045][T12280] netlink: 'syz.7.1449': attribute type 10 has an invalid length. [ 228.635178][T12280] netlink: 2 bytes leftover after parsing attributes in process `syz.7.1449'. [ 228.637604][T12280] team0: entered promiscuous mode [ 228.639318][T12280] team_slave_0: entered promiscuous mode [ 228.641138][T12280] team_slave_1: entered promiscuous mode [ 228.643511][T12280] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.645438][T12280] batman_adv: batadv0: Interface activated: team0 [ 228.647326][T12280] batman_adv: batadv0: Interface deactivated: team0 [ 228.649025][T12280] batman_adv: batadv0: Removing interface: team0 [ 228.653303][T12280] bridge0: port 3(team0) entered blocking state [ 228.655137][T12280] bridge0: port 3(team0) entered disabled state [ 228.656904][T12280] team0: entered allmulticast mode [ 228.658331][T12280] team_slave_0: entered allmulticast mode [ 228.659900][T12280] team_slave_1: entered allmulticast mode [ 228.662579][T12280] bridge0: port 3(team0) entered blocking state [ 228.664366][T12280] bridge0: port 3(team0) entered forwarding state [ 228.867532][ T45] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.387709][ T5940] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 229.391878][ T5940] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 229.394788][ T5940] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 229.399029][ T5940] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 229.401407][ T5940] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 229.403691][ T5940] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 229.535481][T12286] chnl_net:caif_netlink_parms(): no params data found [ 229.575224][T12286] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.577120][T12286] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.579003][T12286] bridge_slave_0: entered allmulticast mode [ 229.582860][T12286] bridge_slave_0: entered promiscuous mode [ 229.585478][T12286] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.587507][T12286] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.589270][T12286] bridge_slave_1: entered allmulticast mode [ 229.591633][T12286] bridge_slave_1: entered promiscuous mode [ 229.614271][T12286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.617837][T12286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.645885][T12286] team0: Port device team_slave_0 added [ 229.648672][T12286] team0: Port device team_slave_1 added [ 229.666658][T12286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.668494][T12286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.675247][T12286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.679756][T12286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.681588][T12286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.688325][T12286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.711860][T12286] hsr_slave_0: entered promiscuous mode [ 229.713769][T12286] hsr_slave_1: entered promiscuous mode [ 229.715510][T12286] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 229.717480][T12286] Cannot create hsr debugfs directory [ 230.250697][ T45] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.340778][ T45] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.419654][ T45] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.562008][ T45] bridge_slave_1: left allmulticast mode [ 230.564227][ T45] bridge_slave_1: left promiscuous mode [ 230.566003][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.569060][ T45] bridge_slave_0: left allmulticast mode [ 230.570503][ T45] bridge_slave_0: left promiscuous mode [ 230.572020][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.921430][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.925223][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.930453][ T45] bond0 (unregistering): Released all slaves [ 231.242643][T12311] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1452'. [ 231.254094][ T39] audit: type=1400 audit(1733529705.712:1154): avc: denied { accept } for pid=12310 comm="syz.7.1452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 231.319671][ T5940] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 231.325425][ T5940] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 231.328003][ T5940] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 231.331391][ T5940] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 231.334613][ T5940] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 231.338144][ T5940] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 231.439706][ T45] hsr_slave_0: left promiscuous mode [ 231.441682][ T45] hsr_slave_1: left promiscuous mode [ 231.443614][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.445552][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.465293][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.467274][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.498189][ T45] veth1_macvtap: left promiscuous mode [ 231.499743][ T45] veth0_macvtap: left promiscuous mode [ 231.502628][ T45] veth1_vlan: left promiscuous mode [ 231.504308][ T45] veth0_vlan: left promiscuous mode [ 231.647118][ T5940] Bluetooth: hci3: command tx timeout [ 231.765131][T12331] cgroup: No subsys list or none specified [ 231.895656][T12335] overlayfs: missing 'lowerdir' [ 232.544747][ T45] team0 (unregistering): Port device team_slave_1 removed [ 232.655760][ T45] team0 (unregistering): Port device team_slave_0 removed [ 233.508379][T12286] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 233.513793][ T5940] Bluetooth: hci4: command tx timeout [ 233.533556][T12286] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 233.557033][T12286] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 233.573833][T12286] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 233.628795][T12286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.646913][T12286] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.651078][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.653536][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.659437][T12316] chnl_net:caif_netlink_parms(): no params data found [ 233.665287][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.667725][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.741907][T12286] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 233.744642][T12286] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 233.839599][T12316] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.841461][T12316] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.843611][T12316] bridge_slave_0: entered allmulticast mode [ 233.855803][ T5940] Bluetooth: hci3: command tx timeout [ 233.858454][T12316] bridge_slave_0: entered promiscuous mode [ 233.866256][T12316] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.871081][T12316] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.873053][T12316] bridge_slave_1: entered allmulticast mode [ 233.880957][T12316] bridge_slave_1: entered promiscuous mode [ 233.938678][T12316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.972129][T12316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.058912][ T45] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.075897][T12316] team0: Port device team_slave_0 added [ 234.087898][T12316] team0: Port device team_slave_1 added [ 234.118690][T12286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.121976][T12316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.124820][T12316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.134961][T12316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.140084][T12316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.142236][T12316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.149134][T12316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.190586][ T45] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.203317][T12316] hsr_slave_0: entered promiscuous mode [ 234.205269][T12316] hsr_slave_1: entered promiscuous mode [ 234.207224][T12316] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 234.211740][T12316] Cannot create hsr debugfs directory [ 234.284012][ T45] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.299646][T12286] veth0_vlan: entered promiscuous mode [ 234.340668][ T45] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.348476][T12286] veth1_vlan: entered promiscuous mode [ 234.365096][T12286] veth0_macvtap: entered promiscuous mode [ 234.368224][T12286] veth1_macvtap: entered promiscuous mode [ 234.375305][T12286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.378247][T12286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.380894][T12286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.383707][T12286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.386151][T12286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.388811][T12286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.391823][T12286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.394485][T12286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.397553][T12286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.405751][T12286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.408388][T12286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.410898][T12286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.414754][T12286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.417344][T12286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.420029][T12286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.422687][T12286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.425367][T12286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.428502][T12286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.449009][T12286] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.451316][T12286] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.453541][T12286] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.456162][T12286] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.534725][T12416] netlink: 'syz.4.1465': attribute type 30 has an invalid length. [ 234.577150][ T45] bridge_slave_1: left allmulticast mode [ 234.579301][ T45] bridge_slave_1: left promiscuous mode [ 234.581426][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.594628][ T45] bridge_slave_0: left allmulticast mode [ 234.596395][ T45] bridge_slave_0: left promiscuous mode [ 234.597949][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.788439][ T39] audit: type=1326 audit(1733529709.023:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12418 comm="syz.4.1466" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f782d37fed9 code=0x0 [ 234.988041][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.993296][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.997344][ T45] bond0 (unregistering): Released all slaves [ 235.018293][T12419] sp0: Synchronizing with TNC [ 235.046645][T12393] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.048874][T12393] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.061065][T12393] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.063305][T12393] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.464004][ T45] hsr_slave_0: left promiscuous mode [ 235.465840][ T45] hsr_slave_1: left promiscuous mode [ 235.467715][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.469668][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.472354][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.474251][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.512462][ T45] veth1_macvtap: left promiscuous mode [ 235.513963][ T45] veth0_macvtap: left promiscuous mode [ 235.515422][ T45] veth1_vlan: left promiscuous mode [ 235.516772][ T45] veth0_vlan: left promiscuous mode [ 235.598346][T10659] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 235.748099][ T5940] Bluetooth: hci4: command tx timeout [ 235.769418][T10659] usb 12-1: Using ep0 maxpacket: 8 [ 235.772944][T10659] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 235.776677][T10659] usb 12-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 235.779117][T10659] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.783432][T10659] usb 12-1: config 0 descriptor?? [ 236.008174][T10659] iowarrior 12-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 236.240157][T10659] usb 12-1: USB disconnect, device number 5 [ 236.301423][ T45] team0 (unregistering): Port device team_slave_1 removed [ 236.401660][ T45] team0 (unregistering): Port device team_slave_0 removed [ 237.112808][T12316] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 237.115969][T12316] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 237.127979][T12316] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 237.132049][T12316] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 237.175109][T12316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.183265][T12316] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.188579][T12388] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.190514][T12388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.219968][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.221971][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.307165][T12316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.323037][T12316] veth0_vlan: entered promiscuous mode [ 237.326880][T12316] veth1_vlan: entered promiscuous mode [ 237.337316][T12316] veth0_macvtap: entered promiscuous mode [ 237.340328][T12316] veth1_macvtap: entered promiscuous mode [ 237.346591][T12316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.349277][T12316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.352196][T12316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.354925][T12316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.357449][T12316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.360144][T12316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.365567][T12316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.368269][T12316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.371450][T12316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.376314][T12316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.378937][T12316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.381469][T12316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.385082][T12316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.387634][T12316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.390321][T12316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.392855][T12316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.395621][T12316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.398769][T12316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.403041][T12316] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.405752][T12316] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.408032][T12316] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.410284][T12316] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.447182][T12384] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.449555][T12384] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.458067][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.465117][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.541674][ T45] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.100809][ T5936] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 238.105569][ T5936] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 238.108261][ T5936] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 238.113876][ T5936] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 238.117162][ T5936] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 238.119148][ T5936] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 238.282823][T12474] chnl_net:caif_netlink_parms(): no params data found [ 238.341532][T12474] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.343313][T12474] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.345315][T12474] bridge_slave_0: entered allmulticast mode [ 238.348475][T12474] bridge_slave_0: entered promiscuous mode [ 238.350712][T12474] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.352561][T12474] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.354417][T12474] bridge_slave_1: entered allmulticast mode [ 238.357607][T12474] bridge_slave_1: entered promiscuous mode [ 238.383665][T12474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.387951][T12474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.426044][T12474] team0: Port device team_slave_0 added [ 238.429365][T12474] team0: Port device team_slave_1 added [ 238.450178][T12474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.451988][T12474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.460264][T12474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.464031][T12474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.466274][T12474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.472543][T12474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.504476][T12474] hsr_slave_0: entered promiscuous mode [ 238.507648][T12474] hsr_slave_1: entered promiscuous mode [ 238.509429][T12474] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 238.511415][T12474] Cannot create hsr debugfs directory [ 238.657675][T12498] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12498 comm=syz.4.1479 [ 238.759855][ T45] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.845721][ T45] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.942096][ T45] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.954189][ T8971] hid (null): unknown global tag 0xc [ 238.957150][ T8971] hid (null): unknown global tag 0xc [ 238.963747][ T8971] hid-generic 0000:0000:0000.0008: unknown global tag 0xc [ 238.966559][T10659] usb 9-1: new low-speed USB device number 30 using dummy_hcd [ 238.966964][ T8971] hid-generic 0000:0000:0000.0008: item 0 4 1 12 parsing failed [ 238.972281][ T8971] hid-generic 0000:0000:0000.0008: probe with driver hid-generic failed with error -22 [ 239.056891][ T45] bridge_slave_1: left allmulticast mode [ 239.059036][ T45] bridge_slave_1: left promiscuous mode [ 239.061181][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.065762][ T45] bridge_slave_0: left allmulticast mode [ 239.067314][ T45] bridge_slave_0: left promiscuous mode [ 239.069354][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.127533][T10659] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 239.130821][T10659] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 239.134248][T10659] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 239.137620][T10659] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.140988][T10659] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 239.144766][T10659] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.162602][T10659] hub 9-1:1.0: bad descriptor, ignoring hub [ 239.164234][T10659] hub 9-1:1.0: probe with driver hub failed with error -5 [ 239.175315][T10659] cdc_wdm 9-1:1.0: skipping garbage [ 239.177132][T10659] cdc_wdm 9-1:1.0: skipping garbage [ 239.179873][T10659] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 239.182112][T10659] cdc_wdm 9-1:1.0: Unknown control protocol [ 239.243690][T12512] xt_l2tp: unknown flags: 17 [ 239.506720][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.510656][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.515805][ T45] bond0 (unregistering): Released all slaves [ 239.655852][T12522] vivid-007: ================= START STATUS ================= [ 239.668688][T12522] vivid-007: Enable Output Cropping: true [ 239.673373][T12522] vivid-007: Enable Output Composing: true [ 239.675547][T12522] vivid-007: Enable Output Scaler: true [ 239.677596][T12522] vivid-007: Tx RGB Quantization Range: Automatic [ 239.680090][T12522] vivid-007: Transmit Mode: HDMI [ 239.681949][T12522] vivid-007: Hotplug Present: 0x00000000 [ 239.684190][T12522] vivid-007: RxSense Present: 0x00000000 [ 239.686237][T12522] vivid-007: EDID Present: 0x00000000 [ 239.687995][T12522] vivid-007: ================== END STATUS ================== [ 239.907271][T10659] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 239.989948][ T45] hsr_slave_0: left promiscuous mode [ 239.993725][ T45] hsr_slave_1: left promiscuous mode [ 239.996537][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.999234][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.002345][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.011505][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.045678][T10659] usb 12-1: device descriptor read/64, error -71 [ 240.063973][ T45] veth1_macvtap: left promiscuous mode [ 240.065913][ T45] veth0_macvtap: left promiscuous mode [ 240.068693][ T45] veth1_vlan: left promiscuous mode [ 240.070091][ T45] veth0_vlan: left promiscuous mode [ 240.270135][ T5936] Bluetooth: hci3: command tx timeout [ 240.302354][T10659] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 240.441218][T10659] usb 12-1: device descriptor read/64, error -71 [ 240.563232][T10659] usb usb12-port1: attempt power cycle [ 240.933001][T10659] usb 12-1: new high-speed USB device number 8 using dummy_hcd [ 240.955065][T10659] usb 12-1: device descriptor read/8, error -71 [ 241.025749][ T45] team0 (unregistering): Port device team_slave_1 removed [ 241.137624][ T45] team0 (unregistering): Port device team_slave_0 removed [ 241.224595][T10659] usb 12-1: new high-speed USB device number 9 using dummy_hcd [ 241.254206][T10659] usb 12-1: device descriptor read/8, error -71 [ 241.371989][T10659] usb usb12-port1: unable to