last executing test programs: 17m36.622697168s ago: executing program 32 (id=16): mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x15) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x4bb3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) inotify_init1(0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000280)=0x4, 0x4) io_uring_setup(0x23ee, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, 0x0, 0x0) connect$inet(r3, &(0x7f0000000300)={0x2, 0x0, @dev}, 0x10) 17m29.277315083s ago: executing program 33 (id=22): syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) readv(r1, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/234, 0xea}], 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) syz_emit_ethernet(0x4e, &(0x7f0000000300)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r6, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) listen(0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x68}}, 0x0) 17m10.701360587s ago: executing program 34 (id=51): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000400)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_clone(0xd5ba2180, 0x0, 0x0, 0x0, 0x0, 0x0) 17m3.484384231s ago: executing program 35 (id=58): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x80000000, 0x0, 0x41414270, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}}) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000100)={0x10002, 0x2, 0x2}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000140)=0x2) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x2, 0x4}}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00'}, 0x10) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r5}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x34}}, 0x0) 16m30.866375005s ago: executing program 36 (id=96): r0 = socket$kcm(0x29, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/consoles\x00', 0x0, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) 15m57.512434963s ago: executing program 37 (id=143): openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885, 0x0, 0x0, 0xfffffffe}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x12, 0xfffeffff, 0x1, 0x1, 0xd59f80, 0x4, 0x10005, 0x1007, 0x8, 0x5, 0x7fff, 0xe72, 0x7, 0x8, 0x5, 0x8, {0xffff945e, 0x1}, 0x3, 0x22}}) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r3, 0x0, 0xfdef) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) symlink(0x0, &(0x7f0000000100)='./file0\x00') sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x8004000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) 14m24.213064993s ago: executing program 38 (id=316): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000400)=0x3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r1, 0x0, 0xac, 0x29, &(0x7f0000000300)="31ee48cabad6a382373d9e76b9451e5faee2c73f6a5102b267f56ddaf1c54cc28f92095ec586b13a3253df43c5205f9d1823e8df35802b574590a6a4b7335339790e0f3d25c04e9f102ec5e1a901f3326908d1b8d50f725809fe47f7b0fac25c748334de105ff293d4a8d549933313d6875ff10c3d1c52a98c955cfb938ef59a1819bfa3d685b84a4a599b69c2bd0f2289218e34037c48c8a203aefd7592b62d9432bc173697fc7acb313a20", &(0x7f0000000180)=""/41, 0xfff, 0x0, 0x0, 0xc, 0x0, &(0x7f0000000500)="4d03dd7be58f2eab465c6132", 0x3, 0x0, 0xa20b}, 0x50) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) getpid() setns(0xffffffffffffffff, 0x2000000) syz_clone(0xd5ba2180, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r5 = dup3(r3, r4, 0x80000) ioctl$MON_IOCX_GETX(r5, 0xc0109207, &(0x7f0000000d80)={&(0x7f0000002180), &(0x7f0000001180)=""/4092, 0xffc}) 12m44.540206597s ago: executing program 39 (id=574): socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}]}, @NFT_MSG_NEWSETELEM={0x68, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3c, 0x3, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x34, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x2d, 0x1, "fefe807eb37bc2a7a6110a370abbe10adf32aa848edc90232d4665de2ae1583b710c20da833679ebe6"}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xec}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x40001) bpf$PROG_LOAD(0x5, 0x0, 0x0) 12m44.231151287s ago: executing program 40 (id=573): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, 0xffffffffffffffff, 0x3d786000) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) symlinkat(&(0x7f0000000180)='./file0\x00', r3, &(0x7f00000000c0)='./file0\x00') openat(r3, &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x0) 12m32.679294203s ago: executing program 41 (id=598): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, &(0x7f0000000180)={0x18, r4, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000380)={0x28, 0x7, r4, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000}) r5 = fanotify_init(0x200, 0x0) r6 = memfd_create(&(0x7f0000001440)='-\x88\x8cG\xf3\xbd\xbd\xe2\xd0@\x1e\x8b\xf4\x87\xe5I\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdbQ\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x1e\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf8\xdah\x94:\x9cc\x10d\xee\xa7\x8b\x066\xb8G\xd1c\xe1$\xe8\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xf5\xcc\x82n=\x7f=\xcdJxR\xa5~\xb80a\xa9\xb2\x04K\x98\x93=\xabw\x05\x1d\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00_\x99=\x12\xb3\x15\x1b?\xd7\x95\xc4\x85y\xef\xef\xff\xff\xff\xff\xff\xff\xff\xff\xb3\x02\x03\x00\x00\x00\x00\x00\x00\x00\xf6\xed\xc7\x80\xa5Pj\xa4\x06', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) r7 = dup(r6) fanotify_mark(r5, 0x1, 0x4000007b, r7, 0x0) write$cgroup_pid(r7, &(0x7f0000000040), 0x12) ioctl$IOMMU_IOAS_COPY(r3, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, 0x0, r4, 0x1c, 0x3, 0x2}) 11m7.158502383s ago: executing program 42 (id=736): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000400)=0x3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r1, 0x0, 0xd3, 0x0, &(0x7f0000000300)="31ee48cabad6a382373d9e76b9451e5faee2c73f6a5102b267f56ddaf1c54cc28f92095ec586b13a3253df43c5205f9d1823e8df35802b574590a6a4b7335339790e0f3d25c04e9f102ec5e1a901f3326908d1b8d50f725809fe47f7b0fac25c748334de105ff293d4a8d549933313d6875ff10c3d1c52a98c955cfb938ef59a1819bfa3d685b84a4a599b69c2bd0f2289218e34037c48c8a203aefd7592b62d9432bc173697fc7acb313a20315c234d8b47f82d22c5b391fee39a4774c716a96d3cb1e6f67a57dc497f0f2d3a0a91c014d3b9", 0x0, 0xfff, 0x0, 0x92, 0x17, &(0x7f0000000440)="4bae1f547b3171d5f3b3642ff0531f9a7331f4149738cff6cb9da34687382e66143cec753d7fd840187d204384c7b23ae867ba9dc6dc8408d4cdbb9fb2284ce1c14e44c98a49483b804ee40f43437443e5c99786e27e0eeeefd4541be3f07d7e470785b65ae597dcced56352199fc603156ec75638b824ddbcf403020329373fdf6ae5bdd65810587f28cfcff4ffbc107918", &(0x7f0000000500)="4d03dd7be58f2eab465c613211f07542672db829d00a48", 0x3, 0x0, 0xa20b}, 0x50) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x2000000) r5 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r7 = dup3(r5, r6, 0x80000) ioctl$MON_IOCX_GETX(r7, 0xc0109207, &(0x7f0000000d80)={&(0x7f0000002180), &(0x7f0000001180)=""/4092, 0xffc}) 10m24.54460152s ago: executing program 43 (id=836): openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[], 0x48) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, r3, 0x6a98047402e98331}, 0x14}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x8007, 0x0) 10m14.592864583s ago: executing program 44 (id=852): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000780)={0x4, 0x395e, 0x3, {0x1, @sdr={0x3031334d, 0xdd17}}, 0x6}) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$packet(0x11, 0x3, 0x300) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r1, 0x3b82, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r3, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000700)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000000000c4000007008209", @ANYRES32=r5, @ANYBLOB=' ', @ANYRES32=r7, @ANYBLOB="00000000e0000300"/19], 0x38}}, 0x0) 9m35.291736033s ago: executing program 45 (id=912): syz_emit_ethernet(0x86, &(0x7f0000000500)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x4, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "9d42a08597d3b2f44ac89b1b52cc6728d6697d4cebc8f2f062c6f91f224aaacc", "99bd3410936eefeb3ea898dafab974aa", {"96deedc95f5d10a12027128db2e9bdf6", "f838a300b01b0e19ecdf00b20600"}}}}}}}, 0x0) syz_emit_ethernet(0x3a, 0x0, 0x0) syz_io_uring_setup(0x231, 0x0, &(0x7f0000000000), 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x100) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet(0xa, 0x801, 0x84) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r1, 0xffffffffffffeffa, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) syz_open_dev$tty1(0xc, 0x4, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000006, 0x31, 0xffffffffffffffff, 0x0) userfaultfd(0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc000) 7m18.168629964s ago: executing program 46 (id=1293): socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, &(0x7f00000002c0)=[{0x0}], 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) syz_emit_ethernet(0x4e, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)) sendto$packet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) 6m16.725196801s ago: executing program 47 (id=1507): ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getuid() 6m2.038275885s ago: executing program 3 (id=1599): epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x0) write$rfkill(r3, &(0x7f0000000040), 0x8) 5m56.770277042s ago: executing program 3 (id=1615): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x101802, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000200)={0x1, @vbi={0x0, 0x0, 0x0, 0x31424752, [], [0x8000]}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) sched_getattr(0x0, &(0x7f0000000040)={0x38}, 0x38, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000008c0)=ANY=[@ANYBLOB="64020000", @ANYRES16=r3, @ANYBLOB="250827bd7000fedbdf250800000084000180080003008000000038000400200001000a004e2100000009fe8000000000000000000000000000aa040000001400020002004e23000000000000000000000000080003000f000000380004001400010002004e22ac1414bb0000000000000000200002000a004e2000000003fc00000000000000000000000000000001800000600007800c00040003000000000000000c00030053000000000000000c000300de0a00000000000008000100060000000c00040002000000000000000c00040009000000000000000c00040009000000000000000c0003000101000000000000880004801400078008000100180000000800040002000000090001"], 0x264}, 0x1, 0x0, 0x0, 0x20008880}, 0x20000840) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, '\x00'}) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f00000023c0)={&(0x7f0000002100), 0xc, &(0x7f0000002380)={&(0x7f0000002140)={0x1b0, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x63a}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1b}]}, @TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_MEDIA={0x9c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcfdb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x482}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffe}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x444}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5f42}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffff8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xadb}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe8ee}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xa}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x20044005}, 0x4000) r5 = fsopen(&(0x7f0000000480)='nfs\x00', 0x1) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) mkdirat$cgroup_root(0xffffff9c, &(0x7f00000020c0)='./cgroup/syz1\x00', 0x1ff) sendmmsg$inet6(r6, &(0x7f0000005d80)=[{{&(0x7f00000001c0)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @remote}, 0x3}, 0x1c, 0x0}}], 0x1, 0x2004c004) close_range(r5, 0xffffffffffffffff, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x4, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@ldst={0x7, 0x3, 0x1, 0x0, 0x0, 0x1}]}, &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000440)={@rand_addr=' \x01\x00', 0x1e}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='statm\x00') read$FUSE(r9, &(0x7f0000000080)={0x2020}, 0x2020) sendmsg$NL80211_CMD_SET_MPATH(r9, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)={0x68, r8, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x20000004) openat$ppp(0xffffff9c, &(0x7f0000000080), 0x450401, 0x0) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f0000000480)) 5m55.397308299s ago: executing program 3 (id=1621): r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000100)={{0x2, 0x4e20, @multicast1}, {0x1, @multicast}, 0x15, {0x2, 0x1, @rand_addr=0x64010101}, 'geneve0\x00'}) syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e040005209800"], 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000080)=0x40) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee01}}, './file0\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) 5m54.750821939s ago: executing program 3 (id=1624): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$PPPIOCSFLAGS1(r1, 0x80047458, 0x0) 5m54.370760245s ago: executing program 3 (id=1625): syz_open_dev$loop(&(0x7f00000005c0), 0x10000, 0x10d480) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05000000020004000300000001"], 0x48) bpf$BPF_GET_PROG_INFO(0x4, 0x0, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="310300000000000000000900000008000300", @ANYRES32], 0x24}}, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f00000001c0), 0x2000000000000112}, 0x3268455f}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/171, 0xab}], 0x1}, 0xfffffff9}], 0x2, 0x2, 0x0) fsopen(&(0x7f0000000100)='binfmt_misc\x00', 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xd) r2 = dup(r1) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300, 0x0, 0x0, 0x0, 0x37a0}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xa00) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) 5m52.678431368s ago: executing program 3 (id=1634): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) syz_emit_ethernet(0x4e, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)) listen(0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 5m51.082666043s ago: executing program 1 (id=1639): r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000018c0)=[{}], 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000006480)={&(0x7f0000b9a000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x1, 0x0}, &(0x7f0000000200)=0x40) 5m50.238469542s ago: executing program 1 (id=1642): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000001f6110880000000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae90, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000000021000080"]) 5m48.498143131s ago: executing program 1 (id=1647): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000140)={r1, r0, 0x2}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r1, r0, 0x2, 0x0, @void}, 0x10) 5m47.810791623s ago: executing program 1 (id=1649): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) 5m47.101854472s ago: executing program 1 (id=1653): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 5m46.415414034s ago: executing program 1 (id=1655): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) close(r0) 5m36.907678455s ago: executing program 48 (id=1634): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) syz_emit_ethernet(0x4e, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)) listen(0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 5m30.15846165s ago: executing program 49 (id=1655): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) close(r0) 5m2.226931507s ago: executing program 9 (id=1738): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) close(0xffffffffffffffff) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x2b, 'cpu'}]}, 0x5) 5m1.164675417s ago: executing program 9 (id=1739): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x5, 0x1}]}}, &(0x7f0000001f40)=""/4089, 0x26, 0xff9, 0xa, 0x0, 0x0, @void, @value}, 0x28) 5m0.431386333s ago: executing program 9 (id=1740): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcd946929bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 4m59.244218317s ago: executing program 9 (id=1741): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x101802, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000200)={0x1, @vbi={0x0, 0x0, 0x0, 0x31424752, [], [0x8000]}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) sched_getattr(0x0, &(0x7f0000000040)={0x38}, 0x38, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000008c0)=ANY=[@ANYBLOB="64020000", @ANYRES16=r3, @ANYBLOB="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"], 0x264}, 0x1, 0x0, 0x0, 0x20008880}, 0x20000840) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, '\x00'}) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f00000023c0)={&(0x7f0000002100), 0xc, &(0x7f0000002380)={&(0x7f0000002140)={0x1f8, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x63a}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1b}]}, @TIPC_NLA_LINK={0xd8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc17e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_MEDIA={0x9c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcfdb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x482}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffe}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x444}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5f42}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffff8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xadb}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe8ee}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xa}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x20044005}, 0x4000) r5 = fsopen(&(0x7f0000000480)='nfs\x00', 0x1) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) mkdirat$cgroup_root(0xffffff9c, &(0x7f00000020c0)='./cgroup/syz1\x00', 0x1ff) sendmmsg$inet6(r6, &(0x7f0000005d80)=[{{&(0x7f00000001c0)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @remote}, 0x3}, 0x1c, 0x0}}], 0x1, 0x2004c004) close_range(r5, 0xffffffffffffffff, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x4, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@ldst={0x7, 