last executing test programs: 2m8.720398048s ago: executing program 1 (id=267): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x1, 0x9, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0xdddfb8c95d0a80d3}, 0x4000080) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB], 0x24}}, 0x0) close(0x4) 2m8.616923107s ago: executing program 1 (id=269): syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={0x2c, 0x3d, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@nested={0x18, 0x37, 0x0, 0x1, [@typed={0x13, 0x3, 0x0, 0x0, @str='qtr(4\x14\xd6\xbb\xa9\x19sm4)\x00'}]}]}, 0x2c}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) clock_gettime(0x2, &(0x7f0000000280)) symlink(&(0x7f0000000200)='.\x00', &(0x7f0000000040)='./file0\x00') mount(0x0, &(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000380)='overlay\x00', 0x10000, &(0x7f0000000400)='workdir') 2m8.616319175s ago: executing program 1 (id=271): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000100005800a000100482e3234357f"], 0x48}}, 0x2f00) 2m8.61584175s ago: executing program 1 (id=273): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async, rerun: 32) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000880)={0x0, 0x0, @ioapic}) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x18) (async, rerun: 64) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) (rerun: 64) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) (async) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x1, 0x0, @void, @value, @void, @value}, 0x50) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) (async) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)='%pi6 \x00'}, 0x20) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) read$FUSE(r10, &(0x7f0000000440)={0x2020}, 0x2020) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x12, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xa4}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@jmp={0x5, 0x1, 0x0, 0x1, 0x0, 0xfffffffffffffff0, 0x1}, @alu={0x4, 0x0, 0x6, 0xf, 0xa, 0xffffffffffffff6b, 0x4}, @call={0x85, 0x0, 0x0, 0x12}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x41000, 0x40, '\x00', r6, 0x0, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x5, 0x6, 0x3, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r2, 0xffffffffffffffff, r8, r10], 0x0, 0x10, 0x7ff, @void, @value}, 0x94) (async, rerun: 32) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e22, @loopback}, 0x7) (async) sendmmsg$inet(r4, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed39", 0x10}], 0x1}}], 0x1, 0x20008000) 2m8.512091777s ago: executing program 1 (id=275): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r0, 0xedaa7000) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000040)=0x0) r4 = accept$unix(r2, &(0x7f00000000c0), &(0x7f0000000140)=0x6e) recvmsg$unix(r4, &(0x7f00000006c0)={&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000200)=""/180, 0xb4}, {&(0x7f00000002c0)=""/205, 0xcd}, {&(0x7f00000003c0)}, {&(0x7f0000000400)=""/93, 0x5d}, {&(0x7f0000000480)=""/105, 0x69}, {&(0x7f0000000500)=""/204, 0xcc}], 0x6, &(0x7f0000000680)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x2) ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5460, &(0x7f0000001cc0)={{}, r3, 0x0, @unused, @devid}) 2m8.511401834s ago: executing program 1 (id=276): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001300)={r0, 0x20, &(0x7f00000000c0)={&(0x7f0000000240)=""/183, 0xb7, 0x0, &(0x7f0000000300)=""/4096, 0x1000}}, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0b00000000000000089bda95f3d57178484830141c7567ca840a", @ANYRES16=r2, @ANYBLOB="000126bd7000fedbdf2509000000050015000f000000080014000d00000005001d00000000000500130006000000050013000300000005001d0003000000080014001a000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20044894}, 0x20000005) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r4, 0xae03, 0x4a) 1m53.491792919s ago: executing program 32 (id=276): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001300)={r0, 0x20, &(0x7f00000000c0)={&(0x7f0000000240)=""/183, 0xb7, 0x0, &(0x7f0000000300)=""/4096, 0x1000}}, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0b00000000000000089bda95f3d57178484830141c7567ca840a", @ANYRES16=r2, @ANYBLOB="000126bd7000fedbdf2509000000050015000f000000080014000d00000005001d00000000000500130006000000050013000300000005001d0003000000080014001a000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20044894}, 0x20000005) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r4, 0xae03, 0x4a) 54.667475163s ago: executing program 3 (id=1170): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mkdir(&(0x7f0000000300)='./bus\x00', 0x40) setxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000080)={{}, {}, [{0x2, 0x7}], {}, [], {0x10, 0x1}}, 0x2c, 0x3) getxattr(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00', &(0x7f0000001140)=""/245, 0x71) 54.571281692s ago: executing program 3 (id=1171): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002d00210000000000000000000400008008000c0003"], 0x1c}], 0x1, 0x0, 0x0, 0x4000092}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000002000/0x3000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="50000000120005ff00000400040000000000004a", @ANYBLOB, @ANYRES32, @ANYBLOB="061002000000000008002e"], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1014}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_ACTIVE={0x5, 0x1d, 0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007001700000000000c000180060006008e"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x0, 0x298, 0x200, 0x200, 0x298, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x98}}, {{@ip={@remote, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 54.471286268s ago: executing program 3 (id=1172): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) fcntl$lock(r0, 0x25, &(0x7f0000000140)={0x2, 0x0, 0x2, 0xc0, r1}) readv(r0, &(0x7f0000001900)=[{0x0, 0xea}], 0x1) socket(0x10, 0x803, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001000370400000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="890c0400000000001800128008000100677470000c00028008000200", @ANYRES32, @ANYBLOB="816b37f626a737cbb88f4a53543e80c54ea1d133a11d9b238c4208683fdd0167d4fb021d31651fa86feb6a56d0658b"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40000002) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001000370400000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="890c0400000000001800128008000100677470000c00028008000200", @ANYRES32, @ANYBLOB="816b37f626a737cbb88f4a53543e80c54ea1d133a11d9b238c4208683fdd0167d4fb021d31651fa86feb6a56d0658b"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40000002) 54.418892729s ago: executing program 3 (id=1173): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x69) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="ad73364256", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)=ANY=[@ANYBLOB="88000000", @ANYRES16=0x0, @ANYBLOB="00022bbd7000fddbdf25040000008008000400000000b321242e215b9f4f00080003000200000008000800090000000800030004000000080009000b00000006000f000001000005000d000100000005000d0000000000280001800800080007000000140003002001000000000000000000000000000108000b0073697000000000"], 0x88}, 0x1, 0x0, 0x0, 0x4040000}, 0x4048000) recvmsg$qrtr(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/31, 0x1f}], 0x1, 0x0, 0x0, 0x42}, 0x38, 0x12080) 54.418233446s ago: executing program 3 (id=1174): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='1', 0x1, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r2, 0xcf) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r2, 0x3b65, 0x3) setpgid(r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000040)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) getpgid(r1) setpgid(0x0, r1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000240), 0x10000, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c4391915d9fb5bd5e9a042a9354916d7766646e6f3d", @ANYRESHEX, @ANYBLOB=',\x00']) r4 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0xc0) ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0x800000000000001) 54.325407541s ago: executing program 3 (id=1175): syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) (async) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000000)={0x5a, 0xa, 0x2, "3258ae1e008faa00000000000000000000000000000100000000271e00000020", 0x48524742}) (async) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000000)={0x5a, 0xa, 0x2, "3258ae1e008faa00000000000000000000000000000100000000271e00000020", 0x48524742}) read$char_usb(r1, &(0x7f0000000000)=""/188, 0xbc) syz_usb_disconnect(r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) (async) bind$inet(r3, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f00000001c0)) (async) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f00000001c0)) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r3, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) (async) sendto$inet(r3, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r3, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) (async) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, 0x0) (async) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, 0x0) capget(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) r6 = socket(0x28, 0x3, 0x2) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'bond_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x1c, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x2}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x8}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x8b}]}}]}, 0x48}}, 0x0) ptrace$setsig(0x4203, r5, 0x100000001, &(0x7f0000000080)={0xb, 0xef9, 0x1}) syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120150c51812009f2b0102030109021200010f05000809046e0000ff13f8ca0000000000", @ANYRES16=r1, @ANYRESOCT=r0, @ANYRESOCT=r3, @ANYRES16=r0, @ANYRES32=r0, @ANYRES64=r0, @ANYRESHEX=r0], &(0x7f00000000c0)={0xfffffffffffffe77, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 51.031374113s ago: executing program 4 (id=1192): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85f9"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) (async) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14, 0x800) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) connect$packet(r1, &(0x7f0000000240)={0x11, 0x16, r2, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) (async) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x40d, 0x70bd25, 0x25ffdbfc, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x10000006}, @IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x84}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 51.031071481s ago: executing program 4 (id=1193): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0xc0580, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000140)={0x6, 0x0, @pic={0x6, 0x5, 0x4, 0x1, 0x6, 0xb, 0x10, 0x6, 0xd, 0x1, 0x5, 0xfa, 0x1, 0x5, 0x9, 0x6}}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_adj\x00') preadv(r3, &(0x7f0000000300)=[{&(0x7f0000000140)=""/126, 0x7e}], 0x1, 0x0, 0x0) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) accept4(r4, 0x0, 0x0, 0x800) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000080)=ANY=[@ANYBLOB="0400000000000000f3ffffff08000000010000000000000006000000010000800b000000000000000000000000000000000000c07fffffff03000000050000000900000006000000ed00000000000000000000000000000007000080a10e000001000000000000009b020000f3000000ff0f0000000000000000000000000000020000000300000002000000010400000d000000f9ffffff0500"/168]) pipe2$9p(&(0x7f0000000380), 0x4880) mkdir(&(0x7f0000000040)='./file0\x00', 0x90) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') lchown(&(0x7f0000000240)='./file0\x00', 0x0, 0xee00) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x101000, 0x82) mkdirat(r5, &(0x7f0000000100)='./file0\x00', 0x0) write$sequencer(0xffffffffffffffff, &(0x7f0000000000)=[@generic={0x8}, @generic={0x83}], 0x2) mkdirat(r2, &(0x7f0000000140)='./file0\x00', 0x160) 50.960336474s ago: executing program 4 (id=1194): times(&(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r4, 0xc0745645, &(0x7f0000000200)={0x8, [0x0, 0x6, 0xfc01, 0x10, 0x9, 0x200, 0x101, 0x5, 0xffff, 0x4, 0x40, 0x1, 0x2d, 0x9, 0x1, 0x6, 0x4, 0xfffc, 0x7, 0x4, 0xff3a, 0x6, 0xd, 0x3, 0x9, 0x7, 0x2, 0x5, 0xd, 0x9, 0x6, 0x80, 0xff, 0x7fff, 0x2, 0x15, 0x0, 0x1, 0x8, 0x3, 0x7, 0x400, 0xb90, 0x400, 0x4, 0x6, 0x8, 0x3], 0x5}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r7, {0x7}}, './file0\x00'}) listen(r1, 0x0) syz_open_dev$usbmon(&(0x7f0000001980), 0x80000000, 0x12f800) syz_emit_ethernet(0x76, &(0x7f0000000880)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4a300", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x6, {0xc, 0x6, "f6cd53", 0x200, 0x33, 0xff, @dev={0xfe, 0x80, '\x00', 0x31}, @local, [@routing], "13d87159da0a7f6b"}}}}}}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r9, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r1}, 0x20) recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) recvfrom$inet6(r1, &(0x7f00000000c0)=""/53, 0x35, 0x40010102, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0xb, &(0x7f0000001840)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a300000000014000780080013400000000008000640000019000500050002000000050001000600000012000300686173683a6e6574"], 0x60}}, 0x0) 50.851025004s ago: executing program 4 (id=1195): r0 = socket$netlink(0x10, 0x3, 0x4) (async) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) pselect6(0x40, &(0x7f0000000900)={0x6, 0x0, 0x1ff, 0x3, 0x5, 0x52a9396a, 0x1, 0x8}, 0x0, &(0x7f0000000980)={0x8, 0x7fff, 0x0, 0xc, 0xf, 0x9, 0x3, 0x9}, &(0x7f00000009c0)={0x0, 0x3938700}, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}, {{&(0x7f0000000280)=@abs={0x0, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="f2e80000482800000000fbffffff00003ccad9ff83d47d9a6f7b85d98a", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00'], 0x18, 0x20008880}}], 0x2, 0x4c054) (async) r7 = socket(0x10, 0x803, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) statx(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x100, 0x80, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r10 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (async) r13 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="2000000111140100feffffff0000000008000148983ed86b74224600000000000800030001220000"], 0x20}}, 0x40) (async) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7ff}) io_uring_enter(r10, 0x2d3e, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240), 0x1080000, &(0x7f00000004c0)={[{@verity_require}], [{@uid_lt={'uid<', r9}}]}) (async) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) mount_setattr(0xffffffffffffffff, 0x0, 0x900, &(0x7f00000008c0)={0x100084, 0x8}, 0x20) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@delchain={0x34, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r14, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) 50.791150659s ago: executing program 4 (id=1196): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='1', 0x1, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r2, 0xcf) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r2, 0x3b65, 0x3) setpgid(r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000040)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) getpgid(r1) setpgid(0x0, r1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000240), 0x10000, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c4391915d9fb5bd5e9a042a9354916d7766646e6f3d", @ANYRESHEX, @ANYBLOB=',\x00']) open(&(0x7f0000000200)='./bus\x00', 0x0, 0xc0) 50.71037081s ago: executing program 4 (id=1197): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x85) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x9) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x7f) syz_emit_ethernet(0x46, &(0x7f0000000100)=ANY=[@ANYBLOB="e10931d8640a0000000000095c60abc6ba73f01088002001000000000000691f3f4d00000000fe8000000000000000000000000000aa00000000000890780200000000000000"], 0x0) 48.337832718s ago: executing program 2 (id=1123): sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x1, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4811}, 0x0) 48.148102832s ago: executing program 0 (id=577): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r2, 0x26, &(0x7f00000031c0)) fcntl$lock(r2, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x2cc, 0x1}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) open_by_handle_at(0xffffffffffffff9c, 0x0, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r8, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="0f01d165f390360f01c966ba6100ed66baa100ed0fc77800f0fe07c744240062000000c74424028000c0fec7442406000000000f0114248fe978e13406f4", 0x3e}], 0x1, 0x28, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x3}, @IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x4b}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd26, 0x8000002, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xff, 0x1, 0x8001}, {0x8, 0x6a6, 0xffff, 0x5, 0x2, 0x2}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f0000000980)='system_u:object_r:semanage_exec_t:s0\x00', 0x25, 0x1) 41.248115656s ago: executing program 0 (id=577): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r2, 0x26, &(0x7f00000031c0)) fcntl$lock(r2, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x2cc, 0x1}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000080000002d0301000000000095000000000000007126000000000000bf670800000000005601000000ff07ad6706000002000000070300000ee60000bf250000000000002d350000000000006507000002000000070700004c0000001f75000000000000bf54000000000000160400000400f9ffad3001000000000084000000000000004500000001f0ffff95000000000000006e8ad524a56600a5585b7351ca1136aef2e9407e5c2501d11900db85604036883647b1fb3f1403b816f511c8c56e56e40b01005505f8a89dae4293b10f3631b25fc9f189084c7fddccff01361d355f6cce8ec2abcdf1bc9040daef2cfa2046e2091e269f4734ffa55eb2d4e8de20b38c8808b365b46bd54c68cd30139a8c3827a7dd6d6e2b5fea3906f8456b0000000000ff07efffffff0047018ae79db613d2aec070f718ab629b4975320dd7a7da532281fd22c7b835005bf52715396669836db6000000005b4f0591ee7c8cd263dd172b28d01c4d8ddaf2cdad3d1a74a2f078aa6402483856a6e495408d0b33047f06aec2cc590df28efc7dbec6857db922195a271af103f03e1155197e067b2ebf4e2dae06e394c9639564f000fc3cdd05a157544d0200000000000000ee48f5287123a0d246c0c4c00fe979dbc09ed4db22d7172adc6ae8faa5f9ad188e07000000000000008d88a0b4684559d46cae41db1b914e93f1f88e80ef80c6ed3e1ff91ff111000000000000000000e33de432e488ad0e724c2d14a1e770e116984a5700afb8a1f3d47277ef0e33e7e00ec5f74e10937ba0e321346977b7d1b18013f509675b5b0f352e30dffda780e95c301f4fc7d5a76475ace6b128b02bfd71023daffdf748a6bd356fcbacec96373d1101000736ac0bbcb5f4836bddfe8bf46308000000ade9e59fcf271bb98bd0b8b5216b858b414c31682f9f3db2e4d8e5898e445fe55ac56c0ddd932d838ff651023853d42210642986f8bbc7340bc8393f774318c9fc9b05788de2c6e601b50777e8dff581de1d5ae3d801ead7eba31126e2172fa1eadf5f3bec81004d00000000c8e4692e051c731f9ac766b7fd66278d40f0760f23e8c7d1f47cd8e02504e85e152955ad8acd989c0b2eea71414f533f5685c3904bfe1d0011ffc1ba5398f3d68124674478186edd036f15bf847c33f79e1a0ad3d2b5080ecb01420c9f1b534e969fce97ffff07000009000000bfe0ed7c5853a665c0805752dca0e571d75cac5a5d8e4f6e05055b6dec5a9a5696f053a92d81fd9e5f2b9dbbe24f38e745b5a95d45003d0600e413dc623f3e6b096c8b0ad7438c6631388892c55b0671140afbfb83bba415f729fea4c8a8a86189dceedad84cdd17c46bdd847a1f4b0facd3744f5bbb06abb319204fca4bcd4297fe7b4cee75abf43e14fe861220799c0f12702964fc890a176fdafa2c9387280b5693c000c0304cece48642649375dae0b7979b229f708a97349e96e783af9a23cd3980a2c29d3d62875e5319cd51bdd224878a0b25edf0e83c930633bd9a823e28f359608ea326c77a1aa17318f392a0ec6c188916f4149c503027feccfd68ec8278a90252693fb133c4615801077e1d75420017c03990b855fe481a20b4919bb11c6d737b6545ef140a0fc339bb53953662f1454f9852e7c4e17eb8e68f076c659f56d6c7f97a94d604f45cfe88b30c170000000001000000ef931f137967de563c29d81aacb3d48226a4e4b6670900000000000000fa68bff3693afc44db223f0400000000000000d23b48bb38b31a14ffcddd92c38f6b6d86a0e56d47a82bad5d2a6dce4c4d353261260c9d7a6bd9f2c872c4172a3d2ac80dfb718cc159e6423065624f1300007d6072f0cf120ad2ba519afdd43a14000000000000000000000000007ef2f3c58d045f0700000094069acbe333aebd10f2118fbfeda3fa5500d52cd5241588d2b68a332edfef6d701c8936a25d68b841f982511392cc0d3a78616f8ce0f2877d099258bf85866d0ee7f803fa50fd41ef62b028d12028a7b497d92f544523290f520b0d000000000000000000007758b1267669ded883b5867c5916a74843b784955108f750c57744c76a09629dd0aaca5cb0f14f49db80a1aa2692c18fbb31cbdb3f2e138e6d5ba3491fc3617b511f24bad26466407e39000000000000d7a1bf4624d31c13a6840f45a7f4e01a50d790132abb36915e35b1ac35bf3921357f638684bba17b8fe1e2123153ecd6d1f76820d4f8fa0b96b50c457ae8d5f2351cdb7bc8170380557bc11cf6ee3395974e37018a2a7473312cb32affb8ff72a253e0d36099e460f13694b9891af526d9608271838e83d17103887f34210dd4c0cf60dec608b4ca5ba2f3037bf381e7b5d5b27820000000000000000000000b719bd34f3244730f708fdd532640edc6b82dd4ad72ecbaccafef806f5447aba2246d56a601bbd8c24ba1e16dda3296ce10de6830"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) open_by_handle_at(0xffffffffffffff9c, 0x0, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r8, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="0f01d165f390360f01c966ba6100ed66baa100ed0fc77800f0fe07c744240062000000c74424028000c0fec7442406000000000f0114248fe978e13406f4", 