enumerate USB device [ 241.913062][T12474] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 241.921434][T12474] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 241.925022][T12474] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 241.928241][T12474] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 241.959746][T12474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.966288][T12474] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.992795][T12384] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.994690][T12384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.999325][T12384] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.001255][T12384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.118988][T12474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.133786][T12474] veth0_vlan: entered promiscuous mode [ 242.137636][T12474] veth1_vlan: entered promiscuous mode [ 242.147698][T12474] veth0_macvtap: entered promiscuous mode [ 242.150818][T12474] veth1_macvtap: entered promiscuous mode [ 242.157268][T12474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.159966][T12474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.162549][T12474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.165278][T12474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.167808][T12474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.170466][T12474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.173117][T12474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.175674][T12474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.178701][T12474] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.183787][T12474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.186432][T12474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.189086][T12474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.191785][T12474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.195316][T12474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.199075][T12474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.202418][T12474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.206127][T12474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.210484][T12474] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.214620][T12474] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.218155][T12474] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.221310][T12474] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.224410][T12474] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.277913][T12394] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.280107][T12394] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.293192][T12389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.296014][T12389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.378739][ T45] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.459367][ T45] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.518042][ T5940] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 242.522173][ T5940] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 242.525685][ T5940] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 242.530492][ T5940] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 242.532772][ T5940] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 242.534766][ T5940] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 242.584107][ T45] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.658452][T12552] chnl_net:caif_netlink_parms(): no params data found [ 242.699363][ T45] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.760088][T12552] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.769912][T12552] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.772989][T12552] bridge_slave_0: entered allmulticast mode [ 242.775834][T12552] bridge_slave_0: entered promiscuous mode [ 242.779079][T12552] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.780995][T12552] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.783294][T12552] bridge_slave_1: entered allmulticast mode [ 242.785348][T12552] bridge_slave_1: entered promiscuous mode [ 242.807325][T12552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.816491][T12552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.863804][T12552] team0: Port device team_slave_0 added [ 242.868842][ T45] bridge_slave_1: left allmulticast mode [ 242.870347][ T45] bridge_slave_1: left promiscuous mode [ 242.871895][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.874763][ T45] bridge_slave_0: left allmulticast mode [ 242.876274][ T45] bridge_slave_0: left promiscuous mode [ 242.877796][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.944108][ T30] usb 9-1: USB disconnect, device number 30 [ 242.947410][T12504] cdc_wdm 9-1:1.0: Error autopm - -16 [ 243.040413][T12583] CUSE: zero length info key specified [ 243.243462][T12592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1492'. [ 243.246748][T12592] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 243.328892][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 243.334339][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 243.339100][ T45] bond0 (unregistering): Released all slaves [ 243.347484][T12552] team0: Port device team_slave_1 added [ 243.399336][T12552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.401250][T12552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.407989][T12552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.411775][T12552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.414972][T12552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.421731][T12552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.461704][T12552] hsr_slave_0: entered promiscuous mode [ 243.470039][T12552] hsr_slave_1: entered promiscuous mode [ 243.472306][T12552] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 243.474209][T12552] Cannot create hsr debugfs directory [ 243.863981][T11308] hid (null): global environment stack underflow [ 243.866788][T11308] hid-generic 00FF:0000:EFF8.0009: unknown main item tag 0x1 [ 243.868764][T11308] hid-generic 00FF:0000:EFF8.0009: unknown main item tag 0x6 [ 243.870691][T11308] hid-generic 00FF:0000:EFF8.0009: unknown main item tag 0x4 [ 243.872635][T11308] hid-generic 00FF:0000:EFF8.0009: ignoring exceeding usage max [ 243.879331][T11308] hid-generic 00FF:0000:EFF8.0009: global environment stack underflow [ 243.881489][T11308] hid-generic 00FF:0000:EFF8.0009: item 0 4 1 11 parsing failed [ 243.885298][T11308] hid-generic 00FF:0000:EFF8.0009: probe with driver hid-generic failed with error -22 [ 243.917395][ T45] hsr_slave_0: left promiscuous mode [ 243.920355][ T45] hsr_slave_1: left promiscuous mode [ 243.922650][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.924745][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.930694][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.932706][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.969177][ T45] veth1_macvtap: left promiscuous mode [ 243.970686][ T45] veth0_macvtap: left promiscuous mode [ 243.972145][ T45] veth1_vlan: left promiscuous mode [ 243.973518][ T45] veth0_vlan: left promiscuous mode [ 244.140120][T12632] netlink: 