last executing test programs: 17m17.667558579s ago: executing program 32 (id=47): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000240), 0x10106, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002180)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002200), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x101042, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) write(r2, &(0x7f0000001100), 0x0) r3 = socket(0x28, 0x1, 0x0) getsockname$packet(r3, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000500)=@nat={'nat\x00', 0x2, 0x5, 0x470, 0xf0, 0x1e0, 0xffffffff, 0x1e0, 0x1e0, 0x3a0, 0x3a0, 0xffffffff, 0x3a0, 0x3a0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [0x0, 0x0, 0x0, 0xff], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x12, @ipv6=@local, @ipv4=@loopback, @port=0x4e21, @port=0x4e22}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x40}, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id=0x67, @icmp_id}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, [0x0, 0xffffffff, 0xffffff00, 0xff], [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 'vlan1\x00', 'wlan1\x00', {0xff}, {}, 0x84, 0xe, 0x2, 0x31}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x0, 0xffffffff], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x5, 0x5}, {0x3, 0x2, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 16m18.446251403s ago: executing program 1 (id=154): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x7, 0x200000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000680)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000700)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000780), 0x651, 0x0) recvmmsg(r1, &(0x7f00000007c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000800)=0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x7, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={0x0}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, 0x0, &(0x7f0000001b00)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000001b40)={0x0, 0x7, 0xfffd, 0x3297, 0x1a2, 0x2}, &(0x7f0000001b80)=0x14) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000001c80)={0x0, 0x5}, &(0x7f0000001cc0)=0x8) clock_adjtime(0x0, 0x0) socket$unix(0x1, 0x1, 0x0) 16m17.412937687s ago: executing program 1 (id=155): socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x6) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x20842, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000380), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f00000003c0)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0x1, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0x3, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4242, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000640)={0x1, 0x8, 0xa4b0, 0x3ff, 0x100000000, 0xc182, 0x8001, 0x8, 0x5, 0xfffffffffffffffe, 0xfffffff8, 0x2}) ioctl$SNDRV_PCM_IOCTL_START(r3, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r3, 0x40084146, &(0x7f0000000700)=0x4) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r3, 0xc0984124, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = fsopen(0x0, 0x0) fsmount(r4, 0x0, 0x80) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000980)=ANY=[], 0x90) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_emit_ethernet(0xf3, &(0x7f0000000ac0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "008000", 0xbd, 0x6, 0x1, @remote, @mcast2, {[], {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x18, 0x1000, 0x0, 0x3e6}, {"f2f96cd7ad50d803ce9ddef4022468415229ef184d7e458f0c2e4ad632d7fab7c0906c244847355b6ab1ee066cd2869e3402089cc829f6854f7d9f4b98854a6c717ae041e7d4f8424fc505cbaa4f548c04fe59e502beed344af71cbbb0b069370074e1cd711d598344c3920ccff533cd4743660f1ee1a52add83474316ba89c1dcba2e293718529136b372e7a1110b7f2c1084f21cabac76665a125323e521b790fc4f5efee33a5d7b"}}}}}}}, 0x0) 16m15.986101758s ago: executing program 1 (id=158): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000050000000000000080000000850000007500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000018000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f000001ad40)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000300)=0x4) r4 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r4, &(0x7f0000000780)=""/102392, 0x18ff8) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000019780)=0x410000002) r5 = syz_io_uring_setup(0x254a, &(0x7f00000197c0)={0x0, 0x8210, 0x2, 0x0, 0x42}, &(0x7f0000019840), &(0x7f0000019880), &(0x7f00000198c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x2, &(0x7f0000019900)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r5, 0x6, &(0x7f0000019940)={0x0, 0x0, &(0x7f0000019980), 0x0}, 0x20) prctl$PR_SET_FP_MODE(0x42, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f000001ad00)={&(0x7f0000000380)={0xa, 0x4e24, 0xbbcc, @private1={0xfc, 0x1, '\x00', 0x1}, 0x52}, 0x1c, &(0x7f0000019980)=[{&(0x7f00000003c0)="d504807f0a8d385c472494c4e1da78380bdb4457807405913c45dfb66663ee2c9650b071ca5314a9b0f0d60c175ebba46a5fdc59dd45ac890a0de72de130716476da7f9fa2d3e93b76ed6d7eceb418cb15cd30bd92fb42b6feaace0dec48c9f578f54e05b20ec808ffcdc47cc7db63c39a22e4cd", 0x74}, {&(0x7f0000000440)="e8b75dcc23e68237732879d55fc072add7fad25eb9bb8e7f43251d87c8d68526ec0fe4c1b49317f08e005b22430b56f46faf1265194d7c53397cb4ca5485fe0e8531ce7e07babf357565292dfdf5a8da987960d8e8417a9f4730aa40a33155f849310ab5b61da29114ed284abae9386c754cc9f612081b77f9b47f46d2e8e81e4802d9ca6a2d70977b44a0a5e7be3629ac6a241d3f0eafc931aa9d32a45be3aca77f2779a2858f0ddd79ff6b0e6760586201d59e6a73a6950855c0ee0ac5904ecb58818fbd", 0xc5}, {&(0x7f0000000540)="5c204cda0bf2d52510", 0x9}, {&(0x7f0000000580)}, {&(0x7f00000005c0)="05db8b2d40e058fc2f9e0071a5cf14c911be", 0x12}], 0x5, &(0x7f0000019a00)}, 0x24044080) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a010400000000000000000500000a0900010073797a30000000005c000000030a010400000000000000000500000a0900010073797a30000000000900030073797a30000000002800048008000140000000000800024000000001140003006e657464657673696d3000000000000008000a400000000260000000060a01fc74f64900000000000500000a0900010073797a30000000000900020073797a300000000034000480300001800e000100696d6d6564696174650000001c0002800800014000000000100002800c000280080001800000000114000000110001"], 0x104}}, 0x0) 16m14.846382508s ago: executing program 1 (id=162): openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) read$FUSE(r0, &(0x7f0000001680)={0x2020, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r0, &(0x7f00000036c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x1, 0xffff, 0x0, 0x3ff, 0x0, 0x0, 0x80, 0x8001}}, 0x50) creat(&(0x7f0000000200)='./file0\x00', 0x4) syz_fuse_handle_req(r0, &(0x7f0000003740)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000005740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000005800)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) umount2(&(0x7f0000007a40)='./file0\x00', 0x9) 16m12.606858648s ago: executing program 1 (id=164): socket(0x1d, 0x2, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000001340)='./file0\x00', 0x3e) mount$tmpfs(0x0, &(0x7f0000001380)='./file0\x00', &(0x7f00000013c0), 0x1000000, &(0x7f0000001400)=ANY=[@ANYBLOB='noswap,mpol=prefer']) r0 = syz_open_procfs(0x0, &(0x7f0000001440)='mounts\x00') read$FUSE(r0, &(0x7f0000001480)={0x2020}, 0x2020) 16m10.245011671s ago: executing program 1 (id=167): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newpolicy={0x13c, 0x13, 0x101, 0x0, 0x20000000, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@rand_addr=0x64010102, 0x4e20, 0xd, 0x8400, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5, 0x0, 0x0, 0x0, 0x6, 0x3, 0x4, 0x8}, {0x0, 0x1, 0x0, 0x100}, 0x8}, [@tmpl={0x84, 0x5, [{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d2, 0x2b}, 0xa, @in6=@empty, 0x0, 0x1, 0x1, 0x1, 0x5, 0x2, 0x80000009}, {{@in=@dev={0xac, 0x14, 0x14, 0x18}, 0x4d4, 0x2b}, 0xa, @in6=@remote, 0x0, 0x4, 0x2, 0x3, 0x0, 0x5, 0x6}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x73, 0x8, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000540)="de26", &(0x7f0000000580)=""/9}, 0x20) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x80000042, 0xffffffff}, 0x10) close(r1) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r2, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) 15m55.062813326s ago: executing program 33 (id=167): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newpolicy={0x13c, 0x13, 0x101, 0x0, 0x20000000, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@rand_addr=0x64010102, 0x4e20, 0xd, 0x8400, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5, 0x0, 0x0, 0x0, 0x6, 0x3, 0x4, 0x8}, {0x0, 0x1, 0x0, 0x100}, 0x8}, [@tmpl={0x84, 0x5, [{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d2, 0x2b}, 0xa, @in6=@empty, 0x0, 0x1, 0x1, 0x1, 0x5, 0x2, 0x80000009}, {{@in=@dev={0xac, 0x14, 0x14, 0x18}, 0x4d4, 0x2b}, 0xa, @in6=@remote, 0x0, 0x4, 0x2, 0x3, 0x0, 0x5, 0x6}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x73, 0x8, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000540)="de26", &(0x7f0000000580)=""/9}, 0x20) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x80000042, 0xffffffff}, 0x10) close(r1) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r2, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) 11m46.498901041s ago: executing program 4 (id=532): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_ublk_setup_io_uring(0x7501, &(0x7f0000000180)={0x0, 0xba29, 0x2, 0x2, 0x29c}, 0x0, &(0x7f0000000240), &(0x7f0000000280)) unshare(0x22020600) r0 = io_uring_setup(0x7a76, &(0x7f0000004ac0)={0x0, 0xaefa, 0x0, 0x40}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000004b40)={0x1, &(0x7f0000004b80)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) r3 = fcntl$dupfd(r2, 0x0, r1) bind$inet6(r2, &(0x7f0000004bc0)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x240540c7, &(0x7f0000004c00)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000004c40)={0x1, 0xd3}, 0x8) sendto$inet6(r2, &(0x7f0000004c80)="f6", 0x1, 0x20048080, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 11m43.618362727s ago: executing program 4 (id=537): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x26, &(0x7f0000000ac0)={0x1, 0x3, 0x11, 0xfffffffffffffffc}) 11m42.385856395s ago: executing program 4 (id=541): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./proc\x00', 0x0, 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x40) write(r0, &(0x7f0000000200)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000012, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) write$FUSE_NOTIFY_RESEND(r0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='net/sockstat\x00') 11m41.823747906s ago: executing program 4 (id=545): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0) mount$bind(&(0x7f00000003c0)='.\x00', &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x8b101c, 0x0) mount$bind(0x0, &(0x7f00000006c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0\x00', 0x0, 0x9a50d2, 0x0) 11m41.539240794s ago: executing program 4 (id=546): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001600)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 11m37.526928719s ago: executing program 4 (id=554): openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x178, 0x6, 0x3, 0x201, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x9}, [@generic="5baa78e3f1d0e3d36e49cbe760afef05dba0ce81fb16a14e8333d6ea6362c708ce9f5d0ab771cf76bd9b207fcdfa0327045e6634d0726bf30622cd9242499dc68c28ef6093dae73731760666383ee9a5ece7e010e33332331ee76c24ac5d9aa648e42d89000ebfc43d65b8f7856cb75148d9ba67470efb3a112edb5e599995aa5e15792dd3c17986d4d2e3524a172b540b52b7344e476312bdf03f1f2ca065cb55f2b7d1068e4fb1c69ab3675db224e5c3f5153ccce55c3ab58efaebce57e0d71fe1f90c72fdf7822719f30e763a20", @typed={0x8, 0x11c, 0x0, 0x0, @uid}, @nested={0x8, 0xf3, 0x0, 0x1, [@nested={0x4, 0x156}]}, @typed={0x8, 0x64, 0x0, 0x0, @ipv4=@remote}, @typed={0x4, 0xd0, 0x0, 0x0, @binary}, @generic="71c77bcd23b9312b194877d8faf217416e793f234272169e8dedd66745023fdb9394a636ddedef37f0f23ac5039d04983f5e6e87bf7d2bed465415ad698c7f8793e7e12b05b4db0f31be05145241f6aa4dd2e8e935c7308e9c3ad7d7e3228db1346dfac692d4167f1f7859fa282760e25c94238ae86948"]}, 0x178}, 0x1, 0x0, 0x0, 0x4040040}, 0x20000010) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x5, 0x37, 0xefffffffffffffff, 0x0, 0x0, 0x2000001, 0x0, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11m37.178897083s ago: executing program 34 (id=554): openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x178, 0x6, 0x3, 0x201, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x9}, [@generic="5baa78e3f1d0e3d36e49cbe760afef05dba0ce81fb16a14e8333d6ea6362c708ce9f5d0ab771cf76bd9b207fcdfa0327045e6634d0726bf30622cd9242499dc68c28ef6093dae73731760666383ee9a5ece7e010e33332331ee76c24ac5d9aa648e42d89000ebfc43d65b8f7856cb75148d9ba67470efb3a112edb5e599995aa5e15792dd3c17986d4d2e3524a172b540b52b7344e476312bdf03f1f2ca065cb55f2b7d1068e4fb1c69ab3675db224e5c3f5153ccce55c3ab58efaebce57e0d71fe1f90c72fdf7822719f30e763a20", @typed={0x8, 0x11c, 0x0, 0x0, @uid}, @nested={0x8, 0xf3, 0x0, 0x1, [@nested={0x4, 0x156}]}, @typed={0x8, 0x64, 0x0, 0x0, @ipv4=@remote}, @typed={0x4, 0xd0, 0x0, 0x0, @binary}, @generic="71c77bcd23b9312b194877d8faf217416e793f234272169e8dedd66745023fdb9394a636ddedef37f0f23ac5039d04983f5e6e87bf7d2bed465415ad698c7f8793e7e12b05b4db0f31be05145241f6aa4dd2e8e935c7308e9c3ad7d7e3228db1346dfac692d4167f1f7859fa282760e25c94238ae86948"]}, 0x178}, 0x1, 0x0, 0x0, 0x4040040}, 0x20000010) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x5, 0x37, 0xefffffffffffffff, 0x0, 0x0, 0x2000001, 0x0, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8m56.320053943s ago: executing program 7 (id=834): openat$procfs(0xffffffffffffff9c, &(0x7f0000000640)='/proc/cpuinfo\x00', 0x0, 0x0) io_setup(0x3, &(0x7f00000036c0)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000003700)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000003740)=[&(0x7f0000003780)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 8m51.137855131s ago: executing program 7 (id=848): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000bc0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x20, 0x8}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x1, 0x0, 0x2dd}}}, 0xb8}}, 0x0) 8m50.90205668s ago: executing program 7 (id=850): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000050000000000000080000000850000007500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000018000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f000001ad40)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f000001aec0), 0x4) sched_setscheduler(r2, 0x2, &(0x7f0000000300)=0x4) r4 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r4, &(0x7f0000000780)=""/102392, 0x18ff8) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000019780)=0x410000002) r5 = syz_io_uring_setup(0x254a, &(0x7f00000197c0)={0x0, 0x8210, 0x2, 0x0, 0x42}, &(0x7f0000019840), &(0x7f0000019880), &(0x7f00000198c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x2, &(0x7f0000019900)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r5, 0x6, &(0x7f0000019940)={0x0, 0x0, &(0x7f0000019980), 0x0}, 0x20) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_FP_MODE(0x42, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f000001ad00)={&(0x7f0000000380)={0xa, 0x4e24, 0xbbcc, @private1={0xfc, 0x1, '\x00', 0x1}, 0x52}, 0x1c, &(0x7f0000019980)=[{&(0x7f00000003c0)="d504807f0a8d385c472494c4e1da78380bdb4457807405913c45dfb66663ee2c9650b071ca5314a9b0f0d60c175ebba46a5fdc59dd45ac890a0de72de130716476da7f9fa2d3e93b76ed6d7eceb418cb15cd30bd92fb42b6feaace0dec48c9f578f54e05b20ec808ffcdc47cc7db63c39a22e4cd", 0x74}, {&(0x7f0000000440)="e8b75dcc23e68237732879d55fc072add7fad25eb9bb8e7f43251d87c8d68526ec0fe4c1b49317f08e005b22430b56f46faf1265194d7c53397cb4ca5485fe0e8531ce7e07babf357565292dfdf5a8da987960d8e8417a9f4730aa40a33155f849310ab5b61da29114ed284abae9386c754cc9f612081b77f9b47f46d2e8e81e4802d9ca6a2d70977b44a0a5e7be3629ac6a241d3f0eafc931aa9d32a45be3aca77f2779a2858f0ddd79ff6b0e6760586201d59e6a73a6950855c0ee0ac5904ecb58818fbd", 0xc5}, {&(0x7f0000000540)="5c204cda0bf2d52510", 0x9}, {&(0x7f0000000580)}, {&(0x7f00000005c0)="05db8b2d40e058fc2f9e0071a5cf14c911be", 0x12}], 0x5, &(0x7f0000019a00)}, 0x24044080) sendmsg$NFT_BATCH(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a010400000000000000000500000a0900010073797a30000000005c000000030a010400000000000000000500000a0900010073797a30000000000900030073797a30000000002800048008000140000000000800024000000001140003006e657464657673696d3000000000000008000a400000000260000000060a01fc74f64900000000000500000a0900010073797a30000000000900020073797a300000000034000480300001800e000100696d6d6564696174650000001c0002800800014000000000100002800c000280080001800000000114000000110001"], 0x104}}, 0x0) 8m48.420297792s ago: executing program 7 (id=853): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x40, 0x0) setreuid(0xee01, 0xee01) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x80d8, 0x0, 0x0, 0xfffffffe, 0x100}) 8m47.678076566s ago: executing program 7 (id=856): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000300), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000340), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) r3 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x40402) writev(r3, &(0x7f0000000340)=[{0x0}, {&(0x7f00000004c0)}, {&(0x7f0000000500)}], 0x3) 8m41.2972088s ago: executing program 7 (id=865): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x40040c0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000840)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000880)=0x8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000009c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000a00)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000a80)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000b00), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000b40), 0x4000087, 0x2, 0x0) unshare(0x62000000) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000b80)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x238, 0x11, 0x148, 0x238, 0x0, 0x2d8, 0x2a8, 0x2a8, 0x2d8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1f0, 0x238, 0x0, {}, [@common=@inet=@socket2={{0x28}}, @common=@inet=@hashlimit3={{0x158}, {'bridge0\x00', {0x6, 0x6, 0x40, 0x6, 0x0, 0x3, 0x5, 0x8, 0x0, 0x20}, {0x5}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xfffffffe}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'vlan0\x00', 'macvlan1\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x2, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0xc, &(0x7f0000000680)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff0}, @map_fd={0x18, 0x1, 0x1, 0x0, r6}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e000000001800", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) r7 = fsopen(&(0x7f00000001c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000007c0)={@cgroup=r8, 0x22, 0x1, 0xa6f, 0x0, 0x0, 0x0, &(0x7f0000000800), 0x0, 0x0}, 0x40) 8m26.081168979s ago: executing program 35 (id=865): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x40040c0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000840)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000880)=0x8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000009c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000a00)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000a80)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000b00), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000b40), 0x4000087, 0x2, 0x0) unshare(0x62000000) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000b80)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x238, 0x11, 0x148, 0x238, 0x0, 0x2d8, 0x2a8, 0x2a8, 0x2d8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1f0, 0x238, 0x0, {}, [@common=@inet=@socket2={{0x28}}, @common=@inet=@hashlimit3={{0x158}, {'bridge0\x00', {0x6, 0x6, 0x40, 0x6, 0x0, 0x3, 0x5, 0x8, 0x0, 0x20}, {0x5}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xfffffffe}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'vlan0\x00', 'macvlan1\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x2, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0xc, &(0x7f0000000680)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff0}, @map_fd={0x18, 0x1, 0x1, 0x0, r6}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e000000001800", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) r7 = fsopen(&(0x7f00000001c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000007c0)={@cgroup=r8, 0x22, 0x1, 0xa6f, 0x0, 0x0, 0x0, &(0x7f0000000800), 0x0, 0x0}, 0x40) 7m37.613255095s ago: executing program 2 (id=968): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet(0x2, 0x3, 0x4) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000001440)={0x2, 0x1bd, @loopback}, 0x10) listen(r3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000001480)='./cifs\x00', 0x0) mount(&(0x7f00000014c0)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000001500)='./cifs\x00', &(0x7f0000001540)='cifs\x00', 0x0, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f00000015c0)="890704b3771c16d355840f4e1489c2ce0596e0835d610400385cecb517a1a0c2b8c2c064bd3253e3ee7f28b562a24355f088e42ef567cadddbb9123f922de6a72cf8df0950b4f8a98f332bdbf8cea9628763708efd4f", 0x56) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000001680)='xfrm0\x00', 0x10) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000001740)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) sendto$inet6(r4, &(0x7f0000001780)="046bf184b7b7f1a55a5a9c11a44b7193cf786d2f6e3e7d299a814d1a26591bf94e", 0x21, 0x0, 0x0, 0x0) close(0xffffffffffffffff) socket(0x2, 0x80805, 0x0) 7m28.712734s ago: executing program 2 (id=983): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x18) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000069c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000006a00)='./sys\x00', &(0x7f0000006a40)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000006a80)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x1, 0x0) write(r0, &(0x7f0000006ac0)='force', 0x5) 7m28.211951726s ago: executing program 2 (id=987): socket(0x1e, 0x805, 0x0) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x7ffffffe, 0x230}}], 0x1, 0x0, 0x0) 7m26.805027806s ago: executing program 2 (id=991): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) 7m26.278080986s ago: executing program 2 (id=994): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102) writev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet(0x2, 0x3, 0x4) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000001440)={0x2, 0x1bd, @loopback}, 0x10) listen(r3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000001480)='./cifs\x00', 0x0) mount(&(0x7f00000014c0)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000001500)='./cifs\x00', &(0x7f0000001540)='cifs\x00', 0x0, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f00000015c0)="890704b3771c16d355840f4e1489c2ce0596e0835d610400385cecb517a1a0c2b8c2c064bd3253e3ee7f28b562a24355f088e42ef567cadddbb9123f922de6a72cf8df0950b4f8a98f332bdbf8cea9628763708efd4f", 0x56) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000001680)='xfrm0\x00', 0x10) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000001740)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) sendto$inet6(r4, &(0x7f0000001780)="046bf184b7b7f1a55a5a9c11a44b7193cf786d2f6e3e7d299a814d1a26591bf94e", 0x21, 0x0, 0x0, 0x0) close(0xffffffffffffffff) socket(0x2, 0x80805, 0x0) 7m22.986516228s ago: executing program 2 (id=1000): prlimit64(0x0, 0xe, &(0x7f00000004c0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000500)=0x8) socketpair(0x18, 0x0, 0x2, &(0x7f0000000440)) r0 = getpid() r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='\x00', 0x89901) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0x6, 0x3, 0x7fff0001}]}) fspick(r1, &(0x7f00000002c0)='.