last executing test programs: 3m3.012622915s ago: executing program 3 (id=489): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100000000000000000000070000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) 3m2.856036193s ago: executing program 3 (id=490): ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = openat$hpet(0xffffff9c, &(0x7f00000009c0), 0x0, 0x0) preadv(r1, &(0x7f0000000c00)=[{&(0x7f0000000a00)=""/152, 0x98}], 0x1, 0xc096, 0x2) r2 = syz_open_dev$usbmon(&(0x7f0000000440), 0x0, 0x0) preadv(r2, &(0x7f0000000640)=[{&(0x7f0000000300)=""/29, 0x1d}], 0x1, 0x3, 0x958) 3m2.592076774s ago: executing program 3 (id=492): ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000380)={0x2e, 0x2, 0x0, "9c3e098e0000f4ba89591d8a6b97000000002b0003040b000000008000002300"}) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@rights={{0x10, 0x1, 0x1, [r3]}}], 0x10}, 0x0) recvmmsg$unix(r3, &(0x7f0000000f40)=[{{&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000180)=""/146, 0x92}], 0x1, &(0x7f0000000280)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0xc}}], 0xb0}}, {{&(0x7f0000000340), 0x6e, &(0x7f0000000440)=[{0x0}], 0x1, &(0x7f0000000480)=[@rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}], 0x114}}, {{&(0x7f0000000540)=@abs, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000640)=""/28, 0x1c}, {&(0x7f0000000680)=""/18, 0x12}], 0x2, &(0x7f0000000700)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}], 0x70}}, {{&(0x7f0000000780), 0x6e, &(0x7f0000000e00), 0x0, &(0x7f0000000e80)=[@cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}], 0x9c}}], 0x4, 0x2, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4048aecb, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60fb6809001b2f00fc020000000000000000000000000000ff020000000000000000000000000001242088a88dff00000006000000000800000086dd88a888be080000"], 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x2000, @ipv4={'\x00', '\xff\xff', @remote}, 0xffffffff}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x4000300) 3m1.570614678s ago: executing program 3 (id=495): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x300, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004850}, 0x80) r4 = syz_io_uring_setup(0x4efc, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x273}, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0xdc}}) io_uring_enter(r4, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 3m1.460104001s ago: executing program 3 (id=496): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) ioctl$FIONREAD(r0, 0x541b, 0x0) 3m1.312173575s ago: executing program 3 (id=497): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) ppoll(&(0x7f0000000080)=[{r0, 0xc0d0}, {r0, 0x2000}, {r2}, {r0, 0x2188}, {r0}], 0x5, &(0x7f00000000c0), &(0x7f0000000100)={[0xfffffffb, 0x2]}, 0x8) ioctl$FIONREAD(r0, 0x541b, 0x0) 2m46.106811725s ago: executing program 32 (id=497): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) ppoll(&(0x7f0000000080)=[{r0, 0xc0d0}, {r0, 0x2000}, {r2}, {r0, 0x2188}, {r0}], 0x5, &(0x7f00000000c0), &(0x7f0000000100)={[0xfffffffb, 0x2]}, 0x8) ioctl$FIONREAD(r0, 0x541b, 0x0) 42.239447556s ago: executing program 1 (id=1058): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) mkdirat$cgroup_root(0xffffff9c, 0x0, 0x1ff) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x9, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd71, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r5, 0x4004743a, &(0x7f0000000300)) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000640)=ANY=[@ANYBLOB="20000000170a0101"], 0x20}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r8, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0xfffffffffffffffe, 0x9, 0xfffffffffffffffc}) close_range(r9, 0xffffffffffffffff, 0x0) 34.860855561s ago: executing program 1 (id=1058): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) mkdirat$cgroup_root(0xffffff9c, 0x0, 0x1ff) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x9, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd71, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r5, 0x4004743a, &(0x7f0000000300)) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000640)=ANY=[@ANYBLOB="20000000170a0101"], 0x20}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r8, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0xfffffffffffffffe, 0x9, 0xfffffffffffffffc}) close_range(r9, 0xffffffffffffffff, 0x0) 27.450717005s ago: executing program 1 (id=1058): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) mkdirat$cgroup_root(0xffffff9c, 0x0, 0x1ff) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x9, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd71, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r5, 0x4004743a, &(0x7f0000000300)) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000640)=ANY=[@ANYBLOB="20000000170a0101"], 0x20}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r8, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0xfffffffffffffffe, 0x9, 0xfffffffffffffffc}) close_range(r9, 0xffffffffffffffff, 0x0) 20.359189776s ago: executing program 1 (id=1058): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) mkdirat$cgroup_root(0xffffff9c, 0x0, 0x1ff) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x9, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd71, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r5, 0x4004743a, &(0x7f0000000300)) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000640)=ANY=[@ANYBLOB="20000000170a0101"], 0x20}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r8, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0xfffffffffffffffe, 0x9, 0xfffffffffffffffc}) close_range(r9, 0xffffffffffffffff, 0x0) 13.015399259s ago: executing program 1 (id=1058): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) mkdirat$cgroup_root(0xffffff9c, 0x0, 0x1ff) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x9, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd71, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r5, 0x4004743a, &(0x7f0000000300)) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000640)=ANY=[@ANYBLOB="20000000170a0101"], 0x20}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r8, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0xfffffffffffffffe, 0x9, 0xfffffffffffffffc}) close_range(r9, 0xffffffffffffffff, 0x0) 6.110196017s ago: executing program 2 (id=1357): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) set_mempolicy(0x4003, &(0x7f0000000080)=0x7, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000001c0)='mm_page_alloc\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000090ff00850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 6.109500168s ago: executing program 2 (id=1359): r0 = syz_open_dev$vim2m(&(0x7f00000006c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000380)={0x2e, 0x2, 0x0, "9c3e098e0000f4ba89591d8a6b97000000002b0003040b000000008000002300"}) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@rights={{0x10, 0x1, 0x1, [r4]}}], 0x10}, 0x0) recvmmsg$unix(r4, &(0x7f0000000f40)=[{{&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000000240)=[{0x0}], 0x1, &(0x7f0000000280)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0xa4}}, {{&(0x7f0000000340), 0x6e, &(0x7f0000000440)=[{0x0}], 0x1, &(0x7f0000000480)=[@rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}], 0x114}}, {{&(0x7f0000000540)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000000700)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}], 0x70}}, {{&(0x7f0000000780), 0x6e, &(0x7f0000000e00), 0x0, &(0x7f0000000e80)=[@cred={{0x18}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0xc}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}], 0x8c}}], 0x4, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a40000002300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140), 0x180, 0x0) r6 = syz_io_uring_setup(0x16e, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000001240)=0x0, &(0x7f0000001340)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r6, 0x567, 0x0, 0x0, 0x0, 0x0) r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4048aecb, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60fb6809001b2f00fc020000000000000000000000000000ff020000000000000000000000000001242088a88dff00"], 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) 5.179230144s ago: executing program 2 (id=1365): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$MSR(&(0x7f0000002240), 0x138, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x50}}, 0x0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, 0x0, 0xc000, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0xfffffffe, 0x0, r3}, &(0x7f0000000340), 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r6, 0x84, 0x1c, &(0x7f0000002280), &(0x7f00000001c0)=0x4) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r7 = syz_open_procfs(0x0, &(0x7f00000022c0)='mounts\x00') read$FUSE(r7, &(0x7f0000000200)={0x2020}, 0x2020) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001b00)=@raw={'raw\x00', 0x3c1, 0x3, 0x2bc, 0xec, 0x111, 0x4b4, 0xec, 0xd4feffff, 0x1f4, 0x202, 0x225, 0x1f4, 0x278, 0x3, 0x0, {[{{@ipv6={@dev, @empty, [0x0, 0x0, 0x0, 0xffffff00], [], 'veth1_vlan\x00', 'team_slave_0\x00'}, 0x0, 0xa4, 0xec}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x81, 'syz1\x00', {0x40000}}}}, {{@ipv6={@empty, @private1, [0x0, 0xffffff00], [], 'veth1_to_hsr\x00', 'erspan0\x00', {}, {0xff}}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@limit={{0x3c}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x318) 4.867360551s ago: executing program 1 (id=1058): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) mkdirat$cgroup_root(0xffffff9c, 0x0, 0x1ff) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x9, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd71, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r5, 0x4004743a, &(0x7f0000000300)) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000640)=ANY=[@ANYBLOB="20000000170a0101"], 0x20}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r8, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0xfffffffffffffffe, 0x9, 0xfffffffffffffffc}) close_range(r9, 0xffffffffffffffff, 0x0) 3.80519823s ago: executing program 2 (id=1371): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x7b32, &(0x7f0000000380)={0x0, 0x1ffffa, 0x0, 0x6, 0x1d1, 0x0, r1}, &(0x7f0000000280)=0x0, &(0x7f00000001c0)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='sysv\x00', 0x0, &(0x7f00000000c0)=')\x83r\xb5Y.\x11\x1f\x169\xce\xc6\xb5\xccusrquota') mount(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x3e, &(0x7f0000000180)='usrquota') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(r2, r3, 0x0) io_uring_enter(0xffffffffffffffff, 0x708, 0x41e3, 0x0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRES16=r4, @ANYRESDEC=r4], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, 0x0, 0x20000010) gettid() pselect6(0x40, &(0x7f0000003d00)={0x9, 0xe1c8, 0xffffffffffffff7f, 0x1000, 0x0, 0xf5, 0x40, 0xb08}, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) rseq(0x0, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000300), 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x0, @vifc_lcl_addr=@loopback}, 0x10) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x4, 0x1, 0x2, @vifc_lcl_ifindex=r6, @dev={0xac, 0x14, 0x14, 0x1}}, 0x10) setsockopt$MRT_FLUSH(r7, 0x0, 0xd4, &(0x7f0000000080)=0xc, 0x4) pipe(&(0x7f0000000380)) socket$inet6_tcp(0xa, 0x1, 0x0) 3.750489437s ago: executing program 0 (id=1373): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) kexec_load(0x0, 0x0, 0x0, 0x2a0001) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}}, 0x20050800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0x9c3c}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x5) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r4, &(0x7f0000003bc0)="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", 0x410) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r6, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x3c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r9, 0x429, 0x70bd26, 0x25dfdbfb, {{}, {0x0, 0x410c}, {0x18, 0x17, {0xd, 0xa, @l2={'ib', 0x3a, 'bond0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, r9, 0x200, 0x70bd2c, 0x25df9bfa, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc004840}, 0x20000810) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') mlock(&(0x7f0000002000/0x2000)=nil, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r11, &(0x7f0000000000)={0x0, 0xfffffffffffffd4c, &(0x7f0000000080)=[{&(0x7f0000000280)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024001d00120511a09798bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab9d25bf46050d3c3a2b04", 0x4c}], 0x1}, 0x4008000) read$FUSE(r10, &(0x7f0000000640)={0x2020}, 0x2020) 3.067631581s ago: executing program 0 (id=1378): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$MSR(&(0x7f0000002240), 0x138, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x50}}, 0x0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="61158c000000000061138c0000000000bfa00000000000001503000008004e002d3501000000000095004100000000006916000000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18487b6feb89752cd600000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bbff4bbe0000000000000000000000000044585397feaadda3fcc64e7b0c08f7ac5c64cb190f1712a3b10fc34eb758705f1751d8c8b712eb39d2b8ad44f129c2c9aedb15"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, 0x0, 0xc000, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x100, 0x0, 0xfffffffe, 0x0, r3}, &(0x7f0000000340), 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r6, 0x84, 0x1c, &(0x7f0000002280), &(0x7f00000001c0)=0x4) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r7 = syz_open_procfs(0x0, &(0x7f00000022c0)='mounts\x00') read$FUSE(r7, &(0x7f0000000200)={0x2020}, 0x2020) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001b00)=@raw={'raw\x00', 0x3c1, 0x3, 0x2bc, 0xec, 0x111, 0x4b4, 0xec, 0xd4feffff, 0x1f4, 0x202, 0x225, 0x1f4, 0x278, 0x3, 0x0, {[{{@ipv6={@dev, @empty, [0x0, 0x0, 0x0, 0xffffff00], [], 'veth1_vlan\x00', 'team_slave_0\x00'}, 0x0, 0xa4, 0xec}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x81, 'syz1\x00'}}}, {{@ipv6={@empty, @private1, [0x700, 0xffffff00], [], 'veth1_to_hsr\x00', 'erspan0\x00', {}, {0xff}}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@limit={{0x3c}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x318) 2.860713924s ago: executing program 2 (id=1379): r0 = syz_open_dev$vim2m(&(0x7f00000006c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000380)={0x2e, 0x2, 0x0, "9c3e098e0000f4ba89591d8a6b97000000002b0003040b000000008000002300"}) socket$inet6(0xa, 0x800000000000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@rights={{0x10, 0x1, 0x1, [r3]}}], 0x10}, 0x0) recvmmsg$unix(r1, &(0x7f0000000f40), 0x0, 0x2, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x40281, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r6, 0x330b) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{0x2000000}, {0xfff}, {}, {}, {0x0, 0x20000000}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r7 = open(&(0x7f0000000000)='./file0\x00', 0x6c0280, 0x130) getsockopt$inet6_mreq(r7, 