'syz.4.1500': attribute type 9 has an invalid length. [ 244.142265][T12632] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1500'. [ 244.194543][T12633] trusted_key: encrypted_key: master key parameter is missing [ 244.720300][ T5940] Bluetooth: hci3: command tx timeout [ 244.883979][ T45] team0 (unregistering): Port device team_slave_1 removed [ 245.003984][ T45] team0 (unregistering): Port device team_slave_0 removed [ 246.069675][T12552] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 246.074564][T12552] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 246.078164][T12552] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 246.081252][T12552] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 246.123764][ T39] audit: type=1400 audit(1733529719.621:1156): avc: denied { setopt } for pid=12666 comm="syz.7.1509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 246.133101][T12667] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1509'. [ 246.137973][T12552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.149084][T12552] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.157420][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.159286][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.175085][T12389] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.176954][T12389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.253459][T12682] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1511'. [ 246.285859][ T45] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.324327][T12552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.337095][T12552] veth0_vlan: entered promiscuous mode [ 246.342430][T12552] veth1_vlan: entered promiscuous mode [ 246.353209][ T56] usb 9-1: new full-speed USB device number 31 using dummy_hcd [ 246.359076][T12552] veth0_macvtap: entered promiscuous mode [ 246.362792][T12552] veth1_macvtap: entered promiscuous mode [ 246.368776][T12552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.371479][T12552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.374042][T12552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.379539][T12552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.382091][T12552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.384792][T12552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.387650][T12552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.390332][T12552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.393777][T12552] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.400407][T12552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.403114][T12552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.405628][T12552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.408671][T12552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.411199][T12552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.413851][T12552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.416360][T12552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.419562][T12552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.422645][T12552] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.428269][T12552] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.430555][T12552] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.432829][T12552] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.435111][T12552] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.476290][T12394] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.478506][T12394] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.490410][T12384] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.492563][T12384] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.539060][ T56] usb 9-1: config 0 interface 0 altsetting 18 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 246.542199][ T56] usb 9-1: config 0 interface 0 altsetting 18 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 246.545238][ T56] usb 9-1: config 0 interface 0 altsetting 18 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 246.549332][ T56] usb 9-1: config 0 interface 0 has no altsetting 0 [ 246.557090][ T56] usb 9-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 246.559478][ T56] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.562649][ T56] usb 9-1: Product: syz [ 246.563780][ T56] usb 9-1: Manufacturer: syz [ 246.565179][ T56] usb 9-1: SerialNumber: syz [ 246.575702][ T56] usb 9-1: config 0 descriptor?? [ 246.577459][T12664] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 246.798495][T12664] Cannot find del_set index 4 as target [ 246.859884][ T56] appledisplay 9-1:0.0: Error while getting initial brightness: -110 [ 246.861561][ T56] appledisplay 9-1:0.0: probe with driver appledisplay failed with error -110 [ 246.870386][ T56] usb 9-1: USB disconnect, device number 31 [ 247.022099][ T45] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.135995][ T45] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.212538][ T45] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.350758][ T45] bridge_slave_1: left allmulticast mode [ 247.352210][ T45] bridge_slave_1: left promiscuous mode [ 247.353716][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.356594][ T45] bridge_slave_0: left allmulticast mode [ 247.358896][ T45] bridge_slave_0: left promiscuous mode [ 247.360452][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.674884][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.678920][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.682377][ T45] bond0 (unregistering): Released all slaves [ 247.854202][T12715] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1512'. [ 247.877298][T12718] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1513'. [ 247.905662][T12727] overlayfs: failed to resolve './file0': -2 [ 247.943313][ T5936] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 247.947345][ T5936] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 247.952451][ T5936] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 247.961677][ T5936] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 247.964680][ T5936] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 247.967961][ T5936] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 248.191878][ T45] hsr_slave_0: left promiscuous mode [ 248.193878][ T45] hsr_slave_1: left promiscuous mode [ 248.196170][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.197967][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.204873][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.206696][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.246410][ T45] veth1_macvtap: left promiscuous mode [ 248.247940][ T45] veth0_macvtap: left promiscuous mode [ 248.249870][ T45] veth1_vlan: left promiscuous mode [ 248.251809][ T45] veth0_vlan: left promiscuous mode [ 248.435155][T12764] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1521'. [ 248.473895][T12764] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1521'. [ 248.476713][T12764] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1521'. [ 248.635778][ T5936] block nbd0: Receive control failed (result -107) [ 248.699600][T12764] [ 248.700313][T12764] ====================================================== [ 248.702193][T12764] WARNING: possible circular locking dependency detected [ 248.704039][T12764] 6.13.0-rc1-syzkaller-00182-gb8f52214c61a #0 Not tainted [ 248.706981][T12764] ------------------------------------------------------ [ 248.709489][T12764] syz.7.1521/12764 is trying to acquire lock: [ 248.710124][ T39] audit: type=1400 audit(1733529722.034:1157): avc: denied { write } for pid=5849 comm="syz-executor" path="pipe:[1648]" dev="pipefs" ino=1648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 248.711177][T12764] ffff888025a9d538 (&q->limits_lock){+.