0x3e}], 0x1, 0x28, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x3}, @IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x4b}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd26, 0x8000002, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xff, 0x1, 0x8001}, {0x8, 0x6a6, 0xffff, 0x5, 0x2, 0x2}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f0000000980)='system_u:object_r:semanage_exec_t:s0\x00', 0x25, 0x1) 40.848219067s ago: executing program 2 (id=1123): sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x1, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4811}, 0x0) 38.42552968s ago: executing program 33 (id=1175): syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) (async) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000000)={0x5a, 0xa, 0x2, "3258ae1e008faa00000000000000000000000000000100000000271e00000020", 0x48524742}) (async) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000000)={0x5a, 0xa, 0x2, "3258ae1e008faa00000000000000000000000000000100000000271e00000020", 0x48524742}) read$char_usb(r1, &(0x7f0000000000)=""/188, 0xbc) syz_usb_disconnect(r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) (async) bind$inet(r3, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f00000001c0)) (async) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f00000001c0)) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r3, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) (async) sendto$inet(r3, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r3, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) (async) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, 0x0) (async) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, 0x0) capget(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) r6 = socket(0x28, 0x3, 0x2) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'bond_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x1c, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x2}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x8}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x8b}]}}]}, 0x48}}, 0x0) ptrace$setsig(0x4203, r5, 0x100000001, &(0x7f0000000080)={0xb, 0xef9, 0x1}) syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120150c51812009f2b0102030109021200010f05000809046e0000ff13f8ca0000000000", @ANYRES16=r1, @ANYRESOCT=r0, @ANYRESOCT=r3, @ANYRES16=r0, @ANYRES32=r0, @ANYRES64=r0, @ANYRESHEX=r0], &(0x7f00000000c0)={0xfffffffffffffe77, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 35.396466442s ago: executing program 34 (id=1197): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x85) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x9) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x7f) syz_emit_ethernet(0x46, &(0x7f0000000100)=ANY=[@ANYBLOB="e10931d8640a0000000000095c60abc6ba73f01088002001000000000000691f3f4d00000000fe8000000000000000000000000000aa00000000000890780200000000000000"], 0x0) 32.322586557s ago: executing program 0 (id=577): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r2, 0x26, &(0x7f00000031c0)) fcntl$lock(r2, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x2cc, 0x1}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) open_by_handle_at(0xffffffffffffff9c, 0x0, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r8, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="0f01d165f390360f01c966ba6100ed66baa100ed0fc77800f0fe07c744240062000000c74424028000c0fec7442406000000000f0114248fe978e13406f4", 0x3e}], 0x1, 0x28, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x3}, @IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x4b}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd26, 0x8000002, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xff, 0x1, 0x8001}, {0x8, 0x6a6, 0xffff, 0x5, 0x2, 0x2}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f0000000980)='system_u:object_r:semanage_exec_t:s0\x00', 0x25, 0x1) 31.894811355s ago: executing program 2 (id=1123): sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x1, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4811}, 0x0) 30.571142051s ago: executing program 6 (id=1199): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14ea7aae7df60362fe53ca981a00007f9df93c32c53038aef9de2632b5763d6a318be96b37ecceb8ba2d04c3005d71", @ANYRES16=r1, @ANYBLOB="010027bd7000fddbdf2509000000"], 0x14}, 0x1, 0x0, 0x0, 0x88c0}, 0x80) 30.496165775s ago: executing program 6 (id=1207): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='1', 0x1, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r2, 0xcf) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r2, 0x3b65, 0x3) setpgid(r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000040)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) setpgid(0x0, r1) open(&(0x7f0000000200)='./bus\x00', 0x0, 0xc0) 30.42651351s ago: executing program 6 (id=1208): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e24, 0xf6b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, 0x5}}, 0x6, 0x6, 0xfff, 0x9, 0xa0, 0x1, 0x7}, &(0x7f0000000180)=0x9c) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000001300)={r1, 0x1000, "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"}, &(0x7f0000000200)=0x1008) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={r2}, 0x8) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'batadv_slave_1\x00', 0x10}) (async) r4 = socket(0x400000000010, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) sched_setscheduler(0x0, 0x2, 0x0) (async) syz_open_procfs(0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d00000014000000110001"], 0xf0}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x809}, 0x0) (async) socket(0x400000000010, 0x3, 0x0) (async) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) r10 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x129642, 0x0) (async) close_range(r10, 0xffffffffffffffff, 0x0) 24.138376504s ago: executing program 0 (id=577): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r2, 0x26, &(0x7f00000031c0)) fcntl$lock(r2, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x2cc, 0x1}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) open_by_handle_at(0xffffffffffffff9c, 0x0, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r8, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="0f01d165f390360f01c966ba6100ed66baa100ed0fc77800f0fe07c744240062000000c74424028000c0fec7442406000000000f0114248fe978e13406f4", 0x3e}], 0x1, 0x28, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x3}, @IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x4b}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd26, 0x8000002, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xff, 0x1, 0x8001}, {0x8, 0x6a6, 0xffff, 0x5, 0x2, 0x2}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f0000000980)='system_u:object_r:semanage_exec_t:s0\x00', 0x25, 0x1) 23.926399131s ago: executing program 2 (id=1123): sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x1, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4811}, 0x0) 16.277615978s ago: executing program 0 (id=577): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r2, 0x26, &(0x7f00000031c0)) fcntl$lock(r2, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x2cc, 0x1}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000080000002d0301000000000095000000000000007126000000000000bf670800000000005601000000ff07ad6706000002000000070300000ee60000bf250000000000002d350000000000006507000002000000070700004c0000001f75000000000000bf54000000000000160400000400f9ffad3001000000000084000000000000004500000001f0ffff95000000000000006e8ad524a56600a5585b7351ca1136aef2e9407e5c2501d11900db85604036883647b1fb3f1403b816f511c8c56e56e40b01005505f8a89dae4293b10f3631b25fc9f189084c7fddccff01361d355f6cce8ec2abcdf1bc9040daef2cfa2046e2091e269f4734ffa55eb2d4e8de20b38c8808b365b46bd54c68cd30139a8c3827a7dd6d6e2b5fea3906f8456b0000000000ff07efffffff0047018ae79db613d2aec070f718ab629b4975320dd7a7da532281fd22c7b835005bf52715396669836db6000000005b4f0591ee7c8cd263dd172b28d01c4d8ddaf2cdad3d1a74a2f078aa6402483856a6e495408d0b33047f06aec2cc590df28efc7dbec6857db922195a271af103f03e1155197e067b2ebf4e2dae06e394c9639564f000fc3cdd05a157544d0200000000000000ee48f5287123a0d246c0c4c00fe979dbc09ed4db22d7172adc6ae8faa5f9ad188e07000000000000008d88a0b4684559d46cae41db1b914e93f1f88e80ef80c6ed3e1ff91ff111000000000000000000e33de432e488ad0e724c2d14a1e770e116984a5700afb8a1f3d47277ef0e33e7e00ec5f74e10937ba0e321346977b7d1b18013f509675b5b0f352e30dffda780e95c301f4fc7d5a76475ace6b128b02bfd71023daffdf748a6bd356fcbacec96373d1101000736ac0bbcb5f4836bddfe8bf46308000000ade9e59fcf271bb98bd0b8b5216b858b414c31682f9f3db2e4d8e5898e445fe55ac56c0ddd932d838ff651023853d42210642986f8bbc7340bc8393f774318c9fc9b05788de2c6e601b50777e8dff581de1d5ae3d801ead7eba31126e2172fa1eadf5f3bec81004d00000000c8e4692e051c731f9ac766b7fd66278d40f0760f23e8c7d1f47cd8e02504e85e152955ad8acd989c0b2eea71414f533f5685c3904bfe1d0011ffc1ba5398f3d68124674478186edd036f15bf847c33f79e1a0ad3d2b5080ecb01420c9f1b534e969fce97ffff07000009000000bfe0ed7c5853a665c0805752dca0e571d75cac5a5d8e4f6e05055b6dec5a9a5696f053a92d81fd9e5f2b9dbbe24f38e745b5a95d45003d0600e413dc623f3e6b096c8b0ad7438c6631388892c55b0671140afbfb83bba415f729fea4c8a8a86189dceedad84cdd17c46bdd847a1f4b0facd3744f5bbb06abb319204fca4bcd4297fe7b4cee75abf43e14fe861220799c0f12702964fc890a176fdafa2c9387280b5693c000c0304cece48642649375dae0b7979b229f708a97349e96e783af9a23cd3980a2c29d3d62875e5319cd51bdd224878a0b25edf0e83c930633bd9a823e28f359608ea326c77a1aa17318f392a0ec6c188916f4149c503027feccfd68ec8278a90252693fb133c4615801077e1d75420017c03990b855fe481a20b4919bb11c6d737b6545ef140a0fc339bb53953662f1454f9852e7c4e17eb8e68f076c659f56d6c7f97a94d604f45cfe88b30c170000000001000000ef931f137967de563c29d81aacb3d48226a4e4b6670900000000000000fa68bff3693afc44db223f0400000000000000d23b48bb38b31a14ffcddd92c38f6b6d86a0e56d47a82bad5d2a6dce4c4d353261260c9d7a6bd9f2c872c4172a3d2ac80dfb718cc159e6423065624f1300007d6072f0cf120ad2ba519afdd43a14000000000000000000000000007ef2f3c58d045f0700000094069acbe333aebd10f2118fbfeda3fa5500d52cd5241588d2b68a332edfef6d701c8936a25d68b841f982511392cc0d3a78616f8ce0f2877d099258bf85866d0ee7f803fa50fd41ef62b028d12028a7b497d92f544523290f520b0d000000000000000000007758b1267669ded883b5867c5916a74843b784955108f750c57744c76a09629dd0aaca5cb0f14f49db80a1aa2692c18fbb31cbdb3f2e138e6d5ba3491fc3617b511f24bad26466407e39000000000000d7a1bf4624d31c13a6840f45a7f4e01a50d790132abb36915e35b1ac35bf3921357f638684bba17b8fe1e2123153ecd6d1f76820d4f8fa0b96b50c457ae8d5f2351cdb7bc8170380557bc11cf6ee3395974e37018a2a7473312cb32affb8ff72a253e0d36099e460f13694b9891af526d9608271838e83d17103887f34210dd4c0cf60dec608b4ca5ba2f3037bf381e7b5d5b27820000000000000000000000b719bd34f3244730f708fdd532640edc6b82dd4ad72ecbaccafef806f5447aba2246d56a601bbd8c24ba1e16dda3296ce10de6830"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) open_by_handle_at(0xffffffffffffff9c, 0x0, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r8, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="0f01d165f390360f01c966ba6100ed66baa100ed0fc77800f0fe07c744240062000000c74424028000c0fec7442406000000000f0114248fe978e13406f4", 0x3e}], 0x1, 0x28, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x3}, @IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x4b}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd26, 0x8000002, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xff, 0x1, 0x8001}, {0x8, 0x6a6, 0xffff, 0x5, 0x2, 0x2}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f0000000980)='system_u:object_r:semanage_exec_t:s0\x00', 0x25, 0x1) 15.875683029s ago: executing program 2 (id=1123): sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x1, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4811}, 0x0) 14.158663859s ago: executing program 35 (id=1208): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e24, 0xf6b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, 0x5}}, 0x6, 0x6, 0xfff, 0x9, 0xa0, 0x1, 0x7}, &(0x7f0000000180)=0x9c) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000001300)={r1, 0x1000, "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"}, &(0x7f0000000200)=0x1008) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={r2}, 0x8) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'batadv_slave_1\x00', 0x10}) (async) r4 = socket(0x400000000010, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) sched_setscheduler(0x0, 0x2, 0x0) (async) syz_open_procfs(0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d00000014000000110001"], 0xf0}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x809}, 0x0) (async) socket(0x400000000010, 0x3, 0x0) (async) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) r10 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x129642, 0x0) (async) close_range(r10, 0xffffffffffffffff, 0x0) 6.598749971s ago: executing program 0 (id=577): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r2, 0x26, &(0x7f00000031c0)) fcntl$lock(r2, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x2cc, 0x1}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) open_by_handle_at(0xffffffffffffff9c, 0x0, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r8, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="0f01d165f390360f01c966ba6100ed66baa100ed0fc77800f0fe07c744240062000000c74424028000c0fec7442406000000000f0114248fe978e13406f4", 0x3e}], 0x1, 0x28, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x3}, @IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x4b}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd26, 0x8000002, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xff, 0x1, 0x8001}, {0x8, 0x6a6, 0xffff, 0x5, 0x2, 0x2}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f0000000980)='system_u:object_r:semanage_exec_t:s0\x00', 0x25, 0x1) 6.141860518s ago: executing program 2 (id=1123): sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x1, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4811}, 0x0) 4.340362672s ago: executing program 5 (id=1252): socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x30, r0, 0x0) (async) unshare(0x64000600) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) (async) sendmsg$can_bcm(r2, &(0x7f0000000200)={0x0, 0x2b, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=r3, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x79, r3}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x1, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4811}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r5, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) (async) fchown(0xffffffffffffffff, 0x0, 0xee01) (async) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_ct={0x5c, 0x1, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x28}, @TCA_CT_NAT_PORT_MIN={0x6}, @TCA_CT_NAT_PORT_MAX={0x6}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x74}}, 0x0) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) 3.540018329s ago: executing program 7 (id=1257): prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140), 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f00000001c0)=0x40) timer_create(0x1, 0x0, &(0x7f0000bbdffc)) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000500)={{0x1, 0x1, 0x18, r1, {0x7}}, './file0\x00'}) getsockopt$netrom_NETROM_IDLE(r3, 0x103, 0x7, &(0x7f0000000540)=0xff8, &(0x7f0000000580)=0x4) ptrace$PTRACE_SETSIGMASK(0x420b, r2, 0x8, &(0x7f0000000240)={[0x8]}) syz_open_procfs$namespace(r2, &(0x7f0000000300)='ns/mnt\x00') ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'veth0_to_bond\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x6}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32], 0x68}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@bridge_delvlan={0x24, 0x71, 0x2, 0x70bd2a, 0x25dfdbfe, {0x7, 0x0, 0x0, r6}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x16, 0x2}}}]}, 0x24}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="040100001e00110027bd7000fddbdf2507000000", @ANYRES32=r6, @ANYBLOB="0809000000000200080004000100000008002e0001000000d0001680cc0001800c000400ff0f00000500000068000c801400010007000000ad0600000000000088a800001400010001000000880a0000670000008100000014000100400000001f090400030000008100000014000100040000005d0500000900000088a800001400010005000000140300000200000088a800000c00030000000000070000000c00090000000100000000000c0004000a0000000e0000000c00040002000000e34100000c00030000000000010001000c00070000000080005e00000c000400000200000700000004001400"], 0x104}, 0x1, 0x0, 0x0, 0x4}, 0x4004000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) 3.429377661s ago: executing program 5 (id=1258): open(0x0, 0x185102, 0x38) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='fd/3\x00') r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0x201, 0x0, 0x0, 0xa5, 0x5c}) 3.429118732s ago: executing program 7 (id=1259): socketpair$unix(0x1, 0x2, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x0) openat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file1\x00', &(0x7f0000000100)={0x128142, 0x30, 0x10}, 0x18) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(&(0x7f00000001c0), &(0x7f00000006c0)='./file0\x00', &(0x7f0000000800)='9p\x00', 0x0, &(0x7f0000000900)='trans=tcp,') 3.370383347s ago: executing program 7 (id=1260): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) ioctl$TIOCL_PASTESEL(r0, 0x4b47, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000340)=ANY=[@ANYRESHEX=0x0, @ANYRES16=r1, @ANYRESDEC=r1], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_virtio(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x1000012, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=virtio,access=', @ANYRESDEC=r4]) utime(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM(r6, 0x4068aea3, &(0x7f0000000380)) r7 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40400) ioctl$VIDIOC_S_SELECTION(r7, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0x400e802, 0x1, 0x7, 0x4}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r6, &(0x7f00000015c0), 0x0, 0x7ff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r9, 0x560d, &(0x7f0000000140)={0x5, 0x899, 0x1006}) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) 3.12064707s ago: executing program 7 (id=1261): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async, rerun: 32) r2 = dup3(r1, r0, 0x0) (rerun: 32) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000080)='tmpfs\x00', 0x4040, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000801, 0x0, &(0x7f00000000c0)={0x0, 0x5982, 0xc0, 0x9, 0x8, 0x4009, 0x0, 0x0, 0xfffffffa}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r4, 0x10c, 0x2, &(0x7f0000000040)=0xffff, 0x4) r5 = socket$inet_udplite(0x2, 0x2, 0x88) close(r5) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000000d00)={0x2020, 0x0, 0x0}, 0x2020) (async, rerun: 32) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32) ptrace(0x10, r7) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0xb8, 0x0, &(0x7f00000005c0)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/242, 0xf2, 0x2, 0x15}, @fda={0x66646185, 0x5, 0x2, 0x22}, @ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/243, 0xf3, 0x1, 0x3b}}, &(0x7f00000004c0)={0x0, 0x28, 0x48}}, 0x1000}, @increfs={0x40046304, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000500)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @flat=@handle={0x73682a85, 0xa, 0x3}}, &(0x7f0000000580)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}, @increfs, @request_death={0x400c630e, 0x2}], 0x1000, 0x0, &(0x7f0000002d40)="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"}) (async, rerun: 32) ptrace$poke(0x5, r7, &(0x7f0000000080), 0x0) (async, rerun: 32) write$FUSE_LK(r2, &(0x7f0000000080)={0x28, 0x0, r6, {{0x400000280000000, 0x2, 0x1, r7}}}, 0x28) (async, rerun: 32) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r8, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e507646dc3f2ddf33c9e9", 0x0, 0x1, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.903590136s ago: executing program 7 (id=1262): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CDROMVOLCTRL(r1, 0x31f, &(0x7f00000001c0)={0xa1, 0x16, 0xc2, 0xff}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x0, 0xf, 0x1, 0x2ca9}]}) syz_emit_ethernet(0x82, &(0x7f0000000640)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @dev, {[@rr={0x7, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@multicast1}, {@loopback, 0x200}, {@local}, {}, {@dev}, {@private}]}]}}}}}}}, 0x0) 2.540726155s ago: executing program 5 (id=1263): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c) sendto$inet6(r2, &(0x7f0000000100)="a6", 0x1, 0x840, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000340)=0x20000000, 0x4) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f00000000c0)={0x1, 'macvlan1\x00', 0x4}, 0x18) socket$tipc(0x1e, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000000)={0x3ff, 0x10000000000, 0x0, 0x9, 0x0, 0x1, 0x9}, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e000701feffffff00000000017c0000000039a0040008000c00018006000600894f0000080002"], 0x30}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) 268.933497ms ago: executing program 5 (id=1264): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r4, 0x10c, 0x8, &(0x7f00000006c0), &(0x7f0000000700)=0x4) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x1001, 0x2}, @flat=@binder={0x73622a85, 0xa, 0x1}, @flat=@binder={0x73622a85, 0x1000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000001980), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000019c0)={0x3c, r6, 0x1, 0x70bd29, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}]}, 0x3c}}, 0x40) 180.677617ms ago: executing program 5 (id=1265): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) (async, rerun: 64) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 64) ioctl$VIDIOC_G_STD(r1, 0x80085617, 0x0) (async, rerun: 32) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) (async, rerun: 32) syz_open_dev$char_usb(0xc, 0xb4, 0x1) (async, rerun: 64) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20}, 0x0}) (async, rerun: 64) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) (async) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) (async, rerun: 32) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000480)=@assoc_value, &(0x7f0000000080)=0x8) (async, rerun: 32) ioctl$KVM_RUN(r3, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) 98.190434ms ago: executing program 5 (id=1266): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mkdir(0x0, 0x40) setxattr$system_posix_acl(0x0, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000080)={{}, {}, [{0x2, 0x7}], {}, [], {0x10, 0x1}}, 0x2c, 0x3) getxattr(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00', &(0x7f0000001140)=""/245, 0x71) 97.456821ms ago: executing program 7 (id=1267): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xa0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="940000002d00090027bd700000000000060000007d000a00", @ANYRES32=0x0, @ANYBLOB="f11f5d35313c575f4297f2619eb04ffeba037d001c8e5f8699f6a8c7f11aa8ec92b59c9356737ef787a0bc4e59b5c442a0d61a8b2e3217c4af846cc00fb0aa458ee1d32b0a530e700fc1b05541dce3ee971e3f43de02a2d713df21ba9af2a829bfabc80c1616"], 0xe6}}, 0x84) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000000)=ANY=[], 0x114}], 0x1}, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000040)={[{@name={'name', 0x3d, 'user_\xae\x96\xbc\xff2D\xff\xbe\x80\xd1\x10&\x98=ryf\xa7zk\x13\x85f\xb6\xe2\xae\x94l\x13\xa9q24D\x81S\xfd.