0x29, 0x1c, &(0x7f0000000240)={@dev}, &(0x7f0000000380)=0x14) 2.75598081s ago: executing program 0 (id=1380): openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/cgroups\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x100, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xb, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xfffffff9}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000480)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd3c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40088a01, 0x0) r1 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x4, 0x316}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x0, 0x8000) 2.270743883s ago: executing program 4 (id=1381): ioperm(0x0, 0xbbd3, 0x1) syz_io_uring_setup(0x1af4, &(0x7f0000000080)={0x0, 0x0, 0x3e00}, &(0x7f0000000100), &(0x7f0000001000)) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x882, 0x0) readv(r1, &(0x7f0000001e40)=[{&(0x7f0000001a00)=""/108, 0x6c}, {&(0x7f0000001a80)=""/202, 0xca}], 0x2) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019480)={0x8, 0x1c29, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r4, &(0x7f0000000200), 0x10) r5 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400600142603600e1208000b0000000401a8001600a400014009000200036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) dup3(r5, 0xffffffffffffffff, 0x0) r6 = openat$autofs(0xffffff9c, &(0x7f0000000140), 0x140, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) 1.780760597s ago: executing program 2 (id=1382): socket$kcm(0x10, 0x2, 0x10) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) mount$bind(&(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x11080, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffe000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r1, 0x1000000, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd0900008420000005010000", @ANYRES32=0x0, @ANYRES32], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080)="dc7cdfa0a7", &(0x7f0000000240), 0x800, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r3}, 0x38) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {0x0}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/139, 0x8b}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) unshare(0x40000000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) timer_create(0x0, 0x0, 0x0) 1.570367136s ago: executing program 4 (id=1383): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/15], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES16], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384-generic\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x32, 0xfffffffffffffffc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x5173, &(0x7f00000003c0)={0x0, 0x203, 0x20, 0x0, 0x21d}, &(0x7f0000000180), &(0x7f0000000ac0)) ioperm(0x5, 0x1, 0x26) faccessat(0xffffffffffffffff, 0x0, 0x68) r5 = syz_io_uring_setup(0x5b7, &(0x7f0000000a40)={0x0, 0x81a5, 0x20, 0x1, 0x0, 0x0, r4}, &(0x7f0000000380)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000100)=0x8f19, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x5, 0x0, 0x0}) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_mr_cache\x00') preadv(r9, &(0x7f0000000300)=[{0x0}], 0x1, 0x6, 0x0) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000100)={{0x0, 0xffee}, 'syz1\x00', 0xd}) ioctl$UI_DEV_CREATE(r8, 0x5501) readv(r8, &(0x7f0000000080)=[{&(0x7f0000000040)=""/54, 0x36}], 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0x2, 0x4, 0x4a8, 0xffffffff, 0x2f4, 0x2f4, 0x0, 0xfeffffff, 0xffffffff, 0x3e0, 0x3e0, 0x3e0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xd0, 0xf4, 0x0, {}, [@common=@srh={{0x2c}, {0xd1, 0xf8, 0x7, 0x4, 0x60, 0x2ad5, 0x69}}]}, @common=@unspec=@NFQUEUE1={0x24, 'NFQUEUE\x00', 0x1, {0x4, 0xfffa}}}, {{@uncond, 0x0, 0x1dc, 0x200, 0x0, {}, [@common=@rt={{0x138}, {0xb, [0x6, 0xd], 0x800, 0x30, 0x2, [@private0, @rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, @remote, @local, @remote, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, @dev={0xfe, 0x80, '\x00', 0x33}, @remote, @mcast2, @local, @local], 0xf}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@private1, @mcast2, [], [], 'pim6reg\x00', 'dvmrp1\x00', {}, {}, 0x87}, 0x0, 0xc8, 0xec, 0x0, {}, [@common=@mh={{0x24}, {"0ce7"}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x12, 0x8, 0x7fff}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x504) 1.569929901s ago: executing program 0 (id=1384): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x207645a}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000380)=""/186, 0xba) syz_fuse_handle_req(r0, &(0x7f0000002140)="3631f6d86aade8310e71e0e236c470ade3e9b07a8faa2aeef1e4e19a5329657abcd5ef2d09756199ae635e0fca96f996be7076cd2a3995103d5a9eb88fbf21b823c854f068ec813b9136bbaf3575ecfc2507aa63b15161b1fe564fcb63f35beb25a1ac1b885decd8d97b9749fa95190fa18501d6897a912e53c669b305312615ad93b2e424dc155c164fd766c139554b6a7a7876180f869963f1de26a8e93f3557624d19228177c32368186313d76d30218a5222c2be11017b8dbb230cc3a9355d930a45d925c91a69eb4a7e313983f778b2029ee1c64fec7f5e280907a443a39e93db6193822e3ebcdba1143d236d6ed0ef8589bd238ef4a7c5c1327a8f1d29be16f5b4b3ec54653619930c4747953a9ffb95de257fbcb44573edc6bf6d65004697a96ebd618d4ef26b312b58663ae91d964ae942769430ce5687e800d1982f6d9add3584562041d45eddefb96d996adda9143ac5cf2b6a5c86cbaa00dff5820e2ddf2f96014c3654b8e0834d0523d3ee5443e949910d78ebfe4ff4e8ebb5563ee9f2011cf3a1793578479cefc227ee3ae320b387a7249de223aa8cffc4800ea707a9810bf5a72c28e30824afd27663ec49be0a28ce420f175dff67a59b017f39c328f1fa6bb91f3596ae0bffb8237acc6083c1a3bef656c50673b0845f7c70d8ed515ebf0f41f1a23e8a2166624be59a7b7cc358a6a1db3838cf130b86b19c24845c36da41d05189dd9499e97966f33d83e4fec8c5b3d47e497c4283dc81e601ecc616271d54d6714d9edbde9416249924aa6499ada5576469ab462b2e34f3f3bf1db3c12774b37f2976018e2cd2be3b6e473745a78dca47cbdd44f604a1cf9bd4827ee7ad003adb3c68026e718cd86cbea86fdac1f03e1b355234adb37fe0a8de824c5faa2bbcdb4a0d198be28273c7b4b61c3bb203ded3d431d75b107a4ab78fd4889f08e3b5d39dd2e002ecc1a616516a5bd26ca7a68377ae6b170bbd9c059864476714a61b8aaea6fafcbfaaa2053a9ab26c8b9a0de59f4ab43d26ced00d7f44a79db81a0da59d6d35e9d9abe7eb51636a6e46a9a5e28164330aa598a247e8959f45d069c443509ce2eb79b6d22676a71ef4eb434cdf4501a15c93aec48747c9be2392df1cbfc8c8ad7b07d3f999038aa7dc770ad3359956a57f2138b5b774863ee6c7ec6133057ee86a989c05e37949dad64f1b1c78415cf190ac5591d43022fa23990dc3e3dad7258b8b3f40cb31b2a8fda36246aec8022770d471d270152d65d16710e3a94c61aa9be79c9d76f3c7c4c3f3dbfa1263320deb2312ef0ea4ea3b725bf4d83db0c3ea44f57b58f4cbc99958cb723f3b9f47d3bff76ecfd3f581015d1fa3fc5e63fbfc703bdeabf04882add9758d9219d9a38fe5b116e98cf83bb6a50d04cf862c3b3a76641409b42d32cc4fc156fd30502a6dfa6ae852ef95d26f601572d188eaa51405810984ec06f2bd6d87df812242b7417decf8ef964f68a28aae0b79e38e50005a7f0d7b240a096c7c1ae8a52333784c0df877abe6eb6249b71d68ac11c0bbbd08cb06d2303338dfe488a3249a0318896e1b35c18a40af231ca7a1a5fa0dda466af7a09215b82febbfd66d8b0c601c5a010c72402c9147dac5517ad3934ca4e0bc86f80bf71a79c61276bf744d54938cd8cfdb905d93a788eb38a75b238964c139bde24d5e55db2fe3ff253ba31bf5b9efe6c4172c764ab04659054e7ba3a1b6444bd0db8e7b655cc34e5dbe31b098a8aff01b878a7295e158043168dc27f32e726725dd9e43147669a9ecd8a4b703974af1aecb9888b6d1d53276299a02302c59bb10fea459f1a5db08bbf5493755bd20c31d0e1d504e5ad214a36a30c93cb301288ffe2a3001d42d25bbf0182d428e2628501afa69b1a62496278e4390686226b8e063fd4a55d08f60c24b2d76f4c662a06e4ebac5d37eaf4e4de67436e5040224ed5c38315fa30f5ff381eafbaf36d918bb27dade76527d9ff32d53d40d9862d5060b44b6392351d025af6de9f22402f43baf807e58608efed8f279cb3cfd2575d5bf09a66e7dd80754209c807bf56d8f4eb67e8150ffc8f0c209157a4080452f279048df1e4753a99fb3177ecb118ab61e40f0bce136c3d331060b935b33904b8e927b513759d534fe44cb0f35de5285573382887e87d15d822a8967a2488cc549a29761210f9d4871b2c8e2d5ef24c88be4f4265b4ec47f0419594434c6f8ff6f0e569ffe27cf5fa6bc44d359226517111cf665e7a6e232f4411d5367b9f23b3204482c3501687a9458de6dfd63cc0f0bcff8cfb9b5e602324b35d38bf9486c245a55ad8341068fcf6f292c7863f1fb1484aca0d3ea511ad9d70f3bfb09b6e793df31e44af36d66451660cc211b90da81ecf6a700f041ba7c376f28a6faef08c66ce3b95e3de9322372f59255aa185b375fffb8c98a247aac4f2d77c6e5ed0d22646fad6c10d6367ccf6a32d5428db770542190bae499cd7c3200bb5f879883c1165b6a83f4ac82477e5a9e2034036bdceb2522da22917c8f22ce30d06e9b34d2b5895eb76187f79825457e21922f51dd7619e1116868a296ed556a991a3bf4a31a5f59821e9c213d36caf2ede3b71487f981ec81572c01c883e33702cb8a8af5af5f0bdc5150cf0b99f921eab2aaa107ca8dfffe0b33dfa42e5b0e9a561fdc0eb029e97495bea1f87b838b90abbc657b42aaa3075655a9f9003866e07a8c80fa3eb4ad75010f0d0bf10552c9223206028e48e38b6f8a95f488a7c92e48d3713d7e374b788f510405aaad63ef099a5e578131b7370d8b361998a9db9658cf06b870905f5bd8ea18fb974addaea0fea834fd42e600eaafc963cfa478ca371793c2b40b5bb30cb4be7de91cf2e0617cd4334294b3cb12f38575c14a979b46a9d82ae59194a0b32ae69c2ca349263efeeaeb5037d95d80524a01aea085ff66c156e12556382965110756ad6b217b24d0593494d7418f46f1cd2848ca25267d2f45a6024ab845568b2a46949218165450e1be7738de92aeaed2f994009b6a7778f4439e2baf0e9b53a5916d1130febe1fabc002d684383914c2bb51c0b75289ab2c74d2e1a9cbd6b6fc653ed4918945919e9df0a49c545734044e29456c0bbb5d640b4bba7ee4f3ea1eedd3f6a42cfa57df40364ef0015e9183503b7e395d3776bfb8ac2eb4f83e9d5ba543c4213f8754e48a6411644aadf3c3f00bd246e66487928866e18cd96d51f5e0c49cc5935b119880b85c0b4cf5c631f5ed12c3eccf6a434016fbf2f0b44416f86b539f41b3a2e1372a9d5b1ec52dd735caa4692f134c204e5afea4e933b7ce196ce075c78d1d31ab03b5101cc2338e3a5769caa813a792708ffe5a353cc9384c83e6ea5929e90b31cc2525dbd6d21b4d14c46387b288239747d5ef4019a647f73e12222e9ac8556a5d803d18773eea92e7d7ab4b39b2c2c5205b59a2d55b52f98544ae9b0a9d3225f5be6200f7d87e7f4975d65d13d0874efcfb80eda4263f9d484b301fb65c642e994ab98917d38e4c48e290fb4cd6658f6920c386bf0089ffd3c70ee51a9df1016350350b4de7975bdea9a49bcc084e223f12866659bafeb5f55d9b68186a8920d1496cfb6302467d878dca0e67cc4f16b704d59a9df9ccdca35102cd872dc1c471ce33007cea5daea146eaf811ba5a52c88af93309de296e80a752092dbb811d9141fe8e99fd1b9ebde4aaacde20e0e6b65e691cd181b1775749492c25e7dad40443c96c28c23ef9971a8230030214f1c360c5d805bd6f48f05eeaa2869c7374cf2133709264a7f597c31188eff1a97bc095a9a3297e9498fe0853cf1b93e7569c61eb9f93a2839bc3ab6a2bcb50443470ae03b88c221e1212628b2badf58efe86db8e2e9c761fd49ee4b5a798aaa0035a485954ddbc65fc5e79e04e1af7976866ee59fc9b82bbdbbf8b1a98904612c3e20c1c0cc14a4dd5306f32ea2d6aa63fc6dc66de9b5d0927fb626857c57d76d5db4f2d60e681f019742cbac566460c8565a805342c204a075addae3a4446e66ef326c6719ed790a073c286724cf544bf632dd4a726ccce3440c68eb691c043e7fe1d1b6ce08fdedf3a837705be77a19843c1aa5fe302779e8a1b3619966828f1d0f7347db13fbaa94d375c36d2e53a3f8e1e7f8b05dcf239ec5a8dfdefa6ebce72730b6728607d13d50d8b9ea6219cac30d1b26cd6b7b9eb01c8b16776ae037755f7972868ccef0682ad049315d781105a9589da8ba86f33d775ea3db3d18dd5d4761ba8d4e36e5de7c0124f70ed14fe839860d093c74f4cd409c41a01dcbcb7c3bf902e57ed7b411f6d272436c26c0881450d13e53fc9974b06cd45bab4b8a23a47c90b04dbfb52722c811fb42aac0f1f95d9453375ce38fb0428069cccd676a6282fc534b6201ecf69c2c9d8354849bf2932145835336e4a175e527b9b1884d2ea932d622582c391dc2ea7211be114316b197e6f260d666c0492ded20d8e599d185c4859afdf1bef8ce8be47582c9abf03f8b1680fed5bf0382f6ef02d3702c9885288692e4b72e13e64bbb970c47d107002a46543ff3bf880ba6abf8608520b9aee83ee872f10354bf5d64e508208bb1e64bfeaa7c6862104de089529c84471206d8f97faf16092c11870da27455cf708e7ad0c7cd90621f84902401a69d5942d3b8a4f27604d5527d8e0aee9335919af5f24d0db883eec8a99f3747af7dcb685fe9a360452dcf9d7317b3b48b33f7ec875668124af9a3628d419c9552d065879e9b70298712db1dc5342fe33343d64ff25ca47f092dfaae901520feaf92b56db36f35ea50b64de7d028bbc21dadf6038c82f8b6b4c7e25fa33f42497f0bc645ecbff005f40819327caf825de93f302a34c8968a3b739f89ec72c042dc720c086749689f8b0611e77aa7c6335ed9b309e2f785538638b396ff5f57bfd58c29a2bdde233432239bf6f8578e1611e4b14b5f9d1866626ba2b6c658b3e76415200f09c15fea45014be7e3ab0edd0685763f0ab736c8934ddba20bf0717c6f6b7cf026f0f0e8990af13ac97ef24ddc69aa7469a114208136216078e4f8eb2618850b0d7c7f1c0e20becf11daecbf68b5171405f8942a6382952e415e54cc81e88b69970494af082965b48774407de53b19eb94a7d7f51e5453776f7551fbbebf8fcf52d7cb8c332b24dd10d38147cf27a7064ef1b33283d566babc3bc4075c415262a43cd0a87bdbfaaa719e81fd0a710513ea4fe74cf983c86bb2e66c5fc55391c3168814088c186a2ba679f624d768649f39acdccbd67fa797cc925177bbabf85c4cc919ed8fbf467681616115d11892eb4aa4c0940aa8f3e524e57866fbabc6471fd528165811547142aace46b100156f8a10524ecff414cedec2bde24d232dfb57915a2b7fc151c1edb7878db430628d1a7d5520dc5882fcd1657752c2fd23495ca8999721849ad0bdedd9f10ba1ca7b470c16eb747030fcaf9b3d8933bfd71dfd0f6843306caeb6a55ef0d912415919d477dc623f7a38fa44ab85e70b3e8dfd94499a4df9e3b6d1056a53e531404a85b19fe5841021f3ce6c582b30c58a9006efe251f8504372d9d26fe04f3b542de9b91c5f1b921f4e77ec1e23d4dd7ff8a3bf5a697e6fd4a18d9fd2c99f939ba3941fcb072d2686b6fa40d77895b78cd617fe6f973d72146787b078647f25b1af74ef358fdeb5621ef9b5c3bae021976e8f9b4abac49c23db6084a74361962bc5fb1fb66f5389f7ab30e412fd9ab8cd187cb8f2afed54d1eb8f66a5061cbbf02d00f2ecf4d0542358511145775d09ede3105b3db18744685f7b546f8b8947844872e6750efbf2c44b512971d54e163bb0c44ca6e65bfcb05824a7be78341eb9eed1d523c80b811c1eaaa716cb60348f31701ad550756d20b5027936f95250a5b2e7aeb86a1b841b443fc5fe4579fdb65b57f230abf3a4cee105a9590793e5dc9e95ff841cb57af561b438372c6237c6bdb4fe5dbb673507c3c5fc3c9c191ff76b9d4b874f77d2c34c0102f1de884f236af66beb473a484b53d7ddc22f37cd6e831509b1a22b02e8cf13b3747fc0c0781453b1bfddfbbaa00c908837c0b55126bb48cf8287a448548f8e56e0f708c537feec8323befb7be42351aada37c5032d6c521985ce765d0c69a811c81cc1b8a45c79da1cca749faaa9d9b2725b4875acc92db52bc1cc30485d7460dcc677350ddb68580e9b671d57458dfbe7b8865e2b9b4ae49ef5b650118f36f76590c5674cb536732f5f47cce2de0c623ea48fa0a71c5bed6ff63ccde01d9677e089bc5f73ff1f80385f9ba02efc021dafef412bc831a254092c2063e5cb90a0d6d24b43bcfa8b9567c75d1219ac171329004eb380d0922ccacfead17df21871821397579de50fd6d5d5496b99a4416b66d70fc899a92c96416f576c3c09c0300902e4b25d6572f76ba9f26e75c29183a3c3bb14ee61dd6000db701af927f8aebc1c9e3559ca7aa33900f788f9e22f6120809aa478cc0ea78a40d58232ee6429237fff41d9355ab1b0b3308ab4841a108647427368293baf59eb7fe6be945fad7d527cefe43c54686ff06de00ba8d22ba44e6ca30af8eb1ec762255eb8882990e982715376a8443d847c4a883b90f5dbfd725cc5944da81367ffa37b2533ef41e99bae6d83c777899ef74aa52d6b71f5f379d140a7f6d5949f34526ffb701573e2fe058cdc9c7e593a6528e0cc0a635f291af0f5229ecfbf6d63586930c4533dde9944ddf500eb678d302d1b96707b4f6ae4644d0a8583c840f16954bfc96a3fa0d0d4c623e19b5d423504264d41a329379ce8c150e364f7041124f7d039fac8b015fb81d2a3503b1b780077eecf24253ac53c8590e71601f2b0d3bac4fae5114fa8cfce0f6f37e9eec49920e60abc36485b3d6dd4fe4f1c53dbc62959d8378e904707ca97cbdaeb7d45a62ff34f2c977e22b3a3ab3cfbd6f01448b27f9a0fc322bd039491e77c1eddc2de09820a3303d8be959ebfc8c1d9fc0ad946f1d3b2bdf8cf3b01120e27c4edec9f4e150ef661ad32115b26b18c935b5b2782f291dc4ecc6abeef1c005ee4200641a9a5797c0d3c794c311817711d4ee0c53a6002f1c8ffee823daa6911ff0ea5303b473d2691d25e39fbea40ee5b6dba0e1d292cf86bd92733e84c1a05cc27dca18850b1d71a2ef20c9cf7d645a48962a8e9e1edf28a0b72d0a5bbdc88ccce61333ea3f74d23d8fec97c6264d01afb06498e79f740b648d21cda7aa0cdebe73c1c7d5f16664bf84f7169672c0579594620d52ab63ab5392d1d8ac347e5aab6564a4bebfb5beb425b5be62c652bebb6ed60af57ebfde8a40c680d7e25d034d7e79d32949efb2043bd518c60a08f065fa34500f7e6336683c7f07ed41a8a729d3c959dcb0bf439053b32932a5dad71a05dc34de274bc63c42a11f5878b29fc83b94b233bd4cd709d291db9d8072f164645650a31df1a659fadccc2d96c550