last executing test programs: 30m30.758581925s ago: executing program 32 (id=38): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18040000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bf"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 21m7.969397401s ago: executing program 33 (id=1505): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() prlimit64(r0, 0xe, &(0x7f0000000300)={0x9, 0x8e}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090500000000fddbdf25021f", @ANYRES32, @ANYBLOB="08ff03000014141c08000200ffffffff27000900061e000008000100ffffffff08000100"], 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) socket(0x10, 0x3, 0x0) 2m16.347438994s ago: executing program 34 (id=4440): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='rxrpc_recvmsg\x00', r0}, 0x10) r1 = socket(0x21, 0x2, 0x10000000000002) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) 2m12.865636259s ago: executing program 35 (id=4452): socket$alg(0x26, 0x5, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28031, 0xffffffffffffffff, 0x8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x290, 0x0, 0x18c, 0x203, 0x8000000, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, 0x0, 0xfffffd88) readv(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r6, 0x5423, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) 2m8.183552572s ago: executing program 36 (id=4465): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x120a003, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/consoles\x00', 0x0, 0x0) r1 = socket(0x2c, 0x3, 0x0) close(r1) 2m3.347816078s ago: executing program 3 (id=4509): bpf$PROG_LOAD(0x5, 0x0, 0x0) 2m3.252009823s ago: executing program 3 (id=4510): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x80d0}, 0x8005) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) 2m3.203671026s ago: executing program 3 (id=4511): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = creat(&(0x7f0000000400)='./bus\x00', 0x0) r4 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) truncate(&(0x7f0000000040)='./bus\x00', 0x8) lsetxattr$security_ima(&(0x7f0000000280)='./bus\x00', &(0x7f0000000180), &(0x7f0000000000)=@ng={0x4, 0x11}, 0x2, 0x1) dup3(r4, r3, 0x0) finit_module(r4, 0x0, 0x0) setsockopt(r2, 0x84, 0x14, 0x0, 0x0) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) keyctl$chown(0x12, 0x0, 0xee00, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_load={'load ', 'ecryptfs', 0x20, 'user:', 'percpu_alloc_percpu\x00', 0x20, 0x4, 0x20, [0x65]}, 0x3f, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r5, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r6, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r6, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, 0x0) 1m52.415243284s ago: executing program 37 (id=4503): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000140)='./file0\x00') r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r1, 0x82081fc) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14d0be, 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600402, 0x7ffffe, 0x4002011, r2, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x4) 1m50.574099905s ago: executing program 7 (id=4525): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000007c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\f\n5', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000540)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 1m50.418833588s ago: executing program 7 (id=4526): write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8) close(0xffffffffffffffff) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x801, 0x0) writev(r1, &(0x7f0000000b00)=[{0x0}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r3}, @generic={0x24, 0x8}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x4) ioctl$KVM_SET_CPUID2(r6, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYBLOB="070000000000000007000000ffffff"]) 1m48.589741789s ago: executing program 7 (id=4528): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x6, 0xa8680) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x168) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x17, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x45, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7}) recvfrom$inet_nvme(r0, &(0x7f0000000340)=""/231, 0xe7, 0x40000043, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x804) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) connect$bt_l2cap(r3, &(0x7f0000000280)={0x1f, 0xfffe, @fixed, 0x4, 0x1}, 0xe) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0xc000) 1m48.340053403s ago: executing program 7 (id=4529): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, r0, {0x7, 0x1f, 0x0, 0x42062c12}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) open_by_handle_at(r1, &(0x7f0000000240)=@orangefs_parent={0x28, 0x2, {{'\x00', 0x200}, {"421b0db8e939895bf0700e7b34e37282"}}}, 0x2000) 1m48.297018219s ago: executing program 7 (id=4530): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1, 0x0, 0x0, 0x80d0}, 0x8005) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) 1m48.198587855s ago: executing program 7 (id=4531): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000000c0)={0x44, r2, 0xb97534d5fe9704cf, 0x70bd29, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x20000800) 1m48.165933803s ago: executing program 38 (id=4511): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = creat(&(0x7f0000000400)='./bus\x00', 0x0) r4 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) truncate(&(0x7f0000000040)='./bus\x00', 0x8) lsetxattr$security_ima(&(0x7f0000000280)='./bus\x00', &(0x7f0000000180), &(0x7f0000000000)=@ng={0x4, 0x11}, 0x2, 0x1) dup3(r4, r3, 0x0) finit_module(r4, 0x0, 0x0) setsockopt(r2, 0x84, 0x14, 0x0, 0x0) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) keyctl$chown(0x12, 0x0, 0xee00, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_load={'load ', 'ecryptfs', 0x20, 'user:', 'percpu_alloc_percpu\x00', 0x20, 0x4, 0x20, [0x65]}, 0x3f, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r5, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r6, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r6, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, 0x0) 1m45.158382987s ago: executing program 8 (id=4536): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r1, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(0xffffffffffffffff, 0xa3d, 0x0, 0x0, 0x0, 0xff39) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) pread64(0xffffffffffffffff, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="170e0000000000000000010000600500070000000000080009000000000014201f00000000000000"], 0x5c}}, 0x0) 1m44.335841156s ago: executing program 8 (id=4537): write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8) close(0xffffffffffffffff) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x801, 0x0) writev(r1, &(0x7f0000000b00)=[{0x0}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r3}, @generic={0x24, 0x8}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x4) ioctl$KVM_SET_CPUID2(r6, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYBLOB="070000000000000007000000ffffff"]) 1m43.347754046s ago: executing program 8 (id=4538): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x6, 0xa8680) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x168) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x17, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x45, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7}) recvfrom$inet_nvme(r0, &(0x7f0000000340)=""/231, 0xe7, 0x40000043, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x804) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) connect$bt_l2cap(r3, &(0x7f0000000280)={0x1f, 0xfffe, @fixed, 0x4, 0x1}, 0xe) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0xc000) 1m43.22789273s ago: executing program 8 (id=4539): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, r0, {0x7, 0x1f, 0x0, 0x42062c12}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) open_by_handle_at(r1, &(0x7f0000000240)=@orangefs_parent={0x28, 0x2, {{'\x00', 0x200}, {"421b0db8e939895bf0700e7b34e37282"}}}, 0x2000) 1m43.087924645s ago: executing program 8 (id=4540): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1, 0x0, 0x0, 0x80d0}, 0x8005) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) 1m42.994126927s ago: executing program 8 (id=4541): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = semget(0x2, 0x4, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) semop(r2, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@getchain={0x24, 0x11, 0x1, 0x0, 0x400000, {0x0, 0x0, 0x0, r1, {0xfff1, 0x3}, {0xa, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40044) 1m36.220841045s ago: executing program 39 (id=4521): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x101800, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r0 = syz_io_uring_setup(0xd1, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 1m33.200000318s ago: executing program 4 (id=4544): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000030000005800018044000400200001000a000000000000000000000000000000400000000000000000000000200002000a00000000000000fc"], 0x6c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a00", @ANYRES32, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1m33.123887675s ago: executing program 40 (id=4531): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000000c0)={0x44, r2, 0xb97534d5fe9704cf, 0x70bd29, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x20000800) 1m32.973548354s ago: executing program 4 (id=4546): write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8) close(0xffffffffffffffff) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x801, 0x0) writev(r1, &(0x7f0000000b00)=[{0x0}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r3}, @generic={0x24, 0x8}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x4) ioctl$KVM_SET_CPUID2(r6, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYBLOB="070000000000000007000000ffffff"]) 1m31.834189182s ago: executing program 4 (id=4547): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x6, 0xa8680) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x168) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x17, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x45, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7}) recvfrom$inet_nvme(r0, &(0x7f0000000340)=""/231, 0xe7, 0x40000043, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x804) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) connect$bt_l2cap(r3, &(0x7f0000000280)={0x1f, 0xfffe, @fixed, 0x4, 0x1}, 0xe) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0xc000) 1m31.671611456s ago: executing program 4 (id=4548): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x42062c12}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) open_by_handle_at(r2, &(0x7f0000000240)=@orangefs_parent={0x28, 0x2, {{'\x00', 0x200}, {"421b0db8e939895bf0700e7b34e37282"}}}, 0x2000) 1m31.578100696s ago: executing program 4 (id=4549): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1, 0x0, 0x0, 0x80d0}, 0x8005) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) 1m31.490947337s ago: executing program 4 (id=4550): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x9) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) getpid() r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x8, 0x0, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x48) r3 = gettid() r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r4, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) write$rfkill(r4, &(0x7f0000000340)={0x53, 0x8, 0x0, 0x1, 0xcc}, 0x8) prctl$PR_SET_VMA(0x21, 0x0, &(0x7f000098c000/0x3000)=nil, 0x3000, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x23, 0x0, 0x0) write(r0, &(0x7f00000000c0), 0x0) 1m27.220451041s ago: executing program 41 (id=4541): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = semget(0x2, 0x4, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) semop(r2, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@getchain={0x24, 0x11, 0x1, 0x0, 0x400000, {0x0, 0x0, 0x0, r1, {0xfff1, 0x3}, {0xa, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40044) 1m24.537292417s ago: executing program 5 (id=4553): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000030000005800018044000400200001000a000000000000000000000000000000400000000000000000000000200002000a00000000000000fc"], 0x6c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a00", @ANYRES32, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1m24.370100849s ago: executing program 5 (id=4554): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f00000001c0)=0x1, 0x4) ioctl$IOMMU_VFIO_IOAS$SET(0xffffffffffffffff, 0x3b88, 0x0) syz_open_dev$sndctrl(0x0, 0x1, 0x141000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000002f00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000040)="86", 0x1}], 0x1}}], 0x1, 0x20004000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x2000, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0700000040008100000002000000200001801400040000000000000000000000ffffac1414aa060001000a"], 0x34}, 0x1, 0x0, 0x0, 0x8081}, 0x24000800) 1m22.756123592s ago: executing program 5 (id=4555): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x6, 0xa8680) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x168) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x17, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x45, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7}) recvfrom$inet_nvme(r0, &(0x7f0000000340)=""/231, 0xe7, 0x40000043, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x804) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) connect$bt_l2cap(r3, &(0x7f0000000280)={0x1f, 0xfffe, @fixed, 0x4, 0x1}, 0xe) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0xc000) 1m22.54394086s ago: executing program 5 (id=4556): bpf$PROG_LOAD(0x5, 0x0, 0x0) fchdir(0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000001000010700000000000000000a0000000600010013"], 0x24}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x106, 0xfffa}, 0x1d, [0x86, 0xc95a, 0x3, 0x3, 0x80, 0x2, 0x1, 0x7f, 0x5, 0x4d, 0xfffffff2, 0x5, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x5, 0x3, 0x3c5b, 0x3, 0x24, 0xffffffff, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0xffff, 0x642, 0x3, 0xa, 0xffffffff, 0x71, 0x7, 0x7, 0x103, 0x32, 0x5, 0x3c, 0x8f, 0x5, 0x6, 0x3, 0x5, 0x8, 0x3, 0x0, 0x7f, 0x0, 0x5, 0xfffffff7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6d4, 0x100010, 0xfffffff3, 0x129432e6, 0xcb, 0xf6, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x9, 0x2f, 0xe, 0x101, 0x78, 0xea4, 0xa, 0x4, 0x1, 0x8000, 0x800009, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0xfffb, 0x9, 0x5f31, 0x0, 0x1, 0x6, 0x2, 0x9, 0x4, 0x9, 0x80000001, 0x9, 0x6, 0x2, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x3, 0x4, 0x7, 0x7, 0x6, 0xb, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x6, 0x7fff, 0x1, 0x6, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1f0, 0x5, 0x8, 0x86, 0x8, 0x10000009, 0x3e7, 0x2, 0x42, 0x202, 0x2, 0xf, 0x9, 0x4, 0x6d01, 0x25, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x7, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d2, 0xbf, 0xb, 0x3, 0x400000, 0xfffffff9, 0x1, 0x1, 0x8, 0x1, 0x5, 0x0, 0x120000, 0x3, 0x9, 0x9, 0x5, 0x3], [0x9, 0xbb31, 0x5, 0xb, 0x5, 0x938, 0x8, 0x6, 0xfffffffc, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x2, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0x8001, 0x2, 0x5, 0x1, 0x2, 0x7, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x805, 0x8, 0xc8, 0xca2, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x400004, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x80000009, 0x1, 0x6c1b, 0x0, 0x4, 0x8, 0xb9c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) r3 = fsopen(&(0x7f00000000c0)='nilfs2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x8, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={0xffffffffffffffff, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x20ffc000, 0x0, 0x1}}, 0x3c) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) inotify_init1(0x0) inotify_init1(0x0) 1m21.752534326s ago: executing program 5 (id=4557): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)}], 0x1, 0x0, 0x0, 0x80d0}, 0x8005) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) 1m21.606954246s ago: executing program 5 (id=4558): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4) r1 = fsopen(&(0x7f0000000000)='sockfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 1m16.216906493s ago: executing program 42 (id=4550): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x9) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) getpid() r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x8, 0x0, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x48) r3 = gettid() r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r4, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) write$rfkill(r4, &(0x7f0000000340)={0x53, 0x8, 0x0, 0x1, 0xcc}, 0x8) prctl$PR_SET_VMA(0x21, 0x0, &(0x7f000098c000/0x3000)=nil, 0x3000, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x23, 0x0, 0x0) write(r0, &(0x7f00000000c0), 0x0) 1m9.764608361s ago: executing program 0 (id=4542): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x482fe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x80000001, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0x4, 0x8, 0x80000001, 0x14, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000200)={0x9, 0x0, '\x00', {0x0, @bt={0xc, 0x4, 0x0, 0x2, 0x5c02, 0x9, 0xe, 0xfff, 0x7, 0xf6, 0x200, 0x9, 0x2, 0x4, 0x1, 0x14, {0xfffffcbe, 0xffffccbb}, 0x2, 0x40}}}) 1m8.716168268s ago: executing program 0 (id=4560): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x24, @short={0x2, 0xffff, 0xffff}}, 0x14, 0x0, 0x1, 0x0, 0x0, 0x4000044}, 0x24000004) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) fcntl$dupfd(r2, 0x0, r2) r3 = socket$inet6(0xa, 0x806, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0xc) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r3, 0x3) r8 