0x3, 0x1, 0x0, 0x0, 0x1}]}, &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000440)={@rand_addr=' \x01\x00', 0x1e}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='statm\x00') read$FUSE(r9, &(0x7f0000000080)={0x2020}, 0x2020) sendmsg$NL80211_CMD_SET_MPATH(r9, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)={0x68, r8, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x20000004) openat$ppp(0xffffff9c, &(0x7f0000000080), 0x450401, 0x0) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f0000000480)) 4m58.814643767s ago: executing program 0 (id=1742): r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180), 0x8302, 0x0) write$P9_RFLUSH(r0, &(0x7f00000001c0)={0x7, 0x6d, 0x7ff}, 0x7) 4m58.046900855s ago: executing program 0 (id=1744): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) 4m57.930636978s ago: executing program 9 (id=1745): mkdirat(0xffffffffffffff9c, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) r0 = syz_open_dev$MSR(&(0x7f0000000300), 0x100040000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4080) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc0280200003001e030500e1000c0400070080000300", 0x33a) 4m57.366746936s ago: executing program 0 (id=1746): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000300), &(0x7f00000000c0)=0x8) 4m57.05143284s ago: executing program 9 (id=1747): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) writev(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x200ce0c0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_PEC(r2, 0x708, 0x9) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r3, &(0x7f0000001940)=""/4086, 0xff6) request_key(&(0x7f0000000240)='rxrpc\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000002c0)='/dev/cpu/#/msr\x00', r3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f00000025c0)=[@in={0x2, 0x4e23, @private=0xa010101}]}, 0x0) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000100)={0x0, 0x0, 0x4, &(0x7f00000000c0)={0x0, "a26df55a767236e62139c2071a176250a12fab5932b902510feb36506cb52f0560"}}) 4m56.203774649s ago: executing program 0 (id=1749): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2400000068000901000000000000000002000000000000000800100050"], 0x24}}, 0x0) 4m55.183599213s ago: executing program 0 (id=1751): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) preadv(0xffffffffffffffff, &(0x7f00000031c0)=[{&(0x7f0000005e40)=""/4102, 0x1006}], 0x1, 0x0, 0x0) add_key(0x0, &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r4, 0x0, 0x0, 0x0) r5 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x4, 0x13f81}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}) io_uring_enter(r5, 0x54, 0x0, 0x1, 0x0, 0x0) 4m43.060005584s ago: executing program 0 (id=1770): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) socketpair(0x1a, 0x2, 0x6, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x501c4814, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000000506010100000000000000000700000809000200730900030073797a3100000000000000000000fc5b0000000000000064bdd1b1d2086de20525a9e4b950e6e23b2f5202efd528c277b811f4c12015f86aa5f056b65182"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r3 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xfc, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 4m41.463696249s ago: executing program 50 (id=1747): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) writev(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x200ce0c0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_PEC(r2, 0x708, 0x9) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r3, &(0x7f0000001940)=""/4086, 0xff6) request_key(&(0x7f0000000240)='rxrpc\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000002c0)='/dev/cpu/#/msr\x00', r3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f00000025c0)=[@in={0x2, 0x4e23, @private=0xa010101}]}, 0x0) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000100)={0x0, 0x0, 0x4, &(0x7f00000000c0)={0x0, "a26df55a767236e62139c2071a176250a12fab5932b902510feb36506cb52f0560"}}) 4m27.20895132s ago: executing program 51 (id=1770): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) socketpair(0x1a, 0x2, 0x6, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x501c4814, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000000506010100000000000000000700000809000200730900030073797a3100000000000000000000fc5b0000000000000064bdd1b1d2086de20525a9e4b950e6e23b2f5202efd528c277b811f4c12015f86aa5f056b65182"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r3 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xfc, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 4m11.171809127s ago: executing program 5 (id=1832): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000100)={0xe, 0x2, 0x0, "4b9c39f88e56d5d98deee9080b0de7611ebfeef3cef83f51fdb40f0aeab9e862", 0x33424752}) 4m10.09129956s ago: executing program 5 (id=1833): unshare(0x20000400) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 4m8.751028433s ago: executing program 5 (id=1836): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000300)={r2}, &(0x7f00000000c0)=0x8) 4m7.611052044s ago: executing program 5 (id=1839): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 4m6.492061136s ago: executing program 5 (id=1841): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB="010000000000000000001800000008000300", @ANYRES32=r2, @ANYBLOB="380030803400018008000100000000002800038008000200030000000c0004000000000000000000060001"], 0x54}}, 0x0) 4m5.667449083s ago: executing program 5 (id=1842): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) preadv(0xffffffffffffffff, &(0x7f00000031c0)=[{&(0x7f0000005e40)=""/4102, 0x1006}], 0x1, 0x0, 0x0) add_key(0x0, &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) r4 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x4, 0x13f81}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}) io_uring_enter(r4, 0x54, 0x0, 0x1, 0x0, 0x0) 3m49.912443869s ago: executing program 52 (id=1842): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) preadv(0xffffffffffffffff, &(0x7f00000031c0)=[{&(0x7f0000005e40)=""/4102, 0x1006}], 0x1, 0x0, 0x0) add_key(0x0, &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) r4 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x4, 0x13f81}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}) io_uring_enter(r4, 0x54, 0x0, 0x1, 0x0, 0x0) 14.153625195s ago: executing program 6 (id=2337): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_rdma(0x10, 0x3, 0x14) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, 0x0) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) 12.897945489s ago: executing program 4 (id=2342): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r1, 0xc0105502, &(0x7f0000000340)={0x1, 0x1}) 12.439530221s ago: executing program 8 (id=2343): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000fa3000/0x2000)=nil, 0x2000, 0x7, 0x13, r0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x37, 0x800000, 0x8, 0x9, 0x8000}) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x6) 12.05752765s ago: executing program 2 (id=2344): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 11.880112783s ago: executing program 6 (id=2345): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r0, 0x0, r0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b700000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 11.738004849s ago: executing program 7 (id=2346): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000300)={0x1d, r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r1, {0xfff1}, {}, {0xb}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 11.541422427s ago: executing program 4 (id=2347): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) close(0xffffffffffffffff) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r1, &(0x7f0000000040), 0x0) 11.294054701s ago: executing program 8 (id=2348): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000480012800e000100697036677265746170000000340002800800", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) 10.77279395s ago: executing program 6 (id=2349): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000006000000000084e27fa40000000f000000c5000000a0000200"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = io_uring_setup(0x28bc, &(0x7f00000002c0)={0x0, 0x9d31, 0x82, 0x3}) io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000000080)=[{0x0, 0xf00, 0x0, 0x0, 0x0}], 0x1) 10.772615204s ago: executing program 2 (id=2350): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f00000000c0)) 10.615359856s ago: executing program 4 (id=2351): bpf$PROG_LOAD(0x5, 0x0, 0x0) 10.147492239s ago: executing program 7 (id=2352): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_subtree(r0, 0x0, 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r1, 0x107, 0x18, &(0x7f0000000800)={0x0, 0x1, 0x6, @local}, 0x10) 10.082305344s ago: executing program 8 (id=2353): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 9.639901835s ago: executing program 2 (id=2354): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10) sendmsg$802154_raw(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)}}, 0x0) 9.63967312s ago: executing program 4 (id=2355): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_rdma(0x10, 0x3, 0x14) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, 0x0) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) 9.467795815s ago: executing program 6 (id=2356): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec0400339b8fd15e58a83b3da942"], 0xb0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000180)=ANY=[], 0x10) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport', @ANYRESDEC=r3]) statfs(&(0x7f0000000300)='./file0\x00', 0x0) 9.122438315s ago: executing program 7 (id=2357): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xf8}}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r1, 0xc0105502, &(0x7f0000000340)={0x1, 0x1}) 8.947959191s ago: executing program 8 (id=2358): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000fa3000/0x2000)=nil, 0x2000, 0x7, 0x13, r0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x37, 0x800000, 0x8, 0x9, 0x8000}) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x6) 8.532384802s ago: executing program 2 (id=2359): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r0, 0x0, r0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b700000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 8.33721517s ago: executing program 6 (id=2360): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, r1, 0x711}, 0x14}, 0x1, 0x0, 0x0, 0x4000014}, 0x0) read(r0, &(0x7f00000000c0)=""/1, 0x1) 8.131615195s ago: executing program 7 (id=2361): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 7.983729993s ago: executing program 8 (id=2362): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0xdc, 0x30, 0x800, 0x70b52d, 0x25dfdbff, {}, [{0xc8, 0x1, [@m_vlan={0xc4, 0xd, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}]}, {0x8d, 0x6, "a0c2bbb59630dd69c8e8225426ab221055f763b5147afa1560de2b861f8b24ea45e2ac7064017c5b5200f0e0418940015006562c9c04a6e77bfb89af64efb0d53a479d7a9a681879e2de2428e90d7f2ab1eec74a59c3d5f641a8e327701c4386030c2a2cc2aeabf004fbca31f2e48d69725252c26227a7e4bd39586075c6b9308213936eb67b92b715"}, {0xc, 0x7, {0x0, 0xbe6c4a687f3af6cc}}, {0xc, 0x8, {0x11b520613f9bf6d1, 0x1}}}}]}]}, 0xdc}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 7.479802976s ago: executing program 2 (id=2363): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000480012800e00010069703667726574617000000034000280080001", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) 7.43251699s ago: executing program 4 (id=2364): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f00000000c0)) 7.006679048s ago: executing program 6 (id=2365): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000240)="b18e", 0x2}], 0x1) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "00000100ebffffff", "2607080d7f4fcf00fd4ef6dece6c7c58", '\x00', "006e34fb00"}, 0x28) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 6.779742833s ago: executing program 7 (id=2366): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000006000000000084e27fa40000000f000000c5000000a0000200"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = io_uring_setup(0x28bc, &(0x7f00000002c0)={0x0, 0x9d31, 0x82, 0x3}) io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000000080)=[{0x0, 0xf00, 0x0, 0x0, 0x0}], 0x1) 6.354868321s ago: executing program 8 (id=2367): bpf$PROG_LOAD(0x5, 0x0, 0x0) 4.213782832s ago: executing program 4 (id=2368): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 3.405092699s ago: executing program 2 (id=2369): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10) sendmsg$802154_raw(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)="d9536b9e4ec1457e", 0x8}}, 0x0) 0s ago: executing program 7 (id=2370): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec0400339b8fd15e58a83b3da942"], 0xb0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000180)=ANY=[], 0x10) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,acc', @ANYRESDEC=r3]) statfs(&(0x7f0000000300)='./file0\x00', 0x0) kernel console output (not intermixed with test programs): ort 6081 - 0 [ 906.282579][T11172] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 906.291603][T11172] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.306042][ T5851] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 907.492671][ T5851] usb 1-1: device descriptor read/64, error -71 [ 907.847779][T11436] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1426'. [ 907.863041][T11436] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1426'. [ 907.863109][ T5851] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 907.874452][T11436] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (4) [ 908.025269][ T5851] usb 1-1: device descriptor read/64, error -71 [ 908.172498][ T5851] usb usb1-port1: attempt power cycle [ 908.628424][T11447] fuse: Bad value for 'fd' [ 908.916152][ T5851] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 908.983049][ T5851] usb 1-1: device descriptor read/8, error -71 [ 909.264755][ T5851] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 909.299673][ T5851] usb 1-1: device descriptor read/8, error -71 [ 909.444441][ T5851] usb usb1-port1: unable to enumerate USB device [ 910.364426][T11477] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1437'. [ 910.373908][T11477] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1437'. [ 910.383856][T11477] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 911.358878][T11489] fuse: Bad value for 'fd' [ 912.443436][ T5851] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 912.602472][ T5851] usb 9-1: device descriptor read/64, error -71 [ 912.831274][T11513] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1448'. [ 912.841028][T11513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1448'. [ 912.850582][T11513] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 912.864565][ T5851] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 913.032770][ T5851] usb 9-1: device descriptor read/64, error -71 [ 913.153840][ T5851] usb usb9-port1: attempt power cycle [ 913.354608][ T4334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 913.362927][ T4334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 913.690859][ T5851] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 913.754739][ T5851] usb 9-1: device descriptor read/8, error -71 [ 914.056072][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 914.064492][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 914.111070][ T5851] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 914.157635][ T5851] usb 9-1: device descriptor read/8, error -71 [ 914.253732][T11531] fuse: Bad value for 'fd' [ 914.274208][ T5851] usb usb9-port1: unable to enumerate USB device [ 915.925482][T11554] hsr0: entered promiscuous mode [ 916.603663][T11561] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1460'. [ 916.613121][T11561] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1460'. [ 916.622763][T11561] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 917.510585][T11576] can0: slcan on ttyS3. [ 917.859188][T11580] can0 (unregistered): slcan off ttyS3. [ 918.613486][ T25] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 918.802449][ T25] usb 1-1: device descriptor read/64, error -71 [ 919.065947][ T25] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 919.273247][ T25] usb 1-1: device descriptor read/64, error -71 [ 919.386893][ T25] usb usb1-port1: attempt power cycle [ 919.762718][ T25] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 919.844285][ T25] usb 1-1: device descriptor read/8, error -71 [ 920.107676][ T25] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 920.197950][ T25] usb 1-1: device descriptor read/8, error -71 [ 920.331809][ T25] usb usb1-port1: unable to enumerate USB device [ 922.068012][T11627] netlink: 228 bytes leftover after parsing attributes in process `syz.9.1480'. [ 924.963695][T11655] netlink: 228 bytes leftover after parsing attributes in process `syz.8.1491'. [ 925.878317][ T25] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 926.156387][T11677] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1496'. [ 926.165963][T11677] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1496'. [ 926.175904][T11677] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 926.683925][ T25] usb 9-1: device descriptor read/64, error -71 [ 926.973573][ T25] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 927.302809][ T25] usb 9-1: device descriptor read/64, error -71 [ 927.455280][ T25] usb usb9-port1: attempt power cycle [ 927.935836][ T25] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 928.061553][ T25] usb 9-1: device descriptor read/8, error -71 [ 928.389551][ T25] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 929.106609][ T25] usb 9-1: device descriptor read/8, error -71 [ 929.234063][ T25] usb usb9-port1: unable to enumerate USB device [ 929.816560][T11702] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1503'. [ 