589997900cb55deff4b4cb4268b528c79feb210657f367f102d80cbcdb351ca8d42a85f2b88ab22ebd5aa77ebdf21bea4f07a3c9d086635ca08248ee929762f8019a24374f4453d1ba4fc7803448b9be62016ca640307252bcd2dccbe7d5dcc6d5b1811e00ee546ab9abd2f275ffe690eed5090dc36c946172ccd05955b028947be5d7c7e16dddf725221ee6e7e383ef9cbdb5e2a75e6c40bf14ded2e997c904753c7555f6e7c1138ade08208f48437c2e5bb92623d79b03ac9137b50eb989a7ddaf8c43b1ba42c7bb1b125c56d1326de5e5365ef66029a94700cf5da5f05492ac7567db69d0f1c2a9677cdcd3283621a00dc6bbabd3b97e03d90cdbf915415fcd9245ee71474e2e314253c7c9b9b36510062d06ad48e13d7ce764dc624a3176a668df0356475981c424edbf28f3ff525e86a2b51cd54f9ef56848993fc2e05deab4223d2167473623354559700aa837e70dedca377e61e2d0a373a227c568a9a9b6052119139990789f719a6ff6ba93a1759354b0cf7411fd2de957b4165ca80db8ed8e19e1dd36519296a0d7b90b702aa67475e6c0967eaf532d7aa4af6f50d5aff19f211c31a9d0abaca4f9379978b5dad45df46af325a1acabafca9b2701f0ef228f17893b5a88a3a7ce27cf111e3c3fbcdfee1566965a8cf4bf90d42cded34989f51dac1edecffdbf3223f8ae0f01827f5c5928ae7c0270e754be302b84a01ae0f0049b85bdb9d8f1d3e50106a65a02e3546dd47db66bb14a40097161dc39d95f0ab76d8b7191301096823d214c7c829dbe2ba20d95c465444637da92c78ef239d67268ac58718743e619b1b444c24004c65b120da131000173f0355a01d07e9dfa80956e55979be5db574f8d0795cbbc5c1480049c68845c4cd08c9f8ebd27684bde62fe326ca5aca749cf00abb0b182bd157c3d7db9998029383ab10c0a4fddc3ba399250cd76d361c35d6dd251425532d0946fed7bad77947ad6fd6e2a36f8d54b48d5acd0749f20afb12c16d6f9fde6fbacebad2759fdfd7f4f638d0413079d4dcc0c8bb97872dba314c4c89b882b31538aeddef3aecfa8c9ecfd244c77d776441b3c395a0b90769d01ad59df5a4103c79f9f324ef18e008c6ea9e356e745940faf9c39d27e0da0123bdf46c26f38556be117d271618db686d6d0cdc1e45d068e1c65b7fc4142176e6efc33d555ade5a92be6b0317d623dfc5a1182d7072e760ea9413fe484c7ca2ca39b6a07fd854b4261d2ea3dfb78482588c5337075ce13a36e02c8c15643843fcfdffd1560dc84202d01f49bb53eeb69292ceb5fd2efa3255db360b2fef3f033e071981af81a15421b1c62f34018fb272b07168956636e456a24e78ced48e78a34699fe4bd8ba9a4bf5ad3dab9cb53370c5a3acfc48816c7d8e23c40befad4b78ac08d347889ed5ee34abcdee6f3178a12659a788d284d4e8433bd8a9f53c9e06365b2ff21d4cce03740dde605bb5b12c5039d4902e9588d03fa27d5f6c0b5cf9e8ce52312c633a97646f6c6c63e9e753f19b3904c64560189c0e7cf3193b0af35e6d1504141b72f3d986827e49501489af29c4db545b2812fe8a0882350473f03016b85ba5c9b4b8b5fadf02ec5d13c8e80d44466083db9cdd3631a4d92fa8647d542b60d33fab6b104c72e059c7b5ed2976def4e364eedcd85727bdf9c579c1e6eef2b64994ab633fee460b371e3268de14117b8f39aaab171b3fed91c704ab4329ce145b378ef49068c6ce939187329c326c64d08690ca3f1c7788660142237b70aeb51819d9304559cd5c1e7320e6997cbdd113b4327f1331833b247b674f8e5b6dccdbff8e1be71af6a0133cd9fddd290e9f8f61f15b6e4115185266b0c3edbd99746e8e50478b12181d2f43f05332c90f92ab013ffb601ff6f38a1e1b33908b53cbb7eb8e0ef68b3959fda5d9dac59324828b785d26b77f373b85b3303f5f3d2f78eb90c52206137921624ddb5e8e65752ca4e6b4be7c5312bfeced80d1bd442437dbc731fd1a044c4a70419d0561596261414c2161b690108701d0be95a056cc29d34e079d47db7efdd1c98b1ada045f75adba7f4f872e369287e9e87c1f8e93f9d0335fc7c9baeaf762141f910e8a311b05956e6f211c8e2b06d79e75226d887a2d129970d978c7cb671ca3e4f2317dddaf5a7fa4664089bc9b21a127f02b1c3f7277e5f435427594cad6fe17c0f6e0d403c056205a6fe9cb2e8bd01087cb74e74a19bdf6f89beca1dd85e776778aa9d1f5dafbde7b4f2df7ba6abcac6c1600982180ff64a73e0e5624f2cf418d380436409cc3d14acf252e868bac0035f59541cf498bd13495df92f136ef806933dd4e0e746104c48372e53ccf47b42ce096919fef8e191de8bf86a9c431826cf658ea8d3befddfb870755758b34fb62765d867cb4300af8390e59e7165a5dbf75222074fb510627405db40245b9cb31925ff53f6263353a563112ff9bb2d08953d5047dabd03cfdfb6fc4270a789ce529eb045aa0f08eab940cd7f2bcc4b7fc01627bdf1bff61d7f136b180d0ee8ac3e4e7c7625abdaf92bc4bc0cacd9a8f4c1196ab792d12fd1f7520075bcf8231419f1b4c0b82b4e699112e8d5cb5ce7c52f420456dead3fd13701442b32fb962f7164fc1fbcf0b313838ab3c7adb51461919e7244c53f002a62a6932d18c424d9cfb04d035dea8bafc317f385b50897939348514b3c094ea1249be3209b20acd4e02a84bdc5ebbfc16ec9092293d227a7d3c7341a2cfeafe3904dc49a4b507c20dc0b210c60b4ad65924e104fb5f55fa9e9708d8fec9eae77a2f74941d1745b99aeeee1db14a2d6729a071c001dda44820a6bf04ebf420ef885d161df0706d7014bd9ba0dbaf98ea414a45e015c41fe9e6578b2c507c12a71ebc2b0eb8b152650eb82b45b9e6b9373d56ff088b1bfbc89f235a9581e19a34cdc94ed3bab349aa1de00b76eec8e4dcb80a7c822b7b6080bb72aa10e179f1e603174c3554fb2af0e9db6e5d68075bad65eb3b7b6f6704ab9474e3ff1c6b737181b1e5365e2bf351613559599c325835452bbf3419cf9413448dcf08a08c0ef31ae5fc9dc43b710144ae1bcf2e61b79d760efb8bb7e1387257f7e4ae16d83d374b34d44b0ce5d98e808dc4a4c29234822c476af14c63f6950a0206f2ad99dc85a57e536790a75f8be023d8d8227aab2f8d59c265dafca7befd682cfc82224ee1ea9c85ae8f5991d128c7484ef46a1d4ec847e3bfe231f2da667d9818eccb7d947158afbb6b4abf826033de07e080771ae02d160225130f11ea30e8a0311afce0879b0af15e34d72d5aff289a07e516d48afedc3e7f6d83d30de2e48912bf05d2d817cea39c940845baa686f4c1d1f89d8a0fff4ef219a326f24c574d79576933ae9caccc5c4df1d8908c4c5649ca1b062ddd72b003e8ab4f6307e0c276af2f67ba75230b03ac00d5a25fd9ca9b6562a8143963595382b7c40564e389aa026edb0d9a51bebb71443f9897c9d06d2219657fe6714f265e2bf2a877a21108c2a4eabc958a3c7d8eb193801ee23cd14644c8b714b6bec81a1098b075388c98b764cd793b8bcc27e5c9f5b195b4095b4e2e65ce8b3ebeebb1d41f0dac18eb1edf68565394818864ea0400ab188e6e142791d6c9526dab1ac1454e19691cccd1db77e13a54c123296acc99f0d84e99ea5e721681096b1cdf027d07d409f4048e28d4af31911cdcbedcdda8809993c038bba9471d1e07e467ac8dee9d45d2d770e4891759a50eb7f0448ea1ef1d921124229ea68a9da527e85806910bfb11ce47e40ee8df7ca12d735d92c92f7e7ecf9b6b7bd76236f75e76642cbc484c60bb348d4b75bf606eb8448e7391af63c24b8105bfd4b64915b125b01cd8b48c86d64be0a39b27552cdf6b29bf9d37f1d13e435107fa066bc9a40c0191f6115f2792b8d0395faeb3b27aea492b5536dc3456fe5054dacc64b743ad505811fd9643dad1888569aaa2d63b94b530649cc240db8d536194adbe95cdec6b8f1e12a21b2c07f0ad47451cc9fe426a4d3561f2413f477cfaf54afcba9c1fd129ba022dc4d0cc39406cb316a7ea6660d3a5cf1", 0x2000, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0xb8, 0x0, 0x0, [{{0x6, 0x0, 0x0, 0x0, 0x0, 0x6, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}}, {0x0, 0x0, 0x10, 0x0, '.\',x\x8e\xe6!\xb5\x01\x00\xa0\xb4\x19\xa8\x02\x1c'}}]}, 0x0, 0x0, 0x0}) 1.460805476s ago: executing program 0 (id=1385): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x3, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}}, 0x44010) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fdfe000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) 390.211911ms ago: executing program 4 (id=1386): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696e67650000140002800800080081"], 0x44}}, 0x0) 90.853627ms ago: executing program 4 (id=1387): r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x6d89, 0x8, 0x0, 0xf0}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @sliced={0x9, [0xd2, 0x7, 0xe7, 0xe, 0x3, 0x8, 0x1, 0x8, 0x9, 0x2, 0xfff5, 0x3, 0x1000, 0x8, 0xd, 0x0, 0x8186, 0x3, 0x403, 0xfff, 0x2, 0x3, 0x1, 0x8bb8, 0x1, 0xfff, 0x8, 0x1, 0x8cc4, 0x7fff, 0x208, 0x6, 0x5, 0x51, 0x3, 0x4, 0x4, 0x9, 0x401, 0x5, 0x5, 0x3, 0x5, 0x2, 0x401, 0x9, 0x2, 0x1]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x8000000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x6, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r3, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f00000004c0)) getegid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x100000}], 0x2, 0x0, 0x0, 0xb) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7ce", 0x6c}], 0x1, 0x0, 0x0, 0x7400}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0}) io_uring_enter(r0, 0x8aa, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000000)={0x0, r4, 0x6, {0x1, 0x8000000000000001}, 0x54}, 0x1) 519.546µs ago: executing program 4 (id=1388): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) set_mempolicy(0x4003, &(0x7f0000000080)=0x7, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000001c0)='mm_page_alloc\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000007000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 204.279µs ago: executing program 0 (id=1389): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x200, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x2def, 0x4000, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000100)=0x0) ioprio_set$pid(0x2, r5, 0x4007) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newtfilter={0x3c, 0x2c, 0xd2f, 0x289, 0xfffffffc, {0x0, 0x0, 0x0, r7, {}, {}, {0x2, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x3}]}}]}, 0x3c}}, 0x0) 0s ago: executing program 4 (id=1390): mkdirat(0xffffffffffffff9c, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000095000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f000036c000/0x3000)=nil, 0x3000, 0xb635773f04ebbee5, 0x10010, r0, 0x105000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a98000000060a0b040000000000000000020000006c000480680001800a000100696e6e65720000005800028008000240000000840800034000000007080004400000000f0800014000000000340005800c0001007061796c6f61640024000280080004400000005608000340000000b9080001400000000a08000240004000010900010073797a30000000000900020073797a32"], 0xc0}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) fcntl$addseals(r5, 0x409, 0x7) r6 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0x0, 0x8000}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0xc0086202, &(0x7f0000000440)=0x2) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="f8000000160001000000000000000000fc000000000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000000006c00000000000000000000000000ccebdd465866571f1d171d0000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000"], 0xf8}}, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000500), 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000082038851000000600000018000000", @ANYRES32, @ANYBLOB="00000000010300006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$vim2m_VIDIOC_CREATE_BUFS(r8, 0xc0f8565c, &(0x7f0000000000)={0x0, 0x1000, 0x2, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x657, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800]}}}) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000040)=0x454e, 0x4) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)={0x34, r9, 0x200, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x34}}, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f00000000c0)='ocfs2_dlmfs\x00', 0x80c08, 0x0) kernel console output (not intermixed with test programs): 26 audit(1734637490.564:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9045 comm="syz.4.836" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 236.064537][ T39] audit: type=1326 audit(1734637490.564:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9045 comm="syz.4.836" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 236.079642][ T39] audit: type=1326 audit(1734637490.564:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9045 comm="syz.4.836" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 236.084791][ T39] audit: type=1326 audit(1734637490.564:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9045 comm="syz.4.836" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 236.091537][ T39] audit: type=1326 audit(1734637490.564:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9045 comm="syz.4.836" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 236.097747][ T39] audit: type=1326 audit(1734637490.564:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9045 comm="syz.4.836" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 236.103255][ T39] audit: type=1326 audit(1734637490.564:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9045 comm="syz.4.836" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 236.236068][ T9059] ieee802154 phy0 wpan0: encryption failed: -22 [ 236.464317][ T9060] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 236.672713][ T9065] netlink: 'syz.1.840': attribute type 21 has an invalid length. [ 237.143874][ T9069] netlink: 'syz.0.841': attribute type 21 has an invalid length. [ 237.174152][ T9071] netlink: 28 bytes leftover after parsing attributes in process `syz.2.842'. [ 237.177034][ T9071] netlink: 'syz.2.842': attribute type 7 has an invalid length. [ 237.179140][ T9071] netlink: 'syz.2.842': attribute type 8 has an invalid length. [ 237.181178][ T9071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.842'. [ 237.313297][ T9077] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 237.358022][ T9079] netlink: 24 bytes leftover after parsing attributes in process `syz.0.845'. [ 237.427335][ T9087] netlink: 4 bytes leftover after parsing attributes in process `syz.0.845'. [ 237.439874][ T9085] xt_limit: Overflow, try lower: 0/0 [ 237.606093][ T2296] vhci_hcd: vhci_device speed not set [ 237.642291][ T9090] netlink: 'syz.1.848': attribute type 21 has an invalid length. [ 238.361000][ T9110] netlink: 'syz.4.854': attribute type 21 has an invalid length. [ 238.683652][ T9119] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 238.698525][ T9121] __nla_validate_parse: 3 callbacks suppressed [ 238.698534][ T9121] netlink: 24 bytes leftover after parsing attributes in process `syz.4.857'. [ 238.773081][ T9124] netlink: 4 bytes leftover after parsing attributes in process `syz.4.857'. [ 239.551525][ T9143] netlink: 'syz.0.864': attribute type 21 has an invalid length. [ 239.759141][ T9148] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 239.762303][ T9148] overlayfs: maximum fs stacking depth exceeded [ 239.772779][ T9148] xt_limit: Overflow, try lower: 0/0 [ 240.116905][ T9155] netlink: 24 bytes leftover after parsing attributes in process `syz.2.869'. [ 240.328993][ T9163] netlink: 4 bytes leftover after parsing attributes in process `syz.2.869'. [ 240.634838][ T9160] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 241.038997][ T9168] binder: 9167:9168 ioctl c0306201 20000480 returned -22 [ 241.118920][ T9169] loop7: detected capacity change from 0 to 16384 [ 241.442488][ T9185] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 241.444204][ T9185] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 241.447069][ T9185] vhci_hcd vhci_hcd.0: Device attached [ 241.537140][ T9196] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 241.583003][ T9199] netlink: 28 bytes leftover after parsing attributes in process `syz.1.880'. [ 241.585415][ T9199] netlink: 'syz.1.880': attribute type 7 has an invalid length. [ 241.587622][ T9199] netlink: 'syz.1.880': attribute type 8 has an invalid length. [ 241.589709][ T9199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.880'. [ 241.626024][ T6003] vhci_hcd: vhci_device speed not set [ 241.688709][ T6003] usb 37-1: new full-speed USB device number 7 using vhci_hcd [ 241.759424][ T39] kauditd_printk_skb: 66 callbacks suppressed [ 241.759435][ T39] audit: type=1326 audit(1734637496.274:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9201 comm="syz.1.881" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 241.789756][ T39] audit: type=1326 audit(1734637496.274:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9201 comm="syz.1.881" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 241.796253][ T39] audit: type=1326 audit(1734637496.274:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9201 comm="syz.1.881" exe="/syz-executor" sig=0 arch=40000003 syscall=379 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 