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r8, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r9 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg(r9, &(0x7f0000001500), 0x588, 0x3000000) 1m7.49136382s ago: executing program 0 (id=4563): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x6, 0xa8680) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x168) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x17, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x45, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7}) recvfrom$inet_nvme(r0, &(0x7f0000000340)=""/231, 0xe7, 0x40000043, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}}, 0x804) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) connect$bt_l2cap(r3, &(0x7f0000000280)={0x1f, 0xfffe, @fixed, 0x4, 0x1}, 0xe) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0xc000) 1m6.816300798s ago: executing program 0 (id=4564): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = dup(0xffffffffffffffff) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m6.42490883s ago: executing program 0 (id=4565): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)}], 0x1, 0x0, 0x0, 0x80d0}, 0x8005) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) 1m6.359488267s ago: executing program 43 (id=4558): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4) r1 = fsopen(&(0x7f0000000000)='sockfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 1m6.151781567s ago: executing program 0 (id=4568): bind$netrom(0xffffffffffffffff, &(0x7f0000000440)={{0x3, @null, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f00000004c0)={0x9, 0x0, 0x20, 0x0, "cbfea29368cc60a1ff856ae471fe261fdfb44a306ea8d6996bbcb8eb45d73158"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 50.995725645s ago: executing program 44 (id=4568): bind$netrom(0xffffffffffffffff, &(0x7f0000000440)={{0x3, @null, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f00000004c0)={0x9, 0x0, 0x20, 0x0, "cbfea29368cc60a1ff856ae471fe261fdfb44a306ea8d6996bbcb8eb45d73158"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 26.598030324s ago: executing program 6 (id=4647): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket(0x1e, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r5, 0x0, 0x18, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x30004081) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xf, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94) 25.383779752s ago: executing program 6 (id=4650): socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$rds(0x15, 0x5, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba5d8200000af74591b1ffccc2ffffff00"}) syz_open_pts(r0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000440), 0x0, 0x181801) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000000)=ANY=[@ANYRES64=r3, @ANYRES16=r3]) 6.080854753s ago: executing program 6 (id=4654): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x5, &(0x7f0000000100)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x5, 0x0) r1 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8003}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x38, 0x3, r1, 0x0, 0x0, 0x0, 0x1, 0x1, {0x3}}) io_uring_enter(r1, 0x6e2, 0x600, 0x1, 0x0, 0x0) 6.080562658s ago: executing program 2 (id=4655): unshare(0x28000600) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000700)=ANY=[], 0xe0}], 0x1}, 0x0) 6.07894618s ago: executing program 6 (id=4657): syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000003b0007010000000000000000017c0000040000000c00018066feb2b9a5890000180002"], 0x3c}}, 0xc000) 6.073675703s ago: executing program 3 (id=4566): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 6.072005519s ago: executing program 6 (id=4661): sendto$inet6(0xffffffffffffffff, &(0x7f0000000600)="44f9b108", 0x4, 0x4000001, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, 0x4000080) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044014}, 0x0) ptrace$setregs(0x1a, r0, 0xc, &(0x7f0000000000)) 6.063445426s ago: executing program 3 (id=4664): openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000004c0), 0x0, 0x4832}], 0x1, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$packet(0x11, 0x2, 0x300) sendmsg(r2, &(0x7f0000003b40)={&(0x7f0000000100)=@generic={0x27, "b091c74c8a4e0be48af3b4c9a3054c6a3882da9ec507b9cc436805e693689bd5a6767dd253843b6f8b1d5a2953167b73dc565867f037db01afd5ae277d6212943c5e7eb9f01c34e25f8982045b0b2ece6b155021a8bb952d71d02171d286bd1d0c5633424fbd6f171eb1af9eee1f949b40dd1cd75b6d98814ae365eef89e"}, 0x80, 0x0}, 0x28048801) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, 0x0) getpgrp(0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000180)={r3, r4}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 6.062855322s ago: executing program 2 (id=4665): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1000}, 0x38) getsockopt$IP6T_SO_GET_INFO(r0, 0x10d, 0xc0, &(0x7f0000002400)={'nat\x00'}, &(0x7f0000002480)=0x54) 4.591192923s ago: executing program 1 (id=4666): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000002e80), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xcd8, 0x9c7, 0x4, {0x3, @pix_mp={0x8001, 0x0, 0x31363553, 0x3, 0xa, [{0x1, 0xda4}, {0x4, 0x8}, {0x10, 0x6}, {0x8, 0x3}, {0x337c, 0xe7}, {0x80, 0x6}, {0x8}, {0x6, 0x6}], 0x3, 0x4, 0x8, 0x0, 0x5}}}) 4.05231s ago: executing program 9 (id=4667): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x0, 0xfffffffb, 0x1}) ioctl$SNDCTL_DSP_GETOSPACE(r1, 0x8010500c, 0x0) 3.95190535s ago: executing program 3 (id=4668): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180006000000000000000000000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) syz_emit_ethernet(0x8e, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000140)=[0x0]) io_uring_enter(0xffffffffffffffff, 0x3701, 0x0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) bind$ax25(r2, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x10801, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000000000,user_id=', @ANYRESDEC, @ANYBLOB='\x00\x00\x00\x00\x00=\x00\x00\x00\x00', @ANYRESDEC=0x0, @ANYBLOB=',blksize=0x0000000000001800,default_permissions,blksize=0x0000000000000000,default_permissions,default_permissions,allow_ot', @ANYRESDEC=0xee01, @ANYBLOB=',rootcontext=root,euid>', @ANYRES16=0x0, @ANYBLOB=',uid<', @ANYRESDEC=0x0, @ANYBLOB=',']) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, 0x0, 0x0) r5 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r5, 0xc0109207, &(0x7f0000000080)={0x0, 0x6}) socket(0x11, 0x6, 0x0) socket$packet(0x11, 0x2, 0x300) 3.937072105s ago: executing program 1 (id=4669): r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x42) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r4 = io_uring_setup(0x4668, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2e, 0x20000000, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x0, 0x4, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) 3.925710711s ago: executing program 6 (id=4670): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x14, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$radio(&(0x7f0000000200), 0x1, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) mount$9p_rdma(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', &(0x7f0000000300), 0x1000800, &(0x7f0000000440)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d3078303030303030303030303030346532302c00d46748fe5b3584e6f344a2f1dd649b2dbe34080e4d12e38ce67a2af1e4947cf7a622cf8e"]) openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './cgroup.cpu/cgroup.procs\x00'}) copy_file_range(r0, &(0x7f0000000000)=0x7, r0, 0x0, 0x7, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, 0x0) removexattr(&(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000004c0)=@known='user.incfs.metadata\x00') r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000fc0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_RANGE_TO_DATA={0x18, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x14, 0x1, "cfc5879863ab6455bf351ca78bbfd733"}]}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_FROM_DATA={0x8, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe4}}, 0x0) r5 = syz_open_dev$video(&(0x7f0000000540), 0x0, 0xe0901) ioctl$VIDIOC_G_SELECTION(r5, 0xc040565e, &(0x7f0000000000)={0x2, 0x2, 0x0, {0x9, 0x9, 0x80000005, 0x6}}) 3.230364749s ago: executing program 1 (id=4671): r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fanotify_init(0x81, 0x0) fanotify_mark(r1, 0x105, 0x40001032, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) 3.105473605s ago: executing program 9 (id=4672): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000030000005800018044000400200001000a000000000000000000000000000000400000000000000000000000200002000a00000000000000fc"], 0x6c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmmsg(r0, 0x0, 0x0, 0x0) 2.963025173s ago: executing program 1 (id=4673): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000c8c00)={0x0, ""/256, 0x0, 0x0}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000140)=0xffffffffffffffff, 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f0000000640)={{r5, 0x8, 0xc00000, 0x2, 0xb2, 0x2, 0x7, 0xfffff800, 0x7, 0x3ff, 0x7, 0x0, 0x1, 0x0, 0xe}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000c8e00)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000c9000)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {r5}, {r6}], 0x5, "779095e5a18ddc"}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) symlinkat(0x0, 0xffffffffffffffff, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r8, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=r9, 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x188, r11, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x13c, 0x8, 0x0, 0x1, [{0x98, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x24, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x4}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x2, @mcast2, 0x6}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0xa0, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x68, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x4}, {0x4}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0xf}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x4}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x188}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 2.863912079s ago: executing program 9 (id=4674): r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x20c02) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000180)=0x1) r1 = syz_io_uring_setup(0x6d0c, &(0x7f0000000340)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x1866, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000100)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0x184d, 0x0, 0x0, 0x0, 0x0) 2.803857849s ago: executing program 2 (id=4675): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r0 = dup(0xffffffffffffffff) write$FUSE_BMAP(r0, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',privport,access=', @ANYRESDEC=r1]) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000004180)={0x2020}, 0x2020) 2.662070795s ago: executing program 1 (id=4676): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) fadvise64(0xffffffffffffffff, 0x18, 0x8800, 0x4) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r5, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}}}}, 0x118) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x1c, 0x20, 0x301}, 0x1c}}, 0x0) 2.60795757s ago: executing program 9 (id=4677): socket$pppoe(0x18, 0x1, 0x0) mkdir(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001400)={0x0}, &(0x7f0000001440)=0xc) prlimit64(r0, 0xe, &(0x7f0000000140)={0x581, 0x20000000008c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(r0, 0xfffffffffffffd64, &(0x7f0000000400)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000021c0), 0x5b, 0x40, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x40800) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x3c, r4, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_FAMILY={0x6}]}, 0x3c}}, 0x0) sendmsg$NLBL_MGMT_C_LISTALL(r2, &(0x7f0000000300)={&(0x7f0000001480), 0xc, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00\x00\x00', @ANYRESDEC], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x44090) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r5, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) syz_emit_ethernet(0x6a, &(0x7f0000000600)={@broadcast, @random, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "44863a46875d7a99c994a2f0f3e6c9891f90f0da47b609b1", "282614002ac3b260591ff12441d3b9bd7570005c1a865e453a529854881fe0d4"}}}}}}, 0x0) brk(0x20ffc004) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200000038000480340001800b00010074617267657400002400"], 0xa0}}, 0x0) 1.390688787s ago: executing program 2 (id=4678): syz_open_dev$sndpcmc(&(0x7f0000000200), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x4a2000, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) recvfrom$inet_nvme(0xffffffffffffffff, 0x0, 0x0, 0x40000043, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r5, &(0x7f0000000280)={0x1f, 0x0, @fixed, 0x4, 0x1}, 0xe) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000bc0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf254400000008000300", @ANYRES32, @ANYBLOB="100070005a560bf158922c9a040007000a001800"], 0x38}}, 0x10) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x2000000b}) 1.324083188s ago: executing program 9 (id=4679): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="c7", 0x1}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000280)=""/165, 0xa5}], 0x1}, 0x9}], 0x1, 0x400100c3, 0x0) 585.869934ms ago: executing program 1 (id=4680): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x800}}, './file0\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) socket$inet6_mptcp(0xa, 0x1, 0x106) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f0000000040), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x20000000008) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) r6 = io_uring_setup(0x3454, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, 0x0, 0x0) ioctl$SG_BLKTRACETEARDOWN(r5, 0x1276, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000001e40)={0x0, 0x0, 0x0}, 0x0) 279.485343ms ago: executing program 2 (id=4681): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, r0, 0xfffffffffffffffe, 0x8, 0x0) 151.64249ms ago: executing program 9 (id=4682): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000640)=@known='com.apple.system.Security\x00') ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x800, 0x0, 0x0, 0x0, 0xa5, 0xbd, 0x1, 0xa9, 0x4, 0x0, 0x0, 0x40000000}, {0x8, 0x5, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x6, 0xff, 0x0, 0x2, 0x6}, {0x3fe, 0x9, 0x0, 0xfd, 0x0, 0x0, 0xb3, 0x0, 0x3, 0x0, 0x80, 0xf6, 0x7}], 0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 2 (id=4683): r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fanotify_init(0x81, 0x0) fanotify_mark(r1, 0x105, 0x40001032, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) kernel console output (not intermixed with test programs): gid=0 ses=4294967295 subj=unconfined pid=19937 comm="syz.0.4157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f400b38cde9 code=0x7ffc0000 [ 1702.953326][T19963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4165'. [ 1704.354650][T19984] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4169'. [ 1705.585984][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 1705.586002][ T29] audit: type=1326 audit(1738903305.018:2217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19990 comm="syz.1.4173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb415f8cde9 code=0x7ffc0000 [ 1705.650258][ T29] audit: type=1326 audit(1738903305.018:2218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19990 comm="syz.1.4173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb415f8cde9 code=0x7ffc0000 [ 1705.984221][ T29] audit: type=1326 audit(1738903305.018:2219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19990 comm="syz.1.4173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fb415f8cde9 code=0x7ffc0000 [ 1706.294648][ T29] audit: type=1326 audit(1738903305.018:2220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19990 comm="syz.1.4173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb415f8cde9 code=0x7ffc0000 [ 1706.403139][ T29] audit: type=1326 audit(1738903305.018:2221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19990 comm="syz.1.4173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb415f8cde9 code=0x7ffc0000 [ 1706.487535][ T29] audit: type=1326 audit(1738903305.028:2222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19990 comm="syz.1.4173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fb415f8cde9 code=0x7ffc0000 [ 1706.562990][ T29] audit: type=1326 audit(1738903305.028:2223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19990 comm="syz.1.4173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb415f8cde9 code=0x7ffc0000 [ 1706.762286][ T29] audit: type=1326 audit(1738903305.028:2224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19990 comm="syz.1.4173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb415f8cde9 code=0x7ffc0000 [ 1707.834574][ T29] audit: type=1326 audit(1738903305.028:2225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19990 comm="syz.1.4173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fb415f8cde9 code=0x7ffc0000 [ 1708.198262][ T29] audit: type=1326 audit(1738903305.028:2226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19990 comm="syz.1.4173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb415f8cde9 code=0x7ffc0000 [ 1708.502603][T20019] overlayfs: overlapping lowerdir path [ 1710.652484][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 1710.652581][ T29] audit: type=1326 audit(1738903310.088:2237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20039 comm="syz.3.4190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05018cde9 code=0x7ffc0000 [ 1710.739317][ T29] audit: type=1326 audit(1738903310.138:2238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20039 