\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000380)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000400)='3', 0x4e) userfaultfd(0x80001) sched_setaffinity(0x0, 0x8, &(0x7f0000000540)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000580)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000600)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000680), 0x651, 0x0) recvmmsg(r2, &(0x7f00000006c0), 0x4000087, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$inet(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="4c0000001200ff09ff3a150099a283ff04b8008000f0ffff0000000600401500240036001fc411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab", 0x42}, {&(0x7f0000000180)='G%\t\x00\x00\x00\x00\x00\x00\x00', 0xa}], 0x2}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x4000000000000, &(0x7f0000000000)=@base={0x5, 0x1, 0x6c02, 0x41, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x18}, 0x48) 7m7.433985534s ago: executing program 36 (id=1000): prlimit64(0x0, 0xe, &(0x7f00000004c0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000500)=0x8) socketpair(0x18, 0x0, 0x2, &(0x7f0000000440)) r0 = getpid() r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='\x00', 0x89901) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0x6, 0x3, 0x7fff0001}]}) fspick(r1, &(0x7f00000002c0)='.\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000380)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000400)='3', 0x4e) userfaultfd(0x80001) sched_setaffinity(0x0, 0x8, &(0x7f0000000540)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000580)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000600)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000680), 0x651, 0x0) recvmmsg(r2, &(0x7f00000006c0), 0x4000087, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$inet(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="4c0000001200ff09ff3a150099a283ff04b8008000f0ffff0000000600401500240036001fc411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab", 0x42}, {&(0x7f0000000180)='G%\t\x00\x00\x00\x00\x00\x00\x00', 0xa}], 0x2}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x4000000000000, &(0x7f0000000000)=@base={0x5, 0x1, 0x6c02, 0x41, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x18}, 0x48) 6m37.406311631s ago: executing program 5 (id=1109): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0xe5c, 0x80000) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000005c0)={r2, 0xffff9047, 0x2, r2}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000600)={r2, 0xffff9047, 0x2, r2}) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) mmap(&(0x7f0000394000/0x3000)=nil, 0x3000, 0x1000008, 0x80010, 0xffffffffffffffff, 0xfccbb000) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r3, 0x0, 0x0) 6m28.004865067s ago: executing program 5 (id=1117): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="100029bd7000ff"], 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], 0x48}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x0, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0x9, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x3, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x6, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0xfa8, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x0, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x8001, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x494, 0x7, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0x2ee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x40, 0x800003, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x2, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0x8, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7f7, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x8, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0xbe, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000408001d00ff03"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 6m22.975610395s ago: executing program 5 (id=1122): mkdir(&(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000a00)=0x7) syz_emit_ethernet(0x22, &(0x7f0000000a40)={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @broadcast}}}}}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000a80)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000ac0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000b40)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000bc0), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000c00), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000c80)='./cgroup.net/syz1\x00', 0x1ff) prctl$PR_MCE_KILL(0x23, 0x9, 0x7fffffffeffe) 6m22.330041155s ago: executing program 5 (id=1125): socket$netlink(0x10, 0x3, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000001c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000200), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50483, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}}, 0x0) syz_emit_ethernet(0x94, &(0x7f0000000300)={@broadcast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "f2a400", 0x5e, 0x2f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x22eb, 0x1a, 0x0, [], "ba41912135147f7538648840d6b98557e3dae0790f17326ebaad"}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}}}}}}}}}, 0x0) setrlimit(0x3, &(0x7f00000001c0)={0x3, 0xfffffffffffffffc}) 6m20.955155775s ago: executing program 9 (id=1127): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000540)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x42, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000005c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b23000d"], 0xffdd) 6m19.18599298s ago: executing program 5 (id=1129): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x318, 0x0) recvmmsg(r1, &(0x7f00000002c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = inotify_init() r4 = inotify_add_watch(r3, &(0x7f0000000300)='.\x00', 0x808) inotify_rm_watch(r3, r4) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) pwritev(r6, &(0x7f00000002c0)=[{&(0x7f00000004c0)="01000000", 0x4}, {&(0x7f0000000500)="f697079a161cfb7702311e629acda76933ddd0c24174eb4d4d28f9", 0x1b}, {&(0x7f0000000540)='tsiX~\nN', 0x7}], 0x3, 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x2000000000000004) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000440)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) clock_getres(0xfffffffffffffffb, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000480)='./proc/sys/vm/compaction_proactiveness\x00', 0x1, 0x0) ptrace(0x10, r0) 6m18.700044496s ago: executing program 9 (id=1134): mkdir(&(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000a00)=0x7) syz_emit_ethernet(0x22, &(0x7f0000000a40)={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @broadcast}}}}}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000a80)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000ac0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000b40)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000bc0), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000c00), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000c80)='./cgroup.net/syz1\x00', 0x1ff) prctl$PR_MCE_KILL(0x23, 0x9, 0x7fffffffeffe) 6m17.581387844s ago: executing program 9 (id=1138): ioperm(0x4, 0x8, 0x5) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, r1, 0x0) connect$inet6(r0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000001880)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000018c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000001900)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000001980), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001a00)=0x6) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001a40)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001ac0)={0x3, 0x8, &(0x7f0000001b80)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f0000001bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c00)={{r5}, &(0x7f0000001c40), &(0x7f0000001c80)=r6}, 0x20) 6m12.45884668s ago: executing program 9 (id=1148): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socket$netlink(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000340), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000380), 0x80002c1, 0x2, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000004000/0x4000)=nil) r4 = open(&(0x7f0000000400)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0) syz_clone3(&(0x7f0000000440)={0x200220000, 0x0, 0x0, 0x0, {0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) memfd_create(&(0x7f0000000900)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xa3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@I\n\x11\tt\x99\xeb\xe8p]d\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x81\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7..\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbfD\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU\xe8m\xcf\xed\xf6\xb2\xa1\xa9\xb4\x0f\xb8\x9d\x93\xb1\xeeK\xf4\xb3|\x96G|d>\xf4V.\xa6\x12yta\xca\xd6\x12x\x8e\xfel\xaa\xda]\xaa\x91Z\xdd\xf0\a\xce\x83\x9b\x1e\xc0J0\xa8\x97\x85\xfd\x9c=<\xae\x907U\x9c\x8a\x9b\x13\xa66jp\xed\xe8\xe6\xf1\xac\x01{\x02\x85\x01\x96\xae\xa6H5\x12\xff]\xc2\x8d\x97/\xc8\x05\xb0\xd6\xd2C\xdf\xf63\xae\x9a\x84\xcc\x16\x16\xfb\xbd\x03F\xc6\b)6\xd3\xf5}\xef\xaf\xbd.\xc5\n\x9dj \x1b\xff8\xfd\xed\xb8\xe7Y\xe8j\x1e\xe7J\xaf\xf0\xf9\xac\x91\xd0\x05@\x82\x13+\x97\xd1\xe9\n\xdb\xf2r#\xf8\xfc\xc9\xfe\x84\x94.~\x0e\xdd\x1c', 0x1) fspick(0xffffffffffffffff, &(0x7f0000000b80)='.\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000380)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x34, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x10, 0x2, 0x0, 0xe7, {[@timestamp={0x8, 0x10, 0x6}]}}}}}}}, 0x0) 6m11.922124664s ago: executing program 8 (id=1150): r0 = socket$inet6(0xa, 0x803, 0x6) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f00000007c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 6m11.447875825s ago: executing program 8 (id=1151): setrlimit(0x3, &(0x7f00000001c0)={0x3, 0xfffffffffffffffc}) 6m10.010042503s ago: executing program 5 (id=1153): r0 = socket$netlink(0x10, 0x3, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000140)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000001c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000200), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50483, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}}, 0x0) syz_emit_ethernet(0x94, &(0x7f0000000300)={@broadcast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "f2a400", 0x5e, 0x2f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x22eb, 0x1a, 0x0, [], "ba41912135147f7538648840d6b98557e3dae0790f17326ebaad"}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}}}}}}}}}, 0x0) setrlimit(0x3, &(0x7f00000001c0)={0x3, 0xfffffffffffffffc}) bind$inet(r4, 0x0, 0x0) r6 = dup(r0) r7 = open(&(0x7f0000000480)='./file1\x00', 0x109cc2, 0x158) sendfile(r6, r7, 0x0, 0x80001d00c0d1) 6m9.100172511s ago: executing program 8 (id=1154): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller0\x00', @random="0100003600"}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffe}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@remote, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r1, &(0x7f0000000380), 0x2e9, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newsa={0x138, 0x16, 0x633, 0x0, 0x7fffffff, {{@in6=@private1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@remote, 0x4d2, 0x32}, @in6=@empty, {}, {0x5, 0x3, 0x0, 0x5}, {0x4}, 0x2, 0x2, 0xa, 0x4, 0x18}, [@algo_crypt={0x48, 0x2, {{'lrw-serpent-avx2\x00'}}}]}, 0x138}}, 0x0) 6m7.880489226s ago: executing program 8 (id=1157): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000007c0)={0x10, 0x0, &(0x7f0000000040)=[@request_freeze={0x400c6313, 0x2}]}) 6m7.782607786s ago: executing program 8 (id=1158): socket$packet(0x11, 0x3, 0x300) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000640)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x50) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, 0x21, 0x9, 0x2, 0x25dfdbff, {0x1}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x44080) 6m7.071123647s ago: executing program 9 (id=1161): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) syz_emit_ethernet(0x4a, &(0x7f0000000840)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd608a37f200142ce4fd8000000000000000000000bc5af9000000bb"], 0x0) 6m7.006437089s ago: executing program 8 (id=1162): mkdir(&(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000a00)=0x7) syz_emit_ethernet(0x22, &(0x7f0000000a40)={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @broadcast}}}}}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000a80)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000ac0)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000b40)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000bc0), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000c00), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000c80)='./cgroup.net/syz1\x00', 0x1ff) prctl$PR_MCE_KILL(0x23, 0x9, 0x7fffffffeffe) 6m6.917463659s ago: executing program 9 (id=1163): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000008c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000900)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000940)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000980)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000a00)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000a80), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000ac0), 0x80002c1, 0x2, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x86, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380), &(0x7f00000003c0), 0x2000005}, 0x38) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xb, 0x100, 0xfd, 0x9, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0), 0x0, 0x4ff5, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000540)={0x0, &(0x7f0000000580)=""/150, 0x0, 0x0, 0x4, r3}, 0x38) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'pim6reg1\x00', 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGWINSZ(r6, 0x5413, &(0x7f0000000080)) ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f0000000200)=0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'pim6reg1\x00', @broadcast}) 5m54.320413348s ago: executing program 37 (id=1153): r0 = socket$netlink(0x10, 0x3, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000140)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000001c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000200), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50483, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}}, 0x0) syz_emit_ethernet(0x94, &(0x7f0000000300)={@broadcast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "f2a400", 0x5e, 0x2f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x22eb, 0x1a, 0x0, [], "ba41912135147f7538648840d6b98557e3dae0790f17326ebaad"}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}}}}}}}}}, 0x0) setrlimit(0x3, &(0x7f00000001c0)={0x3, 0xfffffffffffffffc}) bind$inet(r4, 0x0, 0x0) r6 = dup(r0) r7 = open(&(0x7f0000000480)='./file1\x00', 0x109cc2, 0x158) sendfile(r6, r7, 0x0, 0x80001d00c0d1) 5m50.681426292s ago: executing program 38 (id=1163): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000008c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000900)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000940)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000980)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000a00)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000a80), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000ac0), 0x80002c1, 0x2, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x86, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380), &(0x7f00000003c0), 0x2000005}, 0x38) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xb, 0x100, 0xfd, 0x9, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0), 0x0, 0x4ff5, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000540)={0x0, &(0x7f0000000580)=""/150, 0x0, 0x0, 0x4, r3}, 0x38) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'pim6reg1\x00', 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGWINSZ(r6, 0x5413, &(0x7f0000000080)) ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f0000000200)=0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'pim6reg1\x00', @broadcast}) 5m50.490378444s ago: executing program 39 (id=1162): mkdir(&(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000a00)=0x7) syz_emit_ethernet(0x22, &(0x7f0000000a40)={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @broadcast}}}}}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000a80)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000ac0)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000b40)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000bc0), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000c00), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000c80)='./cgroup.net/syz1\x00', 0x1ff) prctl$PR_MCE_KILL(0x23, 0x9, 0x7fffffffeffe) 10.969035859s ago: executing program 0 (id=1597): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0xfd, 0x1000}, {0x16, 0x0, 0x0, 0x3}]}, 0x10) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000440)={0x7, {{0x2, 0x4e22, @multicast2}}}, 0x88) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[], 0x138}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x29) connect$inet(r2, &(0x7f0000000700)={0x2, 0x4e20, @multicast2}, 0x10) write(r2, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 10.859600532s ago: executing program 0 (id=1598): prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000380)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000480), 0x318, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0), 0x42000, 0x0) ioctl$TIOCSCTTY(r3, 0x540e, 0xfffffffffffffffe) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r4) recvmmsg(r1, &(0x7f0000000540), 0x10106, 0x2, 0x0) statx(0xffffffffffffff9c, 0x0, 0x4000, 0x10, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) signalfd4(r5, 0x0, 0x0, 0x80800) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000700)={r6, 0x0, &(0x7f0000000740)=""/224}, 0x20) mkdirat(0xffffffffffffff9c, 0x0, 0x143) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@volatile}, {@uuid_off, 0x3a}], [], 0x2f}) 8.06574434s ago: executing program 3 (id=1599): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000a000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r0, 0x124, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001e40)}}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c001080080001400000000008000240000000000800"], 0x80}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000680)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000700), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000740), 0x80002c1, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000940)='./bus\x00', &(0x7f0000000980), 0x0, &(0x7f00000009c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000a00)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000a80)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000ac0)='./file7/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000b00)='.