241.802864][ T39] audit: type=1326 audit(1734637496.274:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9201 comm="syz.1.881" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 241.808707][ T39] audit: type=1326 audit(1734637496.274:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9201 comm="syz.1.881" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 241.819856][ T39] audit: type=1326 audit(1734637496.274:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9201 comm="syz.1.881" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 241.831151][ T39] audit: type=1326 audit(1734637496.274:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9201 comm="syz.1.881" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 241.836871][ T39] audit: type=1326 audit(1734637496.274:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9201 comm="syz.1.881" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 241.842764][ T39] audit: type=1326 audit(1734637496.274:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9201 comm="syz.1.881" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 241.851080][ T39] audit: type=1326 audit(1734637496.274:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9201 comm="syz.1.881" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 242.075784][ T9208] netlink: 24 bytes leftover after parsing attributes in process `syz.1.883'. [ 242.137924][ T9209] netlink: 4 bytes leftover after parsing attributes in process `syz.1.883'. [ 242.569688][ T9231] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 242.573656][ T9231] overlayfs: maximum fs stacking depth exceeded [ 242.578959][ T9231] xt_limit: Overflow, try lower: 0/0 [ 242.642934][ T9187] vhci_hcd: connection reset by peer [ 242.644746][ T1042] vhci_hcd: stop threads [ 242.646332][ T1042] vhci_hcd: release socket [ 242.647645][ T1042] vhci_hcd: disconnect device [ 243.103845][ T9246] netlink: 8 bytes leftover after parsing attributes in process `syz.2.896'. [ 243.106353][ T9246] netlink: 8 bytes leftover after parsing attributes in process `syz.2.896'. [ 243.196683][ T9249] block nbd2: NBD_DISCONNECT [ 243.199619][ T9247] block nbd2: Disconnected due to user request. [ 243.202015][ T9247] block nbd2: shutting down sockets [ 243.695378][ T9271] netlink: 'syz.1.906': attribute type 7 has an invalid length. [ 243.697614][ T9271] netlink: 'syz.1.906': attribute type 8 has an invalid length. [ 243.811175][ T9276] loop9: detected capacity change from 0 to 238 [ 243.817724][ T9276] loop9: AHDI p2 [ 244.063026][ T9281] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.146820][ T9281] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.204100][ T9281] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.321979][ T9281] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.381064][ T9281] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.387481][ T9281] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.394192][ T9281] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.401177][ T9281] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.529720][ T9285] __nla_validate_parse: 4 callbacks suppressed [ 244.529731][ T9285] netlink: 24 bytes leftover after parsing attributes in process `syz.4.909'. [ 244.593884][ T9286] netlink: 4 bytes leftover after parsing attributes in process `syz.4.909'. [ 244.961825][ T9293] netlink: 'syz.0.912': attribute type 21 has an invalid length. [ 245.207556][ T66] Bluetooth: hci4: command 0x0405 tx timeout [ 245.440130][ T9304] netlink: 24 bytes leftover after parsing attributes in process `syz.1.915'. [ 245.497710][ T9305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.915'. [ 245.819874][ T9309] netlink: 56 bytes leftover after parsing attributes in process `syz.2.917'. [ 246.057299][ T9325] netlink: 'syz.2.921': attribute type 21 has an invalid length. [ 246.233716][ T9334] netlink: 20 bytes leftover after parsing attributes in process `syz.1.922'. [ 246.241501][ T9334] syz_tun: mtu less than device minimum [ 246.552546][ T9339] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 246.554429][ T9339] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 246.556841][ T9339] vhci_hcd vhci_hcd.0: Device attached [ 246.736608][ T1969] vhci_hcd: vhci_device speed not set [ 246.796126][ T1969] usb 41-1: new full-speed USB device number 10 using vhci_hcd [ 246.806164][ T6003] vhci_hcd: vhci_device speed not set [ 247.013478][ T9346] netlink: 48 bytes leftover after parsing attributes in process `syz.1.927'. [ 247.287520][ T66] Bluetooth: hci4: command 0x0405 tx timeout [ 247.386272][ T9354] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 247.609413][ T9361] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.685721][ T9365] netlink: 12 bytes leftover after parsing attributes in process `syz.1.933'. [ 247.749549][ T9368] netlink: 28 bytes leftover after parsing attributes in process `syz.1.934'. [ 247.751858][ T9368] netlink: 'syz.1.934': attribute type 7 has an invalid length. [ 247.753841][ T9368] netlink: 'syz.1.934': attribute type 8 has an invalid length. [ 247.755798][ T9368] netlink: 4 bytes leftover after parsing attributes in process `syz.1.934'. [ 247.930233][ T9340] vhci_hcd: connection reset by peer [ 247.931712][ T1042] vhci_hcd: stop threads [ 247.935092][ T1042] vhci_hcd: release socket [ 247.938386][ T1042] vhci_hcd: disconnect device [ 248.056267][ T9386] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 248.694540][ T9397] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 248.704529][ T9397] overlayfs: maximum fs stacking depth exceeded [ 248.722527][ T9397] xt_limit: Overflow, try lower: 0/0 [ 248.731460][ T9399] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 248.957261][ T39] kauditd_printk_skb: 47 callbacks suppressed [ 248.957272][ T39] audit: type=1326 audit(1734637503.494:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9405 comm="syz.1.949" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 248.964458][ T39] audit: type=1326 audit(1734637503.494:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9405 comm="syz.1.949" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 248.970518][ T39] audit: type=1326 audit(1734637503.494:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9405 comm="syz.1.949" exe="/syz-executor" sig=0 arch=40000003 syscall=379 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 248.978621][ T39] audit: type=1326 audit(1734637503.494:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9405 comm="syz.1.949" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 248.984039][ T39] audit: type=1326 audit(1734637503.494:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9405 comm="syz.1.949" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 248.991446][ T39] audit: type=1326 audit(1734637503.494:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9405 comm="syz.1.949" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 248.997573][ T39] audit: type=1326 audit(1734637503.494:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9405 comm="syz.1.949" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 249.002842][ T39] audit: type=1326 audit(1734637503.494:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9405 comm="syz.1.949" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 249.009607][ T39] audit: type=1326 audit(1734637503.494:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9405 comm="syz.1.949" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 249.014934][ T39] audit: type=1326 audit(1734637503.494:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9405 comm="syz.1.949" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x7ffc0000 [ 249.031177][ T9413] netlink: 'syz.4.951': attribute type 7 has an invalid length. [ 249.033567][ T9413] netlink: 'syz.4.951': attribute type 8 has an invalid length. [ 249.047654][ T9413] erspan0: entered promiscuous mode [ 249.049920][ T9413] batadv_slave_1: entered promiscuous mode [ 249.052284][ T9413] gretap0: entered promiscuous mode [ 249.054886][ T9413] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 249.060508][ T9413] Cannot create hsr debugfs directory [ 249.088393][ T9417] qnx6: unable to read the first superblock [ 249.106368][ T9420] netlink: 'syz.4.954': attribute type 3 has an invalid length. [ 249.108366][ T9420] netlink: 'syz.4.954': attribute type 7 has an invalid length. [ 249.110320][ T9420] netlink: 'syz.4.954': attribute type 8 has an invalid length. [ 249.367978][ T9434] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 249.798315][ T9443] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 249.800859][ T9443] overlayfs: maximum fs stacking depth exceeded [ 249.805639][ T9443] xt_limit: Overflow, try lower: 0/0 [ 249.884661][ T9438] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.943526][ T9438] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.022251][ T9438] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.149515][ T9438] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.247335][ T9450] __nla_validate_parse: 7 callbacks suppressed [ 250.247402][ T9450] netlink: 12 bytes leftover after parsing attributes in process `syz.2.964'. [ 250.248175][ T9438] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.262117][ T9438] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.284063][ T9438] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.299559][ T9438] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.026974][ T9475] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 251.029894][ T9475] overlayfs: maximum fs stacking depth exceeded [ 251.034769][ T9475] xt_limit: Overflow, try lower: 0/0 [ 251.169027][ T9480] netlink: 12 bytes leftover after parsing attributes in process `syz.0.973'. [ 251.387575][ T9481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.973'. [ 251.928448][ T1969] vhci_hcd: vhci_device speed not set [ 251.960977][ T9503] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 252.893473][ T9516] netlink: 28 bytes leftover after parsing attributes in process `syz.1.982'. [ 252.895898][ T9516] netlink: 'syz.1.982': attribute type 3 has an invalid length. [ 252.897901][ T9516] netlink: 'syz.1.982': attribute type 7 has an invalid length. [ 252.899977][ T9516] netlink: 'syz.1.982': attribute type 8 has an invalid length. [ 252.902012][ T9516] netlink: 4 bytes leftover after parsing attributes in process `syz.1.982'. [ 253.163332][ T9525] netlink: 12 bytes leftover after parsing attributes in process `syz.4.986'. [ 253.165450][ T9522] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.231384][ T9527] netlink: 4 bytes leftover after parsing attributes in process `syz.4.986'. [ 253.248527][ T9522] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.308836][ T9522] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.384383][ T9522] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.538623][ T9522] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.558206][ T9522] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.570825][ T9522] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.594476][ T9522] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.637103][ T9532] netlink: 24 bytes leftover after parsing attributes in process `syz.0.988'. [ 253.694097][ T9533] netlink: 4 bytes leftover after parsing attributes in process `syz.0.988'. [ 254.396103][ T9542] tun0: tun_chr_ioctl cmd 1074025675 [ 254.398112][ T9542] tun0: persist enabled [ 254.399641][ T9541] tun0: tun_chr_ioctl cmd 1074025675 [ 254.417036][ T9541] tun0: persist enabled [ 254.600810][ T9553] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 254.603656][ T9553] overlayfs: maximum fs stacking depth exceeded [ 254.613322][ T9553] xt_limit: Overflow, try lower: 0/0 [ 255.046350][ T5984] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 255.057283][ T1412] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.059355][ T1412] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.186202][ T5984] usb 6-1: device descriptor read/64, error -71 [ 255.446673][ T9573] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1000'. [ 255.466086][ T5984] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 255.501690][ T9574] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1000'. [ 255.607498][ T5984] usb 6-1: device descriptor read/64, error -71 [ 255.716170][ T5984] usb usb6-port1: attempt power cycle [ 255.826942][ T9578] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1001'. [ 255.885022][ T9579] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1001'. [ 256.056058][ T5984] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 256.076646][ T5984] usb 6-1: device descriptor read/8, error -71 [ 256.326192][ T5984] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 256.346523][ T5984] usb 6-1: device descriptor read/8, error -71 [ 256.466101][ T5984] usb usb6-port1: unable to enumerate USB device [ 257.067677][ T9603] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 257.071674][ T9603] overlayfs: maximum fs stacking depth exceeded [ 257.162399][ T9599] xt_limit: Overflow, try lower: 0/0 [ 257.805116][ T9616] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1009'. [ 258.130246][ T9626] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 258.131987][ T9626] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 258.134169][ T9626] vhci_hcd vhci_hcd.0: Device attached [ 258.512613][ T6419] vhci_hcd: vhci_device speed not set [ 258.569658][ T6419] usb 37-1: new full-speed USB device number 8 using vhci_hcd [ 259.455230][ T9628] vhci_hcd: connection reset by peer [ 259.457954][ T6484] vhci_hcd: stop threads [ 259.459266][ T6484] vhci_hcd: release socket [ 259.465399][ T6484] vhci_hcd: disconnect device [ 259.866295][ T5984] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 259.919842][ T9663] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1023'. [ 259.996048][ T5984] usb 5-1: device descriptor read/64, error -71 [ 260.236075][ T5984] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 260.376097][ T5984] usb 5-1: device descriptor read/64, error -71 [ 260.486939][ T5984] usb usb5-port1: attempt power cycle [ 260.681263][ T9682] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 260.683037][ T9682] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 260.686209][ T9682] vhci_hcd vhci_hcd.0: Device attached [ 260.914182][ T5985] vhci_hcd: vhci_device speed not set [ 260.916243][ T5984] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 260.936469][ T5984] usb 5-1: device descriptor read/8, error -71 [ 260.976175][ T5985] usb 45-1: new full-speed USB device number 4 using vhci_hcd [ 261.186154][ T5984] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 261.234522][ T5984] usb 5-1: device descriptor read/8, error -71 [ 261.346154][ T5984] usb usb5-port1: unable to enumerate USB device [ 261.623174][ T9699] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.789352][ T9708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1037'. [ 261.905402][ T9683] vhci_hcd: connection reset by peer [ 261.916304][ T1042] vhci_hcd: stop threads [ 261.917452][ T1042] vhci_hcd: release socket [ 261.918721][ T1042] vhci_hcd: disconnect device [ 262.135292][ T9716] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1040'. [ 