comm="syz.3.4190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05018cde9 code=0x7ffc0000 [ 1710.770379][ T29] audit: type=1326 audit(1738903310.148:2239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20039 comm="syz.3.4190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fa05018cde9 code=0x7ffc0000 [ 1711.101654][ T29] audit: type=1326 audit(1738903310.148:2240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20039 comm="syz.3.4190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05018cde9 code=0x7ffc0000 [ 1711.345182][ T29] audit: type=1326 audit(1738903310.148:2241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20039 comm="syz.3.4190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fa05018cde9 code=0x7ffc0000 [ 1711.379336][ T29] audit: type=1326 audit(1738903310.148:2242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20039 comm="syz.3.4190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05018cde9 code=0x7ffc0000 [ 1711.498243][ T29] audit: type=1326 audit(1738903310.148:2243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20039 comm="syz.3.4190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fa05018cde9 code=0x7ffc0000 [ 1711.701489][ T29] audit: type=1326 audit(1738903310.148:2244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20039 comm="syz.3.4190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05018cde9 code=0x7ffc0000 [ 1711.861471][ T29] audit: type=1326 audit(1738903310.148:2245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20039 comm="syz.3.4190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa05018cde9 code=0x7ffc0000 [ 1712.233910][ T29] audit: type=1326 audit(1738903310.148:2246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20039 comm="syz.3.4190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05018cde9 code=0x7ffc0000 [ 1713.228501][T20075] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4201'. [ 1716.707436][T20099] sd 0:0:1:0: device reset [ 1717.655728][ T5886] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1717.834186][ T5886] usb 3-1: Using ep0 maxpacket: 32 [ 1717.895626][ T5886] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1717.922279][ T5886] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1717.969194][ T5886] usb 3-1: config 7 has 0 interfaces, different from the descriptor's value: 1 [ 1718.007499][ T5886] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1718.192201][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1718.207717][ T5886] usb 3-1: Product: syz [ 1718.222504][ T5886] usb 3-1: Manufacturer: syz [ 1718.232631][ T5886] usb 3-1: SerialNumber: syz [ 1718.284348][ T1205] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 1719.155964][ T5886] usb 3-1: can't set config #7, error -71 [ 1719.196934][ T5886] usb 3-1: USB disconnect, device number 29 [ 1719.246296][ T1205] usb 2-1: config 201 has an invalid descriptor of length 0, skipping remainder of the config [ 1719.453367][ T1205] usb 2-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df [ 1719.471197][ T1205] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1719.728178][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 1719.728219][ T29] audit: type=1326 audit(1738903319.108:2267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20122 comm="syz.0.4218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f400b38cde9 code=0x7ffc0000 [ 1720.220628][ T1205] usb 2-1: Product: syz [ 1720.225107][ T1205] usb 2-1: Manufacturer: syz [ 1720.229746][ T1205] usb 2-1: SerialNumber: syz [ 1720.332671][ T29] audit: type=1326 audit(1738903319.108:2268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20122 comm="syz.0.4218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f400b38cde9 code=0x7ffc0000 [ 1720.355337][ T29] audit: type=1326 audit(1738903319.108:2269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20122 comm="syz.0.4218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f400b38cde9 code=0x7ffc0000 [ 1720.428100][ T29] audit: type=1326 audit(1738903319.108:2270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20122 comm="syz.0.4218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f400b38cde9 code=0x7ffc0000 [ 1720.597663][ T29] audit: type=1326 audit(1738903319.108:2271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20122 comm="syz.0.4218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f400b38cde9 code=0x7ffc0000 [ 1720.628940][ T29] audit: type=1326 audit(1738903319.108:2272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20122 comm="syz.0.4218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f400b38cde9 code=0x7ffc0000 [ 1720.653299][ T29] audit: type=1326 audit(1738903319.108:2273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20122 comm="syz.0.4218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f400b38cde9 code=0x7ffc0000 [ 1720.704355][ T29] audit: type=1326 audit(1738903319.108:2274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20122 comm="syz.0.4218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f400b38cde9 code=0x7ffc0000 [ 1721.031865][ T29] audit: type=1326 audit(1738903319.118:2275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20122 comm="syz.0.4218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f400b38cde9 code=0x7ffc0000 [ 1721.072195][ T29] audit: type=1326 audit(1738903319.118:2276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20122 comm="syz.0.4218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f400b38cde9 code=0x7ffc0000 [ 1721.114342][T20116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1721.231367][T20116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1721.732565][T20116] netlink: 'syz.1.4216': attribute type 10 has an invalid length. [ 1721.734403][ T1205] ath6kl: Failed to submit usb control message: -110 [ 1721.740667][T20116] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4216'. [ 1721.771005][ T1205] ath6kl: unable to send the bmi data to the device: -110 [ 1722.714182][ T1205] ath6kl: Unable to send get target info: -110 [ 1722.739791][ T1205] ath6kl: Failed to init ath6kl core: -110 [ 1722.758921][ T1205] ath6kl_usb 2-1:201.0: probe with driver ath6kl_usb failed with error -110 [ 1723.160986][T20146] devpts: called with bogus options [ 1724.635944][ T1205] usb 2-1: USB disconnect, device number 40 [ 1724.741387][T20155] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4224'. [ 1725.814702][T20160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4228'. [ 1726.018798][T20163] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1726.977715][T20163] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 1727.022076][T20163] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1727.030140][T20163] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 1727.038857][T20166] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1727.101172][T20166] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 1727.354557][T20166] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1727.829095][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 1727.829136][ T29] audit: type=1326 audit(1738903327.208:2288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20170 comm="syz.6.4230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2aef8cde9 code=0x7ffc0000 [ 1727.999444][T20173] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4231'. [ 1728.154342][ T29] audit: type=1326 audit(1738903327.208:2289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20170 comm="syz.6.4230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2aef8cde9 code=0x7ffc0000 [ 1728.177973][ T29] audit: type=1326 audit(1738903327.218:2290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20170 comm="syz.6.4230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd2aef8cde9 code=0x7ffc0000 [ 1728.184109][T20166] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 1728.202320][ T29] audit: type=1326 audit(1738903327.218:2291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20170 comm="syz.6.4230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2aef8cde9 code=0x7ffc0000 [ 1728.233235][ T29] audit: type=1326 audit(1738903327.218:2292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20170 comm="syz.6.4230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2aef8cde9 code=0x7ffc0000 [ 1728.256052][ T29] audit: type=1326 audit(1738903327.218:2293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20170 comm="syz.6.4230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7fd2aef8cde9 code=0x7ffc0000 [ 1728.278831][ T29] audit: type=1326 audit(1738903327.218:2294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20170 comm="syz.6.4230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2aef8cde9 code=0x7ffc0000 [ 1728.303070][ T29] audit: type=1326 audit(1738903327.218:2295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20170 comm="syz.6.4230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2aef8cde9 code=0x7ffc0000 [ 1728.335673][ T29] audit: type=1326 audit(1738903327.228:2296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20170 comm="syz.6.4230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd2aef8cde9 code=0x7ffc0000 [ 1728.550045][ T29] audit: type=1326 audit(1738903327.228:2297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20170 comm="syz.6.4230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2aef8cde9 code=0x7ffc0000 [ 1729.194395][ T5890] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 1729.910638][ T5890] usb 2-1: config 201 has an invalid descriptor of length 0, skipping remainder of the config [ 1729.924919][ T5890] usb 2-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df [ 1729.945622][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1729.980079][ T5890] usb 2-1: Product: syz [ 1730.078569][ T5890] usb 2-1: Manufacturer: syz [ 1730.083242][ T5890] usb 2-1: SerialNumber: syz [ 1730.619332][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.183073][T20189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1731.268096][T20189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1731.494484][ T5890] ath6kl: Failed to submit usb control message: -110 [ 1731.501800][ T5890] ath6kl: unable to send the bmi data to the device: -110 [ 1731.509146][ T5890] ath6kl: Unable to send get target info: -110 [ 1731.559283][ T5890] ath6kl: Failed to init ath6kl core: -110 [ 1731.722284][ T5890] ath6kl_usb 2-1:201.0: probe with driver ath6kl_usb failed with error -110 [ 1731.770621][T20208] netlink: 'syz.1.4236': attribute type 10 has an invalid length. [ 1731.779671][T20208] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4236'. [ 1733.054989][ T835] usb 2-1: USB disconnect, device number 41 [ 1733.181491][T20222] F2FS-fs (loop13): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1733.971582][T20222] F2FS-fs (loop13): Can't find valid F2FS filesystem in 1th superblock [ 1734.038552][T20222] F2FS-fs (loop13): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1734.209981][T20222] F2FS-fs (loop13): Can't find valid F2FS filesystem in 2th superblock [ 1734.352510][T20227] F2FS-fs (loop13): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1734.434315][T20227] F2FS-fs (loop13): Can't find valid F2FS filesystem in 1th superblock [ 1734.489824][T20227] F2FS-fs (loop13): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1734.546982][T20227] F2FS-fs (loop13): Can't find valid F2FS filesystem in 2th superblock [ 1737.718539][T20270] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4264'. [ 1737.736347][T20270] bridge0: port 3(erspan0) entered disabled state [ 1737.743073][T20270] bridge0: port 2(bridge_slave_1) entered disabled state [ 1737.750566][T20270] bridge0: port 1(bridge_slave_0) entered disabled state [ 1738.444387][T20266] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1738.625465][T20276] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1738.633485][T20276] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1738.668797][T20276] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1738.683609][T20276] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1738.711162][T20277] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1738.744995][T20277] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1738.753780][T20277] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1740.044768][T20277] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1740.055426][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 1740.055443][ T29] audit: type=1326 audit(1738903338.798:2309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20282 comm="syz.1.4272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb415f8cde9 code=0x7ffc0000 [ 1740.370972][ T29] audit: type=1326 audit(1738903338.798:2310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20282 comm="syz.1.4272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb415f8cde9 code=0x7ffc0000 [ 1741.311409][ T29] audit: type=1326 audit(1738903338.798:2311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20282 comm="syz.1.4272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb415f8cde9 code=0x7ffc0000 [ 1741.654082][ T29] audit: type=1326 audit(1738903338.798:2312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20282 comm="syz.1.4272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb415f8cde9 code=0x7ffc0000 [ 1741.764182][ T29] audit: type=1326 audit(1738903338.798:2313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20282 comm="syz.1.4272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb415f8cde9 code=0x7ffc0000 [ 1741.874142][ T29] audit: type=1326 audit(1738903338.808:2314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20282 comm="syz.1.4272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7fb415f8cde9 code=0x7ffc0000 [ 1741.911201][ T29] audit: type=1326 audit(1738903338.808:2315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20282 comm="syz.1.4272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb415f8cde9 code=0x7ffc0000 [ 1742.004387][ T29] audit: type=1326 audit(1738903338.808:2316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20282 comm="syz.1.4272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb415f8cde9 code=0x7ffc0000 [ 1742.082568][ T29] audit: type=1326 audit(1738903338.808:2317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20282 comm="syz.1.4272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb415f8cde9 code=0x7ffc0000 [ 1742.264092][ T29] audit: type=1326 audit(1738903338.808:2318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20282 comm="syz.1.4272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb415f8cde9 code=0x7ffc0000 [ 1743.884970][T20329] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4284'. [ 1746.419756][T20349] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4291'. [ 1751.494126][T18438] Bluetooth: hci0: command 0x0406 tx timeout [ 1751.729542][T20415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4317'. [ 1752.177685][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 1752.177725][ T29] audit: type=1326 audit(1738903351.588:2330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20411 comm="syz.2.4314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4378cde9 code=0x7ffc0000 [ 1752.834107][ T29] audit: type=1326 audit(1738903351.588:2331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20411 comm="syz.2.4314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4378cde9 code=0x7ffc0000 [ 1752.856881][ T29] audit: type=1326 audit(1738903351.588:2332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20411 comm="syz.2.4314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7faa4378cde9 code=0x7ffc0000 [ 1752.881333][ T29] audit: type=1326 audit(1738903351.588:2333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20411 comm="syz.2.4314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4378cde9 code=0x7ffc0000 [ 1752.954115][ T29] audit: type=1326 audit(1738903351.588:2334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20411 comm="syz.2.4314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4378cde9 code=0x7ffc0000 [ 1753.122364][ T29] audit: type=1326 audit(1738903351.598:2335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20411 comm="syz.2.4314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7faa4378cde9 code=0x7ffc0000 [ 1753.155183][ T29] audit: type=1326 audit(1738903351.598:2336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20411 comm="syz.2.4314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4378cde9 code=0x7ffc0000 [ 1753.248907][ T29] audit: type=1326 audit(1738903351.598:2337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20411 comm="syz.2.4314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4378cde9 code=0x7ffc0000 [ 1753.373140][ T29] audit: type=1326 audit(1738903351.598:2338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20411 comm="syz.2.4314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faa4378cde9 code=0x7ffc0000 [ 1753.625561][ T29] audit: type=1326 audit(1738903351.598:2339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20411 comm="syz.2.4314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4378cde9 code=0x7ffc0000 [ 1755.814352][T18438] Bluetooth: hci2: command 0x0406 tx timeout [ 1755.924200][ T835] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1756.964872][ T835] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1757.164100][ T835] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1757.200512][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 1757.200529][ T29] audit: type=1326 audit(1738903356.638:2396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20455 comm="syz.3.4330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7fa05018cde9 code=0x7ffc0000 [ 1757.248420][ T835] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1757.277325][ T835] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1757.298503][T20466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4333'. [ 1757.307571][ T29] audit: type=1326 audit(1738903356.638:2397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20455 comm="syz.3.4330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05018cde9 