931.473152][ T5851] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 931.582685][ T25] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 931.642527][ T5851] usb 10-1: Using ep0 maxpacket: 8 [ 931.681875][ T5851] usb 10-1: New USB device found, idVendor=20a6, idProduct=1105, bcdDevice=c2.eb [ 931.691476][ T5851] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.699973][ T5851] usb 10-1: Product: syz [ 931.704656][ T5851] usb 10-1: Manufacturer: syz [ 931.714189][ T5851] usb 10-1: SerialNumber: syz [ 931.760794][ T5851] usb 10-1: config 0 descriptor?? [ 931.796432][ T5851] usb 10-1: bad CDC descriptors [ 931.808034][ T5851] option 10-1:0.0: GSM modem (1-port) converter detected [ 931.879115][ T25] usb 4-1: device descriptor read/64, error -71 [ 932.411635][T11432] usb 10-1: USB disconnect, device number 10 [ 932.420769][T11432] option 10-1:0.0: device disconnected [ 932.549151][ T25] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 933.134901][ T25] usb 4-1: device descriptor read/64, error -71 [ 933.243374][ T25] usb usb4-port1: attempt power cycle [ 933.613073][ T25] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 933.668293][ T25] usb 4-1: device descriptor read/8, error -71 [ 933.927047][ T25] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 934.003002][ T25] usb 4-1: device descriptor read/8, error -71 [ 934.123525][T11758] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1520'. [ 934.132619][ T25] usb usb4-port1: unable to enumerate USB device [ 937.663233][T11788] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1530'. [ 939.105567][T11797] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1533'. [ 939.803255][ T25] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 940.012812][ T25] usb 4-1: device descriptor read/64, error -71 [ 940.293127][ T25] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 940.532567][ T25] usb 4-1: device descriptor read/64, error -71 [ 940.646564][ T25] usb usb4-port1: attempt power cycle [ 941.034179][ T25] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 941.104072][T11813] usb usb8: usbfs: process 11813 (syz.9.1537) did not claim interface 0 before use [ 941.148013][ T25] usb 4-1: device descriptor read/8, error -71 [ 941.464213][ T25] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 941.534669][ T25] usb 4-1: device descriptor read/8, error -71 [ 941.685507][ T25] usb usb4-port1: unable to enumerate USB device [ 945.540069][T11837] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1548'. [ 946.696585][ T5803] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 946.715127][ T5803] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 946.724350][ T5803] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 947.089426][ T5803] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 947.102967][ T5803] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 947.112129][ T5803] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 949.232095][ T5802] Bluetooth: hci3: command tx timeout [ 949.813035][T11850] chnl_net:caif_netlink_parms(): no params data found [ 950.092064][T11885] netlink: 228 bytes leftover after parsing attributes in process `syz.9.1562'. [ 951.313517][ T5802] Bluetooth: hci3: command tx timeout [ 951.508035][ T7651] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.624497][ T7651] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.007584][ T7651] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.272618][ T7651] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.286419][ T25] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 952.953823][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 953.071570][ T25] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 953.084945][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 953.218876][ T7651] bridge_slave_1: left allmulticast mode [ 953.226253][ T7651] bridge_slave_1: left promiscuous mode [ 953.233203][ T7651] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.453025][ T5802] Bluetooth: hci3: command tx timeout [ 953.552891][ T25] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 953.562435][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 953.570719][ T25] usb 2-1: Product: syz [ 953.575318][ T25] usb 2-1: Manufacturer: syz [ 953.580158][ T25] usb 2-1: SerialNumber: syz [ 953.593286][ T25] usb 2-1: config 0 descriptor?? [ 953.680158][ T25] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 953.694261][ T25] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 953.705258][ T7651] bridge_slave_0: left allmulticast mode [ 953.711281][ T7651] bridge_slave_0: left promiscuous mode [ 953.718128][ T7651] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.093827][T11932] netlink: 228 bytes leftover after parsing attributes in process `syz.9.1576'. [ 954.775789][ T25] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 954.823557][ T25] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 954.947570][ T7651] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 955.105053][ T7651] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 955.196469][ T7651] bond0 (unregistering): Released all slaves [ 955.215624][ T7651] bond1 (unregistering): Released all slaves [ 955.235460][ T7651] bond2 (unregistering): Released all slaves [ 955.254556][ T7651] bond3 (unregistering): Released all slaves [ 955.501476][ T5802] Bluetooth: hci3: command tx timeout [ 955.588257][ T25] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 955.596946][ T25] em28xx 2-1:0.0: No AC97 audio processor [ 955.638000][T11850] bridge0: port 1(bridge_slave_0) entered blocking state [ 955.648599][T11850] bridge0: port 1(bridge_slave_0) entered disabled state [ 955.659036][T11850] bridge_slave_0: entered allmulticast mode [ 955.681778][T11850] bridge_slave_0: entered promiscuous mode [ 955.768953][T11850] bridge0: port 2(bridge_slave_1) entered blocking state [ 955.789127][T11850] bridge0: port 2(bridge_slave_1) entered disabled state [ 955.797248][T11850] bridge_slave_1: entered allmulticast mode [ 955.806602][T11850] bridge_slave_1: entered promiscuous mode [ 955.817607][ T25] usb 2-1: USB disconnect, device number 12 [ 955.825242][ T25] em28xx 2-1:0.0: Disconnecting em28xx [ 955.865535][ T25] em28xx 2-1:0.0: Freeing device [ 956.385894][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 956.396040][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 956.455095][T11957] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1581'. [ 956.736387][T11850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 956.849854][T11850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 957.382630][ T7651] hsr_slave_0: left promiscuous mode [ 957.445861][ T7651] hsr_slave_1: left promiscuous mode [ 957.518217][ T7651] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 957.526489][ T7651] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 957.595111][ T7651] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 957.603282][ T7651] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 957.932303][ T7651] veth1_macvtap: left promiscuous mode [ 957.938754][ T7651] veth0_macvtap: left promiscuous mode [ 957.944965][ T7651] veth1_vlan: left promiscuous mode [ 957.950542][ T7651] veth0_vlan: left promiscuous mode [ 958.683491][T11987] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1588'. [ 959.655212][ T7651] team0 (unregistering): Port device team_slave_1 removed [ 959.704914][ T7651] team0 (unregistering): Port device team_slave_0 removed [ 960.314536][T12005] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1596'. [ 960.535933][T11850] team0: Port device team_slave_0 added [ 960.656922][T11850] team0: Port device team_slave_1 added [ 960.989408][T11850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 961.003178][T11850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 961.031932][T11850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 961.228727][T11850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 961.236320][T11850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 961.263170][T11850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 961.834247][T11850] hsr_slave_0: entered promiscuous mode [ 961.884131][T11850] hsr_slave_1: entered promiscuous mode [ 961.932953][T11850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 961.940950][T11850] Cannot create hsr debugfs directory [ 962.296220][T12027] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1602'. [ 964.549048][T11850] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 964.660384][T11850] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 964.803959][T11850] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 964.854789][T11850] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 965.704852][T11850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 965.770841][T11850] 8021q: adding VLAN 0 to HW filter on device team0 [ 965.937611][T11850] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 965.949201][T11850] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 965.990000][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 965.997580][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 966.048516][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 966.056294][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 966.820456][T12075] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1615'. [ 967.699144][T11850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 970.238884][T11850] veth0_vlan: entered promiscuous mode [ 970.395472][T11850] veth1_vlan: entered promiscuous mode [ 970.437319][T12133] netlink: 228 bytes leftover after parsing attributes in process `syz.9.1630'. [ 970.589864][T11850] veth0_macvtap: entered promiscuous mode [ 970.649444][T11850] veth1_macvtap: entered promiscuous mode [ 970.720984][T11850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 970.736769][T11850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 970.748463][T11850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 970.759387][T11850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 970.769631][T11850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 970.780516][T11850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 970.790666][T11850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 970.801623][T11850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 970.812343][T11850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 970.823112][T11850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 970.844507][T11850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 970.867701][T11850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 970.879729][T11850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 970.889934][T11850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 970.900806][T11850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 970.911007][T11850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 970.921857][T11850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 970.937064][T11850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 970.949255][T11850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 970.959527][T11850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 970.970343][T11850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 970.985174][T11850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 971.004832][T11850] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.015273][T11850] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.025419][T11850] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.040917][T11850] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.106369][ T5802] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 972.115258][ T5802] Bluetooth: hci2: Injecting HCI hardware error event [ 972.123377][ T5802] Bluetooth: hci2: hardware error 0x00 [ 973.483187][T12173] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1644'. [ 974.183312][ T5802] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 976.450399][T12213] netlink: 228 bytes leftover after parsing attributes in process `syz.9.1654'. [ 977.719110][T12227] misc userio: Invalid payload size [ 977.762954][T12227] misc userio: No port type given on /dev/userio [ 979.148125][ T3958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 979.156360][ T3958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 979.276445][ T4334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 979.284672][ T4334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 983.357608][T12275] netlink: 228 bytes leftover after parsing attributes in process `syz.9.1665'. [ 983.394079][T12276] misc userio: Invalid payload size [ 987.433640][ T5803] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 987.578912][ T5803] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 987.637609][ T5803] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 987.694724][ T5803] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 987.735784][ T5803] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 987.748297][ T5803] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 987.845412][T12319] netlink: 228 bytes leftover after parsing attributes in process `syz.9.1677'. [ 989.447210][T12331] misc userio: Invalid payload size [ 989.859060][T12314] chnl_net:caif_netlink_parms(): no params data found [ 989.867564][ T5803] Bluetooth: hci4: command tx timeout [ 991.638958][T12314] bridge0: port 1(bridge_slave_0) entered blocking state [ 991.646923][T12314] bridge0: port 1(bridge_slave_0) entered disabled state [ 991.656307][T12314] bridge_slave_0: entered allmulticast mode [ 991.665472][T12314] bridge_slave_0: entered promiscuous mode [ 991.742610][T12314] bridge0: port 2(bridge_slave_1) entered blocking state [ 991.750449][T12314] bridge0: port 2(bridge_slave_1) entered disabled state [ 991.758570][T12314] bridge_slave_1: entered allmulticast mode [ 991.768033][T12314] bridge_slave_1: entered promiscuous mode [ 991.947501][ T5803] Bluetooth: hci4: command tx timeout [ 992.075321][T12314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 992.160368][T12314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 992.477326][T12349] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 992.548106][T12314] team0: Port device team_slave_0 added [ 992.586812][T12314] team0: Port device team_slave_1 added [ 993.060156][T12314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 993.067817][T12314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 993.094616][T12314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 993.327213][T12314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 993.334730][T12314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 993.368029][T12314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 994.053261][ T5803] Bluetooth: hci4: command tx timeout [ 994.191808][T12314] hsr_slave_0: entered promiscuous mode [ 994.244035][T12314] hsr_slave_1: entered promiscuous mode [ 994.273109][T12314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 994.286888][T12314] Cannot create hsr debugfs directory [ 994.403808][ T5802] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 994.425374][ T5802] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 994.474391][ T5802] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 994.507706][ T5802] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 994.547105][ T5802] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 994.594777][ T5802] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 994.630416][ T3872] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.986807][ T3872] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.178446][ T3872] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.542794][ T3872] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.585011][T12369] netlink: 228 bytes leftover after parsing attributes in process `syz.9.1690'. [ 995.743354][T12371] misc userio: Invalid payload size [ 996.103464][ T5802] Bluetooth: hci4: command tx timeout [ 996.199073][ T3872] bridge_slave_1: left allmulticast mode [ 996.205264][ T3872] bridge_slave_1: left promiscuous mode [ 996.211881][ T3872] bridge0: port 2(bridge_slave_1) entered disabled state [ 996.251957][ T3872] bridge_slave_0: left allmulticast mode [ 996.258941][ T3872] bridge_slave_0: left promiscuous mode [ 996.265849][ T3872] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.783415][ T5802] Bluetooth: hci2: command tx timeout [ 996.868744][ T3872] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 996.923956][ T3872] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 997.488494][ T3872] bond0 (unregistering): Released all slaves [ 998.823355][ T5802] Bluetooth: hci2: command tx timeout [ 999.228128][T12397] netlink: 228 bytes leftover after parsing attributes in process `syz.5.1700'. [ 999.318048][ T3872] hsr_slave_0: left promiscuous mode [ 999.330301][ T3872] hsr_slave_1: left promiscuous mode [ 999.344256][ T3872] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 999.352097][ T3872] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 999.387289][ T3872] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 999.401133][ T3872] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 999.607969][ T3872] veth1_macvtap: left promiscuous mode [ 999.613910][ T3872] veth0_macvtap: left promiscuous mode [ 999.619815][ T3872] veth1_vlan: left promiscuous mode [ 999.625693][ T3872] veth0_vlan: left promiscuous mode [ 1000.708739][ T3872] team0 (unregistering): Port device team_slave_1 removed [ 1000.793983][ T3872] team0 (unregistering): Port device team_slave_0 removed [ 1000.942916][ T5802] Bluetooth: hci2: command tx timeout [ 1001.683355][T12362] chnl_net:caif_netlink_parms(): no params data found [ 1002.117510][ T4334] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.757897][ T4334] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.984839][ T5802] Bluetooth: hci2: command tx timeout [ 1003.078666][ T4334] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.336683][ T4334] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.804115][T12314] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1004.152033][T12314] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1004.343433][ T4334] bridge_slave_1: left allmulticast mode [ 1004.349345][ T4334] bridge_slave_1: left promiscuous mode [ 1004.356156][ T4334] bridge0: port 2(bridge_slave_1) entered disabled state [ 1004.631483][ T4334] bridge_slave_0: left allmulticast mode [ 1004.637618][ T4334] bridge_slave_0: left promiscuous mode [ 1004.644389][ T4334] bridge0: port 1(bridge_slave_0) entered disabled state [ 1004.983053][T12450] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1713'. [ 1005.571124][ T4334] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1005.667808][ T4334] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1005.946740][ T4334] bond0 (unregistering): Released all slaves [ 1006.255008][T12362] bridge0: port 1(bridge_slave_0) entered blocking state [ 1006.270355][T12362] bridge0: port 1(bridge_slave_0) entered disabled state [ 1006.278770][T12362] bridge_slave_0: entered allmulticast mode [ 1006.287971][T12362] bridge_slave_0: entered promiscuous mode [ 1006.389950][T12362] bridge0: port 2(bridge_slave_1) entered blocking state [ 1006.398028][T12362] bridge0: port 2(bridge_slave_1) entered disabled state [ 1006.406150][T12362] bridge_slave_1: entered allmulticast mode [ 1006.415402][T12362] bridge_slave_1: entered promiscuous mode [ 1006.919357][T12314] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1006.969090][T12314] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1009.654509][T12362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1009.770447][T12362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1010.325221][T12490] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1722'. [ 1010.514894][ T4334] hsr_slave_0: left promiscuous mode [ 1010.703811][ T4334] hsr_slave_1: left promiscuous mode [ 1010.723638][ T4334] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1010.731406][ T4334] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1010.785370][ T4334] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1010.793593][ T4334] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1010.906414][ T4334] veth1_macvtap: left promiscuous mode [ 1010.912572][ T4334] veth0_macvtap: left promiscuous mode [ 1010.918572][ T4334] veth1_vlan: left promiscuous mode [ 1010.924338][ T4334] veth0_vlan: left promiscuous mode [ 1012.263905][ T4334] team0 (unregistering): Port device team_slave_1 removed [ 1012.377585][ T4334] team0 (unregistering): Port device team_slave_0 removed [ 1012.633985][T12362] team0: Port device team_slave_0 added [ 1012.785627][T12362] team0: Port device team_slave_1 added [ 1013.308278][T12362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1013.316372][T12362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1013.346357][T12362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1013.363730][T12502] netlink: 'syz.0.1724': attribute type 3 has an invalid length. [ 1013.371598][T12502] netlink: 666 bytes leftover after parsing attributes in process `syz.0.1724'. [ 1013.478621][T12314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1013.586848][T12362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1013.594498][T12362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1013.621050][T12362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1013.739247][T12314] 8021q: adding VLAN 0 to HW filter on device team0 [ 1013.825520][ T3958] bridge0: port 1(bridge_slave_0) entered blocking state [ 1013.833059][ T3958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1013.981383][ T3958] bridge0: port 2(bridge_slave_1) entered blocking state [ 1013.989168][ T3958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1014.340292][T12362] hsr_slave_0: entered promiscuous mode [ 1014.406583][T12362] hsr_slave_1: entered promiscuous mode [ 1014.419308][T12362] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1014.427798][T12362] Cannot create hsr debugfs directory [ 1016.315834][T12525] Bluetooth: MGMT ver 1.23 [ 1016.320687][T12525] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 1017.481436][T12314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1017.490077][ T44] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1017.683778][ T44] usb 6-1: Using ep0 maxpacket: 8 [ 1017.707600][T12529] netlink: 228 bytes leftover after parsing attributes in process `syz.9.1731'. [ 1017.769110][ T44] usb 6-1: config 0 has an invalid interface number: 143 but max is 0 [ 1017.777811][ T44] usb 6-1: config 0 has no interface number 0 [ 1017.785535][ T44] usb 6-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 1017.794995][ T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.855494][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1017.862180][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1017.975187][ T44] usb 6-1: config 0 descriptor?? [ 1018.077320][T12362] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1018.169471][ T44] viperboard 6-1:0.143: version 0.00 found at bus 006 address 002 [ 1018.274209][T12362] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1018.284153][ T44] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 1018.293322][ T44] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 1018.388354][T12362] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1018.430024][ T44] usb 6-1: USB disconnect, device number 2 [ 1018.525693][T12362] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1020.678136][T12314] veth0_vlan: entered promiscuous mode [ 1020.827113][T12314] veth1_vlan: entered promiscuous mode [ 1020.869521][T12362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1021.123483][T12314] veth0_macvtap: entered promiscuous mode [ 1021.155298][T12362] 8021q: adding VLAN 0 to HW filter on device team0 [ 1021.258243][ T3872] bridge0: port 1(bridge_slave_0) entered blocking state [ 1021.266020][ T3872] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1021.301479][T12314] veth1_macvtap: entered promiscuous mode [ 1021.374488][ T3872] bridge0: port 2(bridge_slave_1) entered blocking state [ 1021.382146][ T3872] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1021.549305][T12314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1021.560543][T12314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1021.570738][T12314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1021.581503][T12314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1021.591701][T12314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1021.602828][T12314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1021.615148][T12314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1021.630991][T12314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1021.647096][T12314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1022.054055][T12314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1022.065075][T12314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1022.075323][T12314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1022.086209][T12314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1022.096378][T12314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1022.107262][T12314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1022.117472][T12314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1022.131498][T12314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1022.147445][T12314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1022.313883][T12314] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.323271][T12314] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.338678][T12314] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.349408][T12314] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1023.991929][T12362] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1024.234103][T12581] netlink: 228 bytes leftover after parsing attributes in process `syz.9.1741'. [ 1025.438462][T12596] netlink: 'syz.9.1745': attribute type 3 has an invalid length. [ 1025.448069][T12596] netlink: 666 bytes leftover after parsing attributes in process `syz.9.1745'. [ 1026.282665][T12362] veth0_vlan: entered promiscuous mode [ 1026.314626][T12362] veth1_vlan: entered promiscuous mode [ 1026.427999][T12362] veth0_macvtap: entered promiscuous mode [ 1026.454604][T12362] veth1_macvtap: entered promiscuous mode [ 1026.833156][T12362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1026.847431][T12362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1026.858398][T12362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1026.869286][T12362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1026.879333][T12362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1026.889949][T12362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1026.899950][T12362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1026.913086][T12362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1026.926138][T12362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1026.937197][T12362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1026.958493][T12362] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1027.132035][T12362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1027.143361][T12362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.156790][T12362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1027.168450][T12362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.178694][T12362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1027.189568][T12362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.199910][T12362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1027.210730][T12362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.221072][T12362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1027.232633][T12362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.250479][T12362] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1027.521835][T12362] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.531981][T12362] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.541163][T12362] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.552050][T12362] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.968174][ T7651] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1030.976383][ T7651] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1031.269601][ T7651] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1031.277921][ T7651] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1032.990500][T12659] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1753'. [ 1034.341210][T12668] dccp_invalid_packet: P.Data Offset(0) too small [ 1035.295729][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1035.304528][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1035.458712][ T7651] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1035.466917][ T7651] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1038.039766][T12698] netlink: 228 bytes leftover after parsing attributes in process `syz.5.1763'. [ 1040.038888][T12712] usb usb8: usbfs: process 12712 (syz.4.1768) did not claim interface 0 before use [ 1042.080540][ T5803] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1042.134304][ T5803] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1042.218968][ T5803] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1042.244793][ T5803] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1042.271305][ T5803] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1042.283450][ T5803] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1042.757980][T12740] netlink: 228 bytes leftover after parsing attributes in process `syz.5.1777'. [ 1043.654094][T12737] chnl_net:caif_netlink_parms(): no params data found [ 1044.413366][ T5803] Bluetooth: hci5: command tx timeout [ 1046.416121][T12737] bridge0: port 1(bridge_slave_0) entered blocking state [ 1046.424296][T12737] bridge0: port 1(bridge_slave_0) entered disabled state [ 1046.431910][T12737] bridge_slave_0: entered allmulticast mode [ 1046.440263][T12737] bridge_slave_0: entered promiscuous mode [ 1046.451735][ T5803] Bluetooth: hci5: command tx timeout [ 1046.538684][T12737] bridge0: port 2(bridge_slave_1) entered blocking state [ 1046.546922][T12737] bridge0: port 2(bridge_slave_1) entered disabled state [ 1046.555045][T12737] bridge_slave_1: entered allmulticast mode [ 1046.803344][T12737] bridge_slave_1: entered promiscuous mode [ 1047.603433][T12737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1047.725677][T12737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1048.158368][T12737] team0: Port device team_slave_0 added [ 1048.239360][T12737] team0: Port device team_slave_1 added [ 1048.524331][ T5803] Bluetooth: hci5: command tx timeout [ 1048.677194][T12737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1048.684581][T12737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1048.710902][T12737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1048.938940][T12737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1048.946301][T12737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1048.980554][T12737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1049.015524][T12798] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1792'. [ 1049.811037][T12737] hsr_slave_0: entered promiscuous mode [ 1049.838639][T12737] hsr_slave_1: entered promiscuous mode [ 1049.856061][T12737] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1049.867759][T12737] Cannot create hsr debugfs directory [ 1050.585028][ T5803] Bluetooth: hci5: command tx timeout [ 1051.375677][T12737] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1051.471365][T12737] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1051.589000][T12737] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1051.695002][T12737] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1052.309425][T12815] usb usb8: usbfs: process 12815 (syz.4.1796) did not claim interface 0 before use [ 1054.014866][T12737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1054.232972][T12737] 8021q: adding VLAN 0 to HW filter on device team0 [ 1054.399390][ T3958] bridge0: port 1(bridge_slave_0) entered blocking state [ 1054.407227][ T3958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1054.567346][ T3958] bridge0: port 2(bridge_slave_1) entered blocking state [ 1054.575150][ T3958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1057.310141][ T5802] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1057.493256][ T5802] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1057.513730][ T5802] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1057.538081][T12853] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1057.733455][T12855] usb usb8: usbfs: process 12855 (syz.5.1808) did not claim interface 0 before use [ 1057.850494][T12853] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1057.864902][T12853] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1058.729169][T12737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1059.129903][T12737] veth0_vlan: entered promiscuous mode [ 1059.155500][T12737] veth1_vlan: entered promiscuous mode [ 1059.309880][T12737] veth0_macvtap: entered promiscuous mode [ 1059.331746][T12737] veth1_macvtap: entered promiscuous mode [ 1060.229641][ T5803] Bluetooth: hci6: command tx timeout [ 1060.857232][T12845] chnl_net:caif_netlink_parms(): no params data found [ 1061.065811][T12737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1061.076706][T12737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.086920][T12737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1061.097666][T12737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.107779][T12737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1061.118530][T12737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.128705][T12737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1061.140164][T12737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.154195][T12737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1061.166118][T12737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.176258][T12737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1061.188280][T12737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.211175][T12737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1061.278394][T12737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1061.289769][T12737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.299894][T12737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1061.310705][T12737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.321812][T12737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1061.332688][T12737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.342853][T12737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1061.357692][T12737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.368988][T12737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1061.379778][T12737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.389932][T12737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1061.400685][T12737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.416202][T12737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1061.439812][T12737] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1061.448981][T12737] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1061.463622][T12737] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1061.472767][T12737] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1061.618800][T12882] ieee802154 phy0 wpan0: encryption failed: -22 [ 1062.346208][ T5803] Bluetooth: hci6: command tx timeout [ 1063.696320][T12845] bridge0: port 1(bridge_slave_0) entered blocking state [ 1063.711428][T12845] bridge0: port 1(bridge_slave_0) entered disabled state [ 1063.719286][T12845] bridge_slave_0: entered allmulticast mode [ 1063.728905][T12845] bridge_slave_0: entered promiscuous mode [ 1063.775338][T12845] bridge0: port 2(bridge_slave_1) entered blocking state [ 1063.783275][T12845] bridge0: port 2(bridge_slave_1) entered disabled state [ 1063.791444][T12845] bridge_slave_1: entered