$\xcd\xbeq\xaa\xe03\xb3\xc9q\v\xcbkI\xe6\xa3p\x81\xde\xa11\x96\xa7\x83pj_\x1b\xe3\xbf]\xf4\xbd\xdc\x9eG\xab@4\xd9\x05)1X\x19\x8fb\xfe\xfc\xc7\xfa/BICWJ\xe4J\xa6\xde\x02\xeb\xce\xb21\xed(\xc3\x91Sb\v\xda\x1c=\x87\xc8\xd3\xb2>zg@^\x11\x00\x00'}}]}) 0s ago: executing program 36 (id=1267): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xa0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="940000002d00090027bd700000000000060000007d000a00", @ANYRES32=0x0, @ANYBLOB="f11f5d35313c575f4297f2619eb04ffeba037d001c8e5f8699f6a8c7f11aa8ec92b59c9356737ef787a0bc4e59b5c442a0d61a8b2e3217c4af846cc00fb0aa458ee1d32b0a530e700fc1b05541dce3ee971e3f43de02a2d713df21ba9af2a829bfabc80c1616"], 0xe6}}, 0x84) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000000)=ANY=[], 0x114}], 0x1}, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000040)={[{@name={'name', 0x3d, 'user_\xae\x96\xbc\xff2D\xff\xbe\x80\xd1\x10&\x98=ryf\xa7zk\x13\x85f\xb6\xe2\xae\x94l\x13\xa9q24D\x81S\xfd.$\xcd\xbeq\xaa\xe03\xb3\xc9q\v\xcbkI\xe6\xa3p\x81\xde\xa11\x96\xa7\x83pj_\x1b\xe3\xbf]\xf4\xbd\xdc\x9eG\xab@4\xd9\x05)1X\x19\x8fb\xfe\xfc\xc7\xfa/BICWJ\xe4J\xa6\xde\x02\xeb\xce\xb21\xed(\xc3\x91Sb\v\xda\x1c=\x87\xc8\xd3\xb2>zg@^\x11\x00\x00'}}]}) kernel console output (not intermixed with test programs): m2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 136.721938][ T9722] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 136.747531][ T9613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.763909][ T9613] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.769722][ T9314] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.772032][ T9314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.778390][ T9324] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.780645][ T9324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.820924][ T9636] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.824932][ T9636] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.830487][ T9636] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 136.897509][ T9613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.921332][ T9636] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.924606][ T9636] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.928938][ T9636] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 136.948857][ T9613] veth0_vlan: entered promiscuous mode [ 136.953727][ T9613] veth1_vlan: entered promiscuous mode [ 136.968163][ T9613] veth0_macvtap: entered promiscuous mode [ 136.973000][ T9613] veth1_macvtap: entered promiscuous mode [ 136.981957][ T9613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.987764][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 136.988246][ T9613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.994627][ T9613] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.997511][ T9613] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.000420][ T9613] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.003160][ T9613] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.070531][ T9319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.074873][ T9319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.079368][ T9324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.084971][ T9324] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.197228][ T9296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.200580][ T9296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.209701][ T9740] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.227475][ T9636] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 137.232096][ T9636] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 137.236644][ T9636] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 137.241877][ T9636] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 137.285550][ T9636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.295370][ T9636] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.300419][ T9296] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.302826][ T9296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.310318][ T9326] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.312964][ T9326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.426778][ T9636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.455106][ T9636] veth0_vlan: entered promiscuous mode [ 137.462212][ T9636] veth1_vlan: entered promiscuous mode [ 137.485078][ T9636] veth0_macvtap: entered promiscuous mode [ 137.489724][ T9636] veth1_macvtap: entered promiscuous mode [ 137.502998][ T9636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.512527][ T9636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.517390][ T9636] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.521324][ T9636] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.524038][ T9636] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.526795][ T9636] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.565475][ T9325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.568135][ T9325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.584358][ T9326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.587402][ T9326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.754712][ T40] audit: type=1400 audit(1748566927.251:612): avc: denied { create } for pid=9750 comm="syz.4.1159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 137.760777][ T9752] netlink: 'syz.4.1159': attribute type 10 has an invalid length. [ 137.765037][ T9752] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 137.771139][ T9752] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 137.774473][ T9752] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 137.904342][ T9760] xt_CT: You must specify a L4 protocol and not use inversions on it [ 137.957972][ T5938] Bluetooth: hci0: command 0x041b tx timeout [ 138.038017][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 138.168754][ T9765] __nla_validate_parse: 5 callbacks suppressed [ 138.168772][ T9765] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1164'. [ 139.067841][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 139.413913][ T9296] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.070744][ T40] audit: type=1800 audit(1748566929.571:613): pid=9787 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1171" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0 [ 140.091353][ T9787] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1171'. [ 140.094781][ T9787] openvswitch: netlink: Message has 3 unknown bytes. [ 140.095744][ T5938] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 140.097330][ T9787] openvswitch: netlink: Actions may not be safe on all matching packets [ 140.101453][ T5932] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 140.103833][ T9787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1171'. [ 140.105334][ T63] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 140.109265][ T63] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 140.109398][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 140.111586][ T63] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 140.111709][ T9787] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1171'. [ 140.112314][ T5932] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 140.114649][ T63] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 140.117116][ T5932] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 140.119072][ T63] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 140.121912][ T5932] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 140.141401][ T40] audit: type=1400 audit(1748566929.641:614): avc: denied { lock } for pid=9793 comm="syz.3.1172" path="/dev/uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 140.147295][ T9791] lo speed is unknown, defaulting to 1000 [ 140.173507][ T9789] lo speed is unknown, defaulting to 1000 [ 140.223833][ T9800] Bluetooth: MGMT ver 1.23 [ 140.255678][ T40] audit: type=1400 audit(1748566929.751:615): avc: denied { mounton } for pid=9799 comm="syz.3.1174" path="/326/file1/bus" dev="autofs" ino=35687 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 140.257898][ T9800] overlay: filesystem on ./file1 not supported [ 140.277271][ T9800] overlayfs: upper fs does not support tmpfile. [ 140.282552][ T9800] 9pnet_fd: Insufficient options for proto=fd [ 140.283501][ T9791] chnl_net:caif_netlink_parms(): no params data found [ 140.341734][ T9789] chnl_net:caif_netlink_parms(): no params data found [ 140.362105][ T9791] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.364387][ T9791] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.366810][ T9791] bridge_slave_0: entered allmulticast mode [ 140.370388][ T9791] bridge_slave_0: entered promiscuous mode [ 140.377744][ T9791] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.380056][ T9791] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.382397][ T9791] bridge_slave_1: entered allmulticast mode [ 140.385046][ T9791] bridge_slave_1: entered promiscuous mode [ 140.439499][ T9791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.446954][ T9791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.498778][ T9791] team0: Port device team_slave_0 added [ 140.535776][ T9791] team0: Port device team_slave_1 added [ 140.538915][ T9789] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.541897][ T9789] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.544883][ T9789] bridge_slave_0: entered allmulticast mode [ 140.548773][ T9789] bridge_slave_0: entered promiscuous mode [ 140.588030][ T9789] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.590464][ T9789] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.592811][ T9789] bridge_slave_1: entered allmulticast mode [ 140.595674][ T9789] bridge_slave_1: entered promiscuous mode [ 140.613327][ T9791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.615643][ T9791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.624269][ T9791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.643196][ T9789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.648240][ T9789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.651597][ T9791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.653881][ T9791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.662657][ T9791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.702972][ T9789] team0: Port device team_slave_0 added [ 140.706817][ T9789] team0: Port device team_slave_1 added [ 140.755784][ T9789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.758392][ T9789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.766265][ T9789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.788352][ T9791] hsr_slave_0: entered promiscuous mode [ 140.790724][ T9791] hsr_slave_1: entered promiscuous mode [ 140.793565][ T9789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.795976][ T9789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.804855][ T9789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.897038][ T9789] hsr_slave_0: entered promiscuous mode [ 140.901063][ T9789] hsr_slave_1: entered promiscuous mode [ 140.903256][ T9789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 140.905639][ T9789] Cannot create hsr debugfs directory [ 141.013374][ T9296] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.046689][ T9791] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.083638][ T9296] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.147770][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 141.191395][ T9296] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.228238][ T9814] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.1176'. [ 141.329856][ T9822] overlayfs: missing 'lowerdir' [ 141.345739][ T9296] bridge_slave_1: left allmulticast mode [ 141.348414][ T9296] bridge_slave_1: left promiscuous mode [ 141.350320][ T9296] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.354541][ T9296] bridge_slave_0: left allmulticast mode [ 141.356408][ T9296] bridge_slave_0: left promiscuous mode [ 141.358601][ T9296] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.651833][ T9296] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.658999][ T9296] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.662846][ T9296] bond0 (unregistering): Released all slaves [ 141.688967][ T9791] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.810373][ T9791] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.884652][ T9835] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1184'. [ 141.899146][ T9791] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.975261][ T40] audit: type=1400 audit(1748566931.471:616): avc: denied { shutdown } for pid=9838 comm="syz.4.1186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 141.979921][ T9839] Invalid source name [ 141.984554][ T9839] UBIFS error (pid: 9839): cannot open "/dev/sg0", error -22 [ 142.010610][ T9791] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 142.026586][ T9791] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 142.042462][ T9791] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 142.046753][ T9791] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 142.059053][ T9296] hsr_slave_0: left promiscuous mode [ 142.062475][ T9296] hsr_slave_1: left promiscuous mode [ 142.064517][ T9296] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.066934][ T9296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.070005][ T9296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.072363][ T9296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.106807][ T9296] veth1_macvtap: left promiscuous mode [ 142.109381][ T9296] veth0_macvtap: left promiscuous mode [ 142.111954][ T9296] veth1_vlan: left promiscuous mode [ 142.114238][ T9296] veth0_vlan: left promiscuous mode [ 142.186303][ T9848] overlayfs: missing 'lowerdir' [ 142.188134][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 142.192145][ T5932] Bluetooth: hci2: command tx timeout [ 142.192160][ T5934] Bluetooth: hci0: command tx timeout [ 142.223966][ T9850] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1189'. [ 142.775244][ T9296] team0 (unregistering): Port device team_slave_1 removed [ 142.857854][ T9296] team0 (unregistering): Port device team_slave_0 removed [ 143.229596][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 143.404363][ T9850] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 143.433988][ T9854] program syz.4.1190 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.439394][ T9791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.443662][ T40] audit: type=1400 audit(1748566932.941:617): avc: denied { mounton } for pid=9853 comm="syz.4.1190" path="/237/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 143.451376][ T9791] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.457498][ T9319] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.459812][ T9319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.475635][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.477982][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.629981][ T9791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.656675][ T9791] veth0_vlan: entered promiscuous mode [ 143.663388][ T9791] veth1_vlan: entered promiscuous mode [ 143.665353][ T40] audit: type=1400 audit(1748566933.161:618): avc: denied { write } for pid=9870 comm="syz.4.1194" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 143.688472][ T9791] veth0_macvtap: entered promiscuous mode [ 143.692415][ T9791] veth1_macvtap: entered promiscuous mode [ 143.726976][ T9791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.738065][ T9791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.746453][ T9791] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.750641][ T9791] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.753545][ T9791] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.756278][ T9791] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.775900][ T9873] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9873 comm=syz.4.1195 [ 143.780770][ T9874] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=9874 comm=syz.4.1195 [ 143.826959][ T9789] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 143.827699][ T9324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.832057][ T9324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.834643][ T9789] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 143.838849][ T9789] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 143.843295][ T9878] overlay: filesystem on ./file1 not supported [ 143.847285][ T9789] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 143.849302][ T9878] overlayfs: upper fs does not support tmpfile. [ 143.854853][ T9878] 9pnet_fd: Insufficient options for proto=fd [ 143.863048][ T9326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.865964][ T9326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.933511][ T9789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.942817][ T9789] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.948843][ T9319] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.951128][ T9319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.958263][ T9323] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.961208][ T9323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.965927][ T9296] bridge_slave_1: left allmulticast mode [ 143.967982][ T9296] bridge_slave_1: left promiscuous mode [ 143.969845][ T9296] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.974986][ T9296] bridge_slave_0: left allmulticast mode [ 143.976790][ T9296] bridge_slave_0: left promiscuous mode [ 143.980078][ T9296] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.234932][ T9296] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.240312][ T9296] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.243897][ T9296] bond0 (unregistering): Released all slaves [ 144.267763][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 144.270053][ T5932] Bluetooth: hci0: command tx timeout [ 144.376947][ T9789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.396998][ T9789] veth0_vlan: entered promiscuous mode [ 144.402010][ T9789] veth1_vlan: entered promiscuous mode [ 144.433912][ T9789] veth0_macvtap: entered promiscuous mode [ 144.440653][ T9789] veth1_macvtap: entered promiscuous mode [ 144.450208][ T9789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.456433][ T9789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.462064][ T9789] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.465469][ T9789] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.469293][ T9789] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.472684][ T9789] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.532414][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.535449][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.550991][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.553465][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.608974][ T9296] hsr_slave_0: left promiscuous mode [ 144.611579][ T9296] hsr_slave_1: left promiscuous mode [ 144.613754][ T9296] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.616505][ T9296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.619529][ T9296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.621878][ T9296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.650464][ T9296] veth1_macvtap: left promiscuous mode [ 144.652265][ T9296] veth0_macvtap: left promiscuous mode [ 144.654100][ T9296] veth1_vlan: left promiscuous mode [ 144.655992][ T9296] veth0_vlan: left promiscuous mode [ 145.267091][ T9296] team0 (unregistering): Port device team_slave_1 removed [ 145.311112][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 145.337185][ T9296] team0 (unregistering): Port device team_slave_0 removed [ 146.347872][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 146.396307][ T9296] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.522182][ T5934] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 146.526360][ T5934] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 146.530753][ T5934] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 146.535007][ T5934] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 146.538962][ T5934] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 146.559617][ T9885] lo speed is unknown, defaulting to 1000 [ 146.660739][ T9885] chnl_net:caif_netlink_parms(): no params data found [ 146.724378][ T9885] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.727243][ T9885] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.730381][ T9885] bridge_slave_0: entered allmulticast mode [ 146.733496][ T9885] bridge_slave_0: entered promiscuous mode [ 146.737073][ T9885] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.740796][ T9885] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.743639][ T9885] bridge_slave_1: entered allmulticast mode [ 146.746759][ T9885] bridge_slave_1: entered promiscuous mode [ 146.790773][ T9885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.796902][ T9885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.837314][ T9885] team0: Port device team_slave_0 added [ 146.851360][ T9885] team0: Port device team_slave_1 added [ 146.893506][ T9885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.896278][ T9885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.906308][ T9885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.912144][ T9885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.914870][ T9885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.924737][ T9885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.968467][ T9885] hsr_slave_0: entered promiscuous mode [ 146.970803][ T9885] hsr_slave_1: entered promiscuous mode [ 146.972857][ T9885] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.975226][ T9885] Cannot create hsr debugfs directory [ 147.387798][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 147.720866][ T5932] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 147.724131][ T5932] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 147.727061][ T5932] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 147.732240][ T5932] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 147.735414][ T5932] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 147.762111][ T9296] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.783276][ T9894] lo speed is unknown, defaulting to 1000 [ 147.859189][ T9296] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.903442][ T9894] chnl_net:caif_netlink_parms(): no params data found [ 147.925807][ T9296] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.987930][ T9894] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.990858][ T9894] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.993681][ T9894] bridge_slave_0: entered allmulticast mode [ 147.996816][ T9894] bridge_slave_0: entered promiscuous mode [ 148.001890][ T9894] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.004704][ T9894] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.007504][ T9894] bridge_slave_1: entered allmulticast mode [ 148.010797][ T9894] bridge_slave_1: entered promiscuous mode [ 148.048744][ T9894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.054810][ T9894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.109580][ T9894] team0: Port device team_slave_0 added [ 148.121460][ T9894] team0: Port device team_slave_1 added [ 148.148036][ T9296] bridge_slave_1: left allmulticast mode [ 148.150224][ T9296] bridge_slave_1: left promiscuous mode [ 148.152548][ T9296] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.157410][ T9296] bridge_slave_0: left allmulticast mode [ 148.159642][ T9296] bridge_slave_0: left promiscuous mode [ 148.161487][ T9296] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.413659][ T9296] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.419543][ T9296] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.423927][ T9296] bond0 (unregistering): Released all slaves [ 148.427917][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 148.469745][ T9894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.471886][ T9894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.480406][ T9894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.484864][ T9894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.487111][ T9894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.496349][ T9894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.578618][ T9894] hsr_slave_0: entered promiscuous mode [ 148.581740][ T9894] hsr_slave_1: entered promiscuous mode [ 148.584564][ T9894] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 148.589422][ T9894] Cannot create hsr debugfs directory [ 148.597840][ T5932] Bluetooth: hci0: command tx timeout [ 148.780427][ T9296] hsr_slave_0: left promiscuous mode [ 148.782725][ T9296] hsr_slave_1: left promiscuous mode [ 148.784873][ T9296] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.787338][ T9296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.790990][ T9296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.794151][ T9296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.825468][ T9296] veth1_macvtap: left promiscuous mode [ 148.827445][ T9296] veth0_macvtap: left promiscuous mode [ 148.829962][ T9296] veth1_vlan: left promiscuous mode [ 148.832209][ T9296] veth0_vlan: left promiscuous mode [ 149.462546][ T9296] team0 (unregistering): Port device team_slave_1 removed [ 149.471366][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 149.533230][ T9296] team0 (unregistering): Port device team_slave_0 removed [ 149.790482][ T5932] Bluetooth: hci2: command tx timeout [ 150.022469][ T9894] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.130988][ T9894] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.280404][ T9894] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.391500][ T9894] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.507793][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 150.525042][ T9885] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 150.531080][ T9885] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 150.535040][ T9885] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 150.541753][ T9885] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 150.594250][ T9296] bridge_slave_1: left allmulticast mode [ 150.596513][ T9296] bridge_slave_1: left promiscuous mode [ 150.598840][ T9296] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.603092][ T9296] bridge_slave_0: left allmulticast mode [ 150.604899][ T9296] bridge_slave_0: left promiscuous mode [ 150.606767][ T9296] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.667741][ T5932] Bluetooth: hci0: command tx timeout [ 150.826575][ T9296] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.831192][ T9296] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.834967][ T9296] bond0 (unregistering): Released all slaves [ 150.849546][ T9894] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 150.853649][ T9894] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 150.857798][ T9894] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 150.862535][ T9894] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 150.928016][ T9885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.955723][ T9885] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.960701][ T9894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.966223][ T9323] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.968628][ T9323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.978769][ T9322] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.981080][ T9322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.994421][ T9894] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.017260][ T9319] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.019599][ T9319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.041764][ T9319] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.044048][ T9319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.100814][ T9296] hsr_slave_0: left promiscuous mode [ 151.103110][ T9296] hsr_slave_1: left promiscuous mode [ 151.105092][ T9296] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.107914][ T9296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.110724][ T9296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.113280][ T9296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.142040][ T9296] veth1_macvtap: left promiscuous mode [ 151.143822][ T9296] veth0_macvtap: left promiscuous mode [ 151.145621][ T9296] veth1_vlan: left promiscuous mode [ 151.147334][ T9296] veth0_vlan: left promiscuous mode [ 151.548916][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 151.720905][ T9296] team0 (unregistering): Port device team_slave_1 removed [ 151.798513][ T9296] team0 (unregistering): Port device team_slave_0 removed [ 151.878352][ T5932] Bluetooth: hci2: command tx timeout [ 152.323650][ T9894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.333208][ T9885] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.364898][ T9894] veth0_vlan: entered promiscuous mode [ 152.380403][ T9885] veth0_vlan: entered promiscuous mode [ 152.386641][ T9885] veth1_vlan: entered promiscuous mode [ 152.390793][ T9894] veth1_vlan: entered promiscuous mode [ 152.411509][ T9885] veth0_macvtap: entered promiscuous mode [ 152.417439][ T9894] veth0_macvtap: entered promiscuous mode [ 152.420821][ T9885] veth1_macvtap: entered promiscuous mode [ 152.424740][ T9894] veth1_macvtap: entered promiscuous mode [ 152.433526][ T9885] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.445743][ T9894] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.450792][ T9894] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.457820][ T9885] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.462391][ T9885] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.465116][ T9885] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.467988][ T9885] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.470692][ T9885] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.474971][ T9894] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.477939][ T9894] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.480667][ T9894] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.483409][ T9894] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.544770][ T9326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.547393][ T9326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.559225][ T9326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.562192][ T9326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.578090][ T9322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.580545][ T9322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.584901][ T9322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.587371][ T9322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.587817][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 153.410788][ T9319] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.627726][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 153.902998][ T5934] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 153.907300][ T5934] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 153.910596][ T5934] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 153.913635][ T5934] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 153.916318][ T5934] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 153.938583][ T9911] lo speed is unknown, defaulting to 1000 [ 154.045137][ T9911] chnl_net:caif_netlink_parms(): no params data found [ 154.114985][ T9911] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.117220][ T9911] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.120300][ T9911] bridge_slave_0: entered allmulticast mode [ 154.123702][ T9911] bridge_slave_0: entered promiscuous mode [ 154.128086][ T9911] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.130535][ T9911] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.133006][ T9911] bridge_slave_1: entered allmulticast mode [ 154.136449][ T9911] bridge_slave_1: entered promiscuous mode [ 154.170192][ T9911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.174776][ T9911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.209348][ T9911] team0: Port device team_slave_0 added [ 154.213656][ T9911] team0: Port device team_slave_1 added [ 154.244718][ T9911] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.246942][ T9911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.255218][ T9911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.259861][ T9911] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.262062][ T9911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.271986][ T9911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.308781][ T9911] hsr_slave_0: entered promiscuous mode [ 154.311052][ T9911] hsr_slave_1: entered promiscuous mode [ 154.315967][ T5934] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 154.320035][ T5934] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 154.323482][ T5934] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 154.326291][ T5934] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 154.330915][ T5934] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 154.393411][ T9319] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.441818][ T9920] lo speed is unknown, defaulting to 1000 [ 154.529772][ T9920] chnl_net:caif_netlink_parms(): no params data found [ 154.599142][ T9920] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.601575][ T9920] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.604044][ T9920] bridge_slave_0: entered allmulticast mode [ 154.606788][ T9920] bridge_slave_0: entered promiscuous mode [ 154.612219][ T9920] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.614511][ T9920] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.616662][ T9920] bridge_slave_1: entered allmulticast mode [ 154.619399][ T9920] bridge_slave_1: entered promiscuous mode [ 154.652317][ T9920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.657066][ T9920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.667759][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 154.693394][ T9920] team0: Port device team_slave_0 added [ 154.696943][ T9920] team0: Port device team_slave_1 added [ 154.726435][ T9920] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.728752][ T9920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.736725][ T9920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.742576][ T9920] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.744746][ T9920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.753588][ T9920] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.794215][ T9920] hsr_slave_0: entered promiscuous mode [ 154.796338][ T9920] hsr_slave_1: entered promiscuous mode [ 154.798472][ T9920] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 154.800632][ T9920] Cannot create hsr debugfs directory [ 154.949956][ T9319] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.052042][ T9319] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.140938][ T9319] bridge_slave_1: left allmulticast mode [ 155.142771][ T9319] bridge_slave_1: left promiscuous mode [ 155.144639][ T9319] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.150895][ T9319] bridge_slave_0: left allmulticast mode [ 155.153332][ T9319] bridge_slave_0: left promiscuous mode [ 155.155894][ T9319] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.452066][ T9319] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.456425][ T9319] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.461924][ T9319] bond0 (unregistering): Released all slaves [ 155.707799][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 155.900321][ T9319] hsr_slave_0: left promiscuous mode [ 155.902494][ T9319] hsr_slave_1: left promiscuous mode [ 155.904485][ T9319] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.906844][ T9319] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.909850][ T9319] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.912166][ T9319] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.946524][ T9319] veth1_macvtap: left promiscuous mode [ 155.951501][ T9319] veth0_macvtap: left promiscuous mode [ 155.953711][ T9319] veth1_vlan: left promiscuous mode [ 155.955811][ T9319] veth0_vlan: left promiscuous mode [ 155.957910][ T5934] Bluetooth: hci0: command tx timeout [ 156.351761][ T63] Bluetooth: hci2: command tx timeout [ 156.352000][ T5932] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 156.357513][ T5932] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 156.364988][ T5932] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 156.373085][ T5932] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 156.375737][ T5932] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 156.658934][ T9319] team0 (unregistering): Port device team_slave_1 removed [ 156.748674][ T9319] team0 (unregistering): Port device team_slave_0 removed [ 156.757798][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 157.283637][ T9920] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.294523][ T9929] lo speed is unknown, defaulting to 1000 [ 157.405835][ T9920] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.414191][ T9929] chnl_net:caif_netlink_parms(): no params data found [ 157.476128][ T9929] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.478619][ T9929] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.480884][ T9929] bridge_slave_0: entered allmulticast mode [ 157.484385][ T9929] bridge_slave_0: entered promiscuous mode [ 157.487515][ T9929] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.492362][ T9929] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.494670][ T9929] bridge_slave_1: entered allmulticast mode [ 157.497731][ T9929] bridge_slave_1: entered promiscuous mode [ 157.531193][ T9929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.535943][ T9929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.582188][ T9920] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.591609][ T9929] team0: Port device team_slave_0 added [ 157.595270][ T9929] team0: Port device team_slave_1 added [ 157.629062][ T9929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.631285][ T9929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.640628][ T9929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.645014][ T9929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.647380][ T9929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.655935][ T9929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.703271][ T9920] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.714239][ T9929] hsr_slave_0: entered promiscuous mode [ 157.716511][ T9929] hsr_slave_1: entered promiscuous mode [ 157.719082][ T9929] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 157.721449][ T9929] Cannot create hsr debugfs directory [ 157.787703][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 157.891946][ T9920] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 157.896213][ T9920] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 157.902518][ T9920] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 157.914487][ T9920] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 157.936260][ T9911] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 157.943576][ T9911] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 157.947832][ T9911] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 157.952864][ T9911] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 158.008882][ T9929] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 158.013677][ T9929] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 158.020353][ T9929] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 158.025336][ T9929] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 158.027927][ T5934] Bluetooth: hci0: command tx timeout [ 158.076772][ T9929] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.079848][ T9929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.082992][ T9929] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.085957][ T9929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.138729][ T9920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.145165][ T9911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.156286][ T9322] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.161767][ T9322] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.178794][ T9929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.182576][ T9920] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.191819][ T9911] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.199325][ T9296] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.201596][ T9296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.211329][ T9322] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.213736][ T9322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.220105][ T9929] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.229381][ T9322] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.231643][ T9322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.258444][ T9324] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.260697][ T9324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.263891][ T9324] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.266125][ T9324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.279509][ T9324] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.282408][ T9324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.310667][ T9319] team0: left allmulticast mode [ 158.312582][ T9319] bridge0: port 1(team0) entered disabled state [ 158.321840][ T9319] bridge_slave_1: left allmulticast mode [ 158.323645][ T9319] bridge_slave_1: left promiscuous mode [ 158.325478][ T9319] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.329885][ T9319] bridge_slave_0: left allmulticast mode [ 158.331679][ T9319] bridge_slave_0: left promiscuous mode [ 158.333592][ T9319] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.429777][ T5934] Bluetooth: hci1: command tx timeout [ 158.429870][ T5932] Bluetooth: hci2: command tx timeout [ 158.837839][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 158.883145][ T9319] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 158.889076][ T9319] bond0 (unregistering): Released all slaves [ 158.895137][ T9319] bond1 (unregistering): Released all slaves [ 159.142535][ T9319] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.147402][ T9319] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.152237][ T9319] bond0 (unregistering): Released all slaves [ 159.183579][ T9911] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 159.326971][ T9911] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.335816][ T9920] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.364604][ T9929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.381651][ T9911] veth0_vlan: entered promiscuous mode [ 159.387036][ T9911] veth1_vlan: entered promiscuous mode [ 159.415798][ T5934] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 159.426077][ T5934] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 159.429039][ T5934] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 159.433993][ T5934] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 159.436875][ T5934] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 159.439194][ T9911] veth0_macvtap: entered promiscuous mode [ 159.443783][ T9911] veth1_macvtap: entered promiscuous mode [ 159.456726][ T9920] veth0_vlan: entered promiscuous mode [ 159.463806][ T9911] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.472248][ T9920] veth1_vlan: entered promiscuous mode [ 159.483720][ T9956] lo speed is unknown, defaulting to 1000 [ 159.485889][ T9911] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.530012][ T9911] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.532874][ T9911] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.535651][ T9911] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.538968][ T9911] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.561685][ T9920] veth0_macvtap: entered promiscuous mode [ 159.576992][ T9920] veth1_macvtap: entered promiscuous mode [ 159.585190][ T9929] veth0_vlan: entered promiscuous mode [ 159.641013][ T9920] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.659371][ T9929] veth1_vlan: entered promiscuous mode [ 159.668098][ T9920] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.669188][ T9326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.672803][ T9326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.693488][ T9920] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.696224][ T9920] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.701451][ T9920] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.704156][ T9920] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.715265][ T9956] chnl_net:caif_netlink_parms(): no params data found [ 159.727010][ T9319] hsr_slave_0: left promiscuous mode [ 159.730267][ T9319] hsr_slave_1: left promiscuous mode [ 159.734340][ T9319] hsr_slave_0: left promiscuous mode [ 159.736375][ T9319] hsr_slave_1: left promiscuous mode [ 159.739805][ T9319] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.742145][ T9319] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.744796][ T9319] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.747113][ T9319] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.779040][ T9319] veth1_macvtap: left promiscuous mode [ 159.780826][ T9319] veth0_macvtap: left promiscuous mode [ 159.782606][ T9319] veth1_vlan: left promiscuous mode [ 159.784284][ T9319] veth0_vlan: left promiscuous mode [ 159.867713][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 160.107691][ T5934] Bluetooth: hci0: command tx timeout [ 160.508224][ T5932] Bluetooth: hci1: command tx timeout [ 160.510714][ T5934] Bluetooth: hci2: command tx timeout [ 160.907821][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 161.409831][ T9319] team0 (unregistering): Port device team_slave_1 removed [ 161.467848][ T5934] Bluetooth: hci4: command tx timeout [ 161.480865][ T9319] team0 (unregistering): Port device team_slave_0 removed [ 161.957736][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 162.001619][ T9296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.004140][ T9296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.046733][ T9929] veth0_macvtap: entered promiscuous mode [ 162.104522][ T9929] veth1_macvtap: entered promiscuous mode [ 162.122637][ T9956] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.125072][ T9956] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.127427][ T9956] bridge_slave_0: entered allmulticast mode [ 162.130587][ T9956] bridge_slave_0: entered promiscuous mode [ 162.139869][ T9956] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.143094][ T9956] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.146209][ T9956] bridge_slave_1: entered allmulticast mode [ 162.152743][ T9956] bridge_slave_1: entered promiscuous mode [ 162.197800][ T9326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.199756][ T9956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.200215][ T9326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.206841][ T9956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.237193][ T9929] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.255107][ T9956] team0: Port device team_slave_0 added [ 162.271264][ T9929] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.283063][ T9956] team0: Port device team_slave_1 added [ 162.286873][ T9296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.294500][ T9296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.319966][ T9929] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.322700][ T9929] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.325441][ T9929] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.330181][ T9929] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.335177][ T9956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.337426][ T9956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.345721][ T9956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.352168][ T9956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.354421][ T9956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.363337][ T9956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.440706][ T9956] hsr_slave_0: entered promiscuous mode [ 162.442924][ T9956] hsr_slave_1: entered promiscuous mode [ 162.444981][ T9956] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 162.447355][ T9956] Cannot create hsr debugfs directory [ 162.517867][ T9325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.520453][ T9325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.576715][ T9326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.581025][ T9326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.587987][ T5934] Bluetooth: hci1: command tx timeout [ 162.615178][ T9956] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 162.621347][ T9956] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 162.630307][ T9956] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 162.642431][ T9956] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 162.702368][ T9956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.714293][ T9956] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.743606][ T9313] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.746613][ T9313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.759073][ T9313] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.761383][ T9313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.865936][ T5932] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 162.878028][ T5932] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 162.881578][ T9956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.883033][ T5932] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 162.887829][ T5932] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 162.891348][ T5932] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 162.913332][ T9974] lo speed is unknown, defaulting to 1000 [ 162.953705][ T9319] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.987874][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 163.041257][ T9974] chnl_net:caif_netlink_parms(): no params data found [ 163.069004][ T9956] veth0_vlan: entered promiscuous mode [ 163.081370][ T9956] veth1_vlan: entered promiscuous mode [ 163.118833][ T9974] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.121469][ T9974] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.124128][ T9974] bridge_slave_0: entered allmulticast mode [ 163.127425][ T9974] bridge_slave_0: entered promiscuous mode [ 163.133937][ T9974] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.136780][ T9974] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.139354][ T9974] bridge_slave_1: entered allmulticast mode [ 163.142578][ T9974] bridge_slave_1: entered promiscuous mode [ 163.175770][ T9974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.182155][ T9974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.220964][ T9974] team0: Port device team_slave_0 added [ 163.230402][ T9974] team0: Port device team_slave_1 added [ 163.283531][ T9974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.286006][ T9974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.296226][ T9974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.303220][ T9974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.305618][ T9974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.315976][ T9974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.335814][ T40] audit: type=1400 audit(1748566952.831:619): avc: denied { write } for pid=9991 comm="syz.5.1200" name="cgroup.events" dev="9p" ino=35913954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 163.345767][ T40] audit: type=1400 audit(1748566952.831:620): avc: denied { map } for pid=9991 comm="syz.5.1200" path="/1/file0/cgroup.events" dev="9p" ino=35913954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 163.354521][ T40] audit: type=1400 audit(1748566952.831:621): avc: denied { execute } for pid=9991 comm="syz.5.1200" path="/1/file0/cgroup.events" dev="9p" ino=35913954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 163.365158][ T40] audit: type=1400 audit(1748566952.861:622): avc: denied { unmount } for pid=9929 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 163.380037][ T5932] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 163.382604][ T9956] veth0_macvtap: entered promiscuous mode [ 163.384541][ T5932] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 163.389110][ T5932] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 163.391955][ T5932] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 163.395124][ T5932] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 163.450657][ T9319] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.464212][ T9974] hsr_slave_0: entered promiscuous mode [ 163.466498][ T9974] hsr_slave_1: entered promiscuous mode [ 163.470079][ T9974] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 163.472415][ T9974] Cannot create hsr debugfs directory [ 163.475338][ T9956] veth1_macvtap: entered promiscuous mode [ 163.484992][ T40] audit: type=1400 audit(1748566952.981:623): avc: denied { mounton } for pid=9999 comm="syz.5.1201" path="/2/file0" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 163.485141][T10000] overlayfs: failed to resolve './file1/file0': -2 [ 163.499898][T10000] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1201'. [ 163.545821][ T9997] lo speed is unknown, defaulting to 1000 [ 163.557800][ T5934] Bluetooth: hci4: command tx timeout [ 163.573463][ T9956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.598748][ T9956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.640303][ T9956] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.643909][ T9956] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.647536][ T9956] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.651901][ T9956] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.690176][ T9974] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.755768][T10012] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1204'. [ 163.770507][ T9997] chnl_net:caif_netlink_parms(): no params data found [ 163.816923][ T9296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.818526][T10017] overlayfs: missing 'lowerdir' [ 163.821448][ T9296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.834403][ T9319] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.866871][ T9974] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.912629][ T9997] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.915605][ T9997] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.918353][ T9997] bridge_slave_0: entered allmulticast mode [ 163.921022][ T9997] bridge_slave_0: entered promiscuous mode [ 163.924141][ T9997] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.926441][ T9997] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.930081][ T9997] bridge_slave_1: entered allmulticast mode [ 163.932900][ T9997] bridge_slave_1: entered promiscuous mode [ 163.949405][ T9325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.951855][ T9325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.968453][ T9997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.990184][ T9319] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.997467][ T9997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.027880][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 164.030544][ T40] audit: type=1400 audit(1748566953.531:624): avc: denied { read } for pid=10019 comm="syz.5.1206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 164.049701][ T9997] team0: Port device team_slave_0 added [ 164.058877][ T9997] team0: Port device team_slave_1 added [ 164.111747][ T9997] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.113957][ T9997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.121403][T10027] Bluetooth: MGMT ver 1.23 [ 164.122436][ T9997] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.130928][ T9997] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.133764][ T9997] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.143534][ T9997] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.157218][ T9974] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.157325][T10027] overlay: filesystem on ./file1 not supported [ 164.210516][ T9997] hsr_slave_0: entered promiscuous mode [ 164.213118][ T9997] hsr_slave_1: entered promiscuous mode [ 164.215339][ T9997] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 164.218280][ T9997] Cannot create hsr debugfs directory [ 164.281990][ T9974] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.358466][ T9319] bridge_slave_1: left allmulticast mode [ 164.360309][ T9319] bridge_slave_1: left promiscuous mode [ 164.362212][ T9319] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.366531][ T9319] bridge_slave_0: left allmulticast mode [ 164.369396][ T9319] bridge_slave_0: left promiscuous mode [ 164.371256][ T9319] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.376843][ T9319] bridge_slave_1: left allmulticast mode [ 164.379002][ T9319] bridge_slave_1: left promiscuous mode [ 164.380788][ T9319] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.384319][ T9319] bridge_slave_0: left allmulticast mode [ 164.386207][ T9319] bridge_slave_0: left promiscuous mode [ 164.389524][ T9319] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.668610][ T5934] Bluetooth: hci1: command tx timeout [ 164.704274][ T9319] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.709509][ T9319] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.719265][ T9319] bond0 (unregistering): Released all slaves [ 164.920940][ T5934] Bluetooth: hci0: command tx timeout [ 164.981258][ T9319] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.985333][ T9319] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.989601][ T9319] bond0 (unregistering): Released all slaves [ 165.020568][T10030] ip6erspan0: entered promiscuous mode [ 165.071199][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 165.135663][T10033] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1210'. [ 165.139070][T10033] netlink: 'syz.5.1210': attribute type 1 has an invalid length. [ 165.141456][T10033] netlink: 'syz.5.1210': attribute type 2 has an invalid length. [ 165.157237][T10033] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1210'. [ 165.467822][ T5934] Bluetooth: hci2: command tx timeout [ 165.518623][ T9319] hsr_slave_0: left promiscuous mode [ 165.520711][ T9319] hsr_slave_1: left promiscuous mode [ 165.522722][ T9319] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.525035][ T9319] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.528045][ T9319] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.530805][ T9319] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.536917][ T9319] hsr_slave_0: left promiscuous mode [ 165.539747][ T9319] hsr_slave_1: left promiscuous mode [ 165.542238][ T9319] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.545262][ T9319] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.552298][ T9319] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.555613][ T9319] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.637843][ T5934] Bluetooth: hci4: command tx timeout [ 165.641543][ T9319] veth1_macvtap: left promiscuous mode [ 165.643266][ T9319] veth0_macvtap: left promiscuous mode [ 165.645074][ T9319] veth1_vlan: left promiscuous mode [ 165.646820][ T9319] veth0_vlan: left promiscuous mode [ 165.651168][ T9319] veth1_macvtap: left promiscuous mode [ 165.652921][ T9319] veth0_macvtap: left promiscuous mode [ 165.654741][ T9319] veth1_vlan: left promiscuous mode [ 165.656480][ T9319] veth0_vlan: left promiscuous mode [ 166.117768][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 166.125399][T10052] IPv6: NLM_F_REPLACE set, but no existing node found! [ 166.386207][ T9319] team0 (unregistering): Port device team_slave_1 removed [ 166.459645][ T9319] team0 (unregistering): Port device team_slave_0 removed [ 166.988387][ T5934] Bluetooth: hci0: command tx timeout [ 167.148265][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 167.497915][ T9319] team0 (unregistering): Port device team_slave_1 removed [ 167.557798][ T5934] Bluetooth: hci2: command tx timeout [ 167.564674][ T9319] team0 (unregistering): Port device team_slave_0 removed [ 167.707767][ T5934] Bluetooth: hci4: command tx timeout [ 168.084487][ T9997] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 168.090046][ T9997] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 168.094665][ T9974] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 168.099080][ T9997] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 168.111828][ T9974] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 168.115794][ T9974] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 168.119487][ T9997] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 168.125338][T10055] lo speed is unknown, defaulting to 1000 [ 168.125369][ T9974] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 168.187692][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 168.242812][ T9974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.258526][ T9997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.262614][ T9974] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.272313][ T9325] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.274500][ T9325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.281978][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.284284][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.293342][ T9997] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.300725][ T9323] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.302947][ T9323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.318854][ T9323] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.321240][ T9323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.434098][ T9974] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.456726][ T9997] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.472643][ T9974] veth0_vlan: entered promiscuous mode [ 168.483698][ T9974] veth1_vlan: entered promiscuous mode [ 168.488806][ T9997] veth0_vlan: entered promiscuous mode [ 168.494476][ T9997] veth1_vlan: entered promiscuous mode [ 168.511124][ T9974] veth0_macvtap: entered promiscuous mode [ 168.516947][ T9974] veth1_macvtap: entered promiscuous mode [ 168.532564][ T9974] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.542425][ T9974] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.547034][ T9997] veth0_macvtap: entered promiscuous mode [ 168.550507][ T9974] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.553188][ T9974] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.555836][ T9974] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.559592][ T9974] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.576682][ T9997] veth1_macvtap: entered promiscuous mode [ 168.597836][ T9326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.601075][ T9326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.607061][ T9997] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.616485][ T9997] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.632085][ T9323] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.633107][ T9997] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.634553][ T9323] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.638117][ T9997] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.642949][ T9997] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.645663][ T9997] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.725107][ T9296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.731750][ T9296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.745074][ T9296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.747788][ T9296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.237980][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 170.267783][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 170.533403][ T9326] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.826933][ T5932] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 170.831310][ T5932] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 170.834157][ T5932] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 170.837535][ T5932] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 170.841576][ T5932] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 170.859335][T10078] lo speed is unknown, defaulting to 1000 [ 170.939829][T10078] chnl_net:caif_netlink_parms(): no params data found [ 171.006212][T10078] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.009470][T10078] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.011770][T10078] bridge_slave_0: entered allmulticast mode [ 171.014444][T10078] bridge_slave_0: entered promiscuous mode [ 171.018001][T10078] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.020246][T10078] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.022538][T10078] bridge_slave_1: entered allmulticast mode [ 171.025231][T10078] bridge_slave_1: entered promiscuous mode [ 171.059110][T10078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.064505][T10078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.101385][T10078] team0: Port device team_slave_0 added [ 171.106778][T10078] team0: Port device team_slave_1 added [ 171.141051][T10078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.143302][T10078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.152094][T10078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.156469][T10078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.158847][T10078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.166948][T10078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.206431][T10078] hsr_slave_0: entered promiscuous mode [ 171.209569][T10078] hsr_slave_1: entered promiscuous mode [ 171.307880][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 171.441944][ T5932] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 171.445565][ T5932] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 171.449150][ T5932] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 171.452225][ T5932] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 171.455501][ T5932] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 171.474352][T10087] lo speed is unknown, defaulting to 1000 [ 171.564151][T10087] chnl_net:caif_netlink_parms(): no params data found [ 171.630461][T10087] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.633103][T10087] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.635873][T10087] bridge_slave_0: entered allmulticast mode [ 171.638582][T10087] bridge_slave_0: entered promiscuous mode [ 171.641658][T10087] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.644055][T10087] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.646475][T10087] bridge_slave_1: entered allmulticast mode [ 171.649582][T10087] bridge_slave_1: entered promiscuous mode [ 171.690864][T10087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.695455][T10087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.730634][T10087] team0: Port device team_slave_0 added [ 171.734690][T10087] team0: Port device team_slave_1 added [ 171.766952][T10087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.769435][T10087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.777408][T10087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.781846][T10087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.784070][T10087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.793682][T10087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.836885][T10087] hsr_slave_0: entered promiscuous mode [ 171.840173][T10087] hsr_slave_1: entered promiscuous mode [ 171.842342][T10087] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 171.845033][T10087] Cannot create hsr debugfs directory [ 172.231250][ T9326] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.320235][ T9326] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.347865][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 172.381048][ T9326] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.483907][ T9326] bridge_slave_1: left allmulticast mode [ 172.485758][ T9326] bridge_slave_1: left promiscuous mode [ 172.487918][ T9326] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.491701][ T9326] bridge_slave_0: left allmulticast mode [ 172.493513][ T9326] bridge_slave_0: left promiscuous mode [ 172.495783][ T9326] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.773162][ T9326] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.777461][ T9326] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.781602][ T9326] bond0 (unregistering): Released all slaves [ 172.908178][ T5934] Bluetooth: hci0: command tx timeout [ 173.108966][ T9326] hsr_slave_0: left promiscuous mode [ 173.111178][ T9326] hsr_slave_1: left promiscuous mode [ 173.113267][ T9326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.115558][ T9326] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.118505][ T9326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.120897][ T9326] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.144994][ T9326] veth1_macvtap: left promiscuous mode [ 173.146864][ T9326] veth0_macvtap: left promiscuous mode [ 173.148746][ T9326] veth1_vlan: left promiscuous mode [ 173.150455][ T9326] veth0_vlan: left promiscuous mode [ 173.387770][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 173.477822][ T5934] Bluetooth: hci2: command tx timeout [ 173.859298][ T9326] team0 (unregistering): Port device team_slave_1 removed [ 173.932885][ T9326] team0 (unregistering): Port device team_slave_0 removed [ 174.437764][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 174.546972][T10087] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.704850][T10087] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.840475][T10087] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.916236][T10087] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.987860][ T5934] Bluetooth: hci0: command tx timeout [ 175.045885][T10078] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 175.051758][T10078] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 175.056469][T10078] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 175.061260][T10078] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 175.085632][ T9326] bridge_slave_1: left allmulticast mode [ 175.087491][ T9326] bridge_slave_1: left promiscuous mode [ 175.090117][ T9326] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.093942][ T9326] bridge_slave_0: left allmulticast mode [ 175.095732][ T9326] bridge_slave_0: left promiscuous mode [ 175.097750][ T9326] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.347513][ T9326] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.351734][ T9326] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.355844][ T9326] bond0 (unregistering): Released all slaves [ 175.382184][T10087] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 175.386332][T10087] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 175.391127][T10087] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 175.395543][T10087] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 175.468353][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 175.470290][T10078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.501047][T10087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.506591][T10078] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.515514][ T9319] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.517898][ T9319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.525561][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.528002][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.533521][T10087] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.541674][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.543869][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.550249][ T5934] Bluetooth: hci2: command tx timeout [ 175.561968][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.564219][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.646127][ T9326] hsr_slave_0: left promiscuous mode [ 175.651139][ T9326] hsr_slave_1: left promiscuous mode [ 175.653276][ T9326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.655558][ T9326] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.669804][ T9326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.672111][ T9326] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.702084][ T9326] veth1_macvtap: left promiscuous mode [ 175.703870][ T9326] veth0_macvtap: left promiscuous mode [ 175.705588][ T9326] veth1_vlan: left promiscuous mode [ 175.707248][ T9326] veth0_vlan: left promiscuous mode [ 176.496399][ T9326] team0 (unregistering): Port device team_slave_1 removed [ 176.507886][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 176.584054][ T9326] team0 (unregistering): Port device team_slave_0 removed [ 177.072785][ T5934] Bluetooth: hci0: command tx timeout [ 177.267400][T10087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.283003][T10078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.328287][T10087] veth0_vlan: entered promiscuous mode [ 177.335540][T10078] veth0_vlan: entered promiscuous mode [ 177.339692][T10087] veth1_vlan: entered promiscuous mode [ 177.345853][T10078] veth1_vlan: entered promiscuous mode [ 177.374623][T10078] veth0_macvtap: entered promiscuous mode [ 177.380533][T10078] veth1_macvtap: entered promiscuous mode [ 177.399595][T10078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.404413][T10087] veth0_macvtap: entered promiscuous mode [ 177.411010][T10078] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.421018][T10078] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.423783][T10078] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.426492][T10078] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.430195][T10078] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.434225][T10087] veth1_macvtap: entered promiscuous mode [ 177.452379][T10087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.458272][T10087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.469142][T10087] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.471917][T10087] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.474668][T10087] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.477416][T10087] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.491054][ T9296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.493760][ T9296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.516706][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.519936][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.538320][ T9323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.540793][ T9323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.557758][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 177.562560][ T9296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.565122][ T9296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.393352][ T9296] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.597827][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 178.916196][ T5932] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 178.920080][ T5932] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 178.922971][ T5932] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 178.926778][ T5932] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 178.931481][ T5932] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 178.947435][T10104] lo speed is unknown, defaulting to 1000 [ 179.056193][T10104] chnl_net:caif_netlink_parms(): no params data found [ 179.128626][T10104] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.130906][T10104] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.133141][T10104] bridge_slave_0: entered allmulticast mode [ 179.135803][T10104] bridge_slave_0: entered promiscuous mode [ 179.139292][T10104] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.141623][T10104] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.143833][T10104] bridge_slave_1: entered allmulticast mode [ 179.146458][T10104] bridge_slave_1: entered promiscuous mode [ 179.195479][T10104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.200369][T10104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.235449][T10104] team0: Port device team_slave_0 added [ 179.244995][T10104] team0: Port device team_slave_1 added [ 179.280133][T10104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.282622][T10104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.293782][T10104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.303037][T10104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.305289][T10104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.313913][T10104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.353545][T10104] hsr_slave_0: entered promiscuous mode [ 179.355744][T10104] hsr_slave_1: entered promiscuous mode [ 179.357995][T10104] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 179.360339][T10104] Cannot create hsr debugfs directory [ 179.471975][ T9296] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.577197][ T5932] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 179.581049][ T5932] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 179.584077][ T5932] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 179.587804][ T5932] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 179.592406][ T5932] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 179.609955][T10113] lo speed is unknown, defaulting to 1000 [ 179.627836][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 179.702989][T10113] chnl_net:caif_netlink_parms(): no params data found [ 179.788638][T10113] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.791017][T10113] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.793342][T10113] bridge_slave_0: entered allmulticast mode [ 179.796052][T10113] bridge_slave_0: entered promiscuous mode [ 179.800298][T10113] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.802643][T10113] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.804952][T10113] bridge_slave_1: entered allmulticast mode [ 179.808453][T10113] bridge_slave_1: entered promiscuous mode [ 179.842662][T10113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.847359][T10113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.898938][T10113] team0: Port device team_slave_0 added [ 179.903097][T10113] team0: Port device team_slave_1 added [ 179.951344][T10113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.953561][T10113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.962898][T10113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.967454][T10113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.969869][T10113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.979658][T10113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.030963][T10113] hsr_slave_0: entered promiscuous mode [ 180.034324][T10113] hsr_slave_1: entered promiscuous mode [ 180.037178][T10113] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 180.040403][T10113] Cannot create hsr debugfs directory [ 180.128494][ T9296] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.191159][ T9296] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.300265][ T9296] bridge_slave_1: left allmulticast mode [ 180.302676][ T9296] bridge_slave_1: left promiscuous mode [ 180.305209][ T9296] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.310938][ T9296] bridge_slave_0: left allmulticast mode [ 180.313332][ T9296] bridge_slave_0: left promiscuous mode [ 180.315805][ T9296] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.505179][T10123] befs: (nullb0): No write support. Marking filesystem read-only [ 180.510382][T10123] befs: (nullb0): invalid magic header [ 180.642929][ T9296] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.649598][ T5934] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 180.652326][ T9296] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.653664][ T5934] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 180.660073][ T5934] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 180.660127][ T9296] bond0 (unregistering): Released all slaves [ 180.665114][ T5934] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 180.667723][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 180.669556][ T5934] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 180.682528][T10125] 8021q: adding VLAN 0 to HW filter on device bond1 [ 180.760135][T10129] lo speed is unknown, defaulting to 1000 [ 180.933708][T10134] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 180.935744][T10134] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 180.941320][T10134] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 180.945730][T10134] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 180.954768][T10134] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 180.959848][T10134] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 180.963017][T10134] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 180.965111][T10134] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 180.967219][ T9296] hsr_slave_0: left promiscuous mode [ 180.969959][T10134] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 180.972036][ T9296] hsr_slave_1: left promiscuous mode [ 180.975007][T10134] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 180.975112][ T9296] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.976984][T10134] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 180.980057][ T9296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.985347][ T9296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.985735][T10134] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 180.988675][ T9296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.021846][ T9296] veth1_macvtap: left promiscuous mode [ 181.023704][ T9296] veth0_macvtap: left promiscuous mode [ 181.025525][ T9296] veth1_vlan: left promiscuous mode [ 181.027323][ T9296] veth0_vlan: left promiscuous mode [ 181.707916][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 181.711361][ T9296] team0 (unregistering): Port device team_slave_1 removed [ 181.799192][ T9296] team0 (unregistering): Port device team_slave_0 removed [ 182.417317][T10129] chnl_net:caif_netlink_parms(): no params data found [ 182.489255][T10129] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.491695][T10129] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.493997][T10129] bridge_slave_0: entered allmulticast mode [ 182.496768][T10156] qrtr: Invalid version 0 [ 182.497074][T10129] bridge_slave_0: entered promiscuous mode [ 182.503844][T10129] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.507807][T10129] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.510697][T10129] bridge_slave_1: entered allmulticast mode [ 182.515681][T10129] bridge_slave_1: entered promiscuous mode [ 182.554446][T10113] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.595264][T10129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.600290][T10129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.656068][T10113] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.666922][T10129] team0: Port device team_slave_0 added [ 182.670733][T10129] team0: Port device team_slave_1 added [ 182.700845][T10129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.703285][T10129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.712901][T10129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.718986][T10129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.721197][T10129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.730890][T10129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.757695][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 182.780304][T10129] hsr_slave_0: entered promiscuous mode [ 182.783140][T10129] hsr_slave_1: entered promiscuous mode [ 182.800403][T10113] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.907719][ T5932] Bluetooth: hci1: command 0x0c1a tx timeout [ 182.911244][T10113] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.968638][ T9296] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.987791][ T5934] Bluetooth: hci0: command 0x041b tx timeout [ 182.991405][ T5932] Bluetooth: hci3: command 0x041b tx timeout [ 182.997828][ T5932] Bluetooth: hci2: command 0x041b tx timeout [ 183.019057][T10104] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 183.023181][T10104] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 183.029257][T10104] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 183.034825][T10104] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 183.102782][ T9296] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.111566][T10129] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 183.116883][T10129] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 183.121869][T10129] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 183.127782][T10129] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 183.169224][T10113] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 183.173721][T10113] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 183.190357][ T9296] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.196511][T10113] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 183.202253][T10113] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 183.207426][T10129] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.209814][T10129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.212255][T10129] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.214525][T10129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.240703][ T9296] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.279016][T10104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.293430][ T9313] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.297078][ T9313] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.313282][T10104] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.324843][ T9323] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.327199][ T9323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.333942][ T9323] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.336989][ T9323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.343021][T10129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.375656][T10129] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.409357][ T9313] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.411675][ T9313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.418339][T10113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.426575][ T9296] bridge_slave_1: left allmulticast mode [ 183.428469][ T9296] bridge_slave_1: left promiscuous mode [ 183.430249][ T9296] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.433911][ T9296] bridge_slave_0: left allmulticast mode [ 183.435713][ T9296] bridge_slave_0: left promiscuous mode [ 183.438127][ T9296] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.445414][ T9296] bridge_slave_1: left allmulticast mode [ 183.447285][ T9296] bridge_slave_1: left promiscuous mode [ 183.449361][ T9296] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.453230][ T9296] bridge_slave_0: left allmulticast mode [ 183.455103][ T9296] bridge_slave_0: left promiscuous mode [ 183.457034][ T9296] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.798633][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 183.868868][ T9296] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.873443][ T9296] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.877223][ T9296] bond0 (unregistering): Released all slaves [ 184.103198][ T9296] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.110960][ T9296] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.116125][ T9296] bond0 (unregistering): Released all slaves [ 184.136925][ T9323] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.139215][ T9323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.176244][T10113] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.206412][ T9326] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.208860][ T9326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.222752][ T9326] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.225127][ T9326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.351316][T10104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.410677][T10129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.413681][T10104] veth0_vlan: entered promiscuous mode [ 184.423339][T10104] veth1_vlan: entered promiscuous mode [ 184.441294][T10113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.479667][T10104] veth0_macvtap: entered promiscuous mode [ 184.489891][T10104] veth1_macvtap: entered promiscuous mode [ 184.507273][T10104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.519604][T10104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.526669][T10113] veth0_vlan: entered promiscuous mode [ 184.532459][T10104] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.536103][T10104] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.541865][T10104] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.544997][T10104] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.560738][T10113] veth1_vlan: entered promiscuous mode [ 184.626306][T10113] veth0_macvtap: entered promiscuous mode [ 184.626440][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.631095][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.634159][T10113] veth1_macvtap: entered promiscuous mode [ 184.671855][ T9296] hsr_slave_0: left promiscuous mode [ 184.674041][ T9296] hsr_slave_1: left promiscuous mode [ 184.676114][ T9296] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.678974][ T9296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.681964][ T9296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.684348][ T9296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.689862][ T9296] hsr_slave_0: left promiscuous mode [ 184.691979][ T9296] hsr_slave_1: left promiscuous mode [ 184.694110][ T9296] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.696583][ T9296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.701148][ T9296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.703691][ T9296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.754479][ T9296] veth1_macvtap: left promiscuous mode [ 184.756300][ T9296] veth0_macvtap: left promiscuous mode [ 184.759240][ T9296] veth1_vlan: left promiscuous mode [ 184.760938][ T9296] veth0_vlan: left promiscuous mode [ 184.763316][ T9296] veth1_macvtap: left promiscuous mode [ 184.765071][ T9296] veth0_macvtap: left promiscuous mode [ 184.766883][ T9296] veth1_vlan: left promiscuous mode [ 184.769056][ T9296] veth0_vlan: left promiscuous mode [ 184.837801][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 184.987863][ T5932] Bluetooth: hci1: command 0x0c1a tx timeout [ 185.070661][ T5932] Bluetooth: hci3: command 0x041b tx timeout [ 185.070711][ T5934] Bluetooth: hci0: command 0x041b tx timeout [ 185.070772][ T63] Bluetooth: hci2: command 0x041b tx timeout [ 185.434236][T10215] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1237'. [ 185.600873][ T9296] team0 (unregistering): Port device team_slave_1 removed [ 185.684822][ T9296] team0 (unregistering): Port device team_slave_0 removed [ 185.867918][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 186.907740][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 186.908931][ T9296] team0 (unregistering): Port device team_slave_1 removed [ 186.980637][ T9296] team0 (unregistering): Port device team_slave_0 removed [ 187.067788][ T5934] Bluetooth: hci1: command 0x0c1a tx timeout [ 187.147927][ T5934] Bluetooth: hci3: command 0x041b tx timeout [ 187.157833][ T5934] Bluetooth: hci2: command 0x041b tx timeout [ 187.160133][ T5934] Bluetooth: hci0: command 0x041b tx timeout [ 187.511863][ T9322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.513793][T10113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.514316][ T9322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.520894][T10113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.538312][T10129] veth0_vlan: entered promiscuous mode [ 187.543277][T10113] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.546014][T10113] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.549755][T10113] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.553223][T10113] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.564556][T10129] veth1_vlan: entered promiscuous mode [ 187.665092][T10129] veth0_macvtap: entered promiscuous mode [ 187.670193][ T9322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.671103][T10129] veth1_macvtap: entered promiscuous mode [ 187.673669][ T9322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.706100][T10129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.713963][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.716669][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.720580][T10129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.733357][T10129] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.736086][T10129] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.741270][T10129] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.743868][T10129] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.841255][ T9323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.843857][ T9323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.863220][ T9326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.866186][ T9326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.947779][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 187.978199][ T34] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 188.129787][ T34] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.135004][ T34] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 188.138114][ T34] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 188.141184][ T34] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.145487][ T34] usb 10-1: config 0 descriptor?? [ 188.149888][ T34] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 188.152410][ T34] dvb-usb: bulk message failed: -22 (3/0) [ 188.160572][ T34] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 188.164626][ T34] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 188.168238][ T34] usb 10-1: media controller created [ 188.173690][ T34] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 188.183346][ T34] dvb-usb: bulk message failed: -22 (6/0) [ 188.186007][ T34] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 188.191392][ T34] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb10/10-1/input/input14 [ 188.199316][ T34] dvb-usb: schedule remote query interval to 150 msecs. [ 188.202393][ T34] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 188.354173][ T24] usb 10-1: USB disconnect, device number 2 [ 188.373177][ T24] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 188.511789][ T9296] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.605484][ T9296] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.627523][ T5932] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 188.632491][ T5932] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 188.636231][ T5932] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 188.641807][ T5932] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 188.646034][ T5932] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 188.679777][ T9296] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.685732][T10247] lo speed is unknown, defaulting to 1000 [ 188.774203][T10247] chnl_net:caif_netlink_parms(): no params data found [ 188.856713][T10247] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.859203][T10247] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.861592][T10247] bridge_slave_0: entered allmulticast mode [ 188.864253][T10247] bridge_slave_0: entered promiscuous mode [ 188.867943][T10247] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.870398][T10247] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.872843][T10247] bridge_slave_1: entered allmulticast mode [ 188.875520][T10247] bridge_slave_1: entered promiscuous mode [ 188.912675][T10247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.918296][T10247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.956068][T10247] team0: Port device team_slave_0 added [ 188.961976][T10247] team0: Port device team_slave_1 added [ 188.987749][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 188.995205][T10247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.997945][T10247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.005843][T10247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.013428][T10247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.016202][T10247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.026411][T10247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.069277][T10247] hsr_slave_0: entered promiscuous mode [ 189.071597][T10247] hsr_slave_1: entered promiscuous mode [ 189.073802][T10247] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 189.076282][T10247] Cannot create hsr debugfs directory [ 189.181417][T10247] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.227777][ T5934] Bluetooth: hci3: command 0x041b tx timeout [ 189.351772][ T9296] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.445414][ T5932] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 189.452739][ T5932] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 189.456361][ T5932] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 189.463241][ T5932] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 189.466617][ T5932] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 189.490952][T10247] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.509210][T10267] lo speed is unknown, defaulting to 1000 [ 189.602360][T10267] chnl_net:caif_netlink_parms(): no params data found [ 189.622426][T10247] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.709469][T10267] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.712514][T10267] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.715417][T10267] bridge_slave_0: entered allmulticast mode [ 189.718648][T10267] bridge_slave_0: entered promiscuous mode [ 189.721834][T10267] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.724072][T10267] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.726307][T10267] bridge_slave_1: entered allmulticast mode [ 189.729613][T10267] bridge_slave_1: entered promiscuous mode [ 189.763978][T10247] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.786858][T10267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.795366][T10267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.836586][T10267] team0: Port device team_slave_0 added [ 189.841480][T10267] team0: Port device team_slave_1 added [ 189.902969][T10267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.905996][T10267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.916824][T10267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.932628][T10267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.934895][T10267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.943537][T10267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.012120][T10247] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 190.019165][T10267] hsr_slave_0: entered promiscuous mode [ 190.021473][T10267] hsr_slave_1: entered promiscuous mode [ 190.023665][T10267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 190.026132][T10267] Cannot create hsr debugfs directory [ 190.027830][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 190.028502][ T9296] bridge_slave_1: left allmulticast mode [ 190.032236][ T9296] bridge_slave_1: left promiscuous mode [ 190.034128][ T9296] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.039689][ T9296] bridge_slave_0: left allmulticast mode [ 190.042097][ T9296] bridge_slave_0: left promiscuous mode [ 190.044506][ T9296] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.053751][ T9296] bridge_slave_1: left allmulticast mode [ 190.056165][ T9296] bridge_slave_1: left promiscuous mode [ 190.059082][ T9296] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.064810][ T9296] bridge_slave_0: left allmulticast mode [ 190.067306][ T9296] bridge_slave_0: left promiscuous mode [ 190.070179][ T9296] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.458683][ T9296] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.462630][ T9296] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.466528][ T9296] bond0 (unregistering): Released all slaves [ 190.670942][ T5934] Bluetooth: hci0: command tx timeout [ 190.708999][ T9296] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.713662][ T9296] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.717459][ T9296] bond0 (unregistering): Released all slaves [ 190.723788][T10247] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 190.729162][T10278] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1251'. [ 190.765379][T10247] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 190.776110][T10281] lo speed is unknown, defaulting to 1000 [ 190.777965][T10289] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58480 sclass=netlink_route_socket pid=10289 comm=syz.7.1253 [ 190.800133][T10247] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 190.872747][T10293] netlink: 'syz.7.1254': attribute type 1 has an invalid length. [ 190.875602][T10293] openvswitch: netlink: Flow actions attr not present in new flow. [ 190.991951][T10247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.001434][T10247] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.006851][ T9323] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.009296][ T9323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.029300][ T9323] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.031561][ T9323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.067708][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 191.085601][ T9323] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.151223][T10300] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1257'. [ 191.212244][ T9296] hsr_slave_0: left promiscuous mode [ 191.220258][ T9296] hsr_slave_1: left promiscuous mode [ 191.222328][ T9296] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.224706][ T9296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.230418][ T9296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.232804][ T9296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.240018][ T9296] hsr_slave_0: left promiscuous mode [ 191.242281][ T9296] hsr_slave_1: left promiscuous mode [ 191.244475][ T9296] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.246866][ T9296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.256127][ T9296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.256595][ T40] audit: type=1400 audit(1748566980.751:625): avc: denied { write } for pid=10310 comm="syz.7.1260" name="/" dev="9p" ino=35913847 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 191.258635][ T9296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.265762][ T40] audit: type=1326 audit(1748566980.761:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10304 comm="syz.5.1258" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f41c658e969 code=0x0 [ 191.317849][ T5934] Bluetooth: hci3: command 0x041b tx timeout [ 191.336697][ T9296] veth1_macvtap: left promiscuous mode [ 191.338583][ T9296] veth0_macvtap: left promiscuous mode [ 191.340357][ T9296] veth1_vlan: left promiscuous mode [ 191.342057][ T9296] veth0_vlan: left promiscuous mode [ 191.347707][ T9296] veth1_macvtap: left promiscuous