263.054026][ T9747] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1049'. [ 263.142849][ T9751] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1050'. [ 263.145215][ T9751] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1050'. [ 263.238047][ T9759] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 263.290903][ T9760] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1052'. [ 263.579976][ T6483] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.615063][ T66] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 263.618844][ T66] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 263.621319][ T66] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 263.627717][ T66] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 263.630357][ T66] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 263.632460][ T66] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 263.642896][ T6483] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.676047][ T6419] vhci_hcd: vhci_device speed not set [ 263.709471][ T6483] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.740083][ T9785] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1062'. [ 263.743416][ T9785] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1062'. [ 263.752598][ T9778] chnl_net:caif_netlink_parms(): no params data found [ 263.759634][ T6483] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.828589][ T9778] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.830464][ T9778] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.832366][ T9778] bridge_slave_0: entered allmulticast mode [ 263.834374][ T9778] bridge_slave_0: entered promiscuous mode [ 263.837986][ T9778] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.839870][ T9778] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.841767][ T9778] bridge_slave_1: entered allmulticast mode [ 263.843763][ T9778] bridge_slave_1: entered promiscuous mode [ 263.875801][ T9778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.880367][ T9778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.948291][ T9778] team0: Port device team_slave_0 added [ 263.966636][ T9798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1064'. [ 264.082523][ T6483] erspan0 (unregistering): left promiscuous mode [ 264.095546][ T6483] gretap0 (unregistering): left promiscuous mode [ 264.373368][ T9807] netlink: 'syz.4.1067': attribute type 4 has an invalid length. [ 264.427147][ T9808] netlink: 'syz.4.1067': attribute type 4 has an invalid length. [ 264.533634][ T6483] bond0 (unregistering): Released all slaves [ 264.535034][ T9810] IPVS: set_ctl: invalid protocol: 22 100.1.1.2:20001 [ 264.539599][ T9778] team0: Port device team_slave_1 added [ 264.592782][ T9778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.594607][ T9778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.601372][ T9778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.605237][ T9778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.607156][ T9778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.613962][ T9778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.691585][ T9778] hsr_slave_0: entered promiscuous mode [ 264.694294][ T9778] hsr_slave_1: entered promiscuous mode [ 264.699281][ T9778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 264.701339][ T9778] Cannot create hsr debugfs directory [ 264.845151][ T9825] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1068'. [ 265.005464][ T6483] batadv_slave_1: left promiscuous mode [ 265.018484][ T6483] hsr_slave_0: left promiscuous mode [ 265.020772][ T6483] hsr_slave_1: left promiscuous mode [ 265.038366][ T6483] veth1_macvtap: left promiscuous mode [ 265.040531][ T6483] veth0_macvtap: left promiscuous mode [ 265.042465][ T6483] veth1_vlan: left promiscuous mode [ 265.045292][ T6483] veth0_vlan: left promiscuous mode [ 265.518456][ T9834] bio_check_eod: 14 callbacks suppressed [ 265.518474][ T9834] syz.0.1070: attempt to access beyond end of device [ 265.518474][ T9834] nbd0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 265.688634][ T66] Bluetooth: hci3: command tx timeout [ 266.076075][ T5985] vhci_hcd: vhci_device speed not set [ 266.662475][ T9778] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 266.674706][ T9778] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 266.680180][ T9778] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 266.685870][ T9778] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 266.763843][ T9778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.770868][ T9778] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.776948][ T6486] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.778925][ T6486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.788792][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.790678][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.834436][ T9872] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 266.908800][ T9881] batman_adv: batadv0: Adding interface: dummy0 [ 266.910588][ T9881] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.918912][ T9881] batman_adv: batadv0: Interface activated: dummy0 [ 266.925104][ T9880] batadv0: mtu less than device minimum [ 266.927713][ T9880] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 266.931330][ T9880] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 266.935610][ T9880] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 266.939123][ T9880] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 266.943344][ T9880] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 266.948037][ T9880] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 266.951484][ T9880] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 266.954919][ T9880] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 266.958367][ T9880] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 266.976871][ T9778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.995743][ T9890] __nla_validate_parse: 1 callbacks suppressed [ 266.995753][ T9890] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1079'. [ 267.001998][ T9890] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1079'. [ 267.002645][ T9778] veth0_vlan: entered promiscuous mode [ 267.018299][ T9778] veth1_vlan: entered promiscuous mode [ 267.029225][ T9778] veth0_macvtap: entered promiscuous mode [ 267.032090][ T9778] veth1_macvtap: entered promiscuous mode [ 267.047448][ T9778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.051977][ T9778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.055692][ T9778] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.058976][ T9778] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.061534][ T9778] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.063822][ T9778] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.107179][ T6486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.109384][ T6486] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.149956][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.152728][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.155643][ T9893] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 267.157430][ T9893] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 267.159774][ T9893] vhci_hcd vhci_hcd.0: Device attached [ 267.366041][ T6419] vhci_hcd: vhci_device speed not set [ 267.426376][ T6419] usb 41-1: new full-speed USB device number 11 using vhci_hcd [ 267.741528][ T9905] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1083'. [ 267.744957][ T9905] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1083'. [ 267.754234][ T9905] geneve2: entered promiscuous mode [ 267.755768][ T9905] geneve2: entered allmulticast mode [ 267.869572][ T9908] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 267.876083][ T9908] overlayfs: maximum fs stacking depth exceeded [ 267.921181][ T9909] xt_limit: Overflow, try lower: 0/0 [ 268.509513][ T9894] vhci_hcd: connection reset by peer [ 268.511105][ T6483] vhci_hcd: stop threads [ 268.512584][ T6483] vhci_hcd: release socket [ 268.513865][ T6483] vhci_hcd: disconnect device [ 269.299018][ T9936] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.383443][ T9936] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.442284][ T9936] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.502236][ T9936] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.569805][ T9936] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.577019][ T9936] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.581725][ T9936] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.585824][ T9936] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.758723][ T6486] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.822782][ T2296] kernel write not supported for file /dsp (pid: 2296 comm: kworker/0:2) [ 269.968537][ T5948] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 269.971804][ T5948] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 269.974384][ T5948] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 269.976910][ T5948] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 269.979553][ T5948] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 269.981926][ T5948] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 269.999944][ T9942] fuse: Unknown parameter 'user_i_ïžzr#'ŽI¬˜ìS%é¤úmF@à’qãkyLbà©Ì‡†é’¹*Íî+š¡Èu8œE5¯(†Î' [ 270.111459][ T9944] chnl_net:caif_netlink_parms(): no params data found [ 270.182516][ T9944] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.184543][ T9944] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.186738][ T9944] bridge_slave_0: entered allmulticast mode [ 270.188760][ T9944] bridge_slave_0: entered promiscuous mode [ 270.191280][ T9944] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.193285][ T9944] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.195868][ T9944] bridge_slave_1: entered allmulticast mode [ 270.198730][ T9944] bridge_slave_1: entered promiscuous mode [ 270.224544][ T9944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.229801][ T9944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.253474][ T9944] team0: Port device team_slave_0 added [ 270.257463][ T9944] team0: Port device team_slave_1 added [ 270.295045][ T9944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.298524][ T9944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.306387][ T9944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.309974][ T9944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.311794][ T9944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.319948][ T9944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.343938][ T9944] hsr_slave_0: entered promiscuous mode [ 270.348847][ T9944] hsr_slave_1: entered promiscuous mode [ 270.350864][ T9944] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 270.352972][ T9944] Cannot create hsr debugfs directory [ 270.959002][ T9965] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 270.960649][ T9965] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 270.962738][ T9965] vhci_hcd vhci_hcd.0: Device attached [ 271.166222][ T8] vhci_hcd: vhci_device speed not set [ 271.173318][ T9973] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1101'. [ 271.237905][ T8] usb 45-1: new full-speed USB device number 5 using vhci_hcd [ 271.564915][ T9985] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 271.586536][ T9986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1104'. [ 272.016034][ T5948] Bluetooth: hci3: command tx timeout [ 272.018713][ T9970] vhci_hcd: connection reset by peer [ 272.021147][ T1042] vhci_hcd: stop threads [ 272.022361][ T1042] vhci_hcd: release socket [ 272.025905][ T1042] vhci_hcd: disconnect device [ 272.090898][ T9994] block nbd0: shutting down sockets [ 272.124793][ T9998] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1109'. [ 272.128319][ T9998] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1109'. [ 272.161912][T10000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1110'. [ 272.163586][T10001] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1108'. [ 272.164638][T10000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1110'. [ 272.308164][ T6486] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.470064][ T6486] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.534215][ T6486] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.697699][ T6486] bridge_slave_1: left allmulticast mode [ 272.699627][ T6486] bridge_slave_1: left promiscuous mode [ 272.702345][ T6486] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.711957][ T6486] bridge_slave_0: left allmulticast mode [ 272.713472][ T6486] bridge_slave_0: left promiscuous mode [ 272.715010][ T6486] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.756182][ T6419] vhci_hcd: vhci_device speed not set [ 273.099801][ T6486] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.104625][ T6486] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.109160][ T6486] bond0 (unregistering): Released all slaves [ 273.119344][T10008] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 273.133811][T10025] bond0: (slave wlan1): Releasing backup interface [ 273.247006][T10043] loop6: detected capacity change from 0 to 524287999 [ 273.463437][T10061] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 273.465235][T10061] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 273.468437][T10061] vhci_hcd vhci_hcd.0: Device attached [ 273.554663][ T9944] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 273.575760][ T9944] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 273.589939][ T9944] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 273.605850][ T9944] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 273.634325][ T9944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.645496][ T9944] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.651165][ T6485] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.653207][ T6485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.666010][ T6485] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.667903][ T6485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.787303][ T9944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.816647][ T9944] veth0_vlan: entered promiscuous mode [ 273.823517][ T9944] veth1_vlan: entered promiscuous mode [ 273.844945][ T9944] veth0_macvtap: entered promiscuous mode [ 273.851901][ T9944] veth1_macvtap: entered promiscuous mode [ 273.862998][ T9944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.867675][ T9944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.872124][ T9944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.879036][ T9944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.881745][ T9944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.884874][ T9944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.893071][ T9944] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.895373][ T9944] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.899020][ T9944] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.901437][ T9944] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.913979][ T6486] hsr_slave_0: left promiscuous mode [ 273.916606][ T6486] hsr_slave_1: left promiscuous mode [ 273.921070][ T6486] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.923655][ T6486] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.967926][ T6486] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.970008][ T6486] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.075421][ T6486] veth1_macvtap: left promiscuous mode [ 274.077879][ T6486] veth0_macvtap: left promiscuous mode [ 274.079531][ T6486] veth1_vlan: left promiscuous mode [ 274.080951][ T6486] veth0_vlan: left promiscuous mode [ 274.086897][ T5948] Bluetooth: hci3: command tx timeout [ 274.306122][T10091] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1121'. [ 274.309351][T10091] netlink: 'syz.0.1121': attribute type 7 has an invalid length. [ 274.312935][T10091] netlink: 'syz.0.1121': attribute type 8 has an invalid length. [ 274.320853][T10091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1121'. [ 274.898217][T10062] vhci_hcd: connection closed [ 274.898647][ T6484] vhci_hcd: stop threads [ 274.901985][ T6484] vhci_hcd: release socket [ 274.903434][ T6484] vhci_hcd: disconnect device [ 274.913494][ T6486] team0 (unregistering): Port device team_slave_1 removed [ 275.002906][ T6486] team0 (unregistering): Port device team_slave_0 removed [ 275.597999][T10093] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.607416][T10099] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.679404][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.681477][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.694148][T10093] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.709483][T10099] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.731895][ T1042] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.734201][ T1042] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.817552][T10093] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.825593][T10099] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.921467][T10099] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.931042][T10093] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.064768][T10099] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.078213][T10099] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.082882][T10099] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.092792][T10099] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.101074][T10093] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.105329][T10093] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.110485][T10093] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.115269][T10093] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.227325][ T6486] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.304738][ T66] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 276.307321][ T66] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 276.311006][ T66] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 276.313948][ T66] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 276.316079][ T66] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 276.319394][ T66] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 276.332176][ T6486] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.336317][ T8] vhci_hcd: vhci_device speed not set [ 276.467163][ T6486] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.472471][T10114] chnl_net:caif_netlink_parms(): no params data found [ 276.550003][ T6486] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.555559][T10114] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.557500][T10114] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.559397][T10114] bridge_slave_0: entered allmulticast mode [ 276.561396][T10114] bridge_slave_0: entered promiscuous mode [ 276.564704][T10114] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.573048][T10114] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.574983][T10114] bridge_slave_1: entered allmulticast mode [ 276.577065][T10114] bridge_slave_1: entered promiscuous mode [ 276.616021][T10114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.623748][T10114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.674759][T10114] team0: Port device team_slave_0 added [ 276.681983][T10114] team0: Port device team_slave_1 added [ 276.707187][T10128] infiniband syz0: set active [ 276.708689][T10128] batman_adv: batadv0: Interface deactivated: dummy0 [ 276.710425][T10128] batman_adv: batadv0: Removing interface: dummy0 [ 276.717995][T10128] bond0: (slave wlan1): Releasing backup interface [ 276.722051][T10114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.723835][T10114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.733047][T10114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.736663][T10114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.738426][T10114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.744693][T10114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.760794][ T6483] infiniband syz0: set down [ 276.769218][ T6486] bridge_slave_1: left allmulticast mode [ 276.770669][ T6486] bridge_slave_1: left promiscuous mode [ 276.772189][ T6486] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.775795][ T6486] bridge_slave_0: left allmulticast mode [ 276.778162][ T6486] bridge_slave_0: left promiscuous mode [ 276.779662][ T6486] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.057049][ T6486] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.060810][ T6486] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.064160][ T6486] bond0 (unregistering): Released all slaves [ 277.100268][T10114] hsr_slave_0: entered promiscuous mode [ 277.102798][T10114] hsr_slave_1: entered promiscuous mode [ 277.105822][T10114] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 277.109193][T10114] Cannot create hsr debugfs directory [ 277.125516][T10136] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1133'. [ 277.135729][T10136] netlink: 'syz.2.1133': attribute type 7 has an invalid length. [ 277.138254][T10136] netlink: 'syz.2.1133': attribute type 8 has an invalid length. [ 277.140342][T10136] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1133'. [ 277.342533][T10154] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.481397][T10154] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.586715][ T6486] hsr_slave_0: left promiscuous mode [ 277.588977][ T6486] hsr_slave_1: left promiscuous mode [ 277.591964][ T6486] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.594036][ T6486] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.596929][ T6486] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.598969][ T6486] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.641705][ T6486] veth1_macvtap: left promiscuous mode [ 277.643396][ T6486] veth0_macvtap: left promiscuous mode [ 277.644976][ T6486] veth1_vlan: left promiscuous mode [ 277.646706][ T6486] veth0_vlan: left promiscuous mode [ 277.658327][ T5948] Bluetooth: hci4: unexpected event for opcode 0x0428 [ 278.337266][ T5948] Bluetooth: hci3: command tx timeout [ 278.346396][ T6486] team0 (unregistering): Port device team_slave_1 removed [ 278.416743][ T6486] team0 (unregistering): Port device team_slave_0 removed [ 278.981357][T10154] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.033931][T10114] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 279.041355][T10114] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 279.045792][T10114] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 279.062090][T10114] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 279.125195][T10114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.144085][T10114] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.155262][T10154] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.172350][ T6485] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.174198][ T6485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.181050][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.182910][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.265006][T10154] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.278835][T10154] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.282952][T10154] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.290498][T10154] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.317580][T10114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.435459][T10114] veth0_vlan: entered promiscuous mode [ 279.447191][T10114] veth1_vlan: entered promiscuous mode [ 279.464410][T10114] veth0_macvtap: entered promiscuous mode [ 279.469455][T10114] veth1_macvtap: entered promiscuous mode [ 279.475572][T10114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.480537][T10114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.484411][T10114] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.488557][T10114] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.490991][T10114] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.493766][T10114] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.529339][ T6485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.535597][ T6485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.547659][ T6483] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.549887][ T6483] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.697534][T10203] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1145'. [ 279.699829][T10203] netlink: 'syz.2.1145': attribute type 7 has an invalid length. [ 279.701809][T10203] netlink: 'syz.2.1145': attribute type 8 has an invalid length. [ 279.703842][T10203] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1145'. [ 279.950225][T10213] ipvlan2: entered promiscuous mode [ 279.951610][T10213] ipvlan2: entered allmulticast mode [ 279.952959][T10213] vlan0: entered allmulticast mode [ 279.954302][T10213] veth0_vlan: entered allmulticast mode [ 280.116411][T10225] ipt_ECN: cannot use operation on non-tcp rule [ 280.227797][T10230] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1155'. [ 280.230216][T10230] netlink: 'syz.0.1155': attribute type 7 has an invalid length. [ 280.232179][T10230] netlink: 'syz.0.1155': attribute type 8 has an invalid length. [ 280.234164][T10230] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1155'. [ 280.428901][T10242] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1159'. [ 280.431269][T10242] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1159'. [ 280.433432][T10242] netlink: 'syz.0.1159': attribute type 6 has an invalid length. [ 280.435457][T10242] netlink: 'syz.0.1159': attribute type 5 has an invalid length. [ 280.437488][T10242] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1159'. [ 280.569092][T10245] bridge0: port 1(syz_tun) entered blocking state [ 280.571654][T10245] bridge0: port 1(syz_tun) entered disabled state [ 280.574134][T10245] syz_tun: entered allmulticast mode [ 280.576782][T10245] syz_tun: entered promiscuous mode [ 280.579407][T10245] bridge0: port 1(syz_tun) entered blocking state [ 280.581131][T10245] bridge0: port 1(syz_tun) entered forwarding state [ 280.713176][T10258] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1166'. [ 280.715489][T10258] netlink: 'syz.4.1166': attribute type 7 has an invalid length. [ 280.715500][T10258] netlink: 'syz.4.1166': attribute type 8 has an invalid length. [ 280.715507][T10258] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1166'. [ 281.021944][T10272] netlink: 'syz.2.1170': attribute type 6 has an invalid length. [ 281.449162][ T39] kauditd_printk_skb: 28 callbacks suppressed [ 281.449174][ T39] audit: type=1800 audit(1734637535.964:1022): pid=10282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1174" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 281.454532][T10282] warning: `syz.0.1174' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 281.719687][ T6486] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.087126][ T5946] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 282.090218][ T5946] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 282.092663][ T5946] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 282.095275][ T5946] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 282.100383][ T5946] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 282.102504][ T5946] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 282.159002][T10298] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1178'. [ 282.161828][T10298] netlink: 'syz.0.1178': attribute type 7 has an invalid length. [ 282.164625][T10298] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1178'. [ 282.219440][T10295] chnl_net:caif_netlink_parms(): no params data found [ 282.283949][T10310] kvm: apic: phys broadcast and lowest prio [ 282.291840][T10295] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.293787][T10295] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.295870][T10295] bridge_slave_0: entered allmulticast mode [ 282.299201][T10295] bridge_slave_0: entered promiscuous mode [ 282.304156][T10295] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.306124][T10295] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.307988][T10295] bridge_slave_1: entered allmulticast mode [ 282.309974][T10295] bridge_slave_1: entered promiscuous mode [ 282.333539][T10295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.337526][T10295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.357826][T10295] team0: Port device team_slave_0 added [ 282.360969][T10295] team0: Port device team_slave_1 added [ 282.408057][T10295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.410131][T10295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.416942][T10295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.421200][T10295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.423809][T10295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.435658][T10295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.449668][T10320] syz_tun: left allmulticast mode [ 282.451062][T10320] syz_tun: left promiscuous mode [ 282.452484][T10320] bridge0: port 1(syz_tun) entered disabled state [ 282.484398][T10295] hsr_slave_0: entered promiscuous mode [ 282.492189][T10295] hsr_slave_1: entered promiscuous mode [ 282.494622][T10295] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 282.502308][T10295] Cannot create hsr debugfs directory [ 282.647657][ T39] audit: type=1326 audit(1734637537.184:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10331 comm="syz.4.1186" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 282.648507][T10332] Cannot find map_set index 0 as target [ 282.653193][ T39] audit: type=1326 audit(1734637537.184:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10331 comm="syz.4.1186" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 282.663794][ T39] audit: type=1326 audit(1734637537.184:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10331 comm="syz.4.1186" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 282.669819][ T39] audit: type=1326 audit(1734637537.184:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10331 comm="syz.4.1186" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 282.675412][ T39] audit: type=1326 audit(1734637537.184:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10331 