allmulticast mode [ 1063.800908][T12845] bridge_slave_1: entered promiscuous mode [ 1064.260341][T12845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1064.381835][T12845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1064.441370][ T5803] Bluetooth: hci6: command tx timeout [ 1064.857062][T12845] team0: Port device team_slave_0 added [ 1064.953963][T12845] team0: Port device team_slave_1 added [ 1065.216663][T12845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1065.223967][T12845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1065.255380][T12845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1065.422635][T12845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1065.429957][T12845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1065.460976][T12845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1065.979904][T12845] hsr_slave_0: entered promiscuous mode [ 1066.074035][T12845] hsr_slave_1: entered promiscuous mode [ 1066.123287][T12845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1066.130995][T12845] Cannot create hsr debugfs directory [ 1066.607243][ T5803] Bluetooth: hci6: command tx timeout [ 1069.688226][T12936] ieee802154 phy0 wpan0: encryption failed: -22 [ 1070.013640][T12845] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1070.193532][T12845] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1070.440003][T12845] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1070.675221][T12845] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1071.065015][ T5803] Bluetooth: hci3: command 0x0406 tx timeout [ 1072.968208][T12845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1073.418380][T12845] 8021q: adding VLAN 0 to HW filter on device team0 [ 1073.594920][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1073.602537][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1073.974012][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1073.981473][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1074.636493][ T4334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1074.644708][ T4334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1075.145934][ T3872] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1075.154769][ T3872] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1075.473091][T12979] ieee802154 phy0 wpan0: encryption failed: -22 [ 1079.247586][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1079.254375][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1081.477916][T12983] bridge0: port 2(bridge_slave_1) entered disabled state [ 1081.486799][T12983] bridge0: port 1(bridge_slave_0) entered disabled state [ 1082.401272][T12983] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1082.556372][T12983] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1083.681344][T12983] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1083.690705][T12983] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1083.699945][T12983] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1083.713059][T12983] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.497584][T12845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1086.862658][T13053] syz.4.1848: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1086.878136][T13053] CPU: 0 UID: 0 PID: 13053 Comm: syz.4.1848 Not tainted 6.13.0-rc3-syzkaller #0 [ 1086.887328][T13053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1086.897517][T13053] Call Trace: [ 1086.900898][T13053] [ 1086.903927][T13053] dump_stack_lvl+0x216/0x2d0 [ 1086.908799][T13053] dump_stack+0x1e/0x24 [ 1086.913123][T13053] warn_alloc+0x455/0x650 [ 1086.917620][T13053] ? __update_load_avg_cfs_rq+0x12f/0x1090 [ 1086.923621][T13053] ? kmsan_get_metadata+0x13e/0x1c0 [ 1086.928973][T13053] ? __vmalloc_node_range_noprof+0xd6/0x26b0 [ 1086.935122][T13053] __vmalloc_node_range_noprof+0x130/0x26b0 [ 1086.941177][T13053] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1086.947191][T13053] ? kmsan_get_metadata+0x13e/0x1c0 [ 1086.952644][T13053] ? kmsan_get_metadata+0x13e/0x1c0 [ 1086.958021][T13053] ? kmsan_get_metadata+0x13e/0x1c0 [ 1086.963379][T13053] ? __kmalloc_cache_noprof+0x932/0xdf0 [ 1086.969106][T13053] ? kmsan_get_metadata+0x13e/0x1c0 [ 1086.974457][T13053] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1086.980423][T13053] vmalloc_user_noprof+0x90/0xb0 [ 1086.985523][T13053] ? xskq_create+0x105/0x270 [ 1086.990262][T13053] xskq_create+0x105/0x270 [ 1086.994830][T13053] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1087.000796][T13053] xsk_init_queue+0x115/0x1f0 [ 1087.005659][T13053] xsk_setsockopt+0x710/0xcc0 [ 1087.010523][T13053] do_sock_setsockopt+0x4bb/0x7d0 [ 1087.015714][T13053] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1087.021097][T13053] __ia32_sys_setsockopt+0x33b/0x4f0 [ 1087.026555][T13053] ia32_sys_call+0x1acb/0x4180 [ 1087.031472][T13053] __do_fast_syscall_32+0xb0/0x110 [ 1087.036742][T13053] ? switch_fpu_return+0x17/0x20 [ 1087.041831][T13053] do_fast_syscall_32+0x38/0x80 [ 1087.046831][T13053] do_SYSENTER_32+0x1f/0x30 [ 1087.051527][T13053] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1087.058177][T13053] RIP: 0023:0xf70ed579 [ 1087.062419][T13053] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1087.082209][T13053] RSP: 002b:00000000f50be55c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 1087.090810][T13053] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000000011b [ 1087.098917][T13053] RDX: 0000000000000006 RSI: 0000000020000000 RDI: 0000000000000004 [ 1087.107017][T13053] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1087.115132][T13053] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1087.123233][T13053] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1087.131376][T13053] [ 1087.141011][T13053] Mem-Info: [ 1087.147986][T13053] active_anon:8624 inactive_anon:0 isolated_anon:0 [ 1087.147986][T13053] active_file:13284 inactive_file:38626 isolated_file:0 [ 1087.147986][T13053] unevictable:768 dirty:7 writeback:0 [ 1087.147986][T13053] slab_reclaimable:5232 slab_unreclaimable:27826 [ 1087.147986][T13053] mapped:43297 shmem:4318 pagetables:769 [ 1087.147986][T13053] sec_pagetables:0 bounce:0 [ 1087.147986][T13053] kernel_misc_reclaimable:0 [ 1087.147986][T13053] free:360804 free_pcp:3665 free_cma:0 [ 1087.197834][T13053] Node 0 active_anon:34496kB inactive_anon:0kB active_file:53136kB inactive_file:154428kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:173188kB dirty:28kB writeback:0kB shmem:15736kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5264kB pagetables:3076kB sec_pagetables:0kB all_unreclaimable? no [ 1087.231865][T13053] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:0kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1087.266795][T13053] Node 0 DMA free:4096kB boost:0kB min:160kB low:200kB high:240kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1087.295495][T13053] lowmem_reserve[]: 0 891 1204 0 0 [ 1087.300949][T13053] Node 0 DMA32 free:462816kB boost:0kB min:36084kB low:45104kB high:54124kB reserved_highatomic:0KB active_anon:15560kB inactive_anon:0kB active_file:49228kB inactive_file:72368kB unevictable:0kB writepending:28kB present:3129332kB managed:951420kB mlocked:0kB bounce:0kB free_pcp:14264kB local_pcp:48kB free_cma:0kB [ 1087.331522][T13053] lowmem_reserve[]: 0 0 312 0 0 [ 1087.336793][T13053] Node 0 Normal free:17032kB boost:0kB min:12672kB low:15840kB high:19008kB reserved_highatomic:0KB active_anon:18972kB inactive_anon:0kB active_file:3908kB inactive_file:82060kB unevictable:1536kB writepending:0kB present:1048580kB managed:320496kB mlocked:0kB bounce:0kB free_pcp:396kB local_pcp:44kB free_cma:0kB [ 1087.377013][T13053] lowmem_reserve[]: 0 0 0 0 0 [ 1087.383291][T13053] Node 1 Normal free:959272kB boost:0kB min:41188kB low:51484kB high:61780kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:1041664kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1087.412789][T13053] lowmem_reserve[]: 0 0 0 0 0 [ 1087.418057][T13053] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 1087.431345][T13053] Node 0 DMA32: 368*4kB (UME) 142*8kB (UME) 95*16kB (UME) 342*32kB (UME) 402*64kB (UME) 157*128kB (UME) 36*256kB (ME) 21*512kB (ME) 5*1024kB (M) 10*2048kB (UME) 87*4096kB (M) = 462816kB [ 1087.451814][T13053] Node 0 Normal: 18*4kB (UE) 178*8kB (UME) 133*16kB (UM) 54*32kB (UME) 30*64kB (UME) 12*128kB (UM) 8*256kB (UME) 4*512kB (UME) 4*1024kB (UME) 0*2048kB 0*4096kB = 17000kB [ 1087.475927][T13053] Node 1 Normal: 8*4kB (UM) 15*8kB (UM) 19*16kB (UME) 19*32kB (UME) 22*64kB (UME) 13*128kB (UME) 5*256kB (UME) 5*512kB (UME) 7*1024kB (UME) 7*2048kB (UME) 227*4096kB (UM) = 959272kB [ 1087.496689][T13053] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1087.506511][T13053] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1087.516056][T13053] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1087.525831][T13053] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1087.535358][T13053] 56228 total pagecache pages [ 1087.540132][T13053] 0 pages in swap cache [ 1087.547388][T13053] Free swap = 124728kB [ 1087.551645][T13053] Total swap = 124996kB [ 1087.558954][T13053] 2097051 pages RAM [ 1087.567739][T13053] 0 pages HighMem/MovableOnly [ 1087.574174][T13053] 1517632 pages reserved [ 1087.578524][T13053] 0 pages cma reserved [ 1090.956988][T13080] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1857'. [ 1091.121003][T12845] veth0_vlan: entered promiscuous mode [ 1091.334266][T12845] veth1_vlan: entered promiscuous mode [ 1091.997377][T12845] veth0_macvtap: entered promiscuous mode [ 1092.179484][T12845] veth1_macvtap: entered promiscuous mode [ 1092.541063][T12845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1092.552014][T12845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.562331][T12845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1092.573010][T12845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.588146][T12845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1092.600216][T12845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.610832][T12845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1092.621520][T12845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.631663][T12845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1092.642384][T12845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.652434][T12845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1092.664325][T12845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.678161][T12845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1094.326669][T13100] IPVS: persistence engine module ip_vs_pe_ not found [ 1094.457602][T12845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1094.468342][T12845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1094.478489][T12845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1094.489138][T12845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1094.499199][T12845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1094.509870][T12845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1094.519977][T12845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1094.536017][T12845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1094.547508][T12845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1094.558203][T12845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1094.568271][T12845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1094.578896][T12845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1094.601678][T12845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1094.690949][T13108] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1866'. [ 1095.372136][ T5803] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1095.463657][ T5803] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1095.523196][ T5803] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1095.699348][ T5803] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1095.780792][ T5803] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1095.793652][T13118] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1869'. [ 1095.812843][ T5803] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1096.310067][T12845] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.319184][T12845] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.328409][T12845] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.337447][T12845] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1097.992412][T12853] Bluetooth: hci0: command tx timeout [ 1099.408724][T13110] chnl_net:caif_netlink_parms(): no params data found [ 1100.042851][T12853] Bluetooth: hci0: command tx timeout [ 1100.346617][ T3759] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.398476][T13152] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1878'. [ 1100.735702][ T3759] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1101.147207][ T3759] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1101.505826][ T3759] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1101.947167][T13163] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1880'. [ 1102.159466][T12853] Bluetooth: hci0: command tx timeout [ 1102.653344][ T3759] bridge_slave_1: left allmulticast mode [ 1102.659156][ T3759] bridge_slave_1: left promiscuous mode [ 1102.665832][ T3759] bridge0: port 2(bridge_slave_1) entered disabled state [ 1102.967268][ T3759] bridge_slave_0: left allmulticast mode [ 1102.973336][ T3759] bridge_slave_0: left promiscuous mode [ 1102.979553][ T3759] bridge0: port 1(bridge_slave_0) entered disabled state [ 1104.193139][T12853] Bluetooth: hci0: command tx timeout [ 1104.943676][ T3759] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1105.081804][ T3759] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1105.189159][ T3759] bond0 (unregistering): Released all slaves [ 1105.434523][T13193] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1888'. [ 1105.724221][T13110] bridge0: port 1(bridge_slave_0) entered blocking state [ 1105.731702][T13110] bridge0: port 1(bridge_slave_0) entered disabled state [ 1105.739626][T13110] bridge_slave_0: entered allmulticast mode [ 1105.747791][T13110] bridge_slave_0: entered promiscuous mode [ 1106.322846][T13110] bridge0: port 2(bridge_slave_1) entered blocking state [ 1106.330312][T13110] bridge0: port 2(bridge_slave_1) entered disabled state [ 1106.338265][T13110] bridge_slave_1: entered allmulticast mode [ 1106.346582][T13110] bridge_slave_1: entered promiscuous mode [ 1106.546026][ T3759] hsr_slave_0: left promiscuous mode [ 1106.651650][ T3759] hsr_slave_1: left promiscuous mode [ 1106.733558][ T3759] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1106.741295][ T3759] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1106.937195][ T3759] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1106.945106][ T3759] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1106.955923][T13201] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1891'. [ 1107.125294][ T3759] veth1_macvtap: left promiscuous mode [ 1107.130965][ T3759] veth0_macvtap: left promiscuous mode [ 1107.136904][ T3759] veth1_vlan: left promiscuous mode [ 1107.142419][ T3759] veth0_vlan: left promiscuous mode [ 1107.391327][T13203] fuse: Unknown parameter 'group_i00000000000000000000' [ 1109.216389][T13215] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1896'. [ 1109.226029][T13215] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1896'. [ 1109.236648][T13215] netlink: 4320 bytes leftover after parsing attributes in process `syz.7.1896'. [ 1109.346985][T13214] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1897'. [ 1109.359897][ T3759] team0 (unregistering): Port device team_slave_1 removed [ 1109.645021][ T3759] team0 (unregistering): Port device team_slave_0 removed [ 1110.594967][T13219] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1898'. [ 1110.988407][T13110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1111.170164][T13110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1111.864056][T13110] team0: Port device team_slave_0 added [ 1111.909964][T13110] team0: Port device team_slave_1 added [ 1112.025054][ T5802] Bluetooth: hci4: command 0x0406 tx timeout [ 1112.488750][T13110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1112.496150][T13110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1112.523711][T13110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1113.001485][T13110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1113.008768][T13110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1113.035174][T13110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1113.176474][T13240] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1902'. [ 1114.148468][T13110] hsr_slave_0: entered promiscuous mode [ 1114.273664][T13110] hsr_slave_1: entered promiscuous mode [ 1114.325466][T13250] fuse: Unknown parameter 'group_i00000000000000000000' [ 1114.382664][T13110] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1114.395606][T13110] Cannot create hsr debugfs directory [ 1114.958446][T13259] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1907'. [ 1115.013816][T13257] netlink: 228 bytes leftover after parsing attributes in process `syz.7.1906'. [ 1115.956168][ T4334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1115.965758][ T4334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1117.197413][ T5802] Bluetooth: hci2: command 0x0406 tx timeout [ 1117.417868][T13110] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1117.653884][T13110] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1117.869334][T13110] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1117.922962][T13277] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1913'. [ 1118.173227][T13110] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1118.250412][ T5802] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1118.286631][ T5802] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1118.295793][ T5802] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1118.309908][ T5802] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1118.320395][ T5802] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1118.338547][ T5802] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1120.463576][ T5802] Bluetooth: hci3: command tx timeout [ 1120.870258][T13110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1120.990614][T13293] fuse: Unknown parameter 'group_id00000000000000000000' [ 1121.263847][T13110] 8021q: adding VLAN 0 to HW filter on device team0 [ 1121.314927][T13297] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1917'. [ 1121.399068][ T3759] bridge0: port 1(bridge_slave_0) entered blocking state [ 1121.406588][ T3759] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1121.674631][ T3759] bridge0: port 2(bridge_slave_1) entered blocking state [ 1121.682058][ T3759] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1121.953188][T13279] chnl_net:caif_netlink_parms(): no params data found [ 1122.211208][T13110] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1122.221904][T13110] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1122.514834][ T5802] Bluetooth: hci3: command tx timeout [ 1122.945580][ T3872] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1123.326562][ T3872] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1123.658454][ T3872] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.006240][ T3872] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.638762][ T5802] Bluetooth: hci3: command tx timeout [ 1125.311623][ T3872] bridge_slave_1: left allmulticast mode [ 1125.317727][ T3872] bridge_slave_1: left promiscuous mode [ 1125.324085][ T3872] bridge0: port 2(bridge_slave_1) entered disabled state [ 1125.583618][ T3872] bridge_slave_0: left allmulticast mode [ 1125.589430][ T3872] bridge_slave_0: left promiscuous mode [ 1125.597051][ T3872] bridge0: port 1(bridge_slave_0) entered disabled state [ 1126.663617][ T5802] Bluetooth: hci3: command tx timeout [ 1127.436066][ T3872] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1127.614373][ T3872] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1127.765570][ T3872] bond0 (unregistering): Released all slaves [ 1128.200072][T13279] bridge0: port 1(bridge_slave_0) entered blocking state [ 1128.207738][T13279] bridge0: port 1(bridge_slave_0) entered disabled state [ 1128.221885][T13279] bridge_slave_0: entered allmulticast mode [ 1128.230158][T13279] bridge_slave_0: entered promiscuous mode [ 1128.284352][T13350] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1930'. [ 1128.688949][ T3872] hsr_slave_0: left promiscuous mode [ 1128.744101][ T3872] hsr_slave_1: left promiscuous mode [ 1128.855598][ T3872] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1128.863409][ T3872] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1128.961687][ T3872] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1128.970674][ T3872] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1129.205482][ T3872] veth1_macvtap: left promiscuous mode [ 1129.211137][ T3872] veth0_macvtap: left promiscuous mode [ 1129.217003][ T3872] veth1_vlan: left promiscuous mode [ 1129.222593][ T3872] veth0_vlan: left promiscuous mode [ 1129.419708][T13359] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1933'. [ 1130.025201][T13363] netlink: 228 bytes leftover after parsing attributes in process `syz.7.1934'. [ 1131.625119][ T3872] team0 (unregistering): Port device team_slave_1 removed [ 1131.744212][ T3872] team0 (unregistering): Port device team_slave_0 removed [ 1132.283787][T13374] fuse: Unknown parameter 'group_id00000000000000000000' [ 1132.463137][T13279] bridge0: port 2(bridge_slave_1) entered blocking state [ 1132.470767][T13279] bridge0: port 2(bridge_slave_1) entered disabled state [ 1132.478765][T13279] bridge_slave_1: entered allmulticast mode [ 1132.486926][T13279] bridge_slave_1: entered promiscuous mode [ 1132.649120][T13110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1133.411788][T13279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1133.589884][T13279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1134.189396][T13279] team0: Port device team_slave_0 added [ 1134.330189][T13279] team0: Port device team_slave_1 added [ 1134.909419][T13279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1134.916701][T13279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1134.943086][T13279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1135.354076][T13396] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1941'. [ 1135.478869][T13279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1135.491422][T13279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1135.519430][T13279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1136.482183][T13404] netlink: 228 bytes leftover after parsing attributes in process `syz.7.1943'. [ 1136.537096][T13406] 9p: Unknown access argument 18446744073709551615: -34 [ 1136.609508][T13279] hsr_slave_0: entered promiscuous mode [ 1136.796090][T13279] hsr_slave_1: entered promiscuous mode [ 1136.893020][T13279] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1136.900729][T13279] Cannot create hsr debugfs directory [ 1137.718220][T13110] veth0_vlan: entered promiscuous mode [ 1137.940157][T13110] veth1_vlan: entered promiscuous mode [ 1138.077050][T13418] fuse: Unknown parameter 'group_id00000000000000000000' [ 1138.508306][T13110] veth0_macvtap: entered promiscuous mode [ 1138.671299][T13110] veth1_macvtap: entered promiscuous mode [ 1138.956715][T13110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1138.972725][T13110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1138.984421][T13110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1138.995131][T13110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1139.005241][T13110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1139.015946][T13110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1139.026080][T13110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1139.036810][T13110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1139.046930][T13110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1139.057585][T13110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1139.077984][T13110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1140.329020][T13110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1140.339928][T13110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1140.350203][T13110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1140.363511][T13110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1140.373662][T13110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1140.385771][T13110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1140.395993][T13110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1140.411113][T13110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1140.422597][T13110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1140.433363][T13110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1140.446453][T13110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1140.593892][T13279] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1140.808243][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1140.817668][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1140.872378][T13279] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1140.952134][T13279] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1141.146537][T13279] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1141.617393][T13110] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1141.626611][T13110] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1141.640398][T13110] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1141.650756][T13110] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1143.344860][T13440] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1952'. [ 1143.427451][T13279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1143.856494][T13279] 8021q: adding VLAN 0 to HW filter on device team0 [ 1143.877227][T13443] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1953'. [ 1144.079391][ T4334] bridge0: port 1(bridge_slave_0) entered blocking state [ 1144.087085][ T4334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1144.224309][T13445] 9p: Unknown access argument 18446744073709551615: -34 [ 1144.371877][ T4334] bridge0: port 2(bridge_slave_1) entered blocking state [ 1144.379401][ T4334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1144.721266][T13449] netlink: 228 bytes leftover after parsing attributes in process `syz.7.1955'. [ 1145.464384][T13455] fuse: Bad value for 'user_id' [ 1145.469426][T13455] fuse: Bad value for 'user_id' [ 1147.683498][T13279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1148.624229][ T5802] Bluetooth: hci4: unexpected event for opcode 0x0000 [ 1150.658010][T13497] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1963'. [ 1151.728943][T13505] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1964'. [ 1151.800587][T13279] veth0_vlan: entered promiscuous mode [ 1151.936879][T13507] 9p: Unknown access argument 18446744073709551615: -34 [ 1152.018221][T13279] veth1_vlan: entered promiscuous mode [ 1152.568695][T13279] veth0_macvtap: entered promiscuous mode [ 1152.670405][ T5802] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1152.679553][ T5802] Bluetooth: hci4: Injecting HCI hardware error event [ 1152.703423][ T5802] Bluetooth: hci4: hardware error 0x00 [ 1152.775196][T13279] veth1_macvtap: entered promiscuous mode [ 1153.177043][T13279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1153.188456][T13279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1153.198724][T13279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1153.213981][T13279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1153.225399][T13279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1153.236051][T13279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1153.246107][T13279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1153.256746][T13279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1153.266790][T13279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1153.277404][T13279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1153.287431][T13279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1153.298156][T13279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1153.317247][T13279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1153.431178][T13517] fuse: Bad value for 'user_id' [ 1153.436407][T13517] fuse: Bad value for 'user_id' [ 1153.444315][T13514] netlink: 228 bytes leftover after parsing attributes in process `syz.7.1966'. [ 1154.749142][T12853] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 1154.756823][ T5802] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1154.876984][T13279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1154.887763][T13279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1154.897887][T13279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1154.908574][T13279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1154.918584][T13279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1154.929217][T13279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1154.939240][T13279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1154.954452][T13279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1154.965798][T13279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1154.976542][T13279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1154.986665][T13279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1154.997358][T13279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1155.010400][T13279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1156.106899][T13536] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1973'. [ 1156.203700][T13538] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1974'. [ 1156.346665][T12853] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1156.373420][T12853] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1156.402591][T12853] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1156.433050][T12853] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1156.456520][T12853] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1156.465671][T12853] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1156.709870][T13279] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1156.718951][T13279] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1156.728084][T13279] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1156.737102][T13279] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1157.897750][T13549] 9p: Unknown access argument 18446744073709551615: -34 [ 1158.619512][T12853] Bluetooth: hci6: command tx timeout [ 1158.847136][T12853] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1158.855801][T12853] Bluetooth: hci2: Injecting HCI hardware error event [ 1158.864434][T12853] Bluetooth: hci2: hardware error 0x00 [ 1159.611567][T13537] chnl_net:caif_netlink_parms(): no params data found [ 1160.537317][ T11] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.648240][T13565] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1978'. [ 1160.678705][ T5802] Bluetooth: hci6: command tx timeout [ 1160.861448][ T11] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.932869][T12853] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1161.374016][ T11] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1161.651489][T13574] fuse: Bad value for 'user_id' [ 1161.657489][T13574] fuse: Bad value for 'user_id' [ 1161.765520][ T11] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.776321][T12853] Bluetooth: hci6: command tx timeout [ 1163.018446][ T11] bridge_slave_1: left allmulticast mode [ 1163.024480][ T11] bridge_slave_1: left promiscuous mode [ 1163.036996][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1163.290960][ T11] bridge_slave_0: left allmulticast mode [ 1163.296966][ T11] bridge_slave_0: left promiscuous mode [ 1163.303397][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1163.625949][T13589] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1983'. [ 1164.583448][T13594] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1984'. [ 1164.755842][T13597] 9p: Unknown access argument 18446744073709551615: -34 [ 1164.831023][T12853] Bluetooth: hci6: command tx timeout [ 1164.968704][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1165.123985][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1165.259906][ T11] bond0 (unregistering): Released all slaves [ 1165.643455][T13537] bridge0: port 1(bridge_slave_0) entered blocking state [ 1165.650909][T13537] bridge0: port 1(bridge_slave_0) entered disabled state [ 1165.658733][T13537] bridge_slave_0: entered allmulticast mode [ 1165.667012][T13537] bridge_slave_0: entered promiscuous mode [ 1166.127991][ T11] hsr_slave_0: left promiscuous mode [ 1166.203550][ T11] hsr_slave_1: left promiscuous mode [ 1166.291173][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1166.300822][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1166.474701][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1166.482745][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1166.739338][ T11] veth1_macvtap: left promiscuous mode [ 1166.745263][ T11] veth0_macvtap: left promiscuous mode [ 1166.751060][ T11] veth1_vlan: left promiscuous mode [ 1166.756668][ T11] veth0_vlan: left promiscuous mode [ 1166.864929][T13613] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1988'. [ 1168.342825][ T5802] Bluetooth: hci5: command 0x0406 tx timeout [ 1169.070854][T13622] fuse: Bad value for 'fd' [ 1169.502432][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1169.610129][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1170.401254][T13537] bridge0: port 2(bridge_slave_1) entered blocking state [ 1170.414577][T13537] bridge0: port 2(bridge_slave_1) entered disabled state [ 1170.422374][T13537] bridge_slave_1: entered allmulticast mode [ 1170.430419][T13537] bridge_slave_1: entered promiscuous mode [ 1171.353994][T13537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1171.515210][T13537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1171.605081][T13634] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1994'. [ 1172.190358][T13537] team0: Port device team_slave_0 added [ 1172.316016][T13537] team0: Port device team_slave_1 added [ 1172.325791][T13641] 9p: Unknown access argument 18446744073709551615: -34 [ 1172.970956][T13537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1172.978192][T13537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1173.004668][T13537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1173.074551][T13649] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1997'. [ 1173.505370][T13537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1173.512602][T13537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1173.538932][T13537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1173.664024][T13652] netlink: 228 bytes leftover after parsing attributes in process `syz.7.1998'. [ 1173.923863][T12853] Bluetooth: hci5: unexpected event for opcode 0x2005 [ 1174.300569][T13661] fuse: Bad value for 'fd' [ 1174.545052][T13537] hsr_slave_0: entered promiscuous mode [ 1174.694091][T13537] hsr_slave_1: entered promiscuous mode [ 1174.825159][T13537] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1174.833269][T13537] Cannot create hsr debugfs directory [ 1176.364949][ T7651] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1176.373193][ T7651] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1177.952809][T12853] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1177.961287][T12853] Bluetooth: hci5: Injecting HCI hardware error event [ 1177.975451][T12853] Bluetooth: hci5: hardware error 0x00 [ 1178.176392][T13537] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1178.313136][T13683] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2005'. [ 1178.386934][T13537] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1178.619719][T13537] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1178.764580][T13537] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1179.039091][ T5803] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1179.056105][ T5803] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1179.073605][ T5803] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1179.085452][ T5803] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1179.095749][ T5803] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1179.122061][ T5803] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1179.855347][T13692] 9p: Unknown access argument 18446744073709551615: -34 [ 1180.080936][T12853] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1181.222856][T12853] Bluetooth: hci0: command tx timeout [ 1181.476414][T13537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1181.813658][T13705] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2010'. [ 1181.921712][T13537] 8021q: adding VLAN 0 to HW filter on device team0 [ 1182.128981][ T7651] bridge0: port 1(bridge_slave_0) entered blocking state [ 1182.136533][ T7651] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1182.410202][ T7651] bridge0: port 2(bridge_slave_1) entered blocking state [ 1182.417716][ T7651] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1182.540488][T13685] chnl_net:caif_netlink_parms(): no params data found [ 1182.741634][T13714] fuse: Bad value for 'fd' [ 1182.922102][T13537] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1183.314121][T12853] Bluetooth: hci0: command tx timeout [ 1183.528125][ T4334] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1183.696972][T13723] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2014'. [ 1183.848259][ T4334] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1184.175462][ T4334] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1184.530608][ T4334] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1185.093119][T13733] 9p: Unknown access argument 18446744073709551615: -34 [ 1185.392771][T12853] Bluetooth: hci0: command tx timeout [ 1185.910905][ T4334] bridge_slave_1: left allmulticast mode [ 1185.916857][ T4334] bridge_slave_1: left promiscuous mode [ 1185.923333][ T4334] bridge0: port 2(bridge_slave_1) entered disabled state [ 1186.114581][ T4334] bridge_slave_0: left allmulticast mode [ 1186.120393][ T4334] bridge_slave_0: left promiscuous mode [ 1186.127457][ T4334] bridge0: port 1(bridge_slave_0) entered disabled state [ 1187.321983][ T4334] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1187.419039][ T4334] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1187.463361][T12853] Bluetooth: hci0: command tx timeout [ 1187.519879][ T4334] bond0 (unregistering): Released all slaves [ 1187.730250][T13746] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2021'. [ 1187.956036][T13685] bridge0: port 1(bridge_slave_0) entered blocking state [ 1187.965563][T13685] bridge0: port 1(bridge_slave_0) entered disabled state [ 1187.973379][T13685] bridge_slave_0: entered allmulticast mode [ 1187.981471][T13685] bridge_slave_0: entered promiscuous mode [ 1188.341173][T13537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1188.375040][T13685] bridge0: port 2(bridge_slave_1) entered blocking state [ 1188.382725][T13685] bridge0: port 2(bridge_slave_1) entered disabled state [ 1188.390400][T13685] bridge_slave_1: entered allmulticast mode [ 1188.398583][T13685] bridge_slave_1: entered promiscuous mode [ 1188.602553][ T4334] hsr_slave_0: left promiscuous mode [ 1188.663060][ T4334] hsr_slave_1: left promiscuous mode [ 1188.766057][ T4334] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1188.774075][ T4334] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1188.919300][ T4334] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1188.927667][ T4334] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1189.094254][T13754] fuse: Bad value for 'fd' [ 1189.169422][ T4334] veth1_macvtap: left promiscuous mode [ 1189.175398][ T4334] veth0_macvtap: left promiscuous mode [ 1189.181232][ T4334] veth1_vlan: left promiscuous mode [ 1189.187069][ T4334] veth0_vlan: left promiscuous mode [ 1189.969990][T13761] fuse: Bad value for 'fd' [ 1190.014468][T13763] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2025'. [ 1190.806536][T13766] 9p: Unknown access argument 18446744073709551615: -34 [ 1190.984594][T13771] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2027'. [ 1191.985247][ T4334] team0 (unregistering): Port device team_slave_1 removed [ 1192.133688][ T4334] team0 (unregistering): Port device team_slave_0 removed [ 1192.414193][T13783] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2031'. [ 1193.350038][T13685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1193.571033][T13685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1193.846759][T13793] fuse: Bad value for 'fd' [ 1194.252929][T13685] team0: Port device team_slave_0 added [ 1194.313699][T13685] team0: Port device team_slave_1 added [ 1194.361815][T13798] fuse: Bad value for 'fd' [ 1194.929538][T13685] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1194.936864][T13685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1194.963111][T13685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1195.441839][T13685] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1195.449131][T13685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1195.475945][T13685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1195.586131][T13806] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2036'. [ 1196.528297][T13685] hsr_slave_0: entered promiscuous mode [ 1196.633508][T13685] hsr_slave_1: entered promiscuous mode [ 1196.698222][T13685] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1196.706460][T13685] Cannot create hsr debugfs directory [ 1197.057521][T13537] veth0_vlan: entered promiscuous mode [ 1197.447393][T13537] veth1_vlan: entered promiscuous mode [ 1197.928687][T13537] veth0_macvtap: entered promiscuous mode [ 1197.964415][T13821] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2041'. [ 1198.136997][T13537] veth1_macvtap: entered promiscuous mode [ 1198.657035][T13537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1198.672653][T13537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1198.684005][T13537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1198.694698][T13537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1198.704757][T13537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1198.715409][T13537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1198.725648][T13537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1198.736281][T13537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1198.746510][T13537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1198.757141][T13537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1198.776658][T13537] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1199.696854][T13831] fuse: Bad value for 'fd' [ 1200.031677][T13537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1200.042546][T13537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1200.052712][T13537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1200.063386][T13537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1200.073466][T13537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1200.084117][T13537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1200.094212][T13537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1200.109408][T13537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1200.120733][T13537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1200.131443][T13537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1200.144592][T13537] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1200.208260][T13835] fuse: Unknown parameter '00000000000000000000006' [ 1200.286069][T13685] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1200.473521][T13685] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1200.603388][T13685] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1200.784946][T13685] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1201.086171][T13842] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2047'. [ 1201.270049][T13537] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1201.280454][T13537] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1201.290472][T13537] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1201.299544][T13537] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1202.144912][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1202.154247][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1202.666417][T13853] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2052'. [ 1202.931061][T13685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1203.406122][T13685] 8021q: adding VLAN 0 to HW filter on device team0 [ 1203.627170][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1203.634699][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1203.904036][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1203.911468][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1204.272540][T13865] fuse: Invalid rootmode [ 1204.419743][T13685] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1204.925543][T13871] fuse: Unknown parameter '00000000000000000000006' [ 1206.190492][T13884] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2058'. [ 1207.108169][T13685] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1209.444048][T13912] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2063'. [ 1209.537221][T13915] fuse: Invalid rootmode [ 1210.693039][T13925] fuse: Unknown parameter '00000000000000000000006' [ 1211.305988][T13685] veth0_vlan: entered promiscuous mode [ 1211.565250][T13939] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2068'. [ 1211.595721][T13685] veth1_vlan: entered promiscuous mode [ 1212.257669][T13685] veth0_macvtap: entered promiscuous mode [ 1212.476006][T13685] veth1_macvtap: entered promiscuous mode [ 1212.841490][T13685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1212.852394][T13685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1212.862489][T13685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1212.873115][T13685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1212.883235][T13685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1212.893876][T13685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1212.908391][T13685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1212.920237][T13685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1212.930425][T13685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1212.941167][T13685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1212.951266][T13685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1212.962053][T13685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1212.975614][T13685] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1213.703214][ T3872] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1213.711185][ T3872] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1214.126218][ T3958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1214.138224][ T3958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1214.430905][T13685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1214.447384][T13685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1214.459073][T13685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1214.469704][T13685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1214.479758][T13685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1214.490417][T13685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1214.500442][T13685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1214.511541][T13685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1214.521654][T13685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1214.532503][T13685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1214.548279][T13685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1214.560506][T13685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1214.573920][T13685] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1214.804224][T13962] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2075'. [ 1215.197261][T13967] fuse: Invalid rootmode [ 1215.930216][T13685] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1215.939520][T13685] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1215.948647][T13685] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1215.957715][T13685] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1216.194830][T13972] fuse: Unknown parameter '00000000000000000000006' [ 1217.064350][ T5803] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1217.093453][ T5803] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1217.110780][ T5803] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1217.139643][ T5803] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1217.153694][ T5803] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1217.164584][ T5803] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1217.773862][T13985] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2079'. [ 1218.993649][T13993] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2081'. [ 1219.304720][ T5803] Bluetooth: hci3: command tx timeout [ 1220.607161][T13978] chnl_net:caif_netlink_parms(): no params data found [ 1221.231447][T14011] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2085'. [ 1221.261405][T14014] fuse: Unknown parameter '00000000000000000000' [ 1221.385144][ T5803] Bluetooth: hci3: command tx timeout [ 1221.421753][ T3789] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1221.645642][T14018] fuse: Unknown parameter '00000000000000000000006' [ 1221.748133][ T3789] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1222.155745][ T3789] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1222.495903][ T3789] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1222.968426][T14030] usb usb8: usbfs: process 14030 (syz.4.2089) did not claim interface 0 before use [ 1223.472528][ T5803] Bluetooth: hci3: command tx timeout [ 1223.668361][ T3789] bridge_slave_1: left allmulticast mode [ 1223.675552][ T3789] bridge_slave_1: left promiscuous mode [ 1223.681779][ T3789] bridge0: port 2(bridge_slave_1) entered disabled state [ 1223.940782][ T3789] bridge_slave_0: left allmulticast mode [ 1223.946838][ T3789] bridge_slave_0: left promiscuous mode [ 1223.953189][ T3789] bridge0: port 1(bridge_slave_0) entered disabled state [ 1224.647025][T14043] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2092'. [ 1225.545669][ T5803] Bluetooth: hci3: command tx timeout [ 1225.645380][ T3789] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1225.748937][ T3789] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1225.835288][ T3789] bond0 (unregistering): Released all slaves [ 1226.546607][T13978] bridge0: port 1(bridge_slave_0) entered blocking state [ 1226.554432][T13978] bridge0: port 1(bridge_slave_0) entered disabled state [ 1226.562075][T13978] bridge_slave_0: entered allmulticast mode [ 1226.570316][T13978] bridge_slave_0: entered promiscuous mode [ 1227.048574][ T3789] hsr_slave_0: left promiscuous mode [ 1227.111235][ T3789] hsr_slave_1: left promiscuous mode [ 1227.171207][ T3789] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1227.179018][ T3789] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1227.214514][T14056] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2096'. [ 1227.308518][ T3789] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1227.317249][ T3789] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1227.476029][ T3789] veth1_macvtap: left promiscuous mode [ 1227.481757][ T3789] veth0_macvtap: left promiscuous mode [ 1227.487712][ T3789] veth1_vlan: left promiscuous mode [ 1227.493185][ T3789] veth0_vlan: left promiscuous mode [ 1227.723172][T14059] fuse: Unknown parameter '00000000000000000000006' [ 1228.195774][T14061] fuse: Unknown parameter '00000000000000000000' [ 1228.519107][T14064] usb usb8: usbfs: process 14064 (syz.7.2099) did not claim interface 0 before use [ 1229.801992][ T3789] team0 (unregistering): Port device team_slave_1 removed [ 1229.964016][ T3789] team0 (unregistering): Port device team_slave_0 removed [ 1230.274040][T14075] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2104'. [ 1230.529896][T13978] bridge0: port 2(bridge_slave_1) entered blocking state [ 1230.537579][T13978] bridge0: port 2(bridge_slave_1) entered disabled state [ 1230.545406][T13978] bridge_slave_1: entered allmulticast mode [ 1230.553543][T13978] bridge_slave_1: entered promiscuous mode [ 1230.908786][T14080] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2106'. [ 1231.381468][T13978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1231.581382][T13978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1231.664887][T14087] fuse: Unknown parameter 'fd00000000000000000000006' [ 1232.127294][T13978] team0: Port device team_slave_0 added [ 1232.266708][T13978] team0: Port device team_slave_1 added [ 1232.844354][T13978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1232.851439][T13978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1232.882997][T13978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1233.338504][T13978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1233.345875][T13978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1233.372357][T13978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1233.470863][T14100] fuse: Unknown parameter '00000000000000000000' [ 1234.347586][T13978] hsr_slave_0: entered promiscuous mode [ 1234.460045][T13978] hsr_slave_1: entered promiscuous mode [ 1234.555554][T13978] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1234.563505][T13978] Cannot create hsr debugfs directory [ 1234.698917][ T3789] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1234.707024][ T3789] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1235.277385][ T3958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1235.285494][ T3958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1235.454155][T14116] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2115'. [ 1236.671472][T14122] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1802'. [ 