\x00', &(0x7f0000000b40)='system.posix_acl_default\x00', &(0x7f0000000b80)={{}, {}, [], {0x4, 0x5}, [], {0x10, 0x6}}, 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000bc0)='./file0\x00', 0x158) socket$nl_xfrm(0x10, 0x3, 0x6) futex(0x0, 0x1, 0x2, 0x0, 0x0, 0x1) syz_create_resource$futex(&(0x7f0000000780)=0x1) 5.329739919s ago: executing program 6 (id=1601): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 5.281969084s ago: executing program 3 (id=1602): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000200)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000240)=@req={0x3fc}, 0x10) recvmmsg$unix(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000002400)=[{&(0x7f0000000080)=""/181, 0xb5}], 0x1}}], 0x1, 0x20, &(0x7f0000002580)={0x77359400}) 5.205353703s ago: executing program 6 (id=1603): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) mount(0x0, 0x0, 0x0, 0x800000, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000008) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) fcntl$lock(r0, 0x7, 0x0) 4.899212678s ago: executing program 0 (id=1604): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x0, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0x8, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x2, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0x8, 0x5, 0xfffffffe], [0xa76f, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280"], 0x64}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000408001d00ff03"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 4.687371506s ago: executing program 3 (id=1605): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x200, 0x4f, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x1, 0x3, 0x9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000300)={0x4008, 0x4d, 0x5}) r3 = syz_open_dev$dri(&(0x7f0000000380), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000400)) r4 = syz_open_dev$dri(&(0x7f0000000440), 0xcaf8, 0x40000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000004c0)={0x7, 0x52a1, 0x1e}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000500)={0x1, &(0x7f0000000800)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000840)={0x1, 0x4, 0xe608}) close_range(r5, 0xffffffffffffffff, 0x0) 4.358932515s ago: executing program 3 (id=1606): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x6, 0x5, &(0x7f0000001700)=ANY=[@ANYBLOB="180200000600000000000000000000008500000041000000850000002300000095"], &(0x7f0000001740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001780)={r0, 0x0, 0x8005, 0x0, &(0x7f0000001800)='\a\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 3.85159556s ago: executing program 6 (id=1607): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) capget(&(0x7f0000000000)={0x20071026, r0}, &(0x7f0000000040)={0x4, 0x6, 0x1, 0x9, 0x3, 0x8}) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000180)={@private0={0xfc, 0x0, '\x00', 0x1}}, 0x14) fsopen(0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f00009c5000/0x4000)=nil, 0x4000, 0x3, 0x28012, 0xffffffffffffffff, 0x2000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) 3.714287942s ago: executing program 0 (id=1608): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') prlimit64(0x0, 0xe, &(0x7f0000000180)={0xe, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000002c0)=0x7) sched_getaffinity(r0, 0x8, &(0x7f0000000140)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000500), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000540), 0x4000087, 0x2, 0x0) mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000340)='devtmpfs\x00', 0x2010, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./dev/sda\x00', 0x2, 0x0) ioctl$IOC_PR_REGISTER(r3, 0x401870c8, &(0x7f00000003c0)={0x7, 0x9, 0x4}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000000c0)='name', &(0x7f0000000100)='ccnA\xf6gr\xe7lo_', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x25, &(0x7f0000000080)) openat(0xffffffffffffff9c, &(0x7f0000000840)='./file2\x00', 0x80000, 0x40) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000a80)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}, {0x2, 0x0, @private=0xa010100}, 0xf5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f4, 0x0, 0x40}) 3.588965976s ago: executing program 3 (id=1609): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x96\xd0\aJ^4`\x97C\xf0\xb9\x8a\xdc\xe5`\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) write$binfmt_misc(r1, &(0x7f0000000880)="cf", 0x1) sendfile(r0, r1, &(0x7f00000008c0), 0xfffb) fcntl$addseals(r1, 0x409, 0x8) 1.574897091s ago: executing program 3 (id=1610): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r2, 0x0, 0x0}, 0x10) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000280)={0xf0f022}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000003300), 0x40002, 0x0) write$rfkill(r3, &(0x7f00000000c0)={0x0, 0x2, 0x3, 0xfe, 0x1}, 0x8) landlock_restrict_self(0xffffffffffffffff, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="ac00000000010505000000faff0000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff02000000000000009d0000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac1e00010800074000000001180006801400040000000000000000000000000000000001"], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x14, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r7, @ANYBLOB="0a000600080211000001000028006e8004000100040002000400020000000100a1ff020004000200040002000400010004000200af78ca2577ff396143b46a66694e01f8d84b8c4c691f50733b2d087f3cae8a7913abd865a49baa8efd16eaa512cb00f096f2457cb9276f98d4f6eb4107044827b78869263baaf1b945461e069390122754012956fc2f430de76d85bd9bd3beaa3da7196b38dea6d9d86e2613876229f789460816ef0b5c75ed4344190539f06afc15caad32b29ad547fa2a43aa3c5ce9952f47a10947a0aefbc2b7448c4069c833b764d9d3dd439748f02ff3556d41ee6791fdc293c4"], 0x50}, 0x1, 0x0, 0x0, 0x20008801}, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000040)=0x800001c) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000980)={0x2, @pix_mp={0x4, 0x401, 0x41415270, 0x9, 0xb, [{0x3, 0x5}, {0xeba, 0x6}, {0x1ff, 0x1}, {0x2, 0xe000000}, {0xa, 0xffff}, {0x7fff, 0x4000000}, {0x9, 0x7}, {0x9, 0x2}], 0x6, 0x9, 0x3, 0x2, 0x4}}) 1.573456184s ago: executing program 6 (id=1611): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x0, 0x0, &(0x7f00000008c0)='GPL\x00'}, 0x94) 1.485955349s ago: executing program 6 (id=1612): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x100}, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0xfffffffffffffd7a) r0 = getpid() r1 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000140)={0x2}) sched_setscheduler(r0, 0x1, &(0x7f0000002e40)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000002e80)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000001c0)={@mcast1, 0x3, 0x0, 0x3, 0x5, 0x3, 0xd}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002ec0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000002f00)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000002f80), 0x651, 0x0) recvmmsg(r2, &(0x7f0000002fc0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./tracing\x00', &(0x7f0000000440)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x40000, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) 373.032966ms ago: executing program 6 (id=1613): syz_open_dev$video4linux(0x0, 0x2a2, 0x101000) syz_emit_ethernet(0x2a, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0x6b, @scatter={0x0, 0x0, 0x0}, 0x0, &(0x7f0000000980)=""/4103, 0x0, 0x30520cf7f25f0c64, 0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000340)={0x4, 0x5, 0x0, 0x0, 0x5718, 0x63}) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x7, &(0x7f0000000140)=[{0x9, 0x81, 0x2, 0x5}, {0x8, 0xd5, 0xfc, 0xf}, {0x240, 0x4, 0x0, 0x26}, {0x5, 0xff, 0x9, 0xd}, {0x9, 0x8, 0x2, 0x8}, {0x450, 0xd7, 0x3d, 0xfffff001}, {0xe2cb, 0x5, 0xf, 0x1}]}) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1, 0x0) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x34, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008011}, 0x4) write(r1, &(0x7f0000000400)='dummy_', 0x6) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000080)='btrfs\x00', 0xc000, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) close(0x3) 170.966113ms ago: executing program 0 (id=1614): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x200, 0x4f, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x1, 0x3, 0x9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000280)={r1}) r2 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000300)={0x4008, 0x4d, 0x5}) r3 = syz_open_dev$dri(&(0x7f0000000380), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000400)) r4 = syz_open_dev$dri(&(0x7f0000000440), 0xcaf8, 0x40000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000004c0)={0x7, 0x52a1, 0x1e}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000500)={0x1, &(0x7f0000000800)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000840)={0x1, 0x4, 0xe608}) close_range(r5, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=1615): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/memory_backed\x00', 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c00000037000701fefffffffedbdf25037c000006000780fd2e0000abc9000627af9b988fb4823f447a6c1aa77251f1a869504586978e629b92e62b1e0fb2fe555dc5780051e273af9bdf888b15ab9dfa0bd18d2033204351be6c29d26cb5a08006d03e95927795b9a90fa63496cb5d3a2b7b785f23b04057ed2224112c676dcbb300000080000000000de4bd028d258c9120cb24d6d98be36a962e3b6c6c136c81dabc"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b8, 0x10, 0x2, 0x133}, &(0x7f00000020c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x3, 0x4, 0x202, 0x7d, 0xffffffffffffffff, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x800, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6474, 0x200, 0x2, 0x15e, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x400, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x200, 0x3, 0x0, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb41f, 0x2000, 0x3, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r5, '\x00', {0x4, 0x8004, 0x0, 0x0}}, 0x0) kernel console output (not intermixed with test programs): a1, bcdDevice=1.00 [ 650.805260][ T5896] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 650.839924][ T5896] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.839949][ T5896] usb 6-1: Product: syz [ 650.839964][ T5896] usb 6-1: Manufacturer: syz [ 650.839978][ T5896] usb 6-1: SerialNumber: syz [ 651.058217][ T5896] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 651.058292][ T5896] cdc_wdm 6-1:1.0: Unknown control protocol [ 651.177229][ T5896] usb 6-1: USB disconnect, device number 3 [ 654.512888][T10854] futex_wake_op: syz.5.880 tries to shift op by 144; fix this program [ 654.513043][T10854] futex_wake_op: syz.5.880 tries to shift op by 144; fix this program [ 659.172901][T10478] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 659.326232][T10478] usb 6-1: unable to get BOS descriptor or descriptor too short [ 659.326788][T10478] usb 6-1: not running at top speed; connect to a high speed hub [ 659.326826][T10478] usb 6-1: New USB device found: idVendor=8086, idProduct=0ad2, bcdDevice=0.00 [ 659.327913][T10478] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 659.327936][T10478] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 659.327982][T10478] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 659.392015][T10478] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 659.392033][T10478] usb 6-1: Product: syz [ 659.392041][T10478] usb 6-1: Manufacturer: syz [ 659.466959][T10478] uvcvideo 6-1:1.0: probe with driver uvcvideo failed with error -22 [ 659.650293][ T11] usb 6-1: USB disconnect, device number 4 [ 660.328851][T10139] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 660.379377][T10139] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 660.389514][T10139] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 660.393454][T10139] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 660.395534][T10139] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 662.082912][T10913] futex_wake_op: syz.6.891 tries to shift op by 144; fix this program [ 662.083077][T10913] futex_wake_op: syz.6.891 tries to shift op by 144; fix this program [ 662.507144][T10316] Bluetooth: hci5: command tx timeout [ 664.583165][T10316] Bluetooth: hci5: command tx timeout [ 666.662846][T10316] Bluetooth: hci5: command tx timeout [ 666.956424][T10900] rxe_eth0 speed is unknown, defaulting to 1000 [ 668.918217][T10316] Bluetooth: hci5: command tx timeout [ 670.884724][T10969] futex_wake_op: syz.5.901 tries to shift op by 144; fix this program [ 670.884866][T10969] futex_wake_op: syz.5.901 tries to shift op by 144; fix this program [ 671.372322][T10900] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.372544][T10900] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.372689][T10900] bridge_slave_0: entered allmulticast mode [ 671.376389][T10900] bridge_slave_0: entered promiscuous mode [ 671.379429][T10900] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.379619][T10900] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.379764][T10900] bridge_slave_1: entered allmulticast mode [ 671.381958][T10900] bridge_slave_1: entered promiscuous mode [ 671.420889][T10900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 671.431044][T10900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 671.526524][T10900] team0: Port device team_slave_0 added [ 671.540418][T10900] team0: Port device team_slave_1 added [ 673.994264][T10900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 673.994281][T10900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 673.994308][T10900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 673.996676][T10900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 673.996690][T10900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 673.996717][T10900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 676.372195][T10900] hsr_slave_0: entered promiscuous mode [ 676.375058][T10900] hsr_slave_1: entered promiscuous mode [ 676.383793][T10900] debugfs: 'hsr0' already exists in 'hsr' [ 676.383812][T10900] Cannot create hsr debugfs directory [ 678.102989][T10139] Bluetooth: hci3: command 0x0406 tx timeout [ 679.315637][T10900] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 679.339699][T10900] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 679.340757][T10900] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 679.396350][T10900] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 679.449871][T10900] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 679.488062][T10900] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 679.489067][T10900] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 679.546528][T10900] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 680.199541][T11056] netlink: 20 bytes leftover after parsing attributes in process `syz.2.913'. [ 680.664160][T10900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 680.685880][T10900] 8021q: adding VLAN 0 to HW filter on device team0 [ 680.735266][T10900] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 680.735290][T10900] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 680.872058][ T1333] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.873545][ T1333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 680.878298][ T1333] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.878433][ T1333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 685.786579][T11103] Invalid ELF header len 9 [ 685.866298][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.866367][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.733310][T11117] support for the xor transformation has been removed. [ 686.858127][T10900] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 688.246399][T10900] veth0_vlan: entered promiscuous mode [ 688.285892][T10900] veth1_vlan: entered promiscuous mode [ 690.578863][T10900] veth0_macvtap: entered promiscuous mode [ 690.620237][T10900] veth1_macvtap: entered promiscuous mode [ 690.736222][T10900] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 690.784314][T10900] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 691.652142][T11177] CIFS: Attempting to mount //127.0.0.1/share [ 691.715700][ T1328] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.182218][ T1332] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.433102][T11177] CIFS: VFS: cifs_mount failed w/return code = -112 [ 693.763987][ T3397] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.846512][ T1328] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.419209][ T3397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 696.419231][ T3397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 699.281304][ T1333] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 699.281325][ T1333] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 700.285995][T11232] CIFS: Attempting to mount //127.0.0.1/share [ 701.157259][T11232] CIFS: VFS: cifs_mount failed w/return code = -112 [ 705.090071][T11269] netlink: 20 bytes leftover after parsing attributes in process `syz.0.962'. [ 712.397964][ T37] audit: type=1326 audit(1794128971.173:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11320 comm="syz.6.973" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a0979fb19 code=0x7ffc0000 [ 712.428457][ T37] audit: type=1326 audit(1794128971.173:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11320 comm="syz.6.973" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a0979fb19 code=0x7ffc0000 [ 712.428506][ T37] audit: type=1326 audit(1794128971.173:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11320 comm="syz.6.973" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a0979fb19 code=0x7ffc0000 [ 712.428544][ T37] audit: type=1326 audit(1794128971.203:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11320 comm="syz.6.973" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1a0979fb19 code=0x7ffc0000 [ 712.428581][ T37] audit: type=1326 audit(1794128971.203:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11320 comm="syz.6.973" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a0979fb19 code=0x7ffc0000 [ 712.428636][ T37] audit: type=1326 audit(1794128971.203:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11320 comm="syz.6.973" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a0979fb19 code=0x7ffc0000 [ 712.429073][ T37] audit: type=1326 audit(1794128971.203:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11320 comm="syz.6.973" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a0979fb19 code=0x7ffc0000 [ 712.429811][ T37] audit: type=1326 audit(1794128971.203:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11320 comm="syz.6.973" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a0979fb19 code=0x7ffc0000 [ 712.429854][ T37] audit: type=1326 audit(1794128971.203:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11320 comm="syz.6.973" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a0979fb19 code=0x7ffc0000 [ 712.430355][ T37] audit: type=1326 audit(1794128971.203:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11320 comm="syz.6.973" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a0979fb19 code=0x7ffc0000 [ 714.414377][T11336] CIFS: Attempting to mount //127.0.0.1/share [ 716.832956][T11336] CIFS: VFS: cifs_mount failed w/return code = -112 [ 720.189645][T11417] CIFS: Attempting to mount //127.0.0.1/share [ 720.847300][T11417] CIFS: VFS: cifs_mount failed w/return code = -112 [ 726.763557][T11475] rxe_eth0 speed is unknown, defaulting to 1000 [ 727.212947][ T11] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 727.300240][ T9862] asus 0005:0B05:8502.0004: hidraw0: BLUETOOTH HID v0.00 Mouse [syz0] on syz0 [ 727.421307][ T11] usb 7-1: unable to get BOS descriptor or descriptor too short [ 727.422342][ T11] usb 7-1: New USB device found: idVendor=21b4, idProduct=0081, bcdDevice=0.40 [ 727.423490][ T11] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 727.423524][ T11] usb 7-1: can't read configurations, error -71 [ 727.496876][T11499] fido_id[11499]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 731.775244][T11525] 9p: Bad value for 'wfdno' [ 734.082815][ T9862] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 734.450540][ T9862] usb 1-1: Using ep0 maxpacket: 16 [ 735.149349][ T9862] usb 1-1: New USB device found: idVendor=0763, idProduct=2081, bcdDevice=0.40 [ 735.152128][ T9862] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 735.152173][ T9862] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 735.189344][ T9862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.189369][ T9862] usb 1-1: Product: syz [ 735.189384][ T9862] usb 1-1: Manufacturer: syz [ 735.189398][ T9862] usb 1-1: SerialNumber: syz [ 735.636904][ T9862] usb 1-1: Can't get UAC3 power state for id 10 [ 735.708519][ T9862] usb 1-1: 2:0: failed to get current value for ch 0 (-71) [ 735.722143][ T9862] usb 1-1: 2:0: cannot get RANGE values for control 2 (id 2) [ 735.722171][ T9862] usb 1-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 735.722189][ T9862] usb 1-1: [2] FU [Generic Out Playback Volume] ch = 1, val = 0/1/1 [ 736.050722][ T9862] usb 1-1: USB disconnect, device number 14 [ 736.870681][T11556] udevd[11556]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 739.654970][T10139] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 739.676719][T10139] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 739.684992][T10139] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 739.686362][T10139] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 739.687065][T10139] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 740.489252][T11614] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1058'. [ 742.537420][T10316] Bluetooth: hci4: command tx timeout [ 744.823532][T10316] Bluetooth: hci4: command tx timeout [ 744.849851][ T6552] IPVS: starting estimator thread 0... [ 744.943945][T11622] IPVS: using max 8 ests per chain, 19200 per kthread [ 746.902711][T10316] Bluetooth: hci4: command tx timeout [ 749.306156][T10316] Bluetooth: hci4: command tx timeout [ 749.306914][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 749.306979][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.966683][T11591] rxe_eth0 speed is unknown, defaulting to 1000 [ 756.461322][T11591] bridge0: port 1(bridge_slave_0) entered blocking state [ 756.464311][T11591] bridge0: port 1(bridge_slave_0) entered disabled state [ 756.464485][T11591] bridge_slave_0: entered allmulticast mode [ 756.491459][T11591] bridge_slave_0: entered promiscuous mode [ 756.527663][T11591] bridge0: port 2(bridge_slave_1) entered blocking state [ 756.529368][T11591] bridge0: port 2(bridge_slave_1) entered disabled state [ 756.529517][T11591] bridge_slave_1: entered allmulticast mode [ 756.560028][T11591] bridge_slave_1: entered promiscuous mode [ 756.705248][ T9862] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 756.760715][T11591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 756.776093][T11591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 758.759047][T11591] team0: Port device team_slave_0 added [ 758.765597][T11591] team0: Port device team_slave_1 added [ 758.853704][ T9862] usb 9-1: Using ep0 maxpacket: 16 [ 758.902845][T11591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 758.902862][T11591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 758.902889][T11591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 758.906200][T11591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 758.906265][T11591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 758.906293][T11591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 758.971394][ T9862] usb 9-1: unable to get BOS descriptor or descriptor too short [ 758.971448][ T9862] usb 9-1: New USB device found: idVendor=03f0, idProduct=0004, bcdDevice=0.40 [ 759.112121][ T9862] usb 9-1: unable to read config index 0 descriptor/all [ 759.112168][ T9862] usb 9-1: can't read configurations, error -71 [ 759.504553][T11591] hsr_slave_0: entered promiscuous mode [ 759.506043][T11591] hsr_slave_1: entered promiscuous mode [ 759.507140][T11591] debugfs: 'hsr0' already exists in 'hsr' [ 759.507159][T11591] Cannot create hsr debugfs directory [ 763.242708][ T9862] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 763.349352][T11591] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 763.544619][ T9862] usb 6-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 763.545938][ T9862] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 763.545962][ T9862] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 763.546006][ T9862] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 763.549788][ T9862] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.549811][ T9862] usb 6-1: Product: syz [ 763.549825][ T9862] usb 6-1: Manufacturer: syz [ 763.549839][ T9862] usb 6-1: SerialNumber: syz [ 763.599025][ T9862] cdc_mbim 6-1:1.0: CDC Union missing and no IAD found [ 763.599072][ T9862] cdc_mbim 6-1:1.0: bind() failure [ 763.639865][T11591] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 763.644140][T11591] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 763.690697][T11591] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 763.692335][T11591] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 764.028533][T11591] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 764.111905][T11591] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 764.752437][T11591] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 764.830895][ T5734] usb 6-1: USB disconnect, device number 5 [ 765.039130][T11808] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1105'. [ 765.206872][T11591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 765.262078][T11591] 8021q: adding VLAN 0 to HW filter on device team0 [ 766.069217][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 766.072450][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 766.125971][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 766.126152][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 768.067138][T11591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 768.164497][T11839] netlink: 'syz.8.1107': attribute type 4 has an invalid length. [ 772.768688][T11591] veth0_vlan: entered promiscuous mode [ 772.783050][T11591] veth1_vlan: entered promiscuous mode [ 775.067561][T11591] veth0_macvtap: entered promiscuous mode [ 775.080647][T11591] veth1_macvtap: entered promiscuous mode [ 775.101660][T11591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 776.196723][T11591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 778.102770][T11372] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.571915][T11372] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 778.571938][T11372] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 778.589954][T11372] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 778.589972][T11372] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 779.175808][T11890] pim6reg1: entered promiscuous mode [ 779.175950][T11890] pim6reg1: entered allmulticast mode [ 782.583117][T10474] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 782.870720][ T1341] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.001987][ T1341] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.017368][ T1341] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.841536][T11926] syzkaller0: entered promiscuous mode [ 784.841562][T11926] syzkaller0: entered allmulticast mode [ 784.848137][T11926] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 785.524607][T10139] Bluetooth: hci5: command 0x0406 tx timeout [ 787.232689][ T1368] Bluetooth: hci0: Frame reassembly failed (-84) [ 788.501204][T11960] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0007 with DS=0xf [ 790.892628][T10139] Bluetooth: hci0: command 0x1003 tx timeout [ 790.961618][T10316] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 797.722057][T12009] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1154'. [ 798.990450][T12018] netlink: 1 bytes leftover after parsing attributes in process `syz.6.1160'. [ 815.333002][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 815.333071][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 815.455661][T12047] input: syz0 as /devices/virtual/input/input11 [ 815.670377][T10139] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 815.733227][T10139] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 815.736126][T10139] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 815.862775][T10139] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 815.863876][T10139] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 817.249651][ T5620] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 817.291054][ T5620] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 817.299917][ T5620] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 817.310105][ T5620] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 817.311146][ T5620] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 817.400354][T10316] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 818.066242][T12061] rxe_eth0 speed is unknown, defaulting to 1000 [ 818.396735][T10316] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 818.403642][T10316] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 818.404892][T10316] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 818.405708][T10316] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 818.427833][T10139] Bluetooth: hci0: command tx timeout [ 819.120313][T10138] bridge0: port 3(syz_tun) entered disabled state [ 819.298831][T10138] syz_tun (unregistering): left allmulticast mode [ 819.298865][T10138] syz_tun (unregistering): left promiscuous mode [ 819.298980][T10138] bridge0: port 3(syz_tun) entered disabled state [ 819.323201][T12088] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1172'. [ 819.442479][ T36] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 819.592443][ T36] usb 7-1: Using ep0 maxpacket: 16 [ 819.600524][ T36] usb 7-1: unable to get BOS descriptor or descriptor too short [ 819.600578][ T36] usb 7-1: New USB device found: idVendor=103d, idProduct=0100, bcdDevice=0.40 [ 819.626957][ T36] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 819.631689][ T36] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.631711][ T36] usb 7-1: Product: syz [ 819.631724][ T36] usb 7-1: Manufacturer: syz [ 819.631738][ T36] usb 7-1: SerialNumber: syz [ 820.485030][ T36] usb 7-1: Audio class v2/v3 interfaces need an interface association [ 820.514787][T10316] Bluetooth: hci0: command tx timeout [ 820.518653][ T36] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 820.618006][ T36] usb 7-1: USB disconnect, device number 7 [ 820.843539][ T6546] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.857664][T12058] udevd[12058]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 820.987813][T10316] Bluetooth: hci7: command tx timeout [ 820.988205][T10316] Bluetooth: hci6: command tx timeout [ 821.004774][T12051] rxe_eth0 speed is unknown, defaulting to 1000 [ 822.583579][ T5633] Bluetooth: hci0: command tx timeout [ 823.063215][T10316] Bluetooth: hci7: command tx timeout [ 823.063313][ T5633] Bluetooth: hci6: command tx timeout [ 823.305851][ T6546] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.388770][T12060] rxe_eth0 speed is unknown, defaulting to 1000 [ 824.719482][ T5633] Bluetooth: hci0: command tx timeout [ 825.144389][T10316] Bluetooth: hci7: command tx timeout [ 825.144488][ T5633] Bluetooth: hci6: command tx timeout [ 825.331408][ T6546] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.472616][ T36] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 825.532612][T12061] bridge0: port 1(bridge_slave_0) entered blocking state [ 825.532804][T12061] bridge0: port 1(bridge_slave_0) entered disabled state [ 825.532946][T12061] bridge_slave_0: entered allmulticast mode [ 825.534349][T12061] bridge_slave_0: entered promiscuous mode [ 825.578386][T12061] bridge0: port 2(bridge_slave_1) entered blocking state [ 825.578504][T12061] bridge0: port 2(bridge_slave_1) entered disabled state [ 825.578646][T12061] bridge_slave_1: entered allmulticast mode [ 825.580101][T12061] bridge_slave_1: entered promiscuous mode [ 825.643195][ T36] usb 1-1: New USB device found: idVendor=067b, idProduct=2303, bcdDevice=1.00 [ 825.644319][ T36] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 825.644347][ T36] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 825.644369][ T36] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 825.644382][ T36] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 825.644403][ T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.655799][T12139] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 825.655931][T12139] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 825.731877][ T36] pl2303 1-1:1.0: pl2303 converter detected [ 825.748523][ T36] usb 1-1: pl2303 converter now attached to ttyUSB0 [ 825.834469][ T6546] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.967393][T12061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 825.992141][T12061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 826.066735][T12061] team0: Port device team_slave_0 added [ 826.069398][T12061] team0: Port device team_slave_1 added [ 826.126907][T12061] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 826.126919][T12061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 826.126933][T12061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 826.144395][T12061] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 826.144411][T12061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 826.144437][T12061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 826.361315][T12151] CIFS: Attempting to mount //127.0.0.1/share [ 826.758512][T12061] hsr_slave_0: entered promiscuous mode [ 826.759261][T12061] hsr_slave_1: entered promiscuous mode [ 826.759876][T12061] debugfs: 'hsr0' already exists in 'hsr' [ 826.759895][T12061] Cannot create hsr debugfs directory [ 826.861704][T12051] bridge0: port 1(bridge_slave_0) entered blocking state [ 826.861785][T12051] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.862052][T12051] bridge_slave_0: entered allmulticast mode [ 826.874637][T12051] bridge_slave_0: entered promiscuous mode [ 826.913395][T12051] bridge0: port 2(bridge_slave_1) entered blocking state [ 826.913492][T12051] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.913582][T12051] bridge_slave_1: entered allmulticast mode [ 826.915647][T12051] bridge_slave_1: entered promiscuous mode [ 827.008066][T12161] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 827.153591][T12151] CIFS: VFS: cifs_mount failed w/return code = -112 [ 827.180944][T12161] pl2303 1-1:1.0: pl2303_vendor_read - failed to read [000a]: -110 [ 827.181761][T12161] pl2303 ttyUSB0: failed to submit interrupt urb: -90 [ 827.225193][T10316] Bluetooth: hci7: command tx timeout [ 827.225229][ T5633] Bluetooth: hci6: command tx timeout [ 827.230756][T10474] usb 1-1: USB disconnect, device number 15 [ 827.262720][ T6546] bridge_slave_1: left allmulticast mode [ 827.262741][ T6546] bridge_slave_1: left promiscuous mode [ 827.262903][ T6546] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.320723][T10474] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 827.323041][T10474] pl2303 1-1:1.0: device disconnected [ 827.576006][ T6546] bridge_slave_0: left allmulticast mode [ 827.576043][ T6546] bridge_slave_0: left promiscuous mode [ 827.576272][ T6546] bridge0: port 1(bridge_slave_0) entered disabled state [ 831.090836][T12181] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1193'. [ 834.776154][ T6546] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 834.863565][ T6546] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 834.885246][ T6546] bond0 (unregistering): Released all slaves [ 834.947889][T12051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 835.022474][ T31] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 835.149324][T12051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 835.183149][ T31] usb 1-1: New USB device found: idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 835.184351][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 835.184381][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 835.184416][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.256785][ T31] usb 1-1: config 0 descriptor?? [ 835.406507][T12051] team0: Port device team_slave_0 added [ 835.484750][T12051] team0: Port device team_slave_1 added [ 835.801298][ T31] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 835.854313][ T31] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 835.854598][ T31] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 835.854725][ T31] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 835.854858][ T31] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 836.478179][ T31] playstation 0003:054C:0DF2.0005: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 836.673328][ T31] playstation 0003:054C:0DF2.0005: Failed to retrieve feature with reportID 5: -32 [ 836.673432][ T31] playstation 0003:054C:0DF2.0005: Failed to retrieve DualSense calibration info: -32 [ 836.673487][ T31] playstation 0003:054C:0DF2.0005: Failed to get calibration data from DualSense [ 836.673533][ T31] playstation 0003:054C:0DF2.0005: Failed to create dualsense. [ 836.681646][ T31] playstation 0003:054C:0DF2.0005: probe with driver playstation failed with error -32 [ 836.766061][ T31] usb 1-1: USB disconnect, device number 16 [ 838.105424][T12220] netlink: 'syz.0.1202': attribute type 9 has an invalid length. [ 838.105491][T12220] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1202'. [ 839.051401][T12060] bridge0: port 1(bridge_slave_0) entered blocking state [ 839.051856][T12060] bridge0: port 1(bridge_slave_0) entered disabled state [ 839.051999][T12060] bridge_slave_0: entered allmulticast mode [ 839.079569][T12060] bridge_slave_0: entered promiscuous mode [ 840.192951][T12060] bridge0: port 2(bridge_slave_1) entered blocking state [ 840.193101][T12060] bridge0: port 2(bridge_slave_1) entered disabled state [ 840.193289][T12060] bridge_slave_1: entered allmulticast mode [ 840.199876][T12060] bridge_slave_1: entered promiscuous mode [ 840.257758][T12051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 840.257774][T12051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 840.257801][T12051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 840.522565][T12051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 840.522583][T12051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 840.522611][T12051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 842.800337][T12060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 842.940309][T12060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 844.501028][T12061] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.526067][ T5274] 8021q: adding VLAN 0 to HW filter on device eth9 [ 846.699691][T12060] team0: Port device team_slave_0 added [ 846.719050][T12051] hsr_slave_0: entered promiscuous mode [ 846.720271][T12051] hsr_slave_1: entered promiscuous mode [ 846.721242][T12051] debugfs: 'hsr0' already exists in 'hsr' [ 846.721261][T12051] Cannot create hsr debugfs directory [ 847.025916][T12060] team0: Port device team_slave_1 added [ 848.077584][T12292] capability: warning: `syz.0.1220' uses 32-bit capabilities (legacy support in use) [ 848.150298][T12061] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.515765][ T6546] hsr_slave_0: left promiscuous mode [ 851.629693][ T6546] hsr_slave_1: left promiscuous mode [ 851.630898][ T6546] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 851.630925][ T6546] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 852.092191][ T6546] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 852.092271][ T6546] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 853.464086][ T6546] veth1_macvtap: left promiscuous mode [ 853.503119][ T6546] veth0_macvtap: left promiscuous mode [ 853.503746][ T6546] veth1_vlan: left promiscuous mode [ 853.503940][ T6546] veth0_vlan: left promiscuous mode [ 857.263036][ T6546] team0 (unregistering): Port device team_slave_1 removed [ 857.325735][ T6546] team0 (unregistering): Port device team_slave_0 removed [ 859.558563][T12061] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.314397][T12060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 860.314416][T12060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 860.314442][T12060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 860.450561][T12060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 860.450581][T12060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 860.622764][T12060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 861.661978][T12061] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.864776][T12060] hsr_slave_0: entered promiscuous mode [ 862.865943][T12060] hsr_slave_1: entered promiscuous mode [ 862.868320][T12060] debugfs: 'hsr0' already exists in 'hsr' [ 862.868339][T12060] Cannot create hsr debugfs directory [ 863.238124][ T6546] IPVS: stop unused estimator thread 0... [ 866.131684][ T5274] 8021q: adding VLAN 0 to HW filter on device eth10 [ 869.156461][T12431] netlink: 'syz.6.1256': attribute type 9 has an invalid length. [ 869.156551][T12431] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1256'. [ 