code=0x7ffc0000 [ 1757.330779][ T835] usb 1-1: config 0 descriptor?? [ 1757.361945][ T29] audit: type=1326 audit(1738903356.638:2398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20455 comm="syz.3.4330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05018cde9 code=0x7ffc0000 [ 1757.389035][ T29] audit: type=1326 audit(1738903356.638:2399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20455 comm="syz.3.4330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa05018b750 code=0x7ffc0000 [ 1757.419087][ T29] audit: type=1326 audit(1738903356.638:2400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20455 comm="syz.3.4330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05018cde9 code=0x7ffc0000 [ 1757.447871][ T29] audit: type=1326 audit(1738903356.638:2401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20455 comm="syz.3.4330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05018cde9 code=0x7ffc0000 [ 1757.477654][ T29] audit: type=1326 audit(1738903356.668:2402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20455 comm="syz.3.4330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa05018cde9 code=0x7ffc0000 [ 1757.519515][ T29] audit: type=1326 audit(1738903356.668:2403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20455 comm="syz.3.4330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05018cde9 code=0x7ffc0000 [ 1757.745558][ T29] audit: type=1326 audit(1738903356.668:2404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20455 comm="syz.3.4330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05018cde9 code=0x7ffc0000 [ 1757.974712][ T835] cm6533_jd 0003:0D8C:0022.0011: unknown main item tag 0x0 [ 1757.984391][ T835] cm6533_jd 0003:0D8C:0022.0011: unknown main item tag 0x0 [ 1758.084447][ T835] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.0011/input/input34 [ 1758.161034][ T835] cm6533_jd 0003:0D8C:0022.0011: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 1758.324706][T20477] openvswitch: netlink: Message has 4 unknown bytes. [ 1761.929599][ T5886] usb 1-1: USB disconnect, device number 40 [ 1762.665546][T20509] fuse: Bad value for 'fd' [ 1763.255335][T18438] Bluetooth: hci3: command 0x0406 tx timeout [ 1764.561732][ T9] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 1764.663509][ T5886] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1764.698700][T20540] No control pipe specified [ 1765.084273][ T5886] usb 7-1: Using ep0 maxpacket: 32 [ 1765.330976][ T9] usb 1-1: config 201 has an invalid descriptor of length 0, skipping remainder of the config [ 1765.341858][ T5886] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1765.405943][ T5886] usb 7-1: string descriptor 0 read error: -22 [ 1765.412610][ T5886] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1765.430011][ T9] usb 1-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df [ 1765.439848][ T5886] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1765.448058][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1765.475650][ T9] usb 1-1: Product: syz [ 1765.531552][ T9] usb 1-1: Manufacturer: syz [ 1765.554556][ T9] usb 1-1: SerialNumber: syz [ 1765.763185][T17267] usb 7-1: USB disconnect, device number 33 [ 1765.993646][T20535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1766.002993][T20535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1766.220379][T20535] netlink: 'syz.0.4356': attribute type 10 has an invalid length. [ 1766.228327][T20535] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4356'. [ 1766.395066][ T9] ath6kl: Failed to submit usb control message: -71 [ 1766.404989][ T9] ath6kl: unable to send the bmi data to the device: -71 [ 1766.412081][ T9] ath6kl: Unable to send get target info: -71 [ 1766.431138][ T9] ath6kl: Failed to init ath6kl core: -71 [ 1766.476491][ T9] ath6kl_usb 1-1:201.0: probe with driver ath6kl_usb failed with error -71 [ 1766.535350][ T9] usb 1-1: USB disconnect, device number 41 [ 1766.924401][T20572] No control pipe specified [ 1767.329294][T20588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4379'. [ 1767.711757][T20602] No control pipe specified [ 1768.382799][T20608] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4387'. [ 1771.706668][T20639] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4395'. [ 1771.948087][T20642] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4399'. [ 1774.904409][T20660] No control pipe specified [ 1775.867487][T20676] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4411'. [ 1776.375429][T20686] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4412'. [ 1779.491566][T20708] No control pipe specified [ 1781.251911][T20728] 9pnet_fd: Insufficient options for proto=fd [ 1781.283755][T20729] netlink: 'syz.6.4426': attribute type 2 has an invalid length. [ 1781.351995][T20729] fþ²¹¥‰: entered promiscuous mode [ 1783.062233][T20745] No control pipe specified [ 1784.434253][ T29] audit: type=1800 audit(1738903383.872:2405): pid=20758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4439" name="bus" dev="tmpfs" ino=1223 res=0 errno=0 [ 1785.086204][T20762] 9pnet_fd: Insufficient options for proto=fd [ 1788.457748][ T29] audit: type=1800 audit(1738903387.902:2406): pid=20802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4453" name="bus" dev="tmpfs" ino=1498 res=0 errno=0 [ 1789.134923][T20806] 9pnet_fd: Insufficient options for proto=fd [ 1792.062482][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1793.726444][ T29] audit: type=1800 audit(1738903393.172:2407): pid=20839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4468" name="bus" dev="tmpfs" ino=715 res=0 errno=0 [ 1794.038574][T20844] 9pnet_fd: Insufficient options for proto=fd [ 1798.520085][T20873] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1798.748351][ T29] audit: type=1800 audit(1738903398.192:2408): pid=20876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4479" name="bus" dev="tmpfs" ino=752 res=0 errno=0 [ 1798.768878][ C0] vkms_vblank_simulate: vblank timer overrun [ 1802.244557][T13116] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1802.280251][T13116] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1802.296624][T13116] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1802.314446][T13116] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1802.337894][T13116] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1802.345543][T13116] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1803.040551][ T7271] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1803.570425][T20899] lo speed is unknown, defaulting to 1000 [ 1803.899735][ T7271] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1803.911880][ T29] audit: type=1800 audit(1738903403.352:2409): pid=20916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4492" name="bus" dev="tmpfs" ino=784 res=0 errno=0 [ 1804.231060][ T7271] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1804.455499][T13116] Bluetooth: hci0: command tx timeout [ 1804.591876][T18438] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1804.698503][T18438] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1804.707744][T18438] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1804.718437][T18438] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1804.726746][T18438] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1804.735882][T18438] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1804.836487][ T7271] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1806.013197][T20920] lo speed is unknown, defaulting to 1000 [ 1806.197155][T20899] chnl_net:caif_netlink_parms(): no params data found [ 1806.508412][ T7271] erspan0: left allmulticast mode [ 1806.517692][ T7271] erspan0: left promiscuous mode [ 1806.534144][T13116] Bluetooth: hci0: command tx timeout [ 1806.586116][ T7271] bridge0: port 3(erspan0) entered disabled state [ 1807.113097][ T7271] bridge_slave_1: left allmulticast mode [ 1807.119098][ T7271] bridge_slave_1: left promiscuous mode [ 1807.128182][ T7271] bridge0: port 2(bridge_slave_1) entered disabled state [ 1807.194327][ T7271] bridge_slave_0: left allmulticast mode [ 1807.200030][ T7271] bridge_slave_0: left promiscuous mode [ 1807.505158][ T7271] bridge0: port 1(bridge_slave_0) entered disabled state [ 1807.659156][T13116] Bluetooth: hci4: command tx timeout [ 1808.614125][T13116] Bluetooth: hci0: command tx timeout [ 1809.744031][T13116] Bluetooth: hci4: command tx timeout [ 1809.959687][T18438] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1809.970991][T18438] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1809.980422][T18438] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1810.003306][T18438] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1810.037870][T18438] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1810.045485][T18438] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1810.701462][T13116] Bluetooth: hci0: command tx timeout [ 1810.755313][ T7271] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1810.766872][ T7271] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1810.777280][ T7271] bond0 (unregistering): Released all slaves [ 1810.963682][T20899] bridge0: port 1(bridge_slave_0) entered blocking state [ 1810.971272][T20899] bridge0: port 1(bridge_slave_0) entered disabled state [ 1810.981074][T20899] bridge_slave_0: entered allmulticast mode [ 1810.989997][T20899] bridge_slave_0: entered promiscuous mode [ 1811.001125][T20899] bridge0: port 2(bridge_slave_1) entered blocking state [ 1811.009227][T20899] bridge0: port 2(bridge_slave_1) entered disabled state [ 1811.017029][T20899] bridge_slave_1: entered allmulticast mode [ 1811.032897][T20899] bridge_slave_1: entered promiscuous mode [ 1811.397427][T20960] lo speed is unknown, defaulting to 1000 [ 1811.729873][T20899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1811.814801][T13116] Bluetooth: hci4: command tx timeout [ 1811.851062][T20899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1811.952155][ T7271] hsr_slave_0: left promiscuous mode [ 1811.960133][ T7271] hsr_slave_1: left promiscuous mode [ 1811.967214][ T7271] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1811.979042][ T7271] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1812.001435][ T7271] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1812.012452][ T7271] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1812.045314][ T7271] veth1_macvtap: left promiscuous mode [ 1812.051040][ T7271] veth0_macvtap: left promiscuous mode [ 1812.066234][ T7271] veth1_vlan: left promiscuous mode [ 1812.071877][ T7271] veth0_vlan: left promiscuous mode [ 1812.135086][T13116] Bluetooth: hci5: command tx timeout [ 1812.985885][ T7271] team0 (unregistering): Port device team_slave_1 removed [ 1813.039526][ T7271] team0 (unregistering): Port device team_slave_0 removed [ 1813.620590][T20899] team0: Port device team_slave_0 added [ 1813.641000][T20920] chnl_net:caif_netlink_parms(): no params data found [ 1813.656510][T20899] team0: Port device team_slave_1 added [ 1813.792977][T20899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1813.802783][T20899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1813.829439][T20899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1813.878542][T20899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1813.889544][T20899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1813.929486][T13116] Bluetooth: hci4: command tx timeout [ 1813.944110][T20899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1814.050211][T20899] hsr_slave_0: entered promiscuous mode [ 1814.062093][T20899] hsr_slave_1: entered promiscuous mode [ 1814.068824][T20899] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1814.076653][T20899] Cannot create hsr debugfs directory [ 1814.136474][T20920] bridge0: port 1(bridge_slave_0) entered blocking state [ 1814.143779][T20920] bridge0: port 1(bridge_slave_0) entered disabled state [ 1814.157452][T20920] bridge_slave_0: entered allmulticast mode [ 1814.165832][T20920] bridge_slave_0: entered promiscuous mode [ 1814.177270][T20920] bridge0: port 2(bridge_slave_1) entered blocking state [ 1814.185512][T20920] bridge0: port 2(bridge_slave_1) entered disabled state [ 1814.192727][T20920] bridge_slave_1: entered allmulticast mode [ 1814.202943][T20920] bridge_slave_1: entered promiscuous mode [ 1814.225116][T13116] Bluetooth: hci5: command tx timeout [ 1814.276257][T20960] chnl_net:caif_netlink_parms(): no params data found [ 1814.293442][T20920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1814.315541][T20920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1814.444739][T20920] team0: Port device team_slave_0 added [ 1814.480448][T20920] team0: Port device team_slave_1 added [ 1814.525944][ T7271] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1814.632145][T20960] bridge0: port 1(bridge_slave_0) entered blocking state [ 1814.639537][T20960] bridge0: port 1(bridge_slave_0) entered disabled state [ 1814.647303][T20960] bridge_slave_0: entered allmulticast mode [ 1814.658283][T20960] bridge_slave_0: entered promiscuous mode [ 1814.693402][ T7271] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1814.732532][T20920] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1814.739810][T20920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1814.772283][T20920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1814.798344][T20960] bridge0: port 2(bridge_slave_1) entered blocking state [ 1814.807214][T20960] bridge0: port 2(bridge_slave_1) entered disabled state [ 1814.814808][T20960] bridge_slave_1: entered allmulticast mode [ 1814.822197][T20960] bridge_slave_1: entered promiscuous mode [ 1814.885582][ T7271] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1814.899961][T20920] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1814.907437][T20920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1814.936908][T20920] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1815.002261][ T7271] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1815.022315][T20960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1815.040694][T20960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1815.165228][T20920] hsr_slave_0: entered promiscuous mode [ 1815.172443][T20920] hsr_slave_1: entered promiscuous mode [ 1815.182071][T20920] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1815.189968][T20920] Cannot create hsr debugfs directory [ 1815.202131][T20960] team0: Port device team_slave_0 added [ 1815.227751][T20960] team0: Port device team_slave_1 added [ 1815.387486][T20899] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1815.420148][T20960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1815.427645][T20960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1815.454898][T20960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1815.473700][T20899] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1815.485538][ T7271] erspan0: left allmulticast mode [ 1815.490612][ T7271] erspan0: left promiscuous mode [ 1815.496190][ T7271] bridge0: port 3(erspan0) entered disabled state [ 1815.505383][ T7271] bridge_slave_1: left allmulticast mode [ 1815.511069][ T7271] bridge_slave_1: left promiscuous mode [ 1815.517824][ T7271] bridge0: port 2(bridge_slave_1) entered disabled state [ 1815.529587][ T7271] bridge_slave_0: left allmulticast mode [ 1815.535570][ T7271] bridge_slave_0: left promiscuous mode [ 1815.543007][ T7271] bridge0: port 1(bridge_slave_0) entered disabled state [ 1815.769052][ T7271] batman_adv: batadv0: Removing interface: gretap1 [ 1816.028089][ T7271] bond0 (unregistering): left promiscuous mode [ 1816.034625][ T7271] bond_slave_0: left promiscuous mode [ 1816.040183][ T7271] bond_slave_1: left promiscuous mode [ 1816.048333][ T7271] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1816.066078][ T7271] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1816.078199][ T7271] bond0 (unregistering): Released all slaves [ 1816.091478][T20960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1816.098990][T20960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1816.125249][T20960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1816.157999][T20899] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1816.189649][T20899] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1816.212210][ T7271] fþ²¹¥‰: left promiscuous mode [ 1816.294527][T13116] Bluetooth: hci5: command tx timeout [ 1816.380624][T20960] hsr_slave_0: entered promiscuous mode [ 1816.390374][T20960] hsr_slave_1: entered promiscuous mode [ 1816.396827][T20960] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1816.408467][T20960] Cannot create hsr debugfs directory [ 1816.811402][ T7271] team0: left promiscuous mode [ 1816.819015][ T7271] team_slave_0: left promiscuous mode [ 1816.824946][ T7271] team_slave_1: left promiscuous mode [ 1816.836773][ T7271] hsr_slave_0: left promiscuous mode [ 1816.843257][ T7271] hsr_slave_1: left promiscuous mode [ 1816.850658][ T7271] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1816.861316][ T7271] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1816.870971][ T7271] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1816.879630][ T7271] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1816.898466][ T7271] veth1_macvtap: left promiscuous mode [ 1816.904526][ T7271] veth0_macvtap: left promiscuous mode [ 1816.910360][ T7271] veth1_vlan: left promiscuous mode [ 1816.915866][ T7271] veth0_vlan: left promiscuous mode [ 1817.451617][ T7271] team0 (unregistering): Port device team_slave_1 removed [ 1817.498574][ T7271] team0 (unregistering): Port device team_slave_0 removed [ 1818.098530][T20920] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1818.113515][T20920] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1818.160387][T20920] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1818.176749][T20920] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1818.193089][T20899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1818.352465][T20960] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1818.374922][T13116] Bluetooth: hci5: command