+.}-{4:4}, at: __nbd_set_size+0x2c0/0x730 [ 248.719861][T12764] [ 248.719861][T12764] but task is already holding lock: [ 248.722361][T12764] ffff888025a9cee8 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: nbd_start_device+0x8ef/0xd70 [ 248.725845][T12764] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 248.725845][T12764] which lock already depends on the new lock. [ 248.725845][T12764] [ 248.729047][T12764] [ 248.729047][T12764] the existing dependency chain (in reverse order) is: [ 248.731372][T12764] [ 248.731372][T12764] -> #5 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 248.733731][T12764] blk_mq_submit_bio+0x1fb6/0x24c0 [ 248.735276][T12764] __submit_bio+0x384/0x540 [ 248.736595][T12764] submit_bio_noacct_nocheck+0x698/0xd70 [ 248.738190][T12764] submit_bio_noacct+0x93a/0x1e20 [ 248.739637][T12764] mpage_readahead+0x41d/0x590 [ 248.741027][T12764] read_pages+0x1a8/0xdc0 [ 248.742325][T12764] page_cache_ra_unbounded+0x3dc/0x750 [ 248.743910][T12764] force_page_cache_ra+0x24b/0x340 [ 248.745373][T12764] page_cache_sync_ra+0x110/0x9c0 [ 248.746831][T12764] filemap_get_pages+0xd7b/0x1be0 [ 248.748304][T12764] filemap_read+0x3ca/0xd70 [ 248.749593][T12764] blkdev_read_iter+0x187/0x480 [ 248.751004][T12764] vfs_read+0x87f/0xbe0 [ 248.752227][T12764] ksys_read+0x12b/0x250 [ 248.753490][T12764] do_syscall_64+0xcd/0x250 [ 248.754833][T12764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.756521][T12764] [ 248.756521][T12764] -> #4 (mapping.invalidate_lock#2){++++}-{4:4}: [ 248.758733][T12764] down_read+0x9a/0x330 [ 248.759987][T12764] filemap_fault+0x62c/0x2820 [ 248.761372][T12764] __do_fault+0x10a/0x490 [ 248.762660][T12764] do_pte_missing+0xec2/0x3e70 [ 248.764025][T12764] __handle_mm_fault+0x103c/0x2a40 [ 248.765493][T12764] handle_mm_fault+0x3fa/0xaa0 [ 248.766888][T12764] __get_user_pages+0x8d9/0x3b50 [ 248.768314][T12764] populate_vma_page_range+0x27f/0x3a0 [ 248.769884][T12764] __mm_populate+0x1d6/0x380 [ 248.771255][T12764] do_mlock+0x40a/0x7d0 [ 248.772473][T12764] __x64_sys_mlock+0x59/0x80 [ 248.773831][T12764] do_syscall_64+0xcd/0x250 [ 248.775193][T12764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.776886][T12764] [ 248.776886][T12764] -> #3 (&mm->mmap_lock){++++}-{4:4}: [ 248.778851][T12764] __might_fault+0x11b/0x190 [ 248.780220][T12764] _copy_from_user+0x29/0xd0 [ 248.781589][T12764] __blk_trace_setup+0xa8/0x180 [ 248.783003][T12764] blk_trace_ioctl+0x163/0x290 [ 248.784389][T12764] blkdev_ioctl+0x109/0x6d0 [ 248.785712][T12764] __x64_sys_ioctl+0x190/0x200 [ 248.787105][T12764] do_syscall_64+0xcd/0x250 [ 248.788429][T12764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.790115][T12764] [ 248.790115][T12764] -> #2 (&q->debugfs_mutex){+.+.}-{4:4}: [ 248.792152][T12764] __mutex_lock+0x19b/0xa60 [ 248.793546][T12764] blk_mq_init_sched+0x42b/0x640 [ 248.794994][T12764] elevator_init_mq+0x2cd/0x420 [ 248.796386][T12764] add_disk_fwnode+0x113/0x1300 [ 248.797784][T12764] sd_probe+0xa86/0x1000 [ 248.799055][T12764] really_probe+0x23e/0xa90 [ 248.800369][T12764] __driver_probe_device+0x1de/0x440 [ 248.801899][T12764] driver_probe_device+0x4c/0x1b0 [ 248.803340][T12764] __device_attach_driver+0x1df/0x310 [ 248.804881][T12764] bus_for_each_drv+0x157/0x1e0 [ 248.806279][T12764] __device_attach_async_helper+0x1d3/0x290 [ 248.807958][T12764] async_run_entry_fn+0x9c/0x530 [ 248.809379][T12764] process_one_work+0x9c5/0x1ba0 [ 248.810800][T12764] worker_thread+0x6c8/0xf00 [ 248.812152][T12764] kthread+0x2c1/0x3a0 [ 248.813364][T12764] ret_from_fork+0x45/0x80 [ 248.814663][T12764] ret_from_fork_asm+0x1a/0x30 [ 248.816047][T12764] [ 248.816047][T12764] -> #1 (&q->q_usage_counter(queue)#51){++++}-{0:0}: [ 248.818347][T12764] blk_queue_enter+0x50f/0x640 [ 248.819742][T12764] blk_mq_alloc_request+0x59b/0x950 [ 248.821243][T12764] scsi_execute_cmd+0x1eb/0xf40 [ 248.822649][T12764] read_capacity_16+0x213/0xe10 [ 248.824055][T12764] sd_revalidate_disk.isra.0+0x1a06/0xa8d0 [ 248.825694][T12764] sd_probe+0x904/0x1000 [ 248.826947][T12764] really_probe+0x23e/0xa90 [ 248.828256][T12764] __driver_probe_device+0x1de/0x440 [ 248.829788][T12764] driver_probe_device+0x4c/0x1b0 [ 248.831230][T12764] __device_attach_driver+0x1df/0x310 [ 248.832806][T12764] bus_for_each_drv+0x157/0x1e0 [ 248.834205][T12764] __device_attach_async_helper+0x1d3/0x290 [ 248.835878][T12764] async_run_entry_fn+0x9c/0x530 [ 248.837292][T12764] process_one_work+0x9c5/0x1ba0 [ 248.838711][T12764] worker_thread+0x6c8/0xf00 [ 248.840049][T12764] kthread+0x2c1/0x3a0 [ 248.841267][T12764] ret_from_fork+0x45/0x80 [ 248.842564][T12764] ret_from_fork_asm+0x1a/0x30 [ 248.843947][T12764] [ 248.843947][T12764] -> #0 (&q->limits_lock){+.+.}-{4:4}: [ 248.845930][T12764] __lock_acquire+0x249e/0x3c40 [ 248.847335][T12764] lock_acquire.part.0+0x11b/0x380 [ 248.848799][T12764] __mutex_lock+0x19b/0xa60 [ 248.850120][T12764] __nbd_set_size+0x2c0/0x730 [ 248.851492][T12764] nbd_start_device+0x8fd/0xd70 [ 248.852891][T12764] nbd_genl_connect+0x1204/0x1c00 [ 248.854346][T12764] genl_family_rcv_msg_doit+0x202/0x2f0 [ 248.855933][T12764] genl_rcv_msg+0x565/0x800 [ 248.857249][T12764] netlink_rcv_skb+0x16b/0x440 [ 248.858597][T12764] genl_rcv+0x28/0x40 [ 248.859794][T12764] netlink_unicast+0x53c/0x7f0 [ 248.861159][T12764] netlink_sendmsg+0x8b8/0xd70 [ 248.862538][T12764] ____sys_sendmsg+0xaaf/0xc90 [ 248.863917][T12764] ___sys_sendmsg+0x135/0x1e0 [ 248.865266][T12764] __sys_sendmsg+0x16e/0x220 [ 248.866599][T12764] do_syscall_64+0xcd/0x250 [ 248.867921][T12764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.869589][T12764] [ 248.869589][T12764] other info that might help us debug this: [ 248.869589][T12764] [ 248.872046][T12764] Chain exists of: [ 248.872046][T12764] &q->limits_lock --> mapping.invalidate_lock#2 --> &q->q_usage_counter(io)#49 [ 248.872046][T12764] [ 248.875835][T12764] Possible unsafe locking scenario: [ 248.875835][T12764] [ 248.877734][T12764] CPU0 CPU1 [ 248.879093][T12764] ---- ---- [ 248.880467][T12764] lock(&q->q_usage_counter(io)#49); [ 248.881955][T12764] lock(mapping.invalidate_lock#2); [ 248.883966][T12764] lock(&q->q_usage_counter(io)#49); [ 248.886236][T12764] lock(&q->limits_lock); [ 248.887559][T12764] [ 248.887559][T12764] *** DEADLOCK *** [ 248.887559][T12764] [ 248.889550][T12764] 5 locks held by syz.7.1521/12764: [ 248.890889][T12764] #0: ffffffff8ff78690 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 248.892937][T12764] #1: ffffffff8ff78748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x580/0x800 [ 248.895437][T12764] #2: ffff888025b5f198 