870.943331][ T6546] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.979868][ T5274] 8021q: adding VLAN 0 to HW filter on device eth11 [ 873.170059][T10316] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 873.203333][T10316] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 873.208697][T10316] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 873.210152][T10316] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 873.224482][T10316] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 873.641405][T12460] netlink: 5 bytes leftover after parsing attributes in process `syz.6.1261'. [ 873.845608][ T6546] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.903438][T12460] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 874.168142][T12460] 0ªî{X¹¦: entered allmulticast mode [ 874.168599][T12460] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 874.410968][T12479] netlink: 'syz.0.1264': attribute type 9 has an invalid length. [ 874.411034][T12479] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1264'. [ 875.305134][ T5633] Bluetooth: hci3: command tx timeout [ 877.280991][ T5274] 8021q: adding VLAN 0 to HW filter on device eth12 [ 877.382221][ T5633] Bluetooth: hci3: command tx timeout [ 878.467165][ T6546] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.516936][T10139] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 878.530717][ T5620] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 878.607736][ T5620] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 878.627667][ T5620] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 878.629397][ T5620] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 878.629790][ T5620] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 878.631609][ T5620] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 878.631993][ T5620] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 878.653999][ T5620] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 878.655875][ T5620] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 879.084025][T12447] rxe_eth0 speed is unknown, defaulting to 1000 [ 879.586498][T10316] Bluetooth: hci3: command tx timeout [ 880.262237][T12528] netlink: 'syz.6.1273': attribute type 9 has an invalid length. [ 880.262260][T12528] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1273'. [ 880.982309][ T5633] Bluetooth: hci5: command tx timeout [ 881.510434][T12538] netlink: 'syz.0.1274': attribute type 4 has an invalid length. [ 881.688409][T10316] Bluetooth: hci3: command tx timeout [ 881.704247][ T5633] Bluetooth: hci4: command tx timeout [ 881.724915][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 881.724979][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 883.079779][ T5633] Bluetooth: hci5: command tx timeout [ 883.657865][T12061] netdevsim netdevsim4: probe with driver netdevsim failed with error -12 [ 883.788679][ T5633] Bluetooth: hci4: command tx timeout [ 883.891659][ T6546] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.555547][T12447] bridge0: port 1(bridge_slave_0) entered blocking state [ 885.555672][T12447] bridge0: port 1(bridge_slave_0) entered disabled state [ 885.562341][T12447] bridge_slave_0: entered allmulticast mode [ 885.571113][T12447] bridge_slave_0: entered promiscuous mode [ 885.627341][T12447] bridge0: port 2(bridge_slave_1) entered blocking state [ 885.627464][T12447] bridge0: port 2(bridge_slave_1) entered disabled state [ 885.627607][T12447] bridge_slave_1: entered allmulticast mode [ 885.643902][T12447] bridge_slave_1: entered promiscuous mode [ 885.767278][T12509] rxe_eth0 speed is unknown, defaulting to 1000 [ 886.001320][T12447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 886.031484][T12447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 887.346040][T12596] netlink: 'syz.0.1283': attribute type 9 has an invalid length. [ 887.346115][T12596] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1283'. [ 889.621417][ T5633] Bluetooth: hci5: command tx timeout [ 889.621449][ T5633] Bluetooth: hci4: command tx timeout [ 889.717119][T12447] team0: Port device team_slave_0 added [ 891.008313][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 891.008347][ T37] audit: type=1326 audit(1794129149.784:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12638 comm="syz.0.1287" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7d7afb19 code=0x7ffc0000 [ 891.008804][ T37] audit: type=1326 audit(1794129149.784:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12638 comm="syz.0.1287" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7d7afb19 code=0x7ffc0000 [ 891.008847][ T37] audit: type=1326 audit(1794129149.784:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12638 comm="syz.0.1287" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7d7afb19 code=0x7ffc0000 [ 891.008886][ T37] audit: type=1326 audit(1794129149.784:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12638 comm="syz.0.1287" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7d7afb19 code=0x7ffc0000 [ 891.008925][ T37] audit: type=1326 audit(1794129149.784:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12638 comm="syz.0.1287" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7fdd7d7afb19 code=0x7ffc0000 [ 891.008966][ T37] audit: type=1326 audit(1794129149.784:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12638 comm="syz.0.1287" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7d7afb19 code=0x7ffc0000 [ 891.176098][ T37] audit: type=1326 audit(1794129149.784:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12638 comm="syz.0.1287" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7d7afb19 code=0x7ffc0000 [ 891.176145][ T37] audit: type=1326 audit(1794129149.784:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12638 comm="syz.0.1287" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fdd7d7afb19 code=0x7ffc0000 [ 891.176188][ T37] audit: type=1326 audit(1794129149.954:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12638 comm="syz.0.1287" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fdd7d7afb19 code=0x7ffc0000 [ 891.521708][T12447] team0: Port device team_slave_1 added [ 891.623545][ T5633] Bluetooth: hci5: command tx timeout [ 891.623594][T10316] Bluetooth: hci4: command tx timeout [ 892.238014][T12510] rxe_eth0 speed is unknown, defaulting to 1000 [ 893.378093][T12447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 893.378111][T12447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 893.378137][T12447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 893.455609][T12447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 893.455632][T12447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 893.455659][T12447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 894.283537][T12681] netlink: 'syz.0.1292': attribute type 9 has an invalid length. [ 894.283612][T12681] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1292'. [ 898.331723][T12447] hsr_slave_0: entered promiscuous mode [ 898.335145][T12447] hsr_slave_1: entered promiscuous mode [ 898.337262][T12447] debugfs: 'hsr0' already exists in 'hsr' [ 898.337281][T12447] Cannot create hsr debugfs directory [ 899.879729][T12727] netlink: 'syz.6.1302': attribute type 9 has an invalid length. [ 899.879796][T12727] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1302'. [ 900.578695][ T6546] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.719315][ T6546] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.314849][ T6546] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.059157][ T6546] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.206539][T12801] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1311'. [ 907.218186][T12509] bridge0: port 1(bridge_slave_0) entered blocking state [ 907.218302][T12509] bridge0: port 1(bridge_slave_0) entered disabled state [ 907.218464][T12509] bridge_slave_0: entered allmulticast mode [ 907.227941][T12509] bridge_slave_0: entered promiscuous mode [ 907.387280][T12509] bridge0: port 2(bridge_slave_1) entered blocking state [ 907.387487][T12509] bridge0: port 2(bridge_slave_1) entered disabled state [ 907.387651][T12509] bridge_slave_1: entered allmulticast mode [ 907.394673][T12509] bridge_slave_1: entered promiscuous mode [ 913.300826][T12509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 913.302683][T12510] bridge0: port 1(bridge_slave_0) entered blocking state [ 913.302798][T12510] bridge0: port 1(bridge_slave_0) entered disabled state [ 913.302953][T12510] bridge_slave_0: entered allmulticast mode [ 913.309765][T12510] bridge_slave_0: entered promiscuous mode [ 913.513809][T12510] bridge0: port 2(bridge_slave_1) entered blocking state [ 913.513997][T12510] bridge0: port 2(bridge_slave_1) entered disabled state [ 913.514145][T12510] bridge_slave_1: entered allmulticast mode [ 913.527081][T12510] bridge_slave_1: entered promiscuous mode [ 914.545613][T12855] 00:03: ttyS1 I/O:0x2f8 (irq = 3, base_baud = 115200) is a 16550A [ 914.676673][T12509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 915.099699][T12447] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 915.262388][T12447] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 916.551380][T12447] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 916.621080][T12447] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 916.647683][T12510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 916.690918][T12509] team0: Port device team_slave_0 added [ 916.701846][T12447] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 916.739506][T12447] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 917.814477][T12510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 917.834934][T12509] team0: Port device team_slave_1 added [ 917.835007][T12447] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 918.898550][T12447] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 919.178329][T12510] team0: Port device team_slave_0 added [ 919.180221][T12509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 919.180236][T12509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 919.180262][T12509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 919.269096][T12510] team0: Port device team_slave_1 added [ 919.270124][T12509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 919.270137][T12509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 919.270165][T12509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 919.585568][T12510] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 919.585585][T12510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 919.585610][T12510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 919.624054][T12510] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 919.624071][T12510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 919.624098][T12510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 921.055532][ T6546] bridge_slave_1: left allmulticast mode [ 921.055566][ T6546] bridge_slave_1: left promiscuous mode [ 921.057324][ T6546] bridge0: port 2(bridge_slave_1) entered disabled state [ 921.245855][ T6546] bridge_slave_0: left allmulticast mode [ 921.245890][ T6546] bridge_slave_0: left promiscuous mode [ 921.246046][ T6546] bridge0: port 1(bridge_slave_0) entered disabled state [ 921.572459][ T6546] bridge_slave_1: left allmulticast mode [ 921.572494][ T6546] bridge_slave_1: left promiscuous mode [ 921.572729][ T6546] bridge0: port 2(bridge_slave_1) entered disabled state [ 921.770819][ T6546] bridge_slave_0: left allmulticast mode [ 921.770862][ T6546] bridge_slave_0: left promiscuous mode [ 921.771096][ T6546] bridge0: port 1(bridge_slave_0) entered disabled state [ 923.049035][ T1291] Bluetooth: hci0: Frame reassembly failed (-84) [ 923.732825][ T6546] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 923.812844][ T6546] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 923.833904][ T6546] bond0 (unregistering): Released all slaves [ 924.267979][ T6546] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 924.322712][ T6546] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 924.343903][ T6546] bond0 (unregistering): Released all slaves [ 924.441502][T12509] hsr_slave_0: entered promiscuous mode [ 924.444520][T12509] hsr_slave_1: entered promiscuous mode [ 924.445416][T12509] debugfs: 'hsr0' already exists in 'hsr' [ 924.445434][T12509] Cannot create hsr debugfs directory [ 924.504284][T10316] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 924.956656][T12510] hsr_slave_0: entered promiscuous mode [ 924.957718][T12510] hsr_slave_1: entered promiscuous mode [ 924.958539][T12510] debugfs: 'hsr0' already exists in 'hsr' [ 924.958555][T12510] Cannot create hsr debugfs directory [ 935.385024][ T5633] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 935.425925][ T5633] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 935.429259][ T5633] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 935.481617][ T5633] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 935.501746][ T5633] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 936.963000][ T5633] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 936.978345][ T5633] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 937.001476][ T5633] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 937.036044][ T5633] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 937.047346][ T5633] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 937.628306][ T5620] Bluetooth: hci0: command tx timeout [ 937.645182][ T5633] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 937.703067][ T5633] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 937.726440][ T5633] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 937.740530][ T5633] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 937.741243][ T5633] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 939.101718][T13064] rxe_eth0 speed is unknown, defaulting to 1000 [ 939.222062][ T5633] Bluetooth: hci6: command tx timeout [ 939.702039][ T5633] Bluetooth: hci0: command tx timeout [ 939.942820][ T5633] Bluetooth: hci3: command tx timeout [ 941.304792][ T5633] Bluetooth: hci6: command tx timeout [ 941.774785][T13080] rxe_eth0 speed is unknown, defaulting to 1000 [ 941.783293][ T5633] Bluetooth: hci0: command tx timeout [ 941.827109][ T5274] 8021q: adding VLAN 0 to HW filter on device eth1 [ 941.865581][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 941.865649][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 942.022130][ T5633] Bluetooth: hci3: command tx timeout [ 942.957055][T13090] rxe_eth0 speed is unknown, defaulting to 1000 [ 943.382055][ T5633] Bluetooth: hci6: command tx timeout [ 943.905440][ T5633] Bluetooth: hci0: command tx timeout [ 944.841036][T13064] bridge0: port 1(bridge_slave_0) entered blocking state [ 944.841269][T13064] bridge0: port 1(bridge_slave_0) entered disabled state [ 944.841756][T13064] bridge_slave_0: entered allmulticast mode [ 944.874040][T13064] bridge_slave_0: entered promiscuous mode [ 944.952304][T13064] bridge0: port 2(bridge_slave_1) entered blocking state [ 944.952503][T13064] bridge0: port 2(bridge_slave_1) entered disabled state [ 944.952988][T13064] bridge_slave_1: entered allmulticast mode [ 944.996412][T13064] bridge_slave_1: entered promiscuous mode [ 945.397800][ T5633] Bluetooth: hci3: command tx timeout [ 945.472035][ T5633] Bluetooth: hci6: command tx timeout [ 945.676869][T13064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 945.723244][T13064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 947.730850][T13064] team0: Port device team_slave_0 added [ 948.032129][ T6546] hsr_slave_0: left promiscuous mode [ 948.072071][ T6546] hsr_slave_1: left promiscuous mode [ 948.075268][ T6546] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 948.075294][ T6546] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 948.113504][ T6546] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 948.113528][ T6546] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 948.247635][ T5633] Bluetooth: hci3: command tx timeout [ 948.302181][ T6546] hsr_slave_0: left promiscuous mode [ 949.242217][ T6546] hsr_slave_1: left promiscuous mode [ 949.248132][ T6546] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 949.248158][ T6546] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 949.294063][ T6546] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 949.294088][ T6546] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 949.485478][ T6546] veth1_macvtap: left promiscuous mode [ 949.485589][ T6546] veth0_macvtap: left promiscuous mode [ 949.485873][ T6546] veth1_vlan: left promiscuous mode [ 949.512885][ T6546] veth0_vlan: left promiscuous mode [ 949.662904][ T6546] veth1_macvtap: left promiscuous mode [ 949.663009][ T6546] veth0_macvtap: left promiscuous mode [ 949.663266][ T6546] veth1_vlan: left promiscuous mode [ 949.663477][ T6546] veth0_vlan: left promiscuous mode [ 951.447137][T13224] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 952.892948][ T6546] team0 (unregistering): Port device team_slave_1 removed [ 952.973184][ T6546] team0 (unregistering): Port device team_slave_0 removed [ 955.372670][ T6546] team0 (unregistering): Port device team_slave_1 removed [ 956.133731][ T6546] team0 (unregistering): Port device team_slave_0 removed [ 956.589409][T13064] team0: Port device team_slave_1 added [ 957.778179][T13064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 957.778198][T13064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 957.778225][T13064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 957.819596][T13064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 957.819613][T13064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 957.819640][T13064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 958.367516][T13080] bridge0: port 1(bridge_slave_0) entered blocking state [ 958.367928][T13080] bridge0: port 1(bridge_slave_0) entered disabled state [ 958.368075][T13080] bridge_slave_0: entered allmulticast mode [ 958.377038][T13080] bridge_slave_0: entered promiscuous mode [ 958.415440][T13064] hsr_slave_0: entered promiscuous mode [ 958.422766][T13064] hsr_slave_1: entered promiscuous mode [ 958.426968][T13064] debugfs: 'hsr0' already exists in 'hsr' [ 958.426987][T13064] Cannot create hsr debugfs directory [ 958.465755][T13080] bridge0: port 2(bridge_slave_1) entered blocking state [ 958.465880][T13080] bridge0: port 2(bridge_slave_1) entered disabled state [ 958.466036][T13080] bridge_slave_1: entered allmulticast mode [ 958.473247][T13080] bridge_slave_1: entered promiscuous mode [ 959.301370][T13080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 959.398329][T13080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 959.705962][T13080] team0: Port device team_slave_0 added [ 959.810253][T13080] team0: Port device team_slave_1 added [ 960.154435][ T5274] 8021q: adding VLAN 0 to HW filter on device eth2 [ 960.176308][T13273] gretap0: entered promiscuous mode [ 960.194481][T13273] vlan2: entered promiscuous mode [ 960.553340][T13080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 960.553359][T13080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 960.553384][T13080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 960.700237][T13080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 960.700249][T13080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 960.700264][T13080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 960.940520][T13090] bridge0: port 1(bridge_slave_0) entered blocking state [ 960.940737][T13090] bridge0: port 1(bridge_slave_0) entered disabled state [ 960.941048][T13090] bridge_slave_0: entered allmulticast mode [ 960.947692][T13090] bridge_slave_0: entered promiscuous mode [ 961.031663][T13090] bridge0: port 2(bridge_slave_1) entered blocking state [ 961.031811][T13090] bridge0: port 2(bridge_slave_1) entered disabled state [ 961.033919][T13090] bridge_slave_1: entered allmulticast mode [ 961.058555][T13090] bridge_slave_1: entered promiscuous mode [ 961.200163][T13080] hsr_slave_0: entered promiscuous mode [ 961.202610][T13080] hsr_slave_1: entered promiscuous mode [ 961.235428][T13080] debugfs: 'hsr0' already exists in 'hsr' [ 961.235442][T13080] Cannot create hsr debugfs directory [ 963.170806][T13090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 963.325982][T13090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 964.126583][ T6546] IPVS: stop unused estimator thread 0... [ 964.129706][T13090] team0: Port device team_slave_0 added [ 964.217415][T13090] team0: Port device team_slave_1 added [ 965.037750][ T5274] 8021q: adding VLAN 0 to HW filter on device eth3 [ 965.041052][T13090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 965.041067][T13090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 965.041093][T13090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 965.092837][T13090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 965.092853][T13090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 965.092885][T13090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 965.956059][T13090] hsr_slave_0: entered promiscuous mode [ 