tx timeout [ 1818.412785][T20899] 8021q: adding VLAN 0 to HW filter on device team0 [ 1818.429725][T20960] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1818.441783][T20960] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1818.477003][T20960] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1818.496037][ T6060] bridge0: port 1(bridge_slave_0) entered blocking state [ 1818.503220][ T6060] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1818.529198][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 1818.536431][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1818.562315][ T7271] IPVS: stop unused estimator thread 0... [ 1818.763786][T20920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1818.855388][T20960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1818.879239][T20920] 8021q: adding VLAN 0 to HW filter on device team0 [ 1818.912165][T18523] bridge0: port 1(bridge_slave_0) entered blocking state [ 1818.919424][T18523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1818.950859][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1818.958110][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1818.971994][T20960] 8021q: adding VLAN 0 to HW filter on device team0 [ 1818.990417][ T6060] bridge0: port 1(bridge_slave_0) entered blocking state [ 1818.997663][ T6060] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1819.079465][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1819.086650][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1819.191002][T20899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1819.263719][T20960] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1819.513749][T20920] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1819.709786][T20960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1819.789506][T20899] veth0_vlan: entered promiscuous mode [ 1819.805534][T20899] veth1_vlan: entered promiscuous mode [ 1819.909338][T20899] veth0_macvtap: entered promiscuous mode [ 1819.929687][T20899] veth1_macvtap: entered promiscuous mode [ 1820.013530][T20899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1820.025337][T20899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1820.037856][T20899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1820.050665][T20899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1820.075969][T20899] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1820.097868][T20899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1820.110715][T20899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1820.122818][T20899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1820.133524][T20899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1820.156520][T20899] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1820.191413][T20920] veth0_vlan: entered promiscuous mode [ 1820.235626][T20899] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1820.245149][T20899] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1820.254716][T20899] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1820.263423][T20899] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1820.292941][T20920] veth1_vlan: entered promiscuous mode [ 1820.419757][T20960] veth0_vlan: entered promiscuous mode [ 1820.447385][T20960] veth1_vlan: entered promiscuous mode [ 1820.447594][ T6081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1820.486380][ T6081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1820.500067][T20920] veth0_macvtap: entered promiscuous mode [ 1820.532162][T20920] veth1_macvtap: entered promiscuous mode [ 1820.580266][ T6081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1820.592412][ T6081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1820.622224][T20960] veth0_macvtap: entered promiscuous mode [ 1820.631082][T20920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1820.643871][T20920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1820.653879][T20920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1820.668306][T20920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1820.678247][T20920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1820.688871][T20920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1820.701831][T20920] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1820.716548][T20920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1820.733140][T20920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1820.754845][T20920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1820.767083][T20920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1820.778801][T20920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1820.789498][T20920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1820.801012][T20920] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1820.822201][T20960] veth1_macvtap: entered promiscuous mode [ 1820.861916][T20920] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1820.874809][T20920] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1820.883573][T20920] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1820.892488][T20920] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1820.920639][T20960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1820.931608][T20960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1820.962395][T20960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1820.976433][T20960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1820.987404][T20960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1820.998330][T20960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1821.008547][T20960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1821.020330][T20960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1821.032232][T20960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1821.058692][T20960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1821.069328][T20960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1821.086726][T20960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1821.103867][T20960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1821.114516][T20960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1821.125382][T20960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1821.136130][T20960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1821.154078][T20960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1821.165978][T20960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1821.194136][T20960] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1821.202938][T20960] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1821.216583][T20960] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1821.225500][T20960] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1821.972022][ T6081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1821.976416][ T6060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1821.999454][ T6060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1822.009818][ T6081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1822.086244][ T6081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1822.108406][ T6081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1822.193925][ T7271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1822.267342][ T7271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1822.653038][T21037] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1823.254239][T21042] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4500'. [ 1825.228037][T18438] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1825.241905][T18438] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1825.252841][T18438] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1825.277368][T18438] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1825.295281][T18438] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1825.303000][T18438] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1825.400285][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1825.472281][T21061] netlink: 'syz.7.4523': attribute type 30 has an invalid length. [ 1825.506531][T21061] Bluetooth: MGMT ver 1.23 [ 1825.607019][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1825.642454][T21066] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1825.658628][T21063] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4524'. [ 1825.666519][T21058] lo speed is unknown, defaulting to 1000 [ 1825.784500][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1826.005072][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1826.187432][T21058] chnl_net:caif_netlink_parms(): no params data found [ 1826.549414][ T11] bridge_slave_1: left allmulticast mode [ 1827.024246][T21083] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4527'. [ 1827.364119][T18438] Bluetooth: hci2: command tx timeout [ 1827.371928][ T11] bridge_slave_1: left promiscuous mode [ 1827.381692][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1827.429243][ T11] bridge_slave_0: left allmulticast mode [ 1827.458954][ T11] bridge_slave_0: left promiscuous mode [ 1827.469277][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1827.788091][T21087] fuse: Bad value for 'fd' [ 1828.600537][T13116] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1828.610827][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1828.625160][T13116] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1828.638099][T13116] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1828.646903][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1828.662914][T13116] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1828.670963][T13116] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1828.672764][ T11] bond0 (unregistering): Released all slaves [ 1828.688704][T13116] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1829.119823][T21058] bridge0: port 1(bridge_slave_0) entered blocking state [ 1829.129528][T21058] bridge0: port 1(bridge_slave_0) entered disabled state [ 1829.141714][T21058] bridge_slave_0: entered allmulticast mode [ 1829.155900][T21058] bridge_slave_0: entered promiscuous mode [ 1829.171594][T21058] bridge0: port 2(bridge_slave_1) entered blocking state [ 1829.179249][T21058] bridge0: port 2(bridge_slave_1) entered disabled state [ 1829.187702][T21058] bridge_slave_1: entered allmulticast mode [ 1829.195751][T21058] bridge_slave_1: entered promiscuous mode [ 1829.245164][T21091] lo speed is unknown, defaulting to 1000 [ 1829.249156][T21058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1829.306005][T21058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1829.384542][T21058] team0: Port device team_slave_0 added [ 1829.397414][T21058] team0: Port device team_slave_1 added [ 1829.412794][ T11] hsr_slave_0: left promiscuous mode [ 1829.418732][T13116] Bluetooth: hci2: command tx timeout [ 1829.425611][ T11] hsr_slave_1: left promiscuous mode [ 1829.443573][ T11] veth1_macvtap: left promiscuous mode [ 1829.449347][ T11] veth0_macvtap: left promiscuous mode [ 1829.455863][ T11] veth1_vlan: left promiscuous mode [ 1829.461223][ T11] veth0_vlan: left promiscuous mode [ 1830.117642][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1830.173714][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1830.784532][T13116] Bluetooth: hci1: command tx timeout [ 1830.825569][T21097] netlink: 'syz.8.4534': attribute type 30 has an invalid length. [ 1830.834259][T21058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1830.841313][T21058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1830.894522][T21058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1830.933339][T21058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1830.940978][T21058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1830.969730][T21058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1831.159481][T21104] netlink: 56 bytes leftover after parsing attributes in process `syz.8.4536'. [ 1831.494642][T13116] Bluetooth: hci2: command tx timeout [ 1831.647223][T21058] hsr_slave_0: entered promiscuous mode [ 1831.699641][T21058] hsr_slave_1: entered promiscuous mode [ 1831.715281][T21058] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1831.723848][T21058] Cannot create hsr debugfs directory [ 1832.187478][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1832.226402][T21091] chnl_net:caif_netlink_parms(): no params data found [ 1832.288687][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1832.612021][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1832.854149][T13116] Bluetooth: hci1: command tx timeout [ 1832.960566][T21126] fuse: Bad value for 'fd' [ 1833.102688][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1833.285757][T21091] bridge0: port 1(bridge_slave_0) entered blocking state [ 1833.322290][T21091] bridge0: port 1(bridge_slave_0) entered disabled state [ 1833.329744][T21091] bridge_slave_0: entered allmulticast mode [ 1833.348881][T21091] bridge_slave_0: entered promiscuous mode [ 1833.485090][T21091] bridge0: port 2(bridge_slave_1) entered blocking state [ 1833.492305][T21091] bridge0: port 2(bridge_slave_1) entered disabled state [ 1833.507144][T21091] bridge_slave_1: entered allmulticast mode [ 1833.520360][T21091] bridge_slave_1: entered promiscuous mode [ 1833.574132][T13116] Bluetooth: hci2: command tx timeout [ 1833.682993][T21091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1833.800633][T21091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1833.822123][ T11] bridge_slave_1: left allmulticast mode [ 1833.834242][ T11] bridge_slave_1: left promiscuous mode [ 1833.842553][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1833.861312][ T11] bridge_slave_0: left allmulticast mode [ 1833.870627][ T11] bridge_slave_0: left promiscuous mode [ 1833.876876][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1833.892521][ T11] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 1834.028797][ T11] batman_adv: batadv0: Removing interface: ip6gretap1 [ 1834.649658][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1834.662377][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1834.681929][ T11] bond0 (unregistering): Released all slaves [ 1834.867750][T21091] team0: Port device team_slave_0 added [ 1834.927485][T21091] team0: Port device team_slave_1 added [ 1834.938016][T13116] Bluetooth: hci1: command tx timeout [ 1835.137485][T21091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1835.156062][T21091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1835.192237][T21091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1835.207551][T21058] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1835.245035][T21091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1835.266673][T21091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1835.293207][T21091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1835.320642][T21058] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1835.391174][T21058] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1835.420517][T21058] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1835.556481][ T11] hsr_slave_0: left promiscuous mode [ 1835.562651][ T11] hsr_slave_1: left promiscuous mode [ 1835.570000][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1835.580531][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1835.592409][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1835.600357][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1835.641016][ T11] veth1_macvtap: left promiscuous mode [ 1835.651158][ T11] veth0_macvtap: left promiscuous mode [ 1835.663297][ T11] veth1_vlan: left promiscuous mode [ 1835.672326][ T11] veth0_vlan: left promiscuous mode [ 1836.680882][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1836.762667][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1837.023688][T13116] Bluetooth: hci1: command tx timeout [ 1837.567167][T21091] hsr_slave_0: entered promiscuous mode [ 1837.573641][T21091] hsr_slave_1: entered promiscuous mode [ 1837.609591][T17269] lo speed is unknown, defaulting to 1000 [ 1837.624177][T17269] infiniband syz2: ib_query_port failed (-19) [ 1838.169392][T21058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1838.226123][T21058] 8021q: adding VLAN 0 to HW filter on device team0 [ 1838.264011][ T6081] bridge0: port 1(bridge_slave_0) entered blocking state [ 1838.271216][ T6081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1838.296046][ T6081] bridge0: port 2(bridge_slave_1) entered blocking state [ 1838.303281][ T6081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1838.428615][T21058] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1838.454499][T21058] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1838.830485][T21091] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1838.853155][T21091] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1838.872732][T21091] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1838.893169][T21058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1838.901164][T21091] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1839.178992][T21091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1839.238696][T21091] 8021q: adding VLAN 0 to HW filter on device team0 [ 1839.266857][T18523] bridge0: port 1(bridge_slave_0) entered blocking state [ 1839.274120][T18523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1839.304774][T18523] bridge0: port 2(bridge_slave_1) entered blocking state [ 1839.312011][T18523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1839.610291][T21058] veth0_vlan: entered promiscuous mode [ 1839.633571][T21058] veth1_vlan: entered promiscuous mode [ 1839.720197][T21058] veth0_macvtap: entered promiscuous mode [ 1839.745634][T21058] veth1_macvtap: entered promiscuous mode [ 