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_connect+0xa1b/0x1c00 [ 248.898006][T12764] #3: ffff888025a9cee8 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: nbd_start_device+0x8ef/0xd70 [ 248.900749][T12764] #4: ffff888025a9cf20 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: nbd_start_device+0x8ef/0xd70 [ 248.903533][T12764] [ 248.903533][T12764] stack backtrace: [ 248.905260][T12764] CPU: 2 UID: 0 PID: 12764 Comm: syz.7.1521 Not tainted 6.13.0-rc1-syzkaller-00182-gb8f52214c61a #0 [ 248.908390][T12764] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 248.911129][T12764] Call Trace: [ 248.912005][T12764] [ 248.912781][T12764] dump_stack_lvl+0x116/0x1f0 [ 248.914013][T12764] print_circular_bug+0x419/0x5d0 [ 248.915387][T12764] check_noncircular+0x31a/0x400 [ 248.916679][T12764] ? __pfx_check_noncircular+0x10/0x10 [ 248.918096][T12764] ? lockdep_lock+0x1b8/0x200 [ 248.919335][T12764] ? __pfx_lockdep_lock+0x10/0x10 [ 248.920648][T12764] ? __pfx_mark_lock+0x10/0x10 [ 248.921912][T12764] __lock_acquire+0x249e/0x3c40 [ 248.923194][T12764] ? __pfx___lock_acquire+0x10/0x10 [ 248.924580][T12764] ? __lock_acquire+0x15a9/0x3c40 [ 248.925904][T12764] lock_acquire.part.0+0x11b/0x380 [ 248.927244][T12764] ? __nbd_set_size+0x2c0/0x730 [ 248.928522][T12764] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 248.929980][T12764] ? rcu_is_watching+0x12/0xc0 [ 248.931241][T12764] ? trace_lock_acquire+0x14e/0x1f0 [ 248.932596][T12764] ? __nbd_set_size+0x2c0/0x730 [ 248.933878][T12764] ? lock_acquire+0x2f/0xb0 [ 248.935449][T12764] ? __nbd_set_size+0x2c0/0x730 [ 248.937182][T12764] __mutex_lock+0x19b/0xa60 [ 248.938406][T12764] ? __nbd_set_size+0x2c0/0x730 [ 248.939704][T12764] ? __nbd_set_size+0x2c0/0x730 [ 248.940987][T12764] ? __lock_acquire+0x15a9/0x3c40 [ 248.942322][T12764] ? __pfx___mutex_lock+0x10/0x10 [ 248.943664][T12764] ? __pfx___lock_acquire+0x10/0x10 [ 248.945053][T12764] ? __nbd_set_size+0x2c0/0x730 [ 248.946332][T12764] __nbd_set_size+0x2c0/0x730 [ 248.947562][T12764] ? lock_acquire.part.0+0x11b/0x380 [ 248.948934][T12764] ? find_held_lock+0x2d/0x110 [ 248.950179][T12764] ? blk_mq_freeze_queue_wait+0x186/0x190 [ 248.951675][T12764] ? __pfx_lock_release+0x10/0x10 [ 248.952993][T12764] ? __pfx___nbd_set_size+0x10/0x10 [ 248.954357][T12764] ? __pfx_autoremove_wake_function+0x10/0x10 [ 248.956239][T12764] ? nbd_start_device+0x8ef/0xd70 [ 248.957574][T12764] nbd_start_device+0x8fd/0xd70 [ 248.958867][T12764] nbd_genl_connect+0x1204/0x1c00 [ 248.960206][T12764] ? __pfx_nbd_genl_connect+0x10/0x10 [ 248.961615][T12764] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 248.963535][T12764] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 248.965849][T12764] genl_family_rcv_msg_doit+0x202/0x2f0 [ 248.967574][T12764] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 248.969171][T12764] ? genl_get_cmd+0x195/0x580 [ 248.970418][T12764] ? __radix_tree_lookup+0x21f/0x2c0 [ 248.971818][T12764] genl_rcv_msg+0x565/0x800 [ 248.973010][T12764] ? __pfx_genl_rcv_msg+0x10/0x10 [ 248.974337][T12764] ? __pfx_nbd_genl_connect+0x10/0x10 [ 248.975747][T12764] ? __pfx___lock_acquire+0x10/0x10 [ 248.977106][T12764] netlink_rcv_skb+0x16b/0x440 [ 248.978365][T12764] ? __pfx_genl_rcv_msg+0x10/0x10 [ 248.979693][T12764] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 248.981079][T12764] ? down_read+0xc9/0x330 [ 248.982230][T12764] ? __pfx_down_read+0x10/0x10 [ 248.983505][T12764] ? netlink_deliver_tap+0x1ae/0xd30 [ 248.985011][T12764] genl_rcv+0x28/0x40 [ 248.986509][T12764] netlink_unicast+0x53c/0x7f0 [ 248.988092][T12764] ? __pfx_netlink_unicast+0x10/0x10 [ 248.989531][T12764] netlink_sendmsg+0x8b8/0xd70 [ 248.990786][T12764] ? __pfx_netlink_sendmsg+0x10/0x10 [ 248.992189][T12764] ____sys_sendmsg+0xaaf/0xc90 [ 248.993469][T12764] ? copy_msghdr_from_user+0x10b/0x160 [ 248.994923][T12764] ? __pfx_____sys_sendmsg+0x10/0x10 [ 248.996301][T12764] ___sys_sendmsg+0x135/0x1e0 [ 248.997526][T12764] ? __pfx____sys_sendmsg+0x10/0x10 [ 248.998886][T12764] ? __pfx_lock_release+0x10/0x10 [ 249.000185][T12764] ? trace_lock_acquire+0x14e/0x1f0 [ 249.001551][T12764] ? __fget_files+0x206/0x3a0 [ 249.002743][T12764] __sys_sendmsg+0x16e/0x220 [ 249.003966][T12764] ? __pfx___sys_sendmsg+0x10/0x10 [ 249.005300][T12764] ? __x64_sys_futex+0x1e1/0x4c0 [ 249.006592][T12764] do_syscall_64+0xcd/0x250 [ 249.007747][T12764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.009242][T12764] RIP: 0033:0x7fd18677fed9 [ 249.010377][T12764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.015447][T12764] RSP: 002b:00007fd187639058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 249.017796][T12764] RAX: ffffffffffffffda RBX: 00007fd186945fa0 RCX: 00007fd18677fed9 [ 249.019830][T12764] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 000000000000000b [ 249.021874][T12764] RBP: 00007fd1867f3cc8 R08: 0000000000000000 R09: 0000000000000000 [ 249.023899][T12764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.025979][T12764] R13: 0000000000000000 R14: 00007fd186945fa0 R15: 00007ffefbf71768 [ 249.028011][T12764] [ 249.030987][T12764] nbd0: detected capacity change from 0 to 256 [ 249.034063][ T6753] block nbd0: Dead connection, failed to find a fallback [ 249.036632][ T6753] block nbd0: shutting down sockets [ 249.038492][ T6753] blk_print_req_error: 27 callbacks suppressed [ 249.038504][ T6753] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 249.044058][ T6753] buffer_io_error: 27 callbacks suppressed [ 249.044071][ T6753] Buffer I/O error on dev nbd0, logical block 0, async page read [ 249.049362][ T6753] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 249.052563][ T6753] Buffer I/O error on dev nbd0, logical block 0, async page read [ 249.055369][ T6753] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 249.058239][ T6753] Buffer I/O error on dev nbd0, logical block 0, async page read [ 249.061089][ T6753] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 249.064288][ T6753] Buffer I/O error on dev nbd0, logical block 0, async page read [ 249.067132][ T6753] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 249.070430][ T6753] Buffer I/O error on dev nbd0, logical block 0, async page read [ 249.073296][ T6753] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 249.076388][ T6753] Buffer I/O error on dev nbd0, logical block 0, async page read [ 249.078954][ T6753] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 249.082244][ T6753] Buffer I/O error on dev nbd0, logical block 0, async page read [ 249.085068][ T6753] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 249.088286][ T6753] Buffer I/O error on dev nbd0, logical block 0, async page read [ 249.091160][ T6753] ldm_validate_partition_table(): Disk read failed. [ 249.093561][ T6753] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 249.096339][ T6753] Buffer I/O error on dev nbd0, logical block 0, async page read [ 249.098878][ T6753] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 249.101713][ T6753] Buffer I/O error on dev nbd0, logical block 0, async page read [ 249.104734][ T6753] Dev nbd0: unable to read RDB block 0 [ 249.106575][ T6753] nbd0: unable to read partition table [ 249.109765][ T6753] ldm_validate_partition_table(): Disk read failed. [ 249.111749][ T6753] Dev nbd0: unable to read RDB block 0 [ 249.113329][ T6753] nbd0: unable to read partition table [ 249.558190][ T45] team0 (unregistering): Port device team_slave_1 removed [ 249.649358][ T45] team0 (unregistering): Port device team_slave_0 removed [ 250.192828][ T5936] Bluetooth: hci3: command tx timeout [ 250.299033][T12751] rose0: (slave syz_tun): Releasing backup interface [ 250.817041][ T45] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.101748][ T45] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.146627][ T45] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.188491][ T45] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.252423][ T45] bridge_slave_1: left allmulticast mode [ 251.253889][ T45] bridge_slave_1: left promiscuous mode [ 251.255394][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.257919][ T45] bridge_slave_0: left allmulticast mode [ 251.259429][ T45] bridge_slave_0: left promiscuous mode [ 251.261201][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.393343][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.397607][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.400997][ T45] bond0 (unregistering): Released all slaves [ 251.711840][ T45] hsr_slave_0: left promiscuous mode [ 251.714240][ T45] hsr_slave_1: left promiscuous mode [ 251.716139][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.718072][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.720685][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.723139][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.726763][ T45] veth1_macvtap: left promiscuous mode [ 251.728567][ T45] veth0_macvtap: left promiscuous mode [ 251.730686][ T45] veth1_vlan: left promiscuous mode [ 251.732453][ T45] veth0_vlan: left promiscuous mode [ 251.948928][ T45] team0 (unregistering): Port device team_slave_1 removed [ 251.994578][ T45] team0 (unregistering): Port device team_slave_0 removed VM DIAGNOSIS: 00:02:10 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000007 RBX=ffff888024798940 RCX=1ffffffff20be6c6 RDX=0000000000000000 RSI=ffffffff8bd1b420 RDI=0000000000000001 RBP=ffff888024798d40 RSP=ffffc90003907ce0 R8 =0000000000000000 R9 =0000000000000000 R10=ffffffff905f0317 R11=0000000000000000 R12=0000000000000000 R13=0000000000000021 R14=0000000000000400 R15=ffff888024798940 RIP=ffffffff8b2c66c9 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00005555904e2500 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3d8211 CR3=000000005071e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f782d3f4c42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f782d3f4c4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f782d3f4c49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f782d3f4c5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f782d3f4ce3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f782d3f4dc1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e2d26c7f2780aa89 d17adb5fde388335 b9d040c8cfe34095 de2583bd141774fc ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f782e07d100 00007f782d510440 00007f782d510004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f782d510498 00007f782d510490 00007f782d510488 00007f782d510480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000000 RBX=ffffffff9aa48ab8 RCX=ffffffff84a660ff RDX=0000000000000000 RSI=ffffffff8bd1b420 RDI=ffffffff9aa48abc RBP=1ffff920007a8e3c RSP=ffffc90003d471d8 R8 =0000000000000000 R9 =fffffbfff20be062 R10=ffffffff905f0317 R11=0000000000000ba7 R12=ffffffff9aa48ab0 R13=0000000000001ace R14=0000000000000000 R15=ffff888056245000 RIP=ffffffff81772682 RFL=00000803 [-O----C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f68fe677d60 CR3=000000000df7e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000097 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f68fdb106a3 00007f68fdb106a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcd1502630 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555593fb8fb0 0000555593fb8c00 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555593fb1541 0000555593fb0940 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555593f3a840 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555593f3a8c0 0000555593f3a880 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b1d16a107c9ef2b3 29d499c39c46121d c021161a2b70437e 50a4881d129b55d6 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100100005ba8008 0001000006080606 011ac23410000e08 006808000810000b ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8004010000060806 0c0132d202be1000 0bf003b1d16a107c 9ef2b329d499c39c ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 46121dc021161a2b 70437e50a4881d12 9b55d600435c0e33 01189f89e106009f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 f40a0ad5dfdd7610 a459cd9c32f07adf 53b73c8d0beb78c6 ab6f57760aeae870 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000038 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff851c99d5 RDI=ffffffff9ab10be0 RBP=ffffffff9ab10ba0 RSP=ffffc900037b67b8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=0000000000000038 R14=ffffffff851c9970 R15=0000000000000000 RIP=ffffffff851c99ff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fd1876396c0 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fd187617fb8 CR3=000000004582e000 CR4=00352ef0 DR0=0000000000000002 DR1=0000000000000000 DR2=0000000000000003 DR3=0000000000000001 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffffc00 Opmask01=0000000000000000 Opmask02=00000000ffffe000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f782d3f4c42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f782d3f4c4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f782d3f4c49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f782d3f4c5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f782d3f4ce3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f782d3f4dc1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000302d 6332692f7665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000130e 40114a0c5546470c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000023ffb4 RBX=0000000000000003 RCX=ffffffff8b29e759 RDX=ffffed100d526fee RSI=ffffffff8bd1b420 RDI=ffffffff817086b9 RBP=ffffed1003ad4488 RSP=ffffc900001a7e08 R8 =0000000000000000 R9 =ffffed100d526fed R10=ffff88806a937f6b R11=0000000000000000 R12=0000000000000003 R13=ffff88801d6a2440 R14=ffffffff905f0310 R15=0000000000000000 RIP=ffffffff8b29fb3f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f0ecdde0ab8 CR3=00000000480c8000 CR4=00352ef0 DR0=0000000000000000 DR1=00000000872c9164 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffe000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc3c3faaf0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f782d3f4c42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f782d3f4c4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f782d3f4c49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f782d3f4c5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f782d3f4ce3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f782d3f4dc1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000