965.960455][T13090] hsr_slave_1: entered promiscuous mode [ 965.964941][T13090] debugfs: 'hsr0' already exists in 'hsr' [ 965.964961][T13090] Cannot create hsr debugfs directory [ 972.262249][ T6546] bridge_slave_1: left allmulticast mode [ 972.262355][ T6546] bridge_slave_1: left promiscuous mode [ 972.262607][ T6546] bridge0: port 2(bridge_slave_1) entered disabled state [ 974.411508][ T6546] bridge_slave_0: left allmulticast mode [ 974.411559][ T6546] bridge_slave_0: left promiscuous mode [ 974.412102][ T6546] bridge0: port 1(bridge_slave_0) entered disabled state [ 974.693640][ T6546] bridge_slave_1: left allmulticast mode [ 974.693678][ T6546] bridge_slave_1: left promiscuous mode [ 974.693928][ T6546] bridge0: port 2(bridge_slave_1) entered disabled state [ 974.872926][ T6546] bridge_slave_0: left allmulticast mode [ 974.872961][ T6546] bridge_slave_0: left promiscuous mode [ 974.873190][ T6546] bridge0: port 1(bridge_slave_0) entered disabled state [ 975.182148][ T6546] bridge_slave_1: left allmulticast mode [ 975.182184][ T6546] bridge_slave_1: left promiscuous mode [ 975.182429][ T6546] bridge0: port 2(bridge_slave_1) entered disabled state [ 976.244882][ T6546] bridge_slave_0: left allmulticast mode [ 976.244918][ T6546] bridge_slave_0: left promiscuous mode [ 976.245168][ T6546] bridge0: port 1(bridge_slave_0) entered disabled state [ 976.512144][ T6546] bridge_slave_1: left allmulticast mode [ 976.512182][ T6546] bridge_slave_1: left promiscuous mode [ 976.512422][ T6546] bridge0: port 2(bridge_slave_1) entered disabled state [ 976.613569][ T6546] bridge_slave_0: left allmulticast mode [ 976.613611][ T6546] bridge_slave_0: left promiscuous mode [ 976.613836][ T6546] bridge0: port 1(bridge_slave_0) entered disabled state [ 976.832105][ T6546] bridge_slave_1: left allmulticast mode [ 976.832142][ T6546] bridge_slave_1: left promiscuous mode [ 976.832411][ T6546] bridge0: port 2(bridge_slave_1) entered disabled state [ 976.933702][ T6546] bridge_slave_0: left allmulticast mode [ 976.933738][ T6546] bridge_slave_0: left promiscuous mode [ 976.933966][ T6546] bridge0: port 1(bridge_slave_0) entered disabled state [ 977.152095][ T6546] bridge_slave_1: left allmulticast mode [ 977.152131][ T6546] bridge_slave_1: left promiscuous mode [ 977.152380][ T6546] bridge0: port 2(bridge_slave_1) entered disabled state [ 977.273548][ T6546] bridge_slave_0: left allmulticast mode [ 977.273583][ T6546] bridge_slave_0: left promiscuous mode [ 977.273810][ T6546] bridge0: port 1(bridge_slave_0) entered disabled state [ 977.903411][ T6546] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 977.984926][ T6546] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 978.044514][ T6546] bond0 (unregistering): Released all slaves [ 978.532655][ T6546] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 978.652575][ T6546] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 978.736394][ T6546] bond0 (unregistering): Released all slaves [ 981.265498][ T6546] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 981.362613][ T6546] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 981.424242][ T6546] bond0 (unregistering): Released all slaves [ 981.917603][ T6546] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 984.302652][ T6546] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 984.385578][ T6546] bond0 (unregistering): Released all slaves [ 987.485097][ T6546] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 988.926844][ T6546] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 989.009271][ T6546] bond0 (unregistering): Released all slaves [ 989.444134][ T6546] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 989.585529][ T6546] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 989.687259][ T6546] bond0 (unregistering): Released all slaves [ 991.017834][ T5274] 8021q: adding VLAN 0 to HW filter on device eth4 [ 993.160439][ T5274] 8021q: adding VLAN 0 to HW filter on device eth5 [ 993.161943][T10474] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 993.320377][T10474] usb 7-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 993.332792][T10474] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 993.332822][T10474] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 993.332844][T10474] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 993.332884][T10474] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.332993][T10316] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 993.382581][T10316] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 993.384098][T10316] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 993.385272][T10316] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 993.387427][T10316] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 993.489745][T10474] usb 7-1: config 0 descriptor?? [ 994.081453][T10474] plantronics 0003:047F:FFFF.0006: unbalanced collection at end of report description [ 994.085359][T10474] plantronics 0003:047F:FFFF.0006: parse failed [ 994.085461][T10474] plantronics 0003:047F:FFFF.0006: probe with driver plantronics failed with error -22 [ 994.216210][T10474] usb 7-1: USB disconnect, device number 8 [ 997.052779][T13442] rxe_eth0 speed is unknown, defaulting to 1000 [ 997.888930][T10316] Bluetooth: hci4: command tx timeout [ 1000.524287][ T5620] Bluetooth: hci4: command tx timeout [ 1000.857731][ T5620] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1000.896290][T10139] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1001.365173][T10139] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1001.389540][T10139] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1001.402092][T13494] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1001.407592][ T5620] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1001.413001][ T5620] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1001.416389][ T5620] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1001.474674][T10139] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1001.493069][T10139] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1002.861856][T10139] Bluetooth: hci4: command tx timeout [ 1003.622052][T10139] Bluetooth: hci7: command tx timeout [ 1004.011587][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 1004.011657][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 1004.026275][T10139] Bluetooth: hci5: command tx timeout [ 1004.904770][T10139] Bluetooth: hci4: command tx timeout [ 1005.710217][T10139] Bluetooth: hci7: command tx timeout [ 1006.119463][T10139] Bluetooth: hci5: command tx timeout [ 1007.782114][T10139] Bluetooth: hci7: command tx timeout [ 1008.342677][T10139] Bluetooth: hci5: command tx timeout [ 1009.156553][ T5274] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1009.863574][T10139] Bluetooth: hci7: command tx timeout [ 1010.421872][T10139] Bluetooth: hci5: command tx timeout [ 1010.662250][ T5759] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1010.812693][ T5759] usb 7-1: New USB device found: idVendor=044f, idProduct=b65d, bcdDevice=0.00 [ 1010.814301][ T5759] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1010.814331][ T5759] usb 7-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1010.814358][ T5759] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1010.814390][ T5759] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.882900][ T5759] usb 7-1: config 0 descriptor?? [ 1011.219791][ T36] kernel read not supported for file /swaps (pid: 36 comm: kworker/1:1) [ 1011.357449][ T5759] usbhid 7-1:0.0: can't add hid device: -71 [ 1011.357565][ T5759] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1011.405161][ T5759] usb 7-1: USB disconnect, device number 9 [ 1012.137803][ T6546] hsr_slave_0: left promiscuous mode [ 1012.151898][ T6546] hsr_slave_1: left promiscuous mode [ 1012.153147][ T6546] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1013.042457][ T6546] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1014.842075][ T6546] hsr_slave_0: left promiscuous mode [ 1014.881925][ T6546] hsr_slave_1: left promiscuous mode [ 1014.883142][ T6546] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1014.932415][ T6546] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1015.071980][ T6546] hsr_slave_0: left promiscuous mode [ 1015.091893][ T6546] hsr_slave_1: left promiscuous mode [ 1015.092607][ T6546] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1015.132342][ T6546] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1015.271942][ T6546] hsr_slave_0: left promiscuous mode [ 1015.292625][ T6546] hsr_slave_1: left promiscuous mode [ 1015.293705][ T6546] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1015.342384][ T6546] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1015.462034][ T6546] hsr_slave_0: left promiscuous mode [ 1015.481882][ T6546] hsr_slave_1: left promiscuous mode [ 1015.482564][ T6546] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1015.512372][ T6546] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1015.611990][ T6546] hsr_slave_0: left promiscuous mode [ 1015.634644][ T6546] hsr_slave_1: left promiscuous mode [ 1015.635935][ T6546] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1015.662302][ T6546] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1015.996990][ T6546] team0 (unregistering): Port device team_slave_1 removed [ 1016.031127][ T6546] team0 (unregistering): Port device team_slave_0 removed [ 1016.412456][ T6546] team0 (unregistering): Port device team_slave_1 removed [ 1016.452463][ T6546] team0 (unregistering): Port device team_slave_0 removed [ 1016.942459][ T6546] team0 (unregistering): Port device team_slave_1 removed [ 1016.984781][ T6546] team0 (unregistering): Port device team_slave_0 removed [ 1017.394193][ T6546] team0 (unregistering): Port device team_slave_1 removed [ 1017.423275][ T6546] team0 (unregistering): Port device team_slave_0 removed [ 1017.812411][ T6546] team0 (unregistering): Port device team_slave_1 removed [ 1017.996667][ T6546] team0 (unregistering): Port device team_slave_0 removed [ 1020.145932][ T6546] team0 (unregistering): Port device team_slave_1 removed [ 1020.178361][ T6546] team0 (unregistering): Port device team_slave_0 removed [ 1020.410489][ T5274] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1021.729911][T13487] rxe_eth0 speed is unknown, defaulting to 1000 [ 1023.217212][T13486] rxe_eth0 speed is unknown, defaulting to 1000 [ 1023.221452][ T5274] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1025.491217][T13442] bridge0: port 1(bridge_slave_0) entered blocking state [ 1025.491358][T13442] bridge0: port 1(bridge_slave_0) entered disabled state [ 1025.491520][T13442] bridge_slave_0: entered allmulticast mode [ 1025.534530][T13442] bridge_slave_0: entered promiscuous mode [ 1025.545105][T13442] bridge0: port 2(bridge_slave_1) entered blocking state [ 1025.546900][T13442] bridge0: port 2(bridge_slave_1) entered disabled state [ 1025.547047][T13442] bridge_slave_1: entered allmulticast mode [ 1025.556787][T13442] bridge_slave_1: entered promiscuous mode [ 1027.438500][T13442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1027.479160][T13442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1030.080464][T13442] team0: Port device team_slave_0 added [ 1031.972457][T13442] team0: Port device team_slave_1 added [ 1033.336453][T13442] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1033.336470][T13442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1033.336496][T13442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1033.339783][T13442] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1033.339805][T13442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1033.339831][T13442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1033.737727][T13442] hsr_slave_0: entered promiscuous mode [ 1033.741231][T13442] hsr_slave_1: entered promiscuous mode [ 1033.742699][T13442] debugfs: 'hsr0' already exists in 'hsr' [ 1033.742719][T13442] Cannot create hsr debugfs directory [ 1036.478905][T13487] bridge0: port 1(bridge_slave_0) entered blocking state [ 1036.479036][T13487] bridge0: port 1(bridge_slave_0) entered disabled state [ 1036.479181][T13487] bridge_slave_0: entered allmulticast mode [ 1036.482352][T13487] bridge_slave_0: entered promiscuous mode [ 1036.739909][T13487] bridge0: port 2(bridge_slave_1) entered blocking state [ 1036.740028][T13487] bridge0: port 2(bridge_slave_1) entered disabled state [ 1036.740170][T13487] bridge_slave_1: entered allmulticast mode [ 1036.770403][T13487] bridge_slave_1: entered promiscuous mode [ 1037.305924][T13487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1037.400789][T13487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1037.698039][T13486] bridge0: port 1(bridge_slave_0) entered blocking state [ 1037.698159][T13486] bridge0: port 1(bridge_slave_0) entered disabled state [ 1037.698303][T13486] bridge_slave_0: entered allmulticast mode [ 1037.700651][T13486] bridge_slave_0: entered promiscuous mode [ 1037.731140][T13487] team0: Port device team_slave_0 added [ 1037.765188][T13486] bridge0: port 2(bridge_slave_1) entered blocking state [ 1037.765311][T13486] bridge0: port 2(bridge_slave_1) entered disabled state [ 1037.765479][T13486] bridge_slave_1: entered allmulticast mode [ 1037.771492][T13486] bridge_slave_1: entered promiscuous mode [ 1037.790342][T13487] team0: Port device team_slave_1 added [ 1038.215054][T13486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1039.648613][T13487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1039.648645][T13487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1039.648673][T13487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1039.675553][T13486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1039.709588][T13487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1039.709604][T13487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1039.709630][T13487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1040.127908][T13486] team0: Port device team_slave_0 added [ 1040.165202][T13486] team0: Port device team_slave_1 added [ 1040.209779][T13487] hsr_slave_0: entered promiscuous mode [ 1040.211542][T13487] hsr_slave_1: entered promiscuous mode [ 1040.215622][T13487] debugfs: 'hsr0' already exists in 'hsr' [ 1040.215641][T13487] Cannot create hsr debugfs directory [ 1040.692734][T13486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1040.692752][T13486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1040.692779][T13486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1040.770609][T13486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1040.770626][T13486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1040.770652][T13486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1041.992938][T13486] hsr_slave_0: entered promiscuous mode [ 1041.996010][T13486] hsr_slave_1: entered promiscuous mode [ 1041.998422][T13486] debugfs: 'hsr0' already exists in 'hsr' [ 1041.998441][T13486] Cannot create hsr debugfs directory [ 1044.181836][ T31] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1044.240399][T13802] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1431'. [ 1044.293617][T13442] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1044.331915][ T31] usb 7-1: Using ep0 maxpacket: 8 [ 1044.332760][ T31] usb 7-1: New USB device found: idVendor=0582, idProduct=0025, bcdDevice=0.40 [ 1044.334249][ T31] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1044.334272][ T31] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1044.334348][ T31] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1044.339118][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.339142][ T31] usb 7-1: Product: syz [ 1044.339156][ T31] usb 7-1: Manufacturer: syz [ 1044.339169][ T31] usb 7-1: SerialNumber: syz [ 1044.397997][T13442] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1044.602293][T13802] bond0: (slave bond_slave_0): Releasing backup interface [ 1044.709851][T13442] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1044.750765][T13442] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1044.779027][T13442] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1044.819445][T13442] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1044.976885][T13442] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1045.214065][T13442] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1045.350301][ T31] usb 7-1: 1:1: cannot get freq (v2/v3): err -71 [ 1047.115541][ T31] usb 7-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1047.823540][ T31] usb 7-1: USB disconnect, device number 10 [ 1048.843595][ T6546] bridge_slave_1: left allmulticast mode [ 1048.843630][ T6546] bridge_slave_1: left promiscuous mode [ 1048.843865][ T6546] bridge0: port 2(bridge_slave_1) entered disabled state [ 1048.883095][T13766] udevd[13766]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1049.424142][ T6546] bridge_slave_0: left allmulticast mode [ 1049.424356][ T6546] bridge_slave_0: left promiscuous mode [ 1049.450447][ T6546] bridge0: port 1(bridge_slave_0) entered disabled state [ 1050.183169][ T6546] bridge_slave_1: left allmulticast mode [ 1050.183204][ T6546] bridge_slave_1: left promiscuous mode [ 1050.183422][ T6546] bridge0: port 2(bridge_slave_1) entered disabled state [ 1050.271790][ T31] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1050.302733][ T6546] bridge_slave_0: left allmulticast mode [ 1050.302756][ T6546] bridge_slave_0: left promiscuous mode [ 1050.302898][ T6546] bridge0: port 1(bridge_slave_0) entered disabled state [ 1050.421837][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 1050.429783][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1050.429841][ T31] usb 1-1: New USB device found: idVendor=103d, idProduct=0100, bcdDevice=0.40 [ 1050.454436][ T31] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 1050.456884][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.456908][ T31] usb 1-1: Product: syz [ 1050.456922][ T31] usb 1-1: Manufacturer: syz [ 1050.456936][ T31] usb 1-1: SerialNumber: syz [ 1050.572230][ T6546] bridge_slave_1: left allmulticast mode [ 1050.572266][ T6546] bridge_slave_1: left promiscuous mode [ 1050.572505][ T6546] bridge0: port 2(bridge_slave_1) entered disabled state [ 1050.865320][ T31] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 1050.867058][ T31] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1050.943259][ T6546] bridge_slave_0: left allmulticast mode [ 1050.943285][ T6546] bridge_slave_0: left promiscuous mode [ 1050.943500][ T6546] bridge0: port 1(bridge_slave_0) entered disabled state [ 1051.906730][ T31] usb 1-1: 2:1 : can't get Cluster Descriptor [ 1052.119492][ T5896] usb 1-1: USB disconnect, device number 17 [ 1052.382331][ T6546] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1052.442184][ T6546] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1052.503102][ T6546] bond0 (unregistering): Released all slaves [ 1052.723769][ T6546] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1052.803892][ T6546] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1052.865592][ T6546] bond0 (unregistering): Released all slaves [ 1053.093894][ T6546] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1053.212916][ T6546] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1053.273480][ T6546] bond0 (unregistering): Released all slaves [ 1053.365829][T13487] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1053.383489][T13871] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1053.383921][T13871] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1053.459791][T13871] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1053.459896][T13871] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1053.488119][T13487] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1053.495324][T13487] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1053.516237][T13871] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1053.516320][T13871] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1053.548594][T13487] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1053.554861][T13487] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1053.636824][T13871] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1053.699207][T13487] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1053.709189][T13487] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1053.736555][T13871] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1053.736638][T13871] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1053.769813][T13487] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1053.783838][T13871] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1053.854963][T13871] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1053.855046][T13871] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 1053.925013][T13871] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 1054.385693][T10139] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1054.659775][T10139] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1054.717721][T10139] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1054.802209][T10139] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1054.832466][T10139] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1055.464443][ T5633] Bluetooth: hci1: command 0x0406 tx timeout [ 1055.488125][ T5633] Bluetooth: hci2: command 0x0406 tx timeout [ 1055.844774][T13916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1446'. [ 1055.942045][ T5633] Bluetooth: hci5: command 0x0c1a tx timeout [ 1056.215293][ T5633] Bluetooth: hci7: command 0x0c1a tx timeout [ 1056.472491][T13916] hsr_slave_1 (unregistering): left promiscuous mode [ 1056.601832][T11818] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1056.861698][T11818] usb 7-1: Using ep0 maxpacket: 16 [ 1056.868015][T11818] usb 7-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 1056.871070][T11818] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1056.871093][T11818] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1056.871129][T11818] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.644056][ T5633] Bluetooth: hci0: command tx timeout [ 1057.644783][ T5633] Bluetooth: hci2: command 0x0406 tx timeout [ 1057.644814][ T5633] Bluetooth: hci1: command 0x0406 tx timeout [ 1057.878617][T11818] usb 7-1: config 0 descriptor?? [ 1058.021775][T10139] Bluetooth: hci5: command 0x0c1a tx timeout [ 1058.263014][T10139] Bluetooth: hci7: command 0x0c1a tx timeout [ 1058.542332][T13487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1058.812760][ T5345] usb 7-1: USB disconnect, device number 11 [ 1058.851643][T13487] 8021q: adding VLAN 0 to HW filter on device team0 [ 1058.957320][ T5633] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1059.028983][ T5633] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1059.031085][ T5633] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1059.038745][ T5633] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1059.045180][ T5633] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1059.060074][T13902] rxe_eth0 speed is unknown, defaulting to 1000 [ 1059.701814][T10139] Bluetooth: hci0: command tx timeout [ 1060.044157][ T5633] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1060.110485][ T5633] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1060.115328][ T5633] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1060.122166][ T5633] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1060.124220][ T5633] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1060.341688][T10139] Bluetooth: hci7: command 0x0c1a tx timeout [ 1061.153996][T10139] Bluetooth: hci3: command tx timeout [ 1061.782880][T10139] Bluetooth: hci0: command tx timeout [ 1062.349840][T10139] Bluetooth: hci4: command tx timeout [ 1063.298825][T10139] Bluetooth: hci3: command tx timeout [ 1063.862795][T10139] Bluetooth: hci0: command tx timeout [ 1064.422071][T10139] Bluetooth: hci4: command tx timeout [ 1065.075256][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 1065.075401][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 1065.466569][T10139] Bluetooth: hci3: command tx timeout [ 1066.533531][T10139] Bluetooth: hci4: command tx timeout [ 1067.542514][T10139] Bluetooth: hci3: command tx timeout [ 1067.572347][ T6546] hsr_slave_0: left promiscuous mode [ 1067.631774][ T6546] hsr_slave_1: left promiscuous mode [ 1067.633008][ T6546] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1067.685160][ T6546] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1067.892168][ T6546] hsr_slave_0: left promiscuous mode [ 1068.028663][ T6546] hsr_slave_1: left promiscuous mode [ 1068.039233][ T6546] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1068.066413][ T6546] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1068.482184][ T6546] hsr_slave_0: left promiscuous mode [ 1068.532291][ T6546] hsr_slave_1: left promiscuous mode [ 1068.581935][T10139] Bluetooth: hci4: command tx timeout [ 1068.613877][ T6546] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1068.731233][ T6546] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1069.484744][ T6546] team0 (unregistering): Port device team_slave_1 removed [ 1069.562091][ T6546] team0 (unregistering): Port device team_slave_0 removed [ 1071.392370][ T6546] team0 (unregistering): Port device team_slave_1 removed [ 1071.456853][ T6546] team0 (unregistering): Port device team_slave_0 removed [ 1072.212815][ T6546] team0 (unregistering): Port device team_slave_1 removed [ 1072.283642][ T6546] team0 (unregistering): Port device team_slave_0 removed [ 1072.579032][T14053] syzkaller0: entered promiscuous mode [ 1072.579059][T14053] syzkaller0: entered allmulticast mode [ 1072.899503][T13946] rxe_eth0 speed is unknown, defaulting to 1000 [ 1073.994818][T13964] rxe_eth0 speed is unknown, defaulting to 1000 [ 1074.083315][T13902] bridge0: port 1(bridge_slave_0) entered blocking state [ 1074.083529][T13902] bridge0: port 1(bridge_slave_0) entered disabled state [ 1074.135920][T13902] bridge_slave_0: entered allmulticast mode [ 1074.138581][T13902] bridge_slave_0: entered promiscuous mode [ 1074.168817][T13902] bridge0: port 2(bridge_slave_1) entered blocking state [ 1074.169074][T13902] bridge0: port 2(bridge_slave_1) entered disabled state [ 1074.169216][T13902] bridge_slave_1: entered allmulticast mode [ 1074.194332][T13902] bridge_slave_1: entered promiscuous mode [ 1074.356292][T13902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1074.385975][T13902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1074.685088][T13902] team0: Port device team_slave_0 added [ 1074.869294][T13902] team0: Port device team_slave_1 added [ 1076.068448][T13902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1076.068465][T13902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1076.068492][T13902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1076.084129][T13902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1076.084143][T13902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1076.084170][T13902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1076.488348][T13902] hsr_slave_0: entered promiscuous mode [ 1076.494064][T13902] hsr_slave_1: entered promiscuous mode [ 1076.494833][T13902] debugfs: 'hsr0' already exists in 'hsr' [ 1076.494851][T13902] Cannot create hsr debugfs directory [ 1080.516758][T13946] bridge0: port 1(bridge_slave_0) entered blocking state [ 1080.516959][T13946] bridge0: port 1(bridge_slave_0) entered disabled state [ 1080.517127][T13946] bridge_slave_0: entered allmulticast mode [ 1080.546796][T13946] bridge_slave_0: entered promiscuous mode [ 1080.614808][T13946] bridge0: port 2(bridge_slave_1) entered blocking state [ 1080.614934][T13946] bridge0: port 2(bridge_slave_1) entered disabled state [ 1080.615092][T13946] bridge_slave_1: entered allmulticast mode [ 1080.617474][T13946] bridge_slave_1: entered promiscuous mode [ 1082.446396][T14169] cgroup: fork rejected by pids controller in /syz0 [ 1082.767131][T13946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1082.798120][T13946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1082.872700][T13946] team0: Port device team_slave_0 added [ 1082.876213][T13946] team0: Port device team_slave_1 added [ 1082.923798][T13946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1082.923814][T13946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1082.923840][T13946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1082.926128][T13946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1082.926142][T13946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1082.926168][T13946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1084.223502][T13946] hsr_slave_0: entered promiscuous mode [ 1084.226217][T13946] hsr_slave_1: entered promiscuous mode [ 1084.228613][T13946] debugfs: 'hsr0' already exists in 'hsr' [ 1084.228632][T13946] Cannot create hsr debugfs directory [ 1087.560254][T13964] bridge0: port 1(bridge_slave_0) entered blocking state [ 1087.560562][T13964] bridge0: port 1(bridge_slave_0) entered disabled state [ 1087.560711][T13964] bridge_slave_0: entered allmulticast mode [ 1087.587339][T13964] bridge_slave_0: entered promiscuous mode [ 1087.617183][T13964] bridge0: port 2(bridge_slave_1) entered blocking state [ 1087.617306][T13964] bridge0: port 2(bridge_slave_1) entered disabled state [ 1087.617463][T13964] bridge_slave_1: entered allmulticast mode [ 1087.643635][T13964] bridge_slave_1: entered promiscuous mode [ 1087.812115][T13964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1087.864245][T13964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1087.963568][T13964] team0: Port device team_slave_0 added [ 1088.009205][T13964] team0: Port device team_slave_1 added [ 1088.049464][T13964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1088.049481][T13964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1088.049508][T13964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1088.053934][T13964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1088.053948][T13964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1088.053986][T13964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1088.156326][T13964] hsr_slave_0: entered promiscuous mode [ 1088.160682][T13964] hsr_slave_1: entered promiscuous mode [ 1088.162276][T13964] debugfs: 'hsr0' already exists in 'hsr' [ 1088.162296][T13964] Cannot create hsr debugfs directory [ 1088.417398][ T37] audit: type=1326 audit(1794129347.194:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14241 comm="syz.0.1486" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7d7afb19 code=0x7ffc0000 [ 1088.419634][ T37] audit: type=1326 audit(1794129347.194:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14241 comm="syz.0.1486" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7d7afb19 code=0x7ffc0000 [ 1088.429991][ T37] audit: type=1326 audit(1794129347.204:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14241 comm="syz.0.1486" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7d7afb19 code=0x7ffc0000 [ 1088.436314][ T37] audit: type=1326 audit(1794129347.204:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14241 comm="syz.0.1486" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7d7afb19 code=0x7ffc0000 [ 1088.436359][ T37] audit: type=1326 audit(1794129347.214:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14241 comm="syz.0.1486" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fdd7d7afb19 code=0x7ffc0000 [ 1088.437334][ T37] audit: type=1326 audit(1794129347.214:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14241 comm="syz.0.1486" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7d7afb19 code=0x7ffc0000 [ 1088.437377][ T37] audit: type=1326 audit(1794129347.214:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14241 comm="syz.0.1486" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7d7afb19 code=0x7ffc0000 [ 1088.438080][ T37] audit: type=1326 audit(1794129347.214:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14241 comm="syz.0.1486" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7d7afb19 code=0x7ffc0000 [ 1088.438628][ T37] audit: type=1326 audit(1794129347.214:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14241 comm="syz.0.1486" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd7d7afb19 code=0x7ffc0000 [ 1088.439946][ T37] audit: type=1326 audit(1794129347.214:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14241 comm="syz.0.1486" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fdd7d7afb19 code=0x7ffc0000 [ 1090.715604][ T6546] bridge_slave_1: left allmulticast mode [ 1090.715644][ T6546] bridge_slave_1: left promiscuous mode [ 1090.715949][ T6546] bridge0: port 2(bridge_slave_1) entered disabled state [ 1090.858835][ T6546] bridge_slave_0: left allmulticast mode [ 1090.858871][ T6546] bridge_slave_0: left promiscuous mode [ 1090.859121][ T6546] bridge0: port 1(bridge_slave_0) entered disabled state [ 1091.132319][ T6546] bridge_slave_1: left allmulticast mode [ 1091.132356][ T6546] bridge_slave_1: left promiscuous mode [ 1091.132591][ T6546] bridge0: port 2(bridge_slave_1) entered disabled state [ 1091.306320][ T6546] bridge_slave_0: left allmulticast mode [ 1091.306356][ T6546] bridge_slave_0: left promiscuous mode [ 1091.306587][ T6546] bridge0: port 1(bridge_slave_0) entered disabled state [ 1091.593125][ T6546] bridge_slave_1: left allmulticast mode [ 1091.593160][ T6546] bridge_slave_1: left promiscuous mode [ 1091.593397][ T6546] bridge0: port 2(bridge_slave_1) entered disabled state [ 1091.736943][ T6546] bridge_slave_0: left allmulticast mode [ 1091.736979][ T6546] bridge_slave_0: left promiscuous mode [ 1091.737229][ T6546] bridge0: port 1(bridge_slave_0) entered disabled state [ 1092.633322][ T6546] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1092.722562][ T6546] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1092.784146][ T6546] bond0 (unregistering): Released all slaves [ 1093.475441][ T6546] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1093.572501][ T6546] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1093.644124][ T6546] bond0 (unregistering): Released all slaves [ 1093.982423][ T6546] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1094.062929][ T6546] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1094.127625][ T6546] bond0 (unregistering): Released all slaves [ 1094.195802][ T5274] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1100.615091][ T6546] hsr_slave_0: left promiscuous mode [ 1100.692013][ T6546] hsr_slave_1: left promiscuous mode [ 1100.714779][ T6546] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1100.951902][ T6546] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1101.316591][T14336] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 1101.357063][ T6546] hsr_slave_0: left promiscuous mode [ 1101.394855][ T6546] hsr_slave_1: left promiscuous mode [ 1101.395972][ T6546] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1101.434615][ T6546] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1101.635238][ T6546] hsr_slave_0: left promiscuous mode [ 1101.647259][T14336] UDC core: g1: couldn't find an available UDC or it's busy [ 1101.671650][ T6546] hsr_slave_1: left promiscuous mode [ 1101.672764][ T6546] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1101.713844][ T6546] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1102.363234][ T6546] team0 (unregistering): Port device team_slave_1 removed [ 1102.423940][ T6546] team0 (unregistering): Port device team_slave_0 removed [ 1103.372223][ T6546] team0 (unregistering): Port device team_slave_1 removed [ 1103.464075][ T6546] team0 (unregistering): Port device team_slave_0 removed [ 1104.316609][T14355] 00:03: ttyS1 I/O:0x2f8 (irq = 3, base_baud = 115200) is a 16550A [ 1106.202195][ T6546] team0 (unregistering): Port device team_slave_1 removed [ 1106.255143][ T6546] team0 (unregistering): Port device team_slave_0 removed [ 1106.518184][T14366] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1504'. [ 1108.161847][ T983] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1108.332515][ T983] usb 1-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 1108.333857][ T983] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1108.333887][ T983] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1108.333910][ T983] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1108.333947][ T983] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.338401][ T983] usb 1-1: config 0 descriptor?? [ 1109.480404][ T983] plantronics 0003:047F:FFFF.0007: item fetching failed at offset 22/24 [ 1109.506525][ T983] plantronics 0003:047F:FFFF.0007: parse failed [ 1109.506627][ T983] plantronics 0003:047F:FFFF.0007: probe with driver plantronics failed with error -22 [ 1109.616171][T13946] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1109.675635][ T5734] usb 1-1: USB disconnect, device number 18 [ 1109.707133][T13946] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1109.737793][T13946] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1109.878367][T13946] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1109.891296][T13946] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1111.133979][T13946] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1111.254280][T13946] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1111.365894][T13946] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1111.992692][T13902] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1112.038803][T13902] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1112.056258][T13902] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1112.147103][T13902] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1112.163222][T13902] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1112.298497][T13902] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1113.403085][T13902] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1113.430027][T13902] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1113.659400][T14459] mmap: syz.6.1515 (14459) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1113.912310][T13964] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1113.955848][T13964] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1113.957845][T13964] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1113.961705][T10474] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 1114.052744][T13964] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1114.062069][T13964] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1114.100865][T13964] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1114.119673][T10474] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1114.120394][T10474] usb 7-1: not running at top speed; connect to a high speed hub [ 1114.120429][T10474] usb 7-1: New USB device found: idVendor=0d8c, idProduct=000c, bcdDevice=0.40 [ 1114.126200][T10474] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.126223][T10474] usb 7-1: Product: syz [ 1114.126237][T10474] usb 7-1: Manufacturer: syz [ 1114.126251][T10474] usb 7-1: SerialNumber: syz [ 1114.142775][T13946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1114.150106][T13964] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1114.361171][T13964] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1114.434890][ T5633] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1114.492293][ T5633] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1114.503271][ T5633] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1114.505529][ T5633] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1114.506217][ T5633] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1114.686131][T14471] overlayfs: missing 'lowerdir' [ 1114.731826][T10474] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1114.741730][T13946] 8021q: adding VLAN 0 to HW filter on device team0 [ 1114.762463][T10474] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1114.802336][ T995] bridge0: port 1(bridge_slave_0) entered blocking state [ 1114.802437][ T995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1114.888102][T10474] usb 7-1: USB disconnect, device number 12 [ 1114.995070][ T1042] bridge0: port 2(bridge_slave_1) entered blocking state [ 1114.995202][ T1042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1115.091920][T14357] udevd[14357]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1116.741630][ T5633] Bluetooth: hci5: command tx timeout [ 1117.293875][T13964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1117.294664][T14473] rxe_eth0 speed is unknown, defaulting to 1000 [ 1117.399918][T13964] 8021q: adding VLAN 0 to HW filter on device team0 [ 1117.415332][ T1336] bridge0: port 1(bridge_slave_0) entered blocking state [ 1117.415575][ T1336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1117.454766][ T1336] bridge0: port 2(bridge_slave_1) entered blocking state [ 1117.454893][ T1336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1118.823119][ T5633] Bluetooth: hci5: command tx timeout [ 1119.685908][T10139] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1119.752941][T10139] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1119.759274][T10139] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1119.760327][T10139] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1119.761036][T10139] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1120.912277][T10139] Bluetooth: hci5: command tx timeout [ 1120.941282][T10139] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1120.995926][T10139] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1121.031026][T10139] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1121.057490][T10139] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1121.058292][T10139] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1122.242434][ T5633] Bluetooth: hci0: command tx timeout [ 1123.013767][ T5633] Bluetooth: hci5: command tx timeout [ 1123.589836][ T5633] Bluetooth: hci6: command tx timeout [ 1124.283775][ T5633] Bluetooth: hci0: command tx timeout [ 1126.128321][T14546] rxe_eth0 speed is unknown, defaulting to 1000 [ 1126.318889][T14473] bridge0: port 1(bridge_slave_0) entered blocking state [ 1126.320016][T14473] bridge0: port 1(bridge_slave_0) entered disabled state [ 1126.343174][T14473] bridge_slave_0: entered allmulticast mode [ 1126.349575][T14473] bridge_slave_0: entered promiscuous mode [ 1126.372875][T14473] bridge0: port 2(bridge_slave_1) entered blocking state [ 1126.374560][T14473] bridge0: port 2(bridge_slave_1) entered disabled state [ 1126.374703][T14473] bridge_slave_1: entered allmulticast mode [ 1126.414030][T14473] bridge_slave_1: entered promiscuous mode [ 1126.932274][T14473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1126.956595][T14473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1127.006576][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 1127.006644][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 1127.052400][ T5633] Bluetooth: hci6: command tx timeout [ 1127.052432][ T5633] Bluetooth: hci0: command tx timeout [ 1127.255354][T14612] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1128.804573][T14561] rxe_eth0 speed is unknown, defaulting to 1000 [ 1128.822738][T14473] team0: Port device team_slave_0 added [ 1128.847239][T14473] team0: Port device team_slave_1 added [ 1128.956232][T14473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1128.956248][T14473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1128.956273][T14473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1129.012244][T14473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1129.012261][T14473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1129.012289][T14473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1129.061727][T10139] Bluetooth: hci0: command tx timeout [ 1129.061758][T10139] Bluetooth: hci6: command tx timeout [ 1130.049752][T14473] hsr_slave_0: entered promiscuous mode [ 1130.059783][T14473] hsr_slave_1: entered promiscuous mode [ 1130.070658][T14473] debugfs: 'hsr0' already exists in 'hsr' [ 1130.070677][T14473] Cannot create hsr debugfs directory [ 1130.431988][T11818] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1130.586212][T11818] usb 1-1: New USB device found: idVendor=28de, idProduct=1142, bcdDevice=0.00 [ 1130.587566][T11818] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1130.587602][T11818] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1130.587639][T11818] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.634248][T11818] usb 1-1: config 0 descriptor?? [ 1130.961803][ T6546] bridge_slave_1: left allmulticast mode [ 1130.961830][ T6546] bridge_slave_1: left promiscuous mode [ 1130.962045][ T6546] bridge0: port 2(bridge_slave_1) entered disabled state [ 1131.050392][T11818] hid (null): report_id 0 is invalid [ 1131.074831][T11818] hid-steam 0003:28DE:1142.0008: report_id 0 is invalid [ 1131.074853][T11818] hid-steam 0003:28DE:1142.0008: item 0 1 1 8 parsing failed [ 1131.075548][T11818] hid-steam 0003:28DE:1142.0008: steam_probe:parse of hid interface failed [ 1131.075693][T11818] hid-steam 0003:28DE:1142.0008: probe with driver hid-steam failed with error -22 [ 1131.142396][ T5633] Bluetooth: hci6: command tx timeout [ 1131.189977][ T6546] bridge_slave_0: left allmulticast mode [ 1131.190089][ T6546] bridge_slave_0: left promiscuous mode [ 1131.190855][ T6546] bridge0: port 1(bridge_slave_0) entered disabled state [ 1131.266172][T10474] usb 1-1: USB disconnect, device number 19 [ 1132.432157][ T6546] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1132.511964][ T6546] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1132.613300][ T6546] bond0 (unregistering): Released all slaves [ 1133.270972][T14653] rxe_eth0 speed is unknown, defaulting to 1000 [ 1133.649932][T14667] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1134.601805][T14546] bridge0: port 1(bridge_slave_0) entered blocking state [ 1134.602043][T14546] bridge0: port 1(bridge_slave_0) entered disabled state [ 1134.602300][T14546] bridge_slave_0: entered allmulticast mode [ 1134.639171][T14546] bridge_slave_0: entered promiscuous mode [ 1134.693285][T14546] bridge0: port 2(bridge_slave_1) entered blocking state [ 1134.693361][T14546] bridge0: port 2(bridge_slave_1) entered disabled state [ 1134.693468][T14546] bridge_slave_1: entered allmulticast mode [ 1134.700105][T14546] bridge_slave_1: entered promiscuous mode [ 1135.026647][T14546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1136.229814][ T6546] hsr_slave_0: left promiscuous mode [ 1136.271829][ T6546] hsr_slave_1: left promiscuous mode [ 1136.272968][ T6546] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1136.294709][ T6546] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1136.703196][ T6546] team0 (unregistering): Port device team_slave_1 removed [ 1136.732101][ T6546] team0 (unregistering): Port device team_slave_0 removed [ 1137.016048][T14680] rxe_eth0 speed is unknown, defaulting to 1000 [ 1137.363035][T14546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1138.453452][T14546] team0: Port device team_slave_0 added [ 1138.493999][T14546] team0: Port device team_slave_1 added [ 1138.642081][T14546] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1138.642100][T14546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1138.642124][T14546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1138.642925][T14561] bridge0: port 1(bridge_slave_0) entered blocking state [ 1138.643157][T14561] bridge0: port 1(bridge_slave_0) entered disabled state [ 1138.643297][T14561] bridge_slave_0: entered allmulticast mode [ 1138.648082][T14561] bridge_slave_0: entered promiscuous mode [ 1138.650093][T14546] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1138.650106][T14546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1138.650126][T14546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1139.016225][T14561] bridge0: port 2(bridge_slave_1) entered blocking state [ 1139.016321][T14561] bridge0: port 2(bridge_slave_1) entered disabled state [ 1139.016463][T14561] bridge_slave_1: entered allmulticast mode [ 1139.018614][T14561] bridge_slave_1: entered promiscuous mode [ 1139.267236][T14561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1139.308284][T14561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1139.326894][T14546] hsr_slave_0: entered promiscuous mode [ 1139.329446][T14546] hsr_slave_1: entered promiscuous mode [ 1139.332598][T14546] debugfs: 'hsr0' already exists in 'hsr' [ 1139.332617][T14546] Cannot create hsr debugfs directory [ 1139.477817][T14561] team0: Port device team_slave_0 added [ 1139.507057][T14561] team0: Port device team_slave_1 added [ 1140.386274][T14561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1140.386292][T14561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1140.386320][T14561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1140.393893][T14561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1140.393909][T14561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1140.393945][T14561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1140.648898][T14473] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1141.532161][T14473] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1141.844394][T14473] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1141.889142][T14473] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1141.928029][T14561] hsr_slave_0: entered promiscuous mode [ 1141.929390][T14561] hsr_slave_1: entered promiscuous mode [ 1141.930364][T14561] debugfs: 'hsr0' already exists in 'hsr' [ 1141.930382][T14561] Cannot create hsr debugfs directory [ 1141.954501][T14473] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1142.011179][T14473] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1142.029354][T14473] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1142.067943][T14473] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1144.620586][T14473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1144.657881][T14473] 8021q: adding VLAN 0 to HW filter on device team0 [ 1145.049670][ T1341] bridge0: port 1(bridge_slave_0) entered blocking state [ 1145.080712][ T1341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1145.104318][ T1341] bridge0: port 2(bridge_slave_1) entered blocking state [ 1145.104487][ T1341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1147.333467][T14473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1147.456127][T14473] veth0_vlan: entered promiscuous mode [ 1147.475491][T14473] veth1_vlan: entered promiscuous mode [ 1147.563079][T14473] veth0_macvtap: entered promiscuous mode [ 1147.571244][T14473] veth1_macvtap: entered promiscuous mode [ 1147.630870][T14473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1147.660210][T14473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1149.759518][T14782] FAULT_INJECTION: forcing a failure. [ 1149.759518][T14782] name fail_futex, interval 1, probability 0, space 0, times 1 [ 1149.759549][T14782] CPU: 1 UID: 0 PID: 14782 Comm: syz.0.1582 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1149.759571][T14782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1149.759582][T14782] Call Trace: [ 1149.759672][T14782] [ 1149.759711][T14782] dump_stack_lvl+0xe8/0x150 [ 1149.759886][T14782] should_fail_ex+0x447/0x5e0 [ 1149.759978][T14782] get_futex_key+0x1ab/0x1410 [ 1149.760030][T14782] ? kasan_quarantine_put+0xbb/0x1f0 [ 1149.760108][T14782] ? __pfx_get_futex_key+0x10/0x10 [ 1149.760136][T14782] futex_wake+0x119/0x600 [ 1149.760169][T14782] ? __pfx_futex_wake+0x10/0x10 [ 1149.760201][T14782] ? lock_acquire+0x115/0x350 [ 1149.760251][T14782] do_futex+0x458/0x4e0 [ 1149.760279][T14782] ? __pfx_do_futex+0x10/0x10 [ 1149.760310][T14782] __se_sys_futex+0x3a8/0x450 [ 1149.760336][T14782] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 1149.760376][T14782] ? __pfx___se_sys_futex+0x10/0x10 [ 1149.760408][T14782] ? __x64_sys_futex+0x21/0xf0 [ 1149.760433][T14782] do_syscall_64+0x166/0x520 [ 1149.760490][T14782] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1149.760519][T14782] ? clear_bhb_loop+0x70/0xc0 [ 1149.760542][T14782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1149.760562][T14782] RIP: 0033:0x7fdd7d7afb19 [ 1149.760612][T14782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1149.760630][T14782] RSP: 002b:00007fdd7ba060e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1149.760683][T14782] RAX: ffffffffffffffda RBX: 00007fdd7da35fa8 RCX: 00007fdd7d7afb19 [ 1149.760698][T14782] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fdd7da35fac [ 1149.760711][T14782] RBP: 00007fdd7da35fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 1149.760726][T14782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1149.760738][T14782] R13: 00007fdd7da36038 R14: 00007ffff1fcf140 R15: 00007ffff1fcf228 [ 1149.760770][T14782] [ 1151.453190][ T1009] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.453649][ T1009] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.463440][ T1009] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.514460][ T1009] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1153.248547][ T1334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1153.248569][ T1334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1153.629525][ T130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1153.629546][ T130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1154.331666][ T995] bridge_slave_1: left allmulticast mode [ 1154.331702][ T995] bridge_slave_1: left promiscuous mode [ 1154.331953][ T995] bridge0: port 2(bridge_slave_1) entered disabled state [ 1154.485371][ T995] bridge_slave_0: left allmulticast mode [ 1154.485407][ T995] bridge_slave_0: left promiscuous mode [ 1154.485682][ T995] bridge0: port 1(bridge_slave_0) entered disabled state [ 1154.811592][ T995] bridge_slave_1: left allmulticast mode [ 1154.811616][ T995] bridge_slave_1: left promiscuous mode [ 1154.811764][ T995] bridge0: port 2(bridge_slave_1) entered disabled state [ 1154.933538][ T995] bridge_slave_0: left allmulticast mode [ 1154.933574][ T995] bridge_slave_0: left promiscuous mode [ 1154.933817][ T995] bridge0: port 1(bridge_slave_0) entered disabled state [ 1156.932416][ T995] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1156.973889][ T995] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1156.993204][ T995] bond0 (unregistering): Released all slaves [ 1157.463149][ T995] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1157.512005][ T995] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1157.546076][ T995] bond0 (unregistering): Released all slaves [ 1157.745719][T14855] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1157.745916][T14855] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1157.746133][T14855] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1157.746204][T14855] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1157.748924][ T5274] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1157.967922][T14855] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1158.975355][T14867] fuse: Bad value for 'fd' [ 1158.986030][T14855] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1158.986109][T14855] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1159.300320][T14868] rxe_eth0 speed is unknown, defaulting to 1000 [ 1159.781678][T10139] Bluetooth: hci2: command 0x0406 tx timeout [ 1159.781722][T10139] Bluetooth: hci1: command 0x0406 tx timeout [ 1160.061453][T10316] Bluetooth: hci5: command 0x0c1a tx timeout [ 1160.275867][T14855] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1160.567062][T14855] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1160.567150][T14855] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1160.647840][T14855] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1162.101764][T10316] Bluetooth: hci5: command 0x0c1a tx timeout [ 1163.824027][T10316] Bluetooth: hci0: command 0x0c1a tx timeout [ 1164.022213][T10316] Bluetooth: hci6: command 0x0c1a tx timeout [ 1165.409384][T14924] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1165.409421][T14924] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1165.542090][T10316] Bluetooth: hci5: command 0x0c1a tx timeout [ 1165.635054][T14924] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1165.635079][T14924] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1165.663038][ T995] hsr_slave_0: left promiscuous mode [ 1165.707603][ T995] hsr_slave_1: left promiscuous mode [ 1165.709565][ T995] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1165.746594][ T995] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1165.761504][T14924] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1165.761525][T14924] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1165.792258][T14938] netlink: 'syz.0.1615': attribute type 7 has an invalid length. [ 1168.052384][T10316] Bluetooth: hci0: command 0x0c1a tx timeout [ 1168.052961][T10316] Bluetooth: hci6: command 0x0c1a tx timeout [ 1169.101140][ C1] ------------[ cut here ]------------ [ 1169.101157][ C1] workqueue: cannot queue hci_cmd_timeout on wq hci5 [ 1169.101303][ C1] WARNING: kernel/workqueue.c:2437 at __queue_work+0xe19/0x1380, CPU#1: ktimers/1/29 [ 1169.135020][ C1] Modules linked in: [ 1169.138908][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1169.148741][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1169.158789][ C1] RIP: 0010:__queue_work+0xe35/0x1380 [ 1169.164179][ C1] Code: 49 81 c7 70 01 00 00 4c 8d 35 c7 70 49 0f 48 89 f8 48 c1 e8 03 80 3c 18 00 74 05 e8 45 43 ac 00 49 8b 75 18 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 4c 89 e8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ef e8 [ 1169.183793][ C1] RSP: 0018:ffffc90000a3f988 EFLAGS: 00010046 [ 1169.189882][ C1] RAX: 1ffff1100ba5d153 RBX: dffffc0000000000 RCX: ffff88801e6e3e80 [ 1169.197860][ C1] RDX: ffff888063931170 RSI: ffffffff8a63ac00 RDI: ffffffff90d85050 [ 1169.205836][ C1] RBP: 0000000000000100 R08: 0000000000000100 R09: 0000000000000100 [ 1169.213809][ C1] R10: dffffc0000000000 R11: ffffffff818ee8c0 R12: 0000000000000000 [ 1169.221786][ C1] R13: ffff88805d2e8a80 R14: ffffffff90d85050 R15: ffff888063931170 [ 1169.229766][ C1] FS: 0000000000000000(0000) GS:ffff88812480f000(0000) knlGS:0000000000000000 [ 1169.238715][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1169.245309][ C1] CR2: 00007f1a079d5d58 CR3: 000000003637c000 CR4: 00000000003526f0 [ 1169.253290][ C1] Call Trace: [ 1169.256582][ C1] [ 1169.259609][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1169.265012][ C1] call_timer_fn+0x18d/0x5f0 [ 1169.269663][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1169.275483][ C1] ? call_timer_fn+0xd5/0x5f0 [ 1169.280175][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1169.285308][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1169.291211][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 1169.296343][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1169.302158][ C1] __run_timer_base+0x73c/0x9b0 [ 1169.307038][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1169.312438][ C1] run_timer_softirq+0xb7/0x170 [ 1169.317304][ C1] handle_softirqs+0x1d4/0x6c0 [ 1169.322099][ C1] run_ktimerd+0x6a/0x100 [ 1169.326435][ C1] smpboot_thread_fn+0x5f8/0xb30 [ 1169.331384][ C1] ? smpboot_thread_fn+0x4e/0xb30 [ 1169.336426][ C1] kthread+0x38b/0x470 [ 1169.340595][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1169.346057][ C1] ? __pfx_kthread+0x10/0x10 [ 1169.350661][ C1] ret_from_fork+0x514/0xb70 [ 1169.355304][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1169.360426][ C1] ? __switch_to+0xc78/0x1410 [ 1169.365114][ C1] ? __pfx_kthread+0x10/0x10 [ 1169.369721][ C1] ret_from_fork_asm+0x1a/0x30 [ 1169.374515][ C1] [ 1169.377556][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1169.384837][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1169.394386][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1169.404453][ C1] Call Trace: [ 1169.407733][ C1] [ 1169.410706][ C1] vpanic+0x26f/0x710 [ 1169.414781][ C1] panic+0xc5/0xd0 [ 1169.418510][ C1] ? __pfx_panic+0x10/0x10 [ 1169.422958][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 1169.427910][ C1] __warn+0x315/0x4c0 [ 1169.431907][ C1] ? __queue_work+0xe19/0x1380 [ 1169.436685][ C1] ? __queue_work+0xe19/0x1380 [ 1169.441473][ C1] __report_bug+0x276/0x570 [ 1169.446103][ C1] ? __queue_work+0xe19/0x1380 [ 1169.450879][ C1] ? __pfx___report_bug+0x10/0x10 [ 1169.455923][ C1] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 1169.461230][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1169.466265][ C1] ? look_up_lock_class+0x57/0x110 [ 1169.471451][ C1] ? register_lock_class+0x31/0x2e0 [ 1169.476666][ C1] ? lock_acquire+0x115/0x350 [ 1169.481401][ C1] report_bug_entry+0x19b/0x290 [ 1169.486284][ C1] ? __queue_work+0xe35/0x1380 [ 1169.491069][ C1] ? __queue_work+0xe3a/0x1380 [ 1169.495835][ C1] handle_bug+0xce/0x200 [ 1169.500095][ C1] exc_invalid_op+0x1a/0x50 [ 1169.504612][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1169.509529][ C1] RIP: 0010:__queue_work+0xe35/0x1380 [ 1169.514910][ C1] Code: 49 81 c7 70 01 00 00 4c 8d 35 c7 70 49 0f 48 89 f8 48 c1 e8 03 80 3c 18 00 74 05 e8 45 43 ac 00 49 8b 75 18 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 4c 89 e8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ef e8 [ 1169.534530][ C1] RSP: 0018:ffffc90000a3f988 EFLAGS: 00010046 [ 1169.540603][ C1] RAX: 1ffff1100ba5d153 RBX: dffffc0000000000 RCX: ffff88801e6e3e80 [ 1169.548579][ C1] RDX: ffff888063931170 RSI: ffffffff8a63ac00 RDI: ffffffff90d85050 [ 1169.556557][ C1] RBP: 0000000000000100 R08: 0000000000000100 R09: 0000000000000100 [ 1169.564534][ C1] R10: dffffc0000000000 R11: ffffffff818ee8c0 R12: 0000000000000000 [ 1169.572512][ C1] R13: ffff88805d2e8a80 R14: ffffffff90d85050 R15: ffff888063931170 [ 1169.580495][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1169.586318][ C1] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 1169.591621][ C1] ? __queue_work+0xde8/0x1380 [ 1169.596396][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1169.601794][ C1] call_timer_fn+0x18d/0x5f0 [ 1169.606396][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1169.612210][ C1] ? call_timer_fn+0xd5/0x5f0 [ 1169.616902][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1169.622038][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1169.627857][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 1169.633013][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1169.638826][ C1] __run_timer_base+0x73c/0x9b0 [ 1169.643706][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1169.649108][ C1] run_timer_softirq+0xb7/0x170 [ 1169.653972][ C1] handle_softirqs+0x1d4/0x6c0 [ 1169.658767][ C1] run_ktimerd+0x6a/0x100 [ 1169.663102][ C1] smpboot_thread_fn+0x5f8/0xb30 [ 1169.668051][ C1] ? smpboot_thread_fn+0x4e/0xb30 [ 1169.673095][ C1] kthread+0x38b/0x470 [ 1169.677178][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1169.682639][ C1] ? __pfx_kthread+0x10/0x10 [ 1169.687245][ C1] ret_from_fork+0x514/0xb70 [ 1169.691852][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1169.696974][ C1] ? __switch_to+0xc78/0x1410 [ 1169.701662][ C1] ? __pfx_kthread+0x10/0x10 [ 1169.706264][ C1] ret_from_fork_asm+0x1a/0x30 [ 1169.711059][ C1] [ 1169.714215][ C1] Kernel Offset: disabled [ 1169.718526][ C1] Rebooting in 86400 seconds..