mode [ 191.349574][ T9296] veth0_macvtap: left promiscuous mode [ 191.351388][ T9296] veth1_vlan: left promiscuous mode [ 191.353156][ T9296] veth0_vlan: left promiscuous mode [ 191.558426][ T5934] Bluetooth: hci2: command tx timeout [ 191.565721][ T40] audit: type=1400 audit(1748566981.061:627): avc: denied { setopt } for pid=10314 comm="syz.7.1261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 191.571249][T10316] binder: 10314:10316 ioctl c0306201 2000000003c0 returned -14 [ 191.640414][T10315] binder: 10314:10315 ioctl c0306201 200000000680 returned -14 [ 191.651105][T10315] binder: 10314:10315 ioctl c0306201 200000000680 returned -14 [ 192.108393][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 192.247645][ T9296] team0 (unregistering): Port device team_slave_1 removed [ 192.338831][ T9296] team0 (unregistering): Port device team_slave_0 removed [ 192.754240][ T5934] Bluetooth: hci0: command tx timeout [ 193.149566][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 193.572694][ T9296] team0 (unregistering): Port device team_slave_1 removed [ 193.637813][ T5934] Bluetooth: hci2: command tx timeout [ 193.654429][ T9296] team0 (unregistering): Port device team_slave_0 removed [ 194.031041][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.033134][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.197920][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 194.308339][T10333] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan1, syncid = 4, id = 0 [ 194.321535][T10247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.352750][ T40] audit: type=1400 audit(1748566983.851:628): avc: denied { getopt } for pid=10334 comm="syz.5.1264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 194.360218][T10247] veth0_vlan: entered promiscuous mode [ 194.368501][T10247] veth1_vlan: entered promiscuous mode [ 194.382872][ T40] audit: type=1400 audit(1748566983.861:629): avc: denied { transfer } for pid=10334 comm="syz.5.1264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 194.397075][T10247] veth0_macvtap: entered promiscuous mode [ 194.403757][T10247] veth1_macvtap: entered promiscuous mode [ 194.420882][T10247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.447001][T10247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.453656][T10247] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.457386][T10247] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.462970][T10247] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.466688][T10247] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.489768][T10267] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 194.503649][T10267] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 194.514774][T10267] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 194.520737][T10267] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 194.606300][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.614129][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.636751][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.640585][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.659251][T10247] ================================================================== [ 194.662617][T10247] BUG: KASAN: slab-use-after-free in binder_add_device+0xa4/0xb0 [ 194.664736][T10267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.665679][T10247] Write of size 8 at addr ffff88802ae74008 by task syz-executor/10247 [ 194.672887][T10247] [ 194.673930][T10247] CPU: 1 UID: 0 PID: 10247 Comm: syz-executor Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) [ 194.673954][T10247] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 194.673978][T10247] Call Trace: [ 194.673985][T10247] [ 194.673992][T10247] dump_stack_lvl+0x116/0x1f0 [ 194.674015][T10247] print_report+0xcd/0x680 [ 194.674033][T10247] ? __virt_addr_valid+0x81/0x610 [ 194.674059][T10247] ? __phys_addr+0xe8/0x180 [ 194.674084][T10247] ? binder_add_device+0xa4/0xb0 [ 194.674107][T10247] kasan_report+0xe0/0x110 [ 194.674124][T10247] ? binder_add_device+0xa4/0xb0 [ 194.674148][T10247] binder_add_device+0xa4/0xb0 [ 194.674169][T10247] binderfs_binder_device_create.isra.0+0xa03/0xc30 [ 194.674200][T10247] binderfs_fill_super+0x8d4/0x1360 [ 194.674219][T10247] ? __pfx_binderfs_fill_super+0x10/0x10 [ 194.674244][T10247] ? shrinker_register+0x1a8/0x260 [ 194.674263][T10247] ? sget_fc+0x808/0xc20 [ 194.674286][T10247] ? __pfx_set_anon_super_fc+0x10/0x10 [ 194.674310][T10247] ? __pfx_binderfs_fill_super+0x10/0x10 [ 194.674325][T10247] get_tree_nodev+0xda/0x190 [ 194.674356][T10247] vfs_get_tree+0x8b/0x340 [ 194.674378][T10247] path_mount+0x14d4/0x1f70 [ 194.674397][T10247] ? kmem_cache_free+0x2d1/0x4d0 [ 194.674423][T10247] ? __pfx_path_mount+0x10/0x10 [ 194.674442][T10247] ? putname+0x154/0x1a0 [ 194.674461][T10247] __x64_sys_mount+0x28d/0x310 [ 194.674481][T10247] ? __pfx___x64_sys_mount+0x10/0x10 [ 194.674500][T10247] ? __pfx___x64_sys_umount+0x10/0x10 [ 194.674520][T10247] do_syscall_64+0xcd/0x4c0 [ 194.674539][T10247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.674557][T10247] RIP: 0033:0x7fad79b9010a [ 194.674572][T10247] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.674589][T10247] RSP: 002b:00007ffcf2adac28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 194.674606][T10247] RAX: ffffffffffffffda RBX: 00007fad79c10e74 RCX: 00007fad79b9010a [ 194.674618][T10247] RDX: 00007fad79c208cb RSI: 00007fad79c10e74 RDI: 00007fad79c208cb [ 194.674630][T10247] RBP: 00007fad79c110bd R08: 0000000000000000 R09: 00007fad79db6738 [ 194.674642][T10247] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fad79bec1a8 [ 194.674653][T10247] R13: 00007fad79bec180 R14: 0000000000000009 R15: 0000000000000000 [ 194.674670][T10247] [ 194.674676][T10247] [ 194.684841][T10267] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.685272][T10247] Allocated by task 10129: [ 194.685280][T10247] kasan_save_stack+0x33/0x60 [ 194.702321][T10267] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 194.703847][T10247] kasan_save_track+0x14/0x30 [ 194.705553][T10267] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 194.706926][T10247] __kasan_kmalloc+0xaa/0xb0 [ 194.711687][ T9326] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.711828][T10247] binderfs_binder_device_create.isra.0+0x189/0xc30 [ 194.713299][ T9326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.714692][T10247] binderfs_fill_super+0x8d4/0x1360 [ 194.717222][ T9326] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.717835][T10247] get_tree_nodev+0xda/0x190 [ 194.717853][T10247] vfs_get_tree+0x8b/0x340 [ 194.717866][T10247] path_mount+0x14d4/0x1f70 [ 194.717877][T10247] __x64_sys_mount+0x28d/0x310 [ 194.719218][ T9326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.720631][T10247] do_syscall_64+0xcd/0x4c0 [ 194.785273][T10247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.787582][T10247] [ 194.788487][T10247] Freed by task 5976: [ 194.790021][T10247] kasan_save_stack+0x33/0x60 [ 194.791711][T10247] kasan_save_track+0x14/0x30 [ 194.793316][T10247] kasan_save_free_info+0x3b/0x60 [ 194.795127][T10247] __kasan_slab_free+0x51/0x70 [ 194.797023][T10247] kfree+0x2b4/0x4d0 [ 194.798401][T10247] binder_proc_dec_tmpref+0x4c3/0x590 [ 194.800097][T10247] binder_deferred_func+0xe87/0x12c0 [ 194.801800][T10247] process_one_work+0x9cc/0x1b70 [ 194.803361][T10247] worker_thread+0x6c8/0xf10 [ 194.804819][T10247] kthread+0x3c2/0x780 [ 194.806129][T10247] ret_from_fork+0x5d4/0x6f0 [ 194.807585][T10247] ret_from_fork_asm+0x1a/0x30 [ 194.809108][T10247] [ 194.809885][T10247] The buggy address belongs to the object at ffff88802ae74000 [ 194.809885][T10247] which belongs to the cache kmalloc-512 of size 512 [ 194.814185][T10247] The buggy address is located 8 bytes inside of [ 194.814185][T10247] freed 512-byte region [ffff88802ae74000, ffff88802ae74200) [ 194.818390][T10247] [ 194.819162][T10247] The buggy address belongs to the physical page: [ 194.821172][T10247] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2ae74 [ 194.823919][T10247] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 194.826565][T10247] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 194.828905][T10247] page_type: f5(slab) [ 194.830199][T10247] raw: 00fff00000000040 ffff88801b442c80 dead000000000100 dead000000000122 [ 194.832851][T10247] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 194.835448][T10247] head: 00fff00000000040 ffff88801b442c80 dead000000000100 dead000000000122 [ 194.836019][ T5932] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 194.838051][T10247] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 194.838064][T10247] head: 00fff00000000002 ffffea0000ab9d01 00000000ffffffff 00000000ffffffff [ 194.838074][T10247] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 194.838080][T10247] page dumped because: kasan: bad access detected [ 194.838086][T10247] page_owner tracks the page as allocated [ 194.838090][T10247] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5937, tgid 5937 (syz-executor), ts 51682443062, free_ts 51642000129 [ 194.838109][T10247] post_alloc_hook+0x1c0/0x230 [ 194.843026][ T5932] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 194.843488][T10247] get_page_from_freelist+0x135c/0x3950 [ 194.849143][ T5932] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 194.849405][T10247] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 194.855194][ T40] audit: type=1400 audit(1748566984.311:630): avc: denied { read } for pid=5325 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 194.859511][T10247] alloc_pages_mpol+0x1fb/0x550 [ 194.859527][T10247] new_slab+0x23b/0x330 [ 194.859541][T10247] ___slab_alloc+0xd9c/0x1940 [ 194.859554][T10247] __slab_alloc.constprop.0+0x56/0xb0 [ 194.859568][T10247] __kmalloc_noprof+0x2f2/0x510 [ 194.859576][T10247] switchdev_deferred_enqueue+0x2b/0x2a0 [ 194.859589][T10247] switchdev_port_attr_set+0xb5/0x120 [ 194.859599][T10247] br_multicast_add_port+0x178/0x3a0 [ 194.859611][T10247] br_add_if+0x5f5/0x1b70 [ 194.859621][T10247] do_set_master+0x40c/0x730 [ 194.859632][T10247] do_setlink.constprop.0+0xbd8/0x4380 [ 194.859644][T10247] rtnl_newlink+0x1446/0x2000 [ 194.859654][T10247] rtnetlink_rcv_msg+0x95b/0xe90 [ 194.859665][T10247] page last free pid 5937 tgid 5937 stack trace: [ 194.859671][T10247] __free_frozen_pages+0x7fe/0x1180 [ 194.859686][T10247] __put_partials+0x16d/0x1c0 [ 194.859700][T10247] qlist_free_all+0x4d/0x120 [ 194.859715][T10247] kasan_quarantine_reduce+0x195/0x1e0 [ 194.859730][T10247] __kasan_slab_alloc+0x69/0x90 [ 194.859739][T10247] __kmalloc_cache_noprof+0x1f1/0x3e0 [ 194.859754][T10247] ref_tracker_alloc+0x18e/0x5b0 [ 194.859768][T10247] netdev_queue_update_kobjects+0x2db/0x720 [ 194.865249][ T5932] Bluetooth: hci0: command tx timeout [ 194.865643][T10247] netdev_register_kobject+0x28c/0x3a0 [ 194.868078][ T40] audit: type=1400 audit(1748566984.311:631): avc: denied { search } for pid=5325 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 194.868105][ T40] audit: type=1400 audit(1748566984.311:632): avc: denied { search } for pid=5325 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 194.868127][ T40] audit: type=1400 audit(1748566984.311:633): avc: denied { add_name } for pid=5325 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 194.868147][ T40] audit: type=1400 audit(1748566984.311:634): avc: denied { create } for pid=5325 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 194.875098][ T5932] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 194.876709][T10247] register_netdevice+0x13dc/0x2270 [ 194.879440][ T5932] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 194.880052][T10247] veth_newlink+0x446/0xa00 [ 194.913369][T10351] lo speed is unknown, defaulting to 1000 [ 194.915257][T10247] rtnl_newlink+0xc42/0x2000 [ 194.915283][T10247] rtnetlink_rcv_msg+0x95b/0xe90 [ 194.952097][T10267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.953228][T10247] netlink_rcv_skb+0x155/0x420 [ 194.974227][T10247] netlink_unicast+0x53d/0x7f0 [ 194.976157][T10247] netlink_sendmsg+0x8d1/0xdd0 [ 194.978052][T10247] [ 194.979027][T10247] Memory state around the buggy address: [ 194.981174][T10247] ffff88802ae73f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 194.983650][T10247] ffff88802ae73f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 194.986175][T10247] >ffff88802ae74000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 194.988677][T10247] ^ [ 194.990058][T10247] ffff88802ae74080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 194.992546][T10247] ffff88802ae74100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 194.995179][T10247] ================================================================== SYZFAIL: failed to recv rpc [ 195.001896][T10247] Kernel panic - not syncing: KASAN: panic_on_warn set ... fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 195.004588][T10247] CPU: 0 UID: 0 PID: 10247 Comm: syz-executor Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(full) [ 195.009356][T10247] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 195.013566][T10247] Call Trace: [ 195.015049][T10247] [ 195.016276][T10247] dump_stack_lvl+0x3d/0x1f0 [ 195.018216][T10247] panic+0x71c/0x800 [ 195.019742][T10247] ? __pfx_panic+0x10/0x10 [ 195.021382][T10247] ? irqentry_exit+0x3b/0x90 [ 195.022918][T10247] ? lockdep_hardirqs_on+0x7c/0x110 [ 195.024640][T10247] ? preempt_schedule_thunk+0x16/0x30 [ 195.026357][T10247] ? binder_add_device+0xa4/0xb0 [ 195.028115][T10247] ? preempt_schedule_common+0x44/0xc0 [ 195.030259][T10247] ? check_panic_on_warn+0x1f/0xb0 [ 195.031865][T10247] ? binder_add_device+0xa4/0xb0 [ 195.033442][T10247] check_panic_on_warn+0xab/0xb0 [ 195.035004][T10247] end_report+0x107/0x170 [ 195.036397][T10247] kasan_report+0xee/0x110 [ 195.037842][T10247] ? binder_add_device+0xa4/0xb0 [ 195.039563][T10247] binder_add_device+0xa4/0xb0 [ 195.041092][T10247] binderfs_binder_device_create.isra.0+0xa03/0xc30 [ 195.043146][T10247] binderfs_fill_super+0x8d4/0x1360 [ 195.044943][T10247] ? __pfx_binderfs_fill_super+0x10/0x10 [ 195.046679][T10247] ? shrinker_register+0x1a8/0x260 [ 195.048399][T10247] ? sget_fc+0x808/0xc20 [ 195.049722][T10247] ? __pfx_set_anon_super_fc+0x10/0x10 [ 195.051485][T10247] ? __pfx_binderfs_fill_super+0x10/0x10 [ 195.053319][T10247] get_tree_nodev+0xda/0x190 [ 195.054865][T10247] vfs_get_tree+0x8b/0x340 [ 195.056356][T10247] path_mount+0x14d4/0x1f70 [ 195.057930][T10247] ? kmem_cache_free+0x2d1/0x4d0 [ 195.059481][T10247] ? __pfx_path_mount+0x10/0x10 [ 195.061057][T10247] ? putname+0x154/0x1a0 [ 195.062481][T10247] __x64_sys_mount+0x28d/0x310 [ 195.064210][T10247] ? __pfx___x64_sys_mount+0x10/0x10 [ 195.065927][T10247] ? __pfx___x64_sys_umount+0x10/0x10 [ 195.067813][T10247] do_syscall_64+0xcd/0x4c0 [ 195.069578][T10247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.071785][T10247] RIP: 0033:0x7fad79b9010a [ 195.073540][T10247] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.079639][T10247] RSP: 002b:00007ffcf2adac28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 195.082258][T10247] RAX: ffffffffffffffda RBX: 00007fad79c10e74 RCX: 00007fad79b9010a [ 195.084724][T10247] RDX: 00007fad79c208cb RSI: 00007fad79c10e74 RDI: 00007fad79c208cb [ 195.087437][T10247] RBP: 00007fad79c110bd R08: 0000000000000000 R09: 00007fad79db6738 [ 195.090378][T10247] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fad79bec1a8 [ 195.093016][T10247] R13: 00007fad79bec180 R14: 0000000000000009 R15: 0000000000000000 [ 195.096002][T10247] [ 195.097960][T10247] Kernel Offset: disabled [ 195.099744][T10247] Rebooting in 86400 seconds.. VM DIAGNOSIS: 01:03:04 Registers: info registers vcpu 0 CPU#0 RAX=000000004ab48809 RBX=000000000000000b RCX=ffffc90003b5f68c RDX=00000000ed5754ac RSI=0000000000000013 RDI=00000000234b76f8 RBP=0000000000000001 RSP=ffffc90003b5f5f8 R8 =0000000000000001 R9 =0000000010a2cba4 R10=0000000000000001 R11=0000000000000001 R12=0000000000002dc2 R13=0000000075f571d3 R14=ffffc90003b5f680 R15=000000000000000b RIP=ffffffff850aa3ea RFL=00000213 [----A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555578c94500 ffffffff 00c00000 GS =0000 ffff8880d6970000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000043abb000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000040000400 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc55134650 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f41c6611a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f41c6611a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f41c6611a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f41c6611aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f41c6611b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f41c6611c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000080000002 RBX=0000000000000043 RCX=ffffffff819b25b2 RDX=ffff888027aa8000 RSI=0000000000000000 RDI=0000000000000001 RBP=0000000000000001 RSP=ffffc90003467818 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=1ffff9200068cf06 R13=0000000000000000 R14=ffff8880229bc880 R15=ffffc900034678e8 RIP=ffffffff81bba22c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055555c770500 ffffffff 00c00000 GS =0000 ffff8880d6a70000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f41c677d2d8 CR3=0000000029c3b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0c0c0c0 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcf2adac40 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcf2adabf6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcf2adabf6 00007ffcf2adabfc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fad79c11a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fad79c11a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fad79c11a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fad79c11aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fad79c11b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fad79c11c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2029706d742d7a79 73287269646b6d00 706d742d7a79732f 2e00303030303031 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 050c554851085f5c 560d574c414e4800 554851085f5c560a 0b00151515151514 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000000013f RBX=0000000000000001 RCX=00000000d6ca9f34 RDX=0000000000000000 RSI=0000000049748ff5 RDI=ffff88802f9daf30 RBP=ffff88802f9da440 RSP=ffffc9000406f278 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=ffff88802f9daf30 R13=ffff88802f9daf58 R14=0000000000000001 R15=0000000000000001 RIP=ffffffff8197c378 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f41c73e56c0 ffffffff 00c00000 GS =0000 ffff8880d6b70000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00002000000018c0 CR3=0000000046c54000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f41c6611a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f41c6611a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f41c6611a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f41c6611aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f41c6611b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f41c6611c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f41c6783488 00007f41c6783480 00007f41c6783478 00007f41c6783450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f41c72ed100 00007f41c6783440 00007f41c6783458 00007f41c67834a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f41c6783498 00007f41c6783490 00007f41c6783488 00007f41c6783480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff8ab35c74 RDX=ffff8880229bc880 RSI=0000000000000023 RDI=0000000000000007 RBP=ffffc90003827068 RSP=ffffc90003826fd8 R8 =0000000000000007 R9 =0000000000000023 R10=0000000000000001 R11=0000000000000001 R12=0000000000000001 R13=dffffc0000000000 R14=ffff888030928000 R15=0000000000000000 RIP=ffffffff8ab362fe RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555564fd7500 ffffffff 00c00000 GS =0000 ffff8880d6c70000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fdd4bee35c0 CR3=0000000060f94000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000020410410 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f1a692df86d46a53 838f2a93f23446f6 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b27d680ba000e62f 4d58ddef19c8f612 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6543eac43a85923a ed711caa93f798c5 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8c736329d8a22e5c f1f82863732f849c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000c180 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000770e8216aaaa 770eab06aaaaaaaa ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000770eaa000000 770f31b0aaaaaa00 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000770eaaaaaa00 a613e6003154ce00 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000770f6617aaaa 291ebe1620598815 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4199e5dc3b898a9b 40d140dab70c0b3b ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 cd15bc0dbb29c8a4 c3449910cb20b2c9 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c6c255b20642523 00202c0028732520 3e2d205d736d756c 6c255b2064252300 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4949005b05410006 000509000d560005 1b08055d56485049 49005b0541000600 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000