1839.797724][T21058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1839.828267][T21058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1839.838958][T21058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1839.857948][T21058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1839.872202][T21058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1839.893276][T21058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1839.946563][T21058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1839.989253][T21058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1840.006906][T21058] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1840.103137][T21058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1840.137060][T21058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1840.154279][T21058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1840.183991][T21058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1840.193856][T21058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1840.225420][T21058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1840.244302][T21058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1840.266318][T21058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1840.299953][T21058] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1840.351597][T21058] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1840.384148][T21058] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1840.392890][T21058] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1840.433826][T21058] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1840.502298][T21091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1840.805237][T18438] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1840.819126][T18438] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1840.830190][T18438] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1840.859832][T18438] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1840.870672][T18438] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1840.878374][T18438] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1841.111654][ T6081] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1841.180669][T18522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1841.192845][T18522] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1841.289979][ T6081] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1841.395660][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1841.403535][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1841.477651][ T6081] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1841.624100][ T6081] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1841.762043][T21091] veth0_vlan: entered promiscuous mode [ 1842.092961][T21091] veth1_vlan: entered promiscuous mode [ 1842.466871][T21272] chnl_net:caif_netlink_parms(): no params data found [ 1842.500009][ T6081] bridge_slave_1: left allmulticast mode [ 1842.513226][ T6081] bridge_slave_1: left promiscuous mode [ 1842.522524][ T6081] bridge0: port 2(bridge_slave_1) entered disabled state [ 1842.548287][ T6081] bridge_slave_0: left allmulticast mode [ 1842.554214][ T6081] bridge_slave_0: left promiscuous mode [ 1842.560052][ T6081] bridge0: port 1(bridge_slave_0) entered disabled state [ 1842.934096][T13116] Bluetooth: hci3: command tx timeout [ 1842.977676][T21314] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4544'. [ 1842.996603][T21314] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4544'. [ 1843.813204][T18438] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1843.833716][T18438] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1843.849667][T18438] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1843.873888][T18438] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1843.897200][T18438] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1843.913788][T18438] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1844.301041][ T6081] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1844.313634][ T6081] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1844.331960][ T6081] bond0 (unregistering): Released all slaves [ 1844.820285][T21272] bridge0: port 1(bridge_slave_0) entered blocking state [ 1844.831120][T21272] bridge0: port 1(bridge_slave_0) entered disabled state [ 1844.844246][T21272] bridge_slave_0: entered allmulticast mode [ 1844.851465][T21272] bridge_slave_0: entered promiscuous mode [ 1844.966256][T21272] bridge0: port 2(bridge_slave_1) entered blocking state [ 1844.973439][T21272] bridge0: port 2(bridge_slave_1) entered disabled state [ 1844.989372][T21272] bridge_slave_1: entered allmulticast mode [ 1844.999634][T21272] bridge_slave_1: entered promiscuous mode [ 1845.016086][T13116] Bluetooth: hci3: command tx timeout [ 1845.099816][T21091] veth0_macvtap: entered promiscuous mode [ 1845.192763][T21272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1845.239261][ T6081] hsr_slave_0: left promiscuous mode [ 1845.247896][ T6081] hsr_slave_1: left promiscuous mode [ 1845.253761][ T6081] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1845.271360][ T6081] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1845.283857][ T6081] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1845.291753][ T6081] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1845.325397][ T6081] veth1_macvtap: left promiscuous mode [ 1845.331048][ T6081] veth0_macvtap: left promiscuous mode [ 1845.340177][ T6081] veth1_vlan: left promiscuous mode [ 1845.347859][ T6081] veth0_vlan: left promiscuous mode [ 1845.995755][T13116] Bluetooth: hci5: command tx timeout [ 1846.486026][ T6081] team0 (unregistering): Port device team_slave_1 removed [ 1846.572973][ T6081] team0 (unregistering): Port device team_slave_0 removed [ 1847.105952][T13116] Bluetooth: hci3: command tx timeout [ 1847.170621][T21272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1847.249003][T21091] veth1_macvtap: entered promiscuous mode [ 1847.288815][T21272] team0: Port device team_slave_0 added [ 1847.330632][T21272] team0: Port device team_slave_1 added [ 1847.506977][T21272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1847.514026][T21272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1847.540479][T21272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1847.561056][T21091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1847.584595][T21091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1847.598364][T21091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1847.616906][T21091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1847.631692][T21091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1847.646217][T21091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1847.656542][T21091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1847.669793][T21091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1847.686527][T21091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1847.699917][T21272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1847.708655][T21272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1847.738937][T21272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1847.833215][T21091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1847.853603][T21091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1847.872833][T21091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1847.883780][T21091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1847.910146][T21091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1847.922133][T21091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1847.939660][T21091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1847.951604][T21091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1847.970765][T21091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1848.056625][T13116] Bluetooth: hci5: command tx timeout [ 1848.130839][T21091] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1848.139960][T21091] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1848.149775][T21091] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1848.159441][T21091] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1848.178157][T21272] hsr_slave_0: entered promiscuous mode [ 1848.192216][T21272] hsr_slave_1: entered promiscuous mode [ 1848.200448][T21272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1848.219136][T21272] Cannot create hsr debugfs directory [ 1848.461011][T21327] chnl_net:caif_netlink_parms(): no params data found [ 1848.668827][ T7525] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1848.805937][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1848.813813][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1848.936461][ T7525] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1849.174815][T13116] Bluetooth: hci3: command tx timeout [ 1849.220064][ T7525] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1849.422123][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1849.440016][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1849.524484][ T7525] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1849.648413][T21327] bridge0: port 1(bridge_slave_0) entered blocking state [ 1849.661712][T21327] bridge0: port 1(bridge_slave_0) entered disabled state [ 1849.693296][T21327] bridge_slave_0: entered allmulticast mode [ 1849.706205][T21327] bridge_slave_0: entered promiscuous mode [ 1849.760368][T21327] bridge0: port 2(bridge_slave_1) entered blocking state [ 1849.781420][T21327] bridge0: port 2(bridge_slave_1) entered disabled state [ 1849.784760][T18438] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1849.789822][T21327] bridge_slave_1: entered allmulticast mode [ 1849.806225][T18438] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1849.806253][T21327] bridge_slave_1: entered promiscuous mode [ 1849.822109][T18438] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1849.845909][T18438] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1849.859010][T18438] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1849.867380][T18438] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1850.109614][T21327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1850.134207][T13116] Bluetooth: hci5: command tx timeout [ 1850.282841][T21327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1851.481081][T21327] team0: Port device team_slave_0 added [ 1851.681638][T21327] team0: Port device team_slave_1 added [ 1851.705786][T21448] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4553'. [ 1851.725629][T21448] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4553'. [ 1851.857268][ T7525] bridge_slave_1: left allmulticast mode [ 1851.863001][ T7525] bridge_slave_1: left promiscuous mode [ 1851.882328][ T7525] bridge0: port 2(bridge_slave_1) entered disabled state [ 1851.921074][ T7525] bridge_slave_0: left allmulticast mode [ 1851.941591][ T7525] bridge_slave_0: left promiscuous mode [ 1851.959597][ T7525] bridge0: port 1(bridge_slave_0) entered disabled state [ 1852.004520][T13116] Bluetooth: hci0: command tx timeout [ 1852.231454][T13116] Bluetooth: hci5: command tx timeout [ 1853.499837][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.682588][T21482] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4556'. [ 1853.712482][ T7525] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1853.757940][ T7525] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1853.792408][ T7525] bond0 (unregistering): Released all slaves [ 1854.054083][T13116] Bluetooth: hci0: command tx timeout [ 1854.167226][T21327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1854.175038][T21327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1854.201388][T21327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1854.227990][T21327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1854.254044][T21327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1854.284596][T21327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1854.592964][T21327] hsr_slave_0: entered promiscuous mode [ 1854.601351][T21327] hsr_slave_1: entered promiscuous mode [ 1854.608207][T21327] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1854.622005][T21327] Cannot create hsr debugfs directory [ 1854.682033][ T7525] hsr_slave_0: left promiscuous mode [ 1854.691976][ T7525] hsr_slave_1: left promiscuous mode [ 1854.699638][ T7525] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1854.707233][ T7525] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1854.725148][ T7525] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1854.732593][ T7525] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1854.761960][ T7525] veth1_macvtap: left promiscuous mode [ 1854.767682][ T7525] veth0_macvtap: left promiscuous mode [ 1854.773452][ T7525] veth1_vlan: left promiscuous mode [ 1854.788891][ T7525] veth0_vlan: left promiscuous mode [ 1855.780288][ T7525] team0 (unregistering): Port device team_slave_1 removed [ 1855.858065][ T7525] team0 (unregistering): Port device team_slave_0 removed [ 1856.134078][T13116] Bluetooth: hci0: command tx timeout [ 1856.668209][T21272] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1856.726006][T21272] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1856.778010][T21272] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1856.790999][T21272] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1856.844497][T21424] chnl_net:caif_netlink_parms(): no params data found [ 1857.091959][T21424] bridge0: port 1(bridge_slave_0) entered blocking state [ 1857.104906][T21424] bridge0: port 1(bridge_slave_0) entered disabled state [ 1857.112290][T21424] bridge_slave_0: entered allmulticast mode [ 1857.122284][T21424] bridge_slave_0: entered promiscuous mode [ 1857.132185][T21424] bridge0: port 2(bridge_slave_1) entered blocking state [ 1857.139742][T21424] bridge0: port 2(bridge_slave_1) entered disabled state [ 1857.147247][T21424] bridge_slave_1: entered allmulticast mode [ 1857.155816][T21424] bridge_slave_1: entered promiscuous mode [ 1857.228798][ T7525] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1857.292068][T21424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1857.308338][T21424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1857.356782][ T7525] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1857.459871][ T7525] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1857.490227][T21424] team0: Port device team_slave_0 added [ 1857.502692][T21424] team0: Port device team_slave_1 added [ 1857.590369][ T7525] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1857.621442][T21424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1857.629786][T21424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1857.664275][T21424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1857.695190][T21424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1857.702185][T21424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1857.731635][T21424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1857.786420][T21327] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1857.802767][T21327] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1857.845074][T21327] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1857.891159][T21327] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1857.936976][T21424] hsr_slave_0: entered promiscuous mode [ 1857.943360][T21424] hsr_slave_1: entered promiscuous mode [ 1857.950077][T21424] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1857.958357][T21424] Cannot create hsr debugfs directory [ 1858.034791][ T7525] bridge_slave_1: left allmulticast mode [ 1858.041913][ T7525] bridge_slave_1: left promiscuous mode [ 1858.048739][ T7525] bridge0: port 2(bridge_slave_1) entered disabled state [ 1858.060412][ T7525] bridge_slave_0: left allmulticast mode [ 1858.066655][ T7525] bridge_slave_0: left promiscuous mode [ 1858.072492][ T7525] bridge0: port 1(bridge_slave_0) entered disabled state [ 1858.221452][T13116] Bluetooth: hci0: command tx timeout [ 1858.528610][ T7525] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1858.540717][ T7525] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1858.552801][ T7525] bond0 (unregistering): Released all slaves [ 1858.593053][T21272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1858.807178][T21272] 8021q: adding VLAN 0 to HW filter on device team0 [ 1858.876076][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 1858.883268][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1858.941954][T21424] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1859.006083][T18522] bridge0: port 2(bridge_slave_1) entered blocking state [ 1859.013287][T18522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1859.067511][T21424] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1859.139365][ T7525] hsr_slave_0: left promiscuous mode [ 1859.146752][ T7525] hsr_slave_1: left promiscuous mode [ 1859.152621][ T7525] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1859.161045][ T7525] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1859.171588][ T7525] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1859.182456][ T7525] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1859.200949][ T7525] veth1_macvtap: left promiscuous mode [ 1859.206804][ T7525] veth0_macvtap: left promiscuous mode [ 1859.212453][ T7525] veth1_vlan: left promiscuous mode [ 1859.218136][ T7525] veth0_vlan: left promiscuous mode [ 1859.860134][ T7525] team0 (unregistering): Port device team_slave_1 removed [ 1860.019126][ T7525] team0 (unregistering): Port device team_slave_0 removed [ 1860.526213][T18438] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1860.553538][T18438] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1860.582372][T18438] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1860.628250][T18438] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1860.636674][T18438] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1860.647885][T18438] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1860.965113][T21424] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1861.071900][T21424] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1861.126996][T21327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1861.270651][T21327] 8021q: adding VLAN 0 to HW filter on device team0 [ 1861.411334][T18523] bridge0: port 1(bridge_slave_0) entered blocking state [ 1861.418607][T18523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1861.515489][ T6061] bridge0: port 2(bridge_slave_1) entered blocking state [ 1861.522709][ T6061] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1861.607516][T21272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1861.633893][T21424] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1861.684237][T21424] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1861.730477][T21424] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1861.776065][T21424] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1861.815986][ T7525] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1861.900903][T21327] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1861.961269][ T7525] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1862.001141][T21518] chnl_net:caif_netlink_parms(): no params data found [ 1862.016242][T21272] veth0_vlan: entered promiscuous mode [ 1862.145815][ T7525] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1862.227925][T21272] veth1_vlan: entered promiscuous mode [ 1862.273900][ T7525] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1862.375421][T21518] bridge0: port 1(bridge_slave_0) entered blocking state [ 1862.382616][T21518] bridge0: port 1(bridge_slave_0) entered disabled state [ 1862.391205][T21518] bridge_slave_0: entered allmulticast mode [ 1862.398889][T21518] bridge_slave_0: entered promiscuous mode [ 1862.408467][T21518] bridge0: port 2(bridge_slave_1) entered blocking state [ 1862.415694][T21518] bridge0: port 2(bridge_slave_1) entered disabled state [ 1862.422925][T21518] bridge_slave_1: entered allmulticast mode [ 1862.430821][T21518] bridge_slave_1: entered promiscuous mode [ 1862.516225][T21518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1862.533788][T21327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1862.571468][T21518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1862.672223][T21518] team0: Port device team_slave_0 added [ 1862.695217][T18438] Bluetooth: hci2: command tx timeout [ 1862.708746][T21272] veth0_macvtap: entered promiscuous mode [ 1862.727373][T21518] team0: Port device team_slave_1 added [ 1862.830576][T21272] veth1_macvtap: entered promiscuous mode [ 1862.852968][T21518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1862.862173][T21518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1862.900111][T21518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1862.949172][T21518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1862.961271][T21518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1862.989751][T21518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1863.009756][ T7525] bridge_slave_1: left allmulticast mode [ 1863.016704][ T7525] bridge_slave_1: left promiscuous mode [ 1863.022823][ T7525] bridge0: port 2(bridge_slave_1) entered disabled state [ 1863.033298][ T7525] bridge_slave_0: left allmulticast mode [ 1863.040146][ T7525] bridge_slave_0: left promiscuous mode [ 1863.046067][ T7525] bridge0: port 1(bridge_slave_0) entered disabled state [ 1863.518514][ T7525] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1863.530479][ T7525] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1863.541141][ T7525] bond0 (unregistering): Released all slaves [ 1863.591615][T21272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1863.613633][T21272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1863.626292][T21272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1863.642191][T21272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1863.652088][T21272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1863.663320][T21272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1863.676134][T21272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1863.799173][T21272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1863.819096][T21272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1863.833115][T21272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1863.851982][T21272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1863.863358][T21272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1863.883991][T21272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1863.905710][T21272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1863.971968][T21518] hsr_slave_0: entered promiscuous mode [ 1863.981660][T21518] hsr_slave_1: entered promiscuous mode [ 1863.991357][T21518] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1863.999108][T21518] Cannot create hsr debugfs directory [ 1864.043227][T21272] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1864.064114][T21272] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1864.072848][T21272] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1864.093493][T21272] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1864.265412][T21424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1864.355727][ T7525] hsr_slave_0: left promiscuous mode [ 1864.363008][ T7525] hsr_slave_1: left promiscuous mode [ 1864.369826][ T7525] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1864.379167][ T7525] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1864.388960][ T7525] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1864.396494][ T7525] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1864.417794][ T7525] veth1_macvtap: left promiscuous mode [ 1864.423336][ T7525] veth0_macvtap: left promiscuous mode [ 1864.429319][ T7525] veth1_vlan: left promiscuous mode [ 1864.434827][ T7525] veth0_vlan: left promiscuous mode [ 1864.784538][T18438] Bluetooth: hci2: command tx timeout [ 1865.063632][ T7525] team0 (unregistering): Port device team_slave_1 removed [ 1865.132828][ T7525] team0 (unregistering): Port device team_slave_0 removed [ 1865.783700][T21327] veth0_vlan: entered promiscuous mode [ 1865.808473][T21424] 8021q: adding VLAN 0 to HW filter on device team0 [ 1865.873558][ T7271] bridge0: port 1(bridge_slave_0) entered blocking state [ 1865.880792][ T7271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1865.913241][T21327] veth1_vlan: entered promiscuous mode [ 1865.951574][T18522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1865.965435][T18522] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1865.990192][T19022] bridge0: port 2(bridge_slave_1) entered blocking state [ 1865.997421][T19022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1866.136648][T19022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1866.163006][T19022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1866.252978][T21327] veth0_macvtap: entered promiscuous mode [ 1866.314541][T21327] veth1_macvtap: entered promiscuous mode [ 1866.422922][T21327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1866.467693][T21327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1866.478871][T21327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1866.489907][T21327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1866.501756][T21327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1866.512287][T21327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1866.524697][T21327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1866.583894][T21327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1866.615986][T21327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1866.639979][T21327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1866.661436][T21327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1866.682184][T21327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1866.701457][T21327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1866.731764][T21327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1866.763188][T21327] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1866.779921][T21327] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1866.789280][T21327] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1866.798170][T21327] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1866.854538][T18438] Bluetooth: hci2: command tx timeout [ 1866.902777][T21424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1867.112050][T21518] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1867.132150][ T7525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1867.137857][T21424] veth0_vlan: entered promiscuous mode [ 1867.152063][T21518] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1867.163397][ T7525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1867.176815][T21518] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1867.202568][T21518] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1867.242194][T21424] veth1_vlan: entered promiscuous mode [ 1867.258517][ T6061] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1867.283702][ T6061] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1867.539707][T21424] veth0_macvtap: entered promiscuous mode [ 1867.623163][T21518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1867.689913][T21518] 8021q: adding VLAN 0 to HW filter on device team0 [ 1867.799314][T21424] veth1_macvtap: entered promiscuous mode [ 1867.838146][T19022] bridge0: port 1(bridge_slave_0) entered blocking state [ 1867.845397][T19022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1868.539703][T21558] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4561'. [ 1868.562847][T21558] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4561'. [ 1868.649110][T19022] bridge0: port 2(bridge_slave_1) entered blocking state [ 1868.656394][T19022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1868.934102][T18438] Bluetooth: hci2: command tx timeout [ 1869.275456][T21424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1869.294122][T21424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1869.318958][T21424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1869.333992][T21424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1869.343828][T21424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1869.355567][T21424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1869.371166][T21424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1869.382514][T21424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1869.394894][T21424] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1869.474742][T21424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1869.491858][T21424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1869.514575][T21424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1869.534447][T21424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1869.547909][T21424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1869.558552][T21424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1869.580631][T21424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1869.591572][T21424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1869.605248][T21424] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1869.631804][T21424] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1869.664000][T21424] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1869.672743][T21424] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1869.682675][T21424] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1869.913450][T21518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1870.150017][T19022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1870.190861][T19022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1870.438781][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1870.459262][T21518] veth0_vlan: entered promiscuous mode [ 1870.463375][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1870.497107][T21518] veth1_vlan: entered promiscuous mode [ 1870.512639][T21579] xt_HMARK: spi-set and port-set can't be combined [ 1870.681413][T21518] veth0_macvtap: entered promiscuous mode [ 1870.723058][T21518] veth1_macvtap: entered promiscuous mode [ 1871.088013][T21518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1871.124123][T21518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1871.144861][T21518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1871.164372][T21518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1871.201174][T21518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1871.230269][T21518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1871.260641][T21518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1871.296282][T21518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1871.323982][T21518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1871.373966][T21518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1871.416182][T21518] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1871.481192][T21518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1871.530835][T21518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1871.564780][T21518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1871.602722][T21518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1871.635171][T21518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1871.674133][T21518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1871.704236][T21518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1871.742150][T21518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1871.779271][T21518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1871.796033][T21518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1871.802366][T13116] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1871.807928][T21518] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1871.834350][T13116] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1871.845155][T13116] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1871.866357][T13116] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1871.877165][T13116] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1871.890333][T13116] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1871.923161][T21518] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1871.944076][T21518] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1871.952819][T21518] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1871.973886][T21518] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1872.109778][T18522] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1872.329123][T18522] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1872.561328][T18522] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1872.662049][T21593] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4571'. [ 1872.671573][T21593] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4571'. [ 1872.702874][T18522] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1872.765949][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1872.773847][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1872.907829][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1872.917131][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1873.324513][T18522] bridge_slave_1: left allmulticast mode [ 1873.330224][T18522] bridge_slave_1: left promiscuous mode [ 1873.346242][T18522] bridge0: port 2(bridge_slave_1) entered disabled state [ 1873.517176][T18522] bridge_slave_0: left allmulticast mode [ 1873.523275][T18522] bridge_slave_0: left promiscuous mode [ 1873.548067][T18522] bridge0: port 1(bridge_slave_0) entered disabled state [ 1873.975332][T18438] Bluetooth: hci1: command tx timeout [ 1876.001849][T21621] overlayfs: missing 'lowerdir' [ 1876.060395][T18438] Bluetooth: hci1: command tx timeout [ 1876.190534][T21626] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4580'. [ 1876.200539][T18522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1876.213528][T18522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1876.231150][T21626] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4580'. [ 1876.247682][T18522] bond0 (unregistering): Released all slaves [ 1876.265146][ T1205] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1876.332001][T21584] chnl_net:caif_netlink_parms(): no params data found [ 1876.428002][ T1205] usb 3-1: Using ep0 maxpacket: 32 [ 1876.491074][ T1205] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1876.548954][ T1205] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1876.700552][ T1205] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1876.741838][ T1205] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1876.831150][ T1205] usb 3-1: Product: syz [ 1876.902702][ T1205] usb 3-1: Manufacturer: syz [ 1877.027148][ T1205] hub 3-1:4.0: USB hub found [ 1877.446074][ T1205] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 1878.134340][T18438] Bluetooth: hci1: command tx timeout [ 1878.195313][ T1205] usb 3-1: USB disconnect, device number 30 [ 1878.213110][T21584] bridge0: port 1(bridge_slave_0) entered blocking state [ 1878.232759][T21584] bridge0: port 1(bridge_slave_0) entered disabled state [ 1878.262048][T21584] bridge_slave_0: entered allmulticast mode [ 1878.294612][T21584] bridge_slave_0: entered promiscuous mode [ 1878.752798][T21584] bridge0: port 2(bridge_slave_1) entered blocking state [ 1878.801015][T21584] bridge0: port 2(bridge_slave_1) entered disabled state [ 1878.826895][T21584] bridge_slave_1: entered allmulticast mode [ 1878.851780][T21584] bridge_slave_1: entered promiscuous mode [ 1879.599625][T21584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1879.670527][T18522] hsr_slave_0: left promiscuous mode [ 1879.677048][T18522] hsr_slave_1: left promiscuous mode [ 1879.683250][T18522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1879.696996][T18522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1880.003348][T18522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1880.014357][T18522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1880.033017][T21661] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1880.044836][T21661] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1880.080713][T18522] veth1_macvtap: left promiscuous mode [ 1880.091429][T18522] veth0_macvtap: left promiscuous mode [ 1880.101037][T18522] veth1_vlan: left promiscuous mode [ 1880.117810][T18522] veth0_vlan: left promiscuous mode [ 1880.224798][T18438] Bluetooth: hci1: command tx timeout [ 1880.287887][T21664] Bluetooth: MGMT ver 1.23 [ 1880.774125][T18438] Bluetooth: hci5: command tx timeout [ 1882.224489][ T1205] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1882.468456][T18522] team0 (unregistering): Port device team_slave_1 removed [ 1882.474098][ T1205] usb 3-1: Using ep0 maxpacket: 32 [ 1882.483871][ T1205] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1882.514130][ T1205] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1882.549652][ T1205] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1882.571347][ T1205] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1882.580385][ T1205] usb 3-1: Product: syz [ 1882.593763][ T1205] usb 3-1: Manufacturer: syz [ 1882.622664][ T1205] hub 3-1:4.0: USB hub found [ 1882.644500][T18522] team0 (unregistering): Port device team_slave_0 removed [ 1883.028484][ T1205] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 1883.086614][ T1205] usb 3-1: USB disconnect, device number 31 [ 1884.643291][T21584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1884.687358][T21663] netlink: 'syz.1.4590': attribute type 30 has an invalid length. [ 1884.720328][T21678] bond0: Error: Cannot enslave bond to itself. [ 1884.912198][T21584] team0: Port device team_slave_0 added [ 1884.983607][T21584] team0: Port device team_slave_1 added [ 1885.366833][T21584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1885.392811][T21584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1885.524031][T21584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1885.571114][T21584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1885.612307][T21584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1885.721314][T21584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1886.424808][T21691] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1886.466833][T21691] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1886.653106][T21584] hsr_slave_0: entered promiscuous mode [ 1886.679423][T21584] hsr_slave_1: entered promiscuous mode [ 1886.920497][T13116] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1886.929997][T13116] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1886.940988][T13116] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1887.148704][T13116] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1887.156899][T13116] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1887.166362][T13116] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1889.080348][T18522] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1889.199981][T21712] netlink: 'syz.1.4605': attribute type 30 has an invalid length. [ 1889.377006][T18522] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1890.064147][T13116] Bluetooth: hci4: command tx timeout [ 1890.840190][T21727] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1890.854852][T21727] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1890.879247][T18522] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1891.421333][T18522] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1891.941151][T21699] chnl_net:caif_netlink_parms(): no params data found [ 1892.134301][T13116] Bluetooth: hci4: command tx timeout [ 1892.478868][T21747] netlink: 'syz.6.4615': attribute type 30 has an invalid length. [ 1892.705764][T18522] bridge_slave_1: left allmulticast mode [ 1892.742130][T18522] bridge_slave_1: left promiscuous mode [ 1892.763817][T18522] bridge0: port 2(bridge_slave_1) entered disabled state [ 1892.836580][T18522] bridge_slave_0: left allmulticast mode [ 1892.842292][T18522] bridge_slave_0: left promiscuous mode [ 1892.897968][T18522] bridge0: port 1(bridge_slave_0) entered disabled state [ 1894.224169][T13116] Bluetooth: hci4: command tx timeout [ 1894.270659][T21766] overlayfs: missing 'lowerdir' [ 1895.476088][T18522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1895.533225][T18522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1895.974752][T18522] bond0 (unregistering): Released all slaves [ 1896.254569][T21699] bridge0: port 1(bridge_slave_0) entered blocking state [ 1896.335620][T21699] bridge0: port 1(bridge_slave_0) entered disabled state [ 1896.342921][T21699] bridge_slave_0: entered allmulticast mode [ 1896.343148][T13116] Bluetooth: hci4: command tx timeout [ 1896.352437][T21699] bridge_slave_0: entered promiscuous mode [ 1896.668988][T21699] bridge0: port 2(bridge_slave_1) entered blocking state [ 1896.714290][T21699] bridge0: port 2(bridge_slave_1) entered disabled state [ 1896.721680][T21699] bridge_slave_1: entered allmulticast mode [ 1896.735950][T21699] bridge_slave_1: entered promiscuous mode [ 1896.805329][T21781] xt_HMARK: spi-set and port-set can't be combined [ 1897.279779][T21778] netlink: 'syz.2.4624': attribute type 30 has an invalid length. [ 1897.490119][T21699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1898.045674][T21584] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1898.058527][T21584] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1898.083112][T21699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1899.246403][T21584] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1899.782645][T21699] team0: Port device team_slave_0 added [ 1899.810650][T21699] team0: Port device team_slave_1 added [ 1899.835202][T21584] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1900.246882][T18522] hsr_slave_0: left promiscuous mode [ 1900.501004][T18522] hsr_slave_1: left promiscuous mode [ 1900.507077][T18522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1900.514767][T18522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1900.547844][T18522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1900.574024][T18522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1900.794017][T18522] veth1_macvtap: left promiscuous mode [ 1900.818526][T18522] veth0_macvtap: left promiscuous mode [ 1900.852430][T18522] veth1_vlan: left promiscuous mode [ 1900.875528][T18522] veth0_vlan: left promiscuous mode [ 1903.753040][T18522] team0 (unregistering): Port device team_slave_1 removed [ 1903.862036][T18522] team0 (unregistering): Port device team_slave_0 removed [ 1905.439552][T21699] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1905.460793][T21699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1905.496102][T21699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1905.584860][T21814] netlink: 'syz.2.4634': attribute type 30 has an invalid length. [ 1905.696161][T21699] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1905.704910][T21699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1905.773998][T21699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1906.865357][T21699] hsr_slave_0: entered promiscuous mode [ 1906.875790][T21699] hsr_slave_1: entered promiscuous mode [ 1906.960765][T21699] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1906.971678][T21699] Cannot create hsr debugfs directory [ 1909.935301][T21584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1910.810404][T21863] netlink: 'syz.2.4649': attribute type 30 has an invalid length. [ 1910.928525][T21584] 8021q: adding VLAN 0 to HW filter on device team0 [ 1911.065496][T21866] program syz.6.4650 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1912.027870][ T6060] bridge0: port 1(bridge_slave_0) entered blocking state [ 1912.035179][ T6060] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1912.073694][T19022] bridge0: port 2(bridge_slave_1) entered blocking state [ 1912.080959][T19022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1914.682090][T21699] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1914.718458][T21699] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1914.765109][T21699] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1914.798752][T21699] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1914.827143][T21584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1914.941283][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1915.002562][T21584] veth0_vlan: entered promiscuous mode [ 1915.152951][T21584] veth1_vlan: entered promiscuous mode [ 1915.349351][T21900] netlink: 'syz.1.4659': attribute type 30 has an invalid length. [ 1915.428026][T21584] veth0_macvtap: entered promiscuous mode [ 1915.447420][T21584] veth1_macvtap: entered promiscuous mode [ 1915.655175][T21905] netlink: 'syz.6.4657': attribute type 2 has an invalid length. [ 1915.733842][T21905] fþ²¹¥‰: entered promiscuous mode [ 1916.212034][T21584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1916.264009][T21584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1916.294785][T21584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1916.313451][T21584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1916.333962][T21584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1916.344894][T21584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1916.364354][T21584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1916.392240][T21584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1916.412266][T21584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1916.492028][T21699] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1916.512971][T21584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1916.552009][T21584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1916.563952][T21584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1916.583978][T21584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1916.604323][T21584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1916.632876][T21584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1916.654419][T21584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1916.674301][T21584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1916.686483][T21584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1916.731796][T21699] 8021q: adding VLAN 0 to HW filter on device team0 [ 1916.753789][T21584] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1916.769252][T21584] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1916.780350][T21584] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1916.789644][T21584] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1916.846404][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 1916.853590][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1916.928184][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 1916.935436][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1917.187950][ T6081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1917.206521][ T6081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1917.333296][T19022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1917.374059][T19022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1917.859373][T21699] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1918.418565][T21699] veth0_vlan: entered promiscuous mode [ 1918.469628][T21699] veth1_vlan: entered promiscuous mode [ 1918.562741][T21699] veth0_macvtap: entered promiscuous mode [ 1918.583886][T21699] veth1_macvtap: entered promiscuous mode [ 1918.659414][T21699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1918.685283][T21699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1918.714009][T21699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1918.734295][T21699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1918.753983][T21699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1918.813595][T21699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1918.834024][T21699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1918.851688][T21699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1918.868278][T21699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1918.884262][T21699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1918.912610][T21699] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1918.957553][T21699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1918.993985][T21699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1919.003852][T21699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1919.034001][T21699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1919.043867][T21699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1919.073973][T21699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1919.083839][T21699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1919.114012][T21699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1919.123865][T21699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1919.153998][T21699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1919.185765][T21699] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1919.228891][T21699] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1919.254133][T21699] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1919.262884][T21699] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1919.294021][T21699] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1919.551950][T19022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1919.609487][T19022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1919.638541][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1919.649940][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1933.733999][T21974] netlink: 44 bytes leftover after parsing attributes in process `syz.9.4677'. [ 1934.031254][T21975] 9pnet_fd: Insufficient options for proto=fd [ 1937.104307][T21985] Oops: general protection fault, probably for non-canonical address 0xdffffc000000002b: 0000 [#1] PREEMPT SMP KASAN PTI [ 1937.116945][T21985] KASAN: null-ptr-deref in range [0x0000000000000158-0x000000000000015f] [ 1937.125358][T21985] CPU: 1 UID: 0 PID: 21985 Comm: syz.1.4680 Not tainted 6.14.0-rc1-next-20250206-syzkaller #0 [ 1937.135584][T21985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1937.145636][T21985] RIP: 0010:qca_close+0x72/0x2e0 [ 1937.150575][T21985] Code: 14 f8 f5 f8 48 89 2c 24 42 80 7c 2d 00 00 74 08 4c 89 f7 e8 20 c8 5c f9 4d 8b 26 49 8d bc 24 5a 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 28 84 c0 4c 89 eb 0f 85 de 01 00 00 45 0f b6 ac 24 5a [ 1937.170170][T21985] RSP: 0018:ffffc900046b7b90 EFLAGS: 00010206 [ 1937.176228][T21985] RAX: 000000000000002b RBX: ffff88807dc02400 RCX: ffff888025653c00 [ 1937.184188][T21985] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000015a [ 1937.192147][T21985] RBP: 1ffff1100fb804b7 R08: ffffffff81880be3 R09: 1ffffffff286112e [ 1937.200123][T21985] R10: dffffc0000000000 R11: ffffffff88c98ba0 R12: 0000000000000000 [ 1937.208082][T21985] R13: dffffc0000000000 R14: ffff88807dc025b8 R15: 0000000000000000 [ 1937.216047][T21985] FS: 00005555912d9500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1937.224963][T21985] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1937.231529][T21985] CR2: 00007ffaeb71baba CR3: 000000007eb74000 CR4: 00000000003526f0 [ 1937.239490][T21985] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1937.247450][T21985] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1937.255418][T21985] Call Trace: [ 1937.258688][T21985] [ 1937.261607][T21985] ? __die_body+0x5f/0xb0 [ 1937.266025][T21985] ? die_addr+0xb0/0xe0 [ 1937.270179][T21985] ? exc_general_protection+0x3dd/0x5d0 [ 1937.275725][T21985] ? asm_exc_general_protection+0x26/0x30 [ 1937.281450][T21985] ? __pfx_qca_close+0x10/0x10 [ 1937.286233][T21985] ? enable_work+0x2e3/0x360 [ 1937.290815][T21985] ? qca_close+0x72/0x2e0 [ 1937.295139][T21985] hci_uart_tty_close+0x205/0x290 [ 1937.300157][T21985] tty_ldisc_kill+0xa3/0x1a0 [ 1937.304750][T21985] tty_ldisc_release+0x1a1/0x200 [ 1937.309704][T21985] tty_release_struct+0x2b/0xe0 [ 1937.314549][T21985] tty_release+0xd06/0x12c0 [ 1937.319052][T21985] ? __pfx_tty_release+0x10/0x10 [ 1937.324004][T21985] __fput+0x3e9/0x9f0 [ 1937.327984][T21985] task_work_run+0x24f/0x310 [ 1937.332571][T21985] ? _raw_spin_unlock+0x28/0x50 [ 1937.337440][T21985] ? __pfx_task_work_run+0x10/0x10 [ 1937.342636][T21985] ? syscall_exit_to_user_mode+0xa3/0x340 [ 1937.348348][T21985] syscall_exit_to_user_mode+0x13f/0x340 [ 1937.353974][T21985] do_syscall_64+0x100/0x230 [ 1937.358558][T21985] ? clear_bhb_loop+0x35/0x90 [ 1937.363224][T21985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1937.369113][T21985] RIP: 0033:0x7f6dcbf8cde9 [ 1937.373529][T21985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1937.393123][T21985] RSP: 002b:00007fff74b471a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1937.401529][T21985] RAX: 0000000000000000 RBX: 00007f6dcc1a7ba0 RCX: 00007f6dcbf8cde9 [ 1937.409492][T21985] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1937.417459][T21985] RBP: 00007f6dcc1a7ba0 R08: 000000000000020c R09: 0000001a74b4749f [ 1937.425592][T21985] R10: 00007f6dcc1a7ac0 R11: 0000000000000246 R12: 00000000001d8d51 [ 1937.433553][T21985] R13: 00007f6dcc1a6160 R14: ffffffffffffffff R15: 00007fff74b472c0 [ 1937.441522][T21985] [ 1937.444530][T21985] Modules linked in: [ 1937.450990][T21985] ---[ end trace 0000000000000000 ]--- [ 1937.456536][T21985] RIP: 0010:qca_close+0x72/0x2e0 [ 1937.461601][T21985] Code: 14 f8 f5 f8 48 89 2c 24 42 80 7c 2d 00 00 74 08 4c 89 f7 e8 20 c8 5c f9 4d 8b 26 49 8d bc 24 5a 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 28 84 c0 4c 89 eb 0f 85 de 01 00 00 45 0f b6 ac 24 5a [ 1937.481285][T21985] RSP: 0018:ffffc900046b7b90 EFLAGS: 00010206 [ 1937.487406][T21985] RAX: 000000000000002b RBX: ffff88807dc02400 RCX: ffff888025653c00 [ 1937.495422][T21985] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000015a [ 1937.504191][T21985] RBP: 1ffff1100fb804b7 R08: ffffffff81880be3 R09: 1ffffffff286112e [ 1937.512767][T21985] R10: dffffc0000000000 R11: ffffffff88c98ba0 R12: 0000000000000000 [ 1937.520859][T21985] R13: dffffc0000000000 R14: ffff88807dc025b8 R15: 0000000000000000 [ 1937.528881][T21985] FS: 00005555912d9500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1937.537870][T21985] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1937.545890][T21985] CR2: 00007ffaeb71baba CR3: 000000007eb74000 CR4: 00000000003526f0 [ 1937.553880][T21985] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1937.561913][T21985] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1937.569928][T21985] Kernel panic - not syncing: Fatal exception [ 1937.576246][T21985] Kernel Offset: disabled [ 1937.580573][T21985] Rebooting in 86400 seconds..