1237.053982][T14125] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2117'. [ 1237.388663][T14128] fuse: Unknown parameter 'fd00000000000000000000006' [ 1237.671244][T13978] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1237.864497][T13978] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1238.046681][T13978] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1238.360054][T13978] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1238.618359][T14138] fuse: Unknown parameter 'user00000000000000000000' [ 1239.779904][T14149] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2126'. [ 1240.484099][T13978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1240.643148][T14157] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2129'. [ 1240.793794][T13978] 8021q: adding VLAN 0 to HW filter on device team0 [ 1240.976252][ T3789] bridge0: port 1(bridge_slave_0) entered blocking state [ 1240.983780][ T3789] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1241.248589][ T3789] bridge0: port 2(bridge_slave_1) entered blocking state [ 1241.256078][ T3789] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1241.360531][T14159] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2130'. [ 1241.668044][T13978] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1241.954113][T14166] fuse: Unknown parameter 'fd00000000000000000000006' [ 1244.303782][T14186] fuse: Unknown parameter 'user00000000000000000000' [ 1244.779372][T13978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1245.105583][T14194] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2139'. [ 1246.147277][T14204] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2141'. [ 1246.253623][T14200] netlink: 228 bytes leftover after parsing attributes in process `syz.7.2142'. [ 1248.850963][T14235] fuse: Unknown parameter 'user00000000000000000000' [ 1249.374747][T13978] veth0_vlan: entered promiscuous mode [ 1249.575572][T13978] veth1_vlan: entered promiscuous mode [ 1249.701075][T14240] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2152'. [ 1250.135399][T13978] veth0_macvtap: entered promiscuous mode [ 1250.306900][T13978] veth1_macvtap: entered promiscuous mode [ 1250.660584][T13978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1250.672400][T13978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1250.682611][T13978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1250.699124][T13978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1250.710835][T13978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1250.721496][T13978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1250.731550][T13978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1250.742393][T13978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1250.752474][T13978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1250.763133][T13978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1250.773142][T13978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1250.783806][T13978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1250.804446][T13978] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1251.024054][T14250] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2155'. [ 1251.246860][T14251] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2156'. [ 1252.276850][T13978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1252.287749][T13978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1252.297965][T13978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1252.308774][T13978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1252.318858][T13978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1252.335315][T13978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1252.347485][T13978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1252.358178][T13978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1252.368264][T13978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1252.378915][T13978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1252.388987][T13978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1252.399625][T13978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1252.413068][T13978] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1253.725347][T13978] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1253.734495][T13978] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1253.743526][T13978] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1253.752493][T13978] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1254.230267][T14275] fuse: Unknown parameter 'user_i00000000000000000000' [ 1254.409344][T14277] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2164'. [ 1255.582950][T14288] netlink: 80 bytes leftover after parsing attributes in process `syz.7.2167'. [ 1258.634242][T14324] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2176'. [ 1258.794414][T14326] fuse: Unknown parameter 'user_i00000000000000000000' [ 1260.472752][T14341] netlink: 80 bytes leftover after parsing attributes in process `syz.7.2180'. [ 1261.858929][T14355] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2184'. [ 1263.299975][T14370] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2188'. [ 1263.567154][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1263.573900][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1263.700369][T14374] fuse: Unknown parameter 'user_i00000000000000000000' [ 1265.033951][T14386] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2192'. [ 1266.078831][ T5031] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1266.087212][ T5031] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1266.550944][ T3759] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1266.563993][ T3759] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1266.589283][T14398] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2196'. [ 1268.082118][T14414] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2201'. [ 1268.696624][T14420] fuse: Unknown parameter 'user_id00000000000000000000' [ 1270.103724][T14430] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2205'. [ 1271.949494][T14444] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2210'. [ 1272.494456][T14449] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2212'. [ 1273.347355][T14458] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2215'. [ 1273.403901][T14459] fuse: Unknown parameter 'user_id00000000000000000000' [ 1274.162935][ T5851] kworker/1:4 (5851) used greatest stack depth: 5392 bytes left [ 1278.005489][T14505] fuse: Unknown parameter 'user_id00000000000000000000' [ 1278.016591][T14506] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2230'. [ 1280.061330][T14523] netlink: 120 bytes leftover after parsing attributes in process `syz.8.2235'. [ 1281.187149][T14529] netlink: 228 bytes leftover after parsing attributes in process `syz.7.2239'. [ 1282.371278][T14542] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2243'. [ 1283.208361][T14549] fuse: Bad value for 'fd' [ 1283.361744][T14552] usb usb8: usbfs: process 14552 (syz.2.2246) did not claim interface 0 before use [ 1285.599356][T14573] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2253'. [ 1286.535172][T14581] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2255'. [ 1287.016384][T14587] netlink: 120 bytes leftover after parsing attributes in process `syz.7.2258'. [ 1287.394663][T14589] 9pnet_fd: Insufficient options for proto=fd [ 1288.363860][T14597] fuse: Bad value for 'fd' [ 1289.921623][T14609] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2264'. [ 1290.449915][T14616] netlink: 228 bytes leftover after parsing attributes in process `syz.7.2267'. [ 1291.805012][T14630] sit0: entered promiscuous mode [ 1291.810522][T14630] netlink: 'syz.7.2272': attribute type 1 has an invalid length. [ 1291.818883][T14630] netlink: 1 bytes leftover after parsing attributes in process `syz.7.2272'. [ 1292.114839][T14632] 9pnet_fd: Insufficient options for proto=fd [ 1292.894303][T14641] fuse: Bad value for 'fd' [ 1293.255100][T14645] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2277'. [ 1293.578094][T14646] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2278'. [ 1294.634174][T14661] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2281'. [ 1296.421075][T14674] 9pnet_fd: Insufficient options for proto=fd [ 1297.670590][T14686] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2293'. [ 1299.239702][T14707] 9pnet_fd: Insufficient options for proto=fd [ 1299.764864][T14712] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2298'. [ 1299.867725][T14717] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2304'. [ 1300.813440][T14723] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2306'. [ 1300.823022][T14723] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2306'. [ 1301.472619][ T5803] Bluetooth: hci0: command 0x0406 tx timeout [ 1302.771526][T14742] usb usb8: usbfs: process 14742 (syz.8.2312) did not claim interface 0 before use [ 1302.835163][T14744] 9pnet_fd: Insufficient options for proto=fd [ 1303.033683][T14747] Bluetooth: MGMT ver 1.23 [ 1303.704391][T14751] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2316'. [ 1304.351375][T14755] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2317'. [ 1304.583334][T14759] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2320'. [ 1304.709432][T14760] ieee802154 phy0 wpan0: encryption failed: -90 [ 1304.864610][T14762] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2321'. [ 1304.874277][T14762] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2321'. [ 1305.124054][T14760] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2318'. [ 1306.843384][T14786] usb usb8: usbfs: process 14786 (syz.2.2328) did not claim interface 0 before use [ 1308.384075][T14800] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2333'. [ 1309.400567][T14812] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2337'. [ 1309.409978][T14812] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2337'. [ 1309.649577][ T1551] kworker/0:2 (1551) used greatest stack depth: 5088 bytes left [ 1310.500894][T14824] usb usb8: usbfs: process 14824 (syz.4.2342) did not claim interface 0 before use [ 1311.901807][T14839] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2346'. [ 1312.260598][T14841] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2348'. [ 1313.963886][T14859] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2355'. [ 1313.979816][T14859] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2355'. [ 1314.222849][T14865] usb usb8: usbfs: process 14865 (syz.7.2357) did not claim interface 0 before use [ 1316.033426][T14882] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2363'. [ 1326.367600][T14898] ===================================================== [ 1326.374809][T14898] BUG: KMSAN: uninit-value in nr_route_frame+0x4bb/0xfe0 [ 1326.382010][T14898] nr_route_frame+0x4bb/0xfe0 [ 1326.386920][T14898] nr_xmit+0x5a/0x1c0 [ 1326.390994][T14898] dev_hard_start_xmit+0x247/0xa20 [ 1326.396273][T14898] __dev_queue_xmit+0x366a/0x57d0 [ 1326.401393][T14898] raw_sendmsg+0x6b5/0xdf0 [ 1326.406008][T14898] ieee802154_sock_sendmsg+0x96/0xd0 [ 1326.411409][T14898] __sock_sendmsg+0x30f/0x380 [ 1326.416282][T14898] ____sys_sendmsg+0x877/0xb60 [ 1326.421164][T14898] ___sys_sendmsg+0x28d/0x3c0 [ 1326.426015][T14898] __sys_sendmsg+0x1b6/0x300 [ 1326.430703][T14898] __ia32_compat_sys_sendmsg+0x9d/0xe0 [ 1326.436354][T14898] ia32_sys_call+0x2685/0x4180 [ 1326.441223][T14898] __do_fast_syscall_32+0xb0/0x110 [ 1326.446523][T14898] do_fast_syscall_32+0x38/0x80 [ 1326.451464][T14898] do_SYSENTER_32+0x1f/0x30 [ 1326.456123][T14898] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1326.462694][T14898] [ 1326.465100][T14898] Uninit was created at: [ 1326.469501][T14898] kmem_cache_alloc_node_noprof+0x907/0xe00 [ 1326.475594][T14898] kmalloc_reserve+0x13d/0x4a0 [ 1326.480450][T14898] __alloc_skb+0x363/0x7b0 [ 1326.485029][T14898] alloc_skb_with_frags+0xc8/0xd00 [ 1326.490235][T14898] sock_alloc_send_pskb+0xa81/0xbf0 [ 1326.495613][T14898] raw_sendmsg+0x367/0xdf0 [ 1326.500120][T14898] ieee802154_sock_sendmsg+0x96/0xd0 [ 1326.505593][T14898] __sock_sendmsg+0x30f/0x380 [ 1326.510384][T14898] ____sys_sendmsg+0x877/0xb60 [ 1326.515324][T14898] ___sys_sendmsg+0x28d/0x3c0 [ 1326.520100][T14898] __sys_sendmsg+0x1b6/0x300 [ 1326.524860][T14898] __ia32_compat_sys_sendmsg+0x9d/0xe0 [ 1326.530432][T14898] ia32_sys_call+0x2685/0x4180 [ 1326.535366][T14898] __do_fast_syscall_32+0xb0/0x110 [ 1326.540577][T14898] do_fast_syscall_32+0x38/0x80 [ 1326.545593][T14898] do_SYSENTER_32+0x1f/0x30 [ 1326.550183][T14898] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1326.556738][T14898] [ 1326.559109][T14898] CPU: 0 UID: 0 PID: 14898 Comm: syz.2.2369 Not tainted 6.13.0-rc3-syzkaller #0 [ 1326.568333][T14898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1326.578569][T14898] ===================================================== [ 1326.585625][T14898] Disabling lock debugging due to kernel taint [ 1326.591835][T14898] Kernel panic - not syncing: kmsan.panic set ... [ 1326.598316][T14898] CPU: 0 UID: 0 PID: 14898 Comm: syz.2.2369 Tainted: G B 6.13.0-rc3-syzkaller #0 [ 1326.608930][T14898] Tainted: [B]=BAD_PAGE [ 1326.613133][T14898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1326.623262][T14898] Call Trace: [ 1326.626599][T14898] [ 1326.629582][T14898] dump_stack_lvl+0x216/0x2d0 [ 1326.634401][T14898] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1326.640402][T14898] dump_stack+0x1e/0x24 [ 1326.644779][T14898] panic+0x4e2/0xcf0 [ 1326.648793][T14898] ? kmsan_get_metadata+0xf1/0x1c0 [ 1326.654019][T14898] kmsan_report+0x2c7/0x2d0 [ 1326.658634][T14898] ? kmsan_get_metadata+0x13e/0x1c0 [ 1326.663940][T14898] ? kmsan_internal_poison_memory+0x7d/0x90 [ 1326.669990][T14898] ? kmsan_get_metadata+0x13e/0x1c0 [ 1326.675292][T14898] ? __msan_warning+0x95/0x120 [ 1326.680179][T14898] ? nr_route_frame+0x4bb/0xfe0 [ 1326.685136][T14898] ? nr_xmit+0x5a/0x1c0 [ 1326.689396][T14898] ? dev_hard_start_xmit+0x247/0xa20 [ 1326.694792][T14898] ? __dev_queue_xmit+0x366a/0x57d0 [ 1326.700090][T14898] ? raw_sendmsg+0x6b5/0xdf0 [ 1326.704785][T14898] ? ieee802154_sock_sendmsg+0x96/0xd0 [ 1326.710354][T14898] ? __sock_sendmsg+0x30f/0x380 [ 1326.715345][T14898] ? ____sys_sendmsg+0x877/0xb60 [ 1326.720403][T14898] ? ___sys_sendmsg+0x28d/0x3c0 [ 1326.725365][T14898] ? __sys_sendmsg+0x1b6/0x300 [ 1326.730231][T14898] ? __ia32_compat_sys_sendmsg+0x9d/0xe0 [ 1326.735989][T14898] ? ia32_sys_call+0x2685/0x4180 [ 1326.741024][T14898] ? __do_fast_syscall_32+0xb0/0x110 [ 1326.746404][T14898] ? do_fast_syscall_32+0x38/0x80 [ 1326.751535][T14898] ? do_SYSENTER_32+0x1f/0x30 [ 1326.756306][T14898] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1326.762951][T14898] ? do_SYSENTER_32+0x1f/0x30 [ 1326.767743][T14898] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1326.774474][T14898] ? kmsan_get_metadata+0x13e/0x1c0 [ 1326.779781][T14898] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1326.785689][T14898] ? kmem_cache_alloc_node_noprof+0x79/0xe00 [ 1326.791798][T14898] ? kmsan_get_metadata+0x13e/0x1c0 [ 1326.797093][T14898] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1326.803000][T14898] ? kmsan_get_metadata+0x13e/0x1c0 [ 1326.808290][T14898] ? kmsan_get_metadata+0x13e/0x1c0 [ 1326.813601][T14898] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1326.819514][T14898] ? __rcu_read_unlock+0x7b/0xe0 [ 1326.824568][T14898] ? kmsan_get_metadata+0x13e/0x1c0 [ 1326.829860][T14898] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1326.835767][T14898] __msan_warning+0x95/0x120 [ 1326.840481][T14898] nr_route_frame+0x4bb/0xfe0 [ 1326.845270][T14898] ? validate_xmit_xfrm+0x8b/0x1bc0 [ 1326.850589][T14898] ? kmsan_get_metadata+0x13e/0x1c0 [ 1326.855899][T14898] nr_xmit+0x5a/0x1c0 [ 1326.859974][T14898] ? __pfx_nr_xmit+0x10/0x10 [ 1326.864656][T14898] dev_hard_start_xmit+0x247/0xa20 [ 1326.869880][T14898] __dev_queue_xmit+0x366a/0x57d0 [ 1326.875057][T14898] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1326.880970][T14898] ? _copy_from_iter+0x9ae/0x2b00 [ 1326.886109][T14898] ? __dev_queue_xmit+0x3d6/0x57d0 [ 1326.891350][T14898] raw_sendmsg+0x6b5/0xdf0 [ 1326.895892][T14898] ? __pfx_raw_sendmsg+0x10/0x10 [ 1326.900932][T14898] ieee802154_sock_sendmsg+0x96/0xd0 [ 1326.906337][T14898] ? __pfx_ieee802154_sock_sendmsg+0x10/0x10 [ 1326.912484][T14898] ? __pfx_ieee802154_sock_sendmsg+0x10/0x10 [ 1326.918589][T14898] __sock_sendmsg+0x30f/0x380 [ 1326.923394][T14898] ____sys_sendmsg+0x877/0xb60 [ 1326.928279][T14898] ___sys_sendmsg+0x28d/0x3c0 [ 1326.933059][T14898] ? kmsan_get_metadata+0x13e/0x1c0 [ 1326.938354][T14898] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1326.944267][T14898] ? __rcu_read_unlock+0x7b/0xe0 [ 1326.949333][T14898] ? __fget_files+0x42b/0x500 [ 1326.954132][T14898] ? kmsan_get_metadata+0x13e/0x1c0 [ 1326.959423][T14898] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1326.965357][T14898] __sys_sendmsg+0x1b6/0x300 [ 1326.970089][T14898] __ia32_compat_sys_sendmsg+0x9d/0xe0 [ 1326.975678][T14898] ia32_sys_call+0x2685/0x4180 [ 1326.980543][T14898] __do_fast_syscall_32+0xb0/0x110 [ 1326.985779][T14898] ? irqentry_exit+0x16/0x60 [ 1326.990489][T14898] do_fast_syscall_32+0x38/0x80 [ 1326.995439][T14898] do_SYSENTER_32+0x1f/0x30 [ 1327.000032][T14898] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1327.006497][T14898] RIP: 0023:0xf7f71579 [ 1327.010631][T14898] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1327.030358][T14898] RSP: 002b:00000000f50c655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1327.038881][T14898] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000200 [ 1327.046937][T14898] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1327.054984][T14898] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1327.063026][T14898] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1327.071159][T14898] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1327.079228][T14898] [ 1327.082667][T14898] Kernel Offset: disabled [ 1327.087057][T14898] Rebooting in 86400 seconds..