comm="syz.4.1186" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 282.683103][ T39] audit: type=1326 audit(1734637537.184:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10331 comm="syz.4.1186" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 282.689212][ T39] audit: type=1326 audit(1734637537.184:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10331 comm="syz.4.1186" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 282.695228][ T39] audit: type=1326 audit(1734637537.184:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10331 comm="syz.4.1186" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 282.702752][ T39] audit: type=1326 audit(1734637537.194:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10331 comm="syz.4.1186" exe="/syz-executor" sig=0 arch=40000003 syscall=101 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 282.726104][ T5946] Bluetooth: hci4: command 0x0405 tx timeout [ 283.181456][T10341] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1189'. [ 283.184640][T10341] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1189'. [ 283.488872][ T6486] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.559678][ T6486] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.615884][ T6486] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.740872][ T6486] bridge_slave_1: left allmulticast mode [ 283.742907][ T6486] bridge_slave_1: left promiscuous mode [ 283.744798][ T6486] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.750968][ T6486] bridge_slave_0: left allmulticast mode [ 283.752545][ T6486] bridge_slave_0: left promiscuous mode [ 283.754875][ T6486] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.044180][ T6486] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.048761][ T6486] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 284.052319][ T6486] bond0 (unregistering): Released all slaves [ 284.069580][T10367] loop9: detected capacity change from 0 to 7 [ 284.073237][T10367] Dev loop9: unable to read RDB block 7 [ 284.075468][T10367] loop9: unable to read partition table [ 284.077598][T10367] loop9: partition table beyond EOD, truncated [ 284.087406][T10367] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 284.176483][ T5946] Bluetooth: hci3: command tx timeout [ 284.421712][T10390] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1198'. [ 284.437531][T10390] batman_adv: batadv0: Adding interface: vlan1 [ 284.439917][T10390] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.461247][T10390] batman_adv: batadv0: Interface activated: vlan1 [ 284.612195][ T6486] hsr_slave_0: left promiscuous mode [ 284.615541][ T6486] hsr_slave_1: left promiscuous mode [ 284.618401][ T6486] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.621900][ T6486] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.632544][ T6486] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.659254][ T6486] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.736158][ T6486] veth1_macvtap: left promiscuous mode [ 284.738054][ T6486] veth0_macvtap: left promiscuous mode [ 284.740018][ T6486] veth1_vlan: left promiscuous mode [ 284.741801][ T6486] veth0_vlan: left promiscuous mode [ 284.751638][T10401] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 284.755382][T10401] overlayfs: maximum fs stacking depth exceeded [ 284.767721][T10401] xt_limit: Overflow, try lower: 0/0 [ 285.558923][ T6486] team0 (unregistering): Port device team_slave_1 removed [ 285.635966][ T6486] team0 (unregistering): Port device team_slave_0 removed [ 285.638229][T10424] /dev/sr0: Can't open blockdev [ 286.258795][ T5946] Bluetooth: hci3: command tx timeout [ 286.271609][T10295] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 286.331271][T10295] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 286.340762][T10295] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 286.346309][T10295] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 286.418636][T10295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.425523][T10295] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.431056][ T6484] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.433499][ T6484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.452793][ T6485] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.454692][ T6485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.563893][T10295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.591741][T10295] veth0_vlan: entered promiscuous mode [ 286.596366][T10295] veth1_vlan: entered promiscuous mode [ 286.632439][T10295] veth0_macvtap: entered promiscuous mode [ 286.635905][T10295] veth1_macvtap: entered promiscuous mode [ 286.643858][T10295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.651129][T10295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.654761][T10295] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.657419][T10295] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.659712][T10295] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.661994][T10295] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.695300][ T6485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.702626][ T6485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.715106][ T6484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.717267][ T6484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.173037][T10447] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1210'. [ 287.175473][T10447] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1210'. [ 287.567263][T10455] fuse: Bad value for 'fd' [ 287.682146][T10458] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 287.685076][T10458] overlayfs: maximum fs stacking depth exceeded [ 287.692892][T10458] xt_limit: Overflow, try lower: 0/0 [ 287.900997][T10461] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 287.902840][T10461] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 287.906387][T10461] vhci_hcd vhci_hcd.0: Device attached [ 288.483921][ T9] vhci_hcd: vhci_device speed not set [ 288.566161][ T9] usb 41-1: new full-speed USB device number 12 using vhci_hcd [ 288.617285][T10473] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1219'. [ 288.620901][T10473] validate_nla: 4 callbacks suppressed [ 288.620914][T10473] netlink: 'syz.4.1219': attribute type 7 has an invalid length. [ 288.625551][T10473] netlink: 'syz.4.1219': attribute type 8 has an invalid length. [ 288.628326][T10473] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1219'. [ 288.919055][ T1139] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.216577][T10462] vhci_hcd: connection reset by peer [ 289.219890][ T6484] vhci_hcd: stop threads [ 289.221084][ T6484] vhci_hcd: release socket [ 289.222401][ T6484] vhci_hcd: disconnect device [ 289.596225][ T5948] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 289.601319][ T5948] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 289.603972][ T5948] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 289.607609][ T5948] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 289.611852][ T5948] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 289.614809][ T5948] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 289.620694][T10492] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 289.746560][ T39] kauditd_printk_skb: 57 callbacks suppressed [ 289.746574][ T39] audit: type=1800 audit(1734637544.214:1089): pid=10493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1221" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 290.051511][T10490] chnl_net:caif_netlink_parms(): no params data found [ 290.332047][T10490] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.334140][T10490] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.337401][T10490] bridge_slave_0: entered allmulticast mode [ 290.342217][T10490] bridge_slave_0: entered promiscuous mode [ 290.351130][T10490] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.353840][T10490] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.357944][T10490] bridge_slave_1: entered allmulticast mode [ 290.369014][T10490] bridge_slave_1: entered promiscuous mode [ 290.455896][T10490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.459409][T10490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.483283][T10490] team0: Port device team_slave_0 added [ 290.486846][T10490] team0: Port device team_slave_1 added [ 290.505206][T10490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.507166][T10490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.513875][T10490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.518142][T10490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.520025][T10490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.526786][T10490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.557650][T10490] hsr_slave_0: entered promiscuous mode [ 290.559812][T10490] hsr_slave_1: entered promiscuous mode [ 290.561878][T10490] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 290.563876][T10490] Cannot create hsr debugfs directory [ 290.743202][ T1139] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.887206][ T1139] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.998083][ T1139] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.077917][T10514] batman_adv: batadv0: Interface deactivated: vlan1 [ 291.079712][T10514] batman_adv: batadv0: Removing interface: vlan1 [ 291.184630][ T1139] bridge_slave_1: left allmulticast mode [ 291.188349][ T1139] bridge_slave_1: left promiscuous mode [ 291.190408][ T1139] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.195556][ T1139] bridge_slave_0: left allmulticast mode [ 291.197638][ T1139] bridge_slave_0: left promiscuous mode [ 291.199358][ T1139] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.429863][T10527] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 291.433380][T10527] overlayfs: maximum fs stacking depth exceeded [ 291.447437][T10527] xt_limit: Overflow, try lower: 0/0 [ 291.517328][ T1139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.522818][ T1139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 291.527372][ T1139] bond0 (unregistering): Released all slaves [ 291.696178][ T5946] Bluetooth: hci3: command tx timeout [ 291.888237][T10545] fuse: Bad value for 'fd' [ 291.943932][T10546] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 291.945673][T10546] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 291.948587][T10546] vhci_hcd vhci_hcd.0: Device attached [ 292.154067][ T2296] vhci_hcd: vhci_device speed not set [ 292.188931][T10490] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 292.198699][T10490] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 292.224789][T10490] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 292.226438][ T2296] usb 37-1: new full-speed USB device number 9 using vhci_hcd [ 292.235238][T10490] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 292.369432][ T1139] hsr_slave_0: left promiscuous mode [ 292.372289][ T1139] hsr_slave_1: left promiscuous mode [ 292.375052][ T1139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.377615][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.388117][ T1139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.390877][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 292.451418][ T1139] veth1_macvtap: left promiscuous mode [ 292.453050][ T1139] veth0_macvtap: left promiscuous mode [ 292.454803][ T1139] veth1_vlan: left promiscuous mode [ 292.459298][ T1139] veth0_vlan: left promiscuous mode [ 292.758462][T10559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1236'. [ 292.769604][T10559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1236'. [ 293.539345][T10548] vhci_hcd: connection reset by peer [ 293.541466][ T75] vhci_hcd: stop threads [ 293.542674][ T75] vhci_hcd: release socket [ 293.543915][ T75] vhci_hcd: disconnect device [ 293.650296][ T1139] team0 (unregistering): Port device team_slave_1 removed [ 293.676787][ T9] vhci_hcd: vhci_device speed not set [ 293.766128][ T5946] Bluetooth: hci3: command tx timeout [ 293.780786][ T1139] team0 (unregistering): Port device team_slave_0 removed [ 294.485212][T10490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.496136][T10490] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.500198][T10586] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1241'. [ 294.503442][T10586] netlink: 'syz.2.1241': attribute type 7 has an invalid length. [ 294.511652][T10586] netlink: 'syz.2.1241': attribute type 8 has an invalid length. [ 294.514484][T10586] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1241'. [ 294.518618][ T6484] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.520497][ T6484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.555223][ T1249] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.557169][ T1249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.665060][T10490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.721181][T10490] veth0_vlan: entered promiscuous mode [ 294.730861][T10490] veth1_vlan: entered promiscuous mode [ 294.757004][T10490] veth0_macvtap: entered promiscuous mode [ 294.762269][T10490] veth1_macvtap: entered promiscuous mode [ 294.775001][T10490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.783116][T10604] net_ratelimit: 10 callbacks suppressed [ 294.783127][T10604] macvlan0: mtu less than device minimum [ 294.789051][T10490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 294.792964][T10604] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1244'. [ 294.803077][T10490] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.805573][T10490] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.810079][T10490] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.812613][T10490] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.836672][T10604] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1244'. [ 294.958269][ T1132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.960494][ T1132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.971969][ T1132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.974123][ T1132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.748238][T10649] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 295.750198][T10649] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 295.753071][T10649] vhci_hcd vhci_hcd.0: Device attached [ 295.878906][T10653] input: syz0 as /devices/virtual/input/input7 [ 295.950050][T10656] program syz.4.1249 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 295.967271][T10656] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1249'. [ 296.217120][T10656] program syz.4.1249 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 296.431692][ T6484] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.933126][T10650] vhci_hcd: connection closed [ 296.933440][ T1139] vhci_hcd: stop threads [ 296.937035][ T1139] vhci_hcd: release socket [ 296.938878][ T1139] vhci_hcd: disconnect device [ 297.088141][T10679] infiniband syz0: set down [ 297.092661][ T5948] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 297.099492][ T5948] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 297.102800][ T5948] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 297.105729][ T5948] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 297.107889][ T5948] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 297.109911][ T5948] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 297.126503][T10683] netlink: 'syz.2.1255': attribute type 7 has an invalid length. [ 297.128987][T10683] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1255'. [ 297.325274][ T6484] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.351115][T10678] chnl_net:caif_netlink_parms(): no params data found [ 297.356163][ T2296] vhci_hcd: vhci_device speed not set [ 297.449140][T10678] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.451053][T10678] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.453026][T10678] bridge_slave_0: entered allmulticast mode [ 297.454993][T10678] bridge_slave_0: entered promiscuous mode [ 297.457478][T10678] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.459326][T10678] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.461195][T10678] bridge_slave_1: entered allmulticast mode [ 297.463917][T10678] bridge_slave_1: entered promiscuous mode [ 297.484166][T10678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.490613][T10678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.510062][T10678] team0: Port device team_slave_0 added [ 297.513435][T10678] team0: Port device team_slave_1 added [ 297.540417][T10678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.542231][T10678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.548835][T10678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.553024][T10678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.554797][T10678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.561464][T10678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.588069][T10678] hsr_slave_0: entered promiscuous mode [ 297.590608][T10678] hsr_slave_1: entered promiscuous mode [ 297.592914][T10678] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 297.595374][T10678] Cannot create hsr debugfs directory [ 297.637330][T10702] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 297.770243][ T6484] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.825589][ T6484] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.949290][ T6484] bridge_slave_1: left allmulticast mode [ 297.950806][ T6484] bridge_slave_1: left promiscuous mode [ 297.952356][ T6484] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.955144][ T6484] bridge_slave_0: left allmulticast mode [ 297.956773][ T6484] bridge_slave_0: left promiscuous mode [ 297.958310][ T6484] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.210247][ T6484] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 298.213816][ T6484] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 298.217069][ T6484] bond0 (unregistering): Released all slaves [ 298.470275][T10719] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 298.471980][T10719] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 298.475101][T10719] vhci_hcd vhci_hcd.0: Device attached [ 298.545199][ T6484] hsr_slave_0: left promiscuous mode [ 298.547749][ T6484] hsr_slave_1: left promiscuous mode [ 298.549867][ T6484] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.551853][ T6484] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.554757][ T6484] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 298.557724][ T6484] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.602918][ T6484] veth1_macvtap: left promiscuous mode [ 298.604639][ T6484] veth0_macvtap: left promiscuous mode [ 298.606335][ T6484] veth1_vlan: left promiscuous mode [ 298.607766][ T6484] veth0_vlan: left promiscuous mode [ 298.646547][ T6004] vhci_hcd: vhci_device speed not set [ 298.706104][ T6004] usb 45-1: new full-speed USB device number 6 using vhci_hcd [ 299.137690][ T5946] Bluetooth: hci3: command tx timeout [ 299.478045][ T6484] team0 (unregistering): Port device team_slave_1 removed [ 299.560297][ T6484] team0 (unregistering): Port device team_slave_0 removed [ 299.680909][T10723] vhci_hcd: connection reset by peer [ 299.683490][ T6483] vhci_hcd: stop threads [ 299.684865][ T6483] vhci_hcd: release socket [ 299.686763][ T6483] vhci_hcd: disconnect device [ 300.247224][T10678] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 300.251767][T10678] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 300.255510][T10678] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 300.261086][T10678] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 300.306996][T10678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.318458][T10678] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.322407][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.324329][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.342236][ T1042] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.344848][ T1042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.485116][T10678] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.511609][T10678] veth0_vlan: entered promiscuous mode [ 300.519051][T10678] veth1_vlan: entered promiscuous mode [ 300.544546][T10678] veth0_macvtap: entered promiscuous mode [ 300.561457][T10678] veth1_macvtap: entered promiscuous mode [ 300.602345][T10758] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 300.611478][T10678] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.618371][T10678] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.630069][T10678] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.632371][T10678] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.634620][T10678] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.636941][T10678] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.666609][ T6486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.669334][ T6486] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.677561][ T6486] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.682459][ T6486] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.715495][T10760] netlink: 'syz.4.1270': attribute type 4 has an invalid length. [ 300.723719][T10760] afs: Unknown parameter 'dyn' [ 301.364627][T10780] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 301.368256][T10780] overlayfs: maximum fs stacking depth exceeded [ 301.373147][T10780] xt_limit: Overflow, try lower: 0/0 [ 302.281950][T10797] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 302.284074][T10797] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 302.286397][T10797] vhci_hcd vhci_hcd.0: Device attached [ 302.466116][ T57] vhci_hcd: vhci_device speed not set [ 302.529884][T10805] macvlan0: mtu less than device minimum [ 302.536064][ T57] usb 41-1: new full-speed USB device number 13 using vhci_hcd [ 302.536559][T10805] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1283'. [ 302.575332][T10805] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1283'. [ 303.276437][T10817] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 303.419153][ T1133] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.528843][T10798] vhci_hcd: connection reset by peer [ 303.530982][ T6484] vhci_hcd: stop threads [ 303.532270][ T6484] vhci_hcd: release socket [ 303.533819][ T6484] vhci_hcd: disconnect device [ 303.836121][ T6004] vhci_hcd: vhci_device speed not set [ 304.245713][ T5948] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 304.252131][ T5948] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 304.254674][ T5948] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 304.275537][ T5948] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 304.277961][ T5948] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 304.280028][ T5948] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 304.338623][T10834] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 304.341330][T10834] overlayfs: maximum fs stacking depth exceeded [ 304.347147][T10834] xt_limit: Overflow, try lower: 0/0 [ 304.433200][T10832] chnl_net:caif_netlink_parms(): no params data found [ 304.540338][T10832] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.547225][T10832] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.553097][T10832] bridge_slave_0: entered allmulticast mode [ 304.560106][T10832] bridge_slave_0: entered promiscuous mode [ 304.596485][T10832] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.598657][T10832] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.600973][T10832] bridge_slave_1: entered allmulticast mode [ 304.603739][T10832] bridge_slave_1: entered promiscuous mode [ 304.766998][T10832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.771250][T10832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.808835][T10832] team0: Port device team_slave_0 added [ 304.813691][T10832] team0: Port device team_slave_1 added [ 304.832436][T10832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.834910][T10832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.846128][T10832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.849941][T10832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.851797][T10832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.858722][T10832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.882260][T10832] hsr_slave_0: entered promiscuous mode [ 304.884855][T10832] hsr_slave_1: entered promiscuous mode [ 304.889730][T10832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 304.891942][T10832] Cannot create hsr debugfs directory [ 305.229760][T10867] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 305.231485][T10867] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 305.233596][T10867] vhci_hcd vhci_hcd.0: Device attached [ 305.406455][ T6004] vhci_hcd: vhci_device speed not set [ 305.461584][ T1133] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.476480][ T6004] usb 45-1: new full-speed USB device number 7 using vhci_hcd [ 305.527750][ T1133] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.604936][ T1133] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.688238][ T1133] bridge_slave_1: left allmulticast mode [ 305.689751][ T1133] bridge_slave_1: left promiscuous mode [ 305.691288][ T1133] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.708125][ T1133] bridge_slave_0: left allmulticast mode [ 305.709961][ T1133] bridge_slave_0: left promiscuous mode [ 305.714592][ T1133] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.776122][ T1969] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 305.936091][ T1969] usb 5-1: Using ep0 maxpacket: 8 [ 305.940419][ T1969] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 305.944412][ T1969] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 305.955980][ T1969] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 305.958673][ T1969] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 305.962061][ T1969] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 305.964731][ T1969] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.053703][ T1133] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.058051][ T1133] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 306.062810][ T1133] bond0 (unregistering): Released all slaves [ 306.090528][T10880] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 306.172969][ T1969] usb 5-1: GET_CAPABILITIES returned 0 [ 306.174425][ T1969] usbtmc 5-1:16.0: can't read capabilities [ 306.327406][ T5948] Bluetooth: hci3: command tx timeout [ 306.392008][ T1969] usb 5-1: USB disconnect, device number 7 [ 306.454332][ T1133] hsr_slave_0: left promiscuous mode [ 306.520012][T10870] vhci_hcd: connection reset by peer [ 306.554155][ T1133] hsr_slave_1: left promiscuous mode [ 306.556228][ T6486] vhci_hcd: stop threads [ 306.556259][ T6486] vhci_hcd: release socket [ 306.556333][ T6486] vhci_hcd: disconnect device [ 306.597615][ T1133] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.600449][ T1133] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.606852][ T1133] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.609580][ T1133] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.664670][ T1133] veth1_macvtap: left promiscuous mode [ 306.668249][ T1133] veth0_macvtap: left promiscuous mode [ 306.670467][ T1133] veth1_vlan: left promiscuous mode [ 306.673015][ T1133] veth0_vlan: left promiscuous mode [ 307.592728][T10908] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1307'. [ 307.595107][T10908] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1307'. [ 307.601783][T10910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1308'. [ 307.604090][T10910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1308'. [ 307.676049][ T57] vhci_hcd: vhci_device speed not set [ 307.720814][ T1133] team0 (unregistering): Port device team_slave_1 removed [ 307.798361][ T1133] team0 (unregistering): Port device team_slave_0 removed [ 308.406493][ T5948] Bluetooth: hci3: command tx timeout [ 308.426824][T10832] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 308.440820][T10832] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 308.470199][T10832] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 308.491009][T10832] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 308.583640][T10832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.599206][T10832] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.619727][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.621624][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.624220][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.626504][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.662146][T10920] netlink: 'syz.2.1311': attribute type 4 has an invalid length. [ 308.730946][T10832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.750855][T10832] veth0_vlan: entered promiscuous mode [ 308.754862][T10832] veth1_vlan: entered promiscuous mode [ 308.763916][T10832] veth0_macvtap: entered promiscuous mode [ 308.771560][T10832] veth1_macvtap: entered promiscuous mode [ 308.779645][T10832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.784150][T10832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.792050][T10832] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.795168][T10832] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.802397][T10832] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.812215][T10832] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.887536][ T6483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.890221][ T6483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.908691][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.910807][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.003760][T10949] netlink: 'syz.2.1314': attribute type 3 has an invalid length. [ 309.308966][T10956] input: syz0 as /devices/virtual/input/input10 [ 309.503868][T10963] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 309.507644][T10963] overlayfs: maximum fs stacking depth exceeded [ 309.512857][T10963] xt_limit: Overflow, try lower: 0/0 [ 309.748574][T10966] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1319'. [ 309.751593][T10966] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1319'. [ 310.254101][T10975] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1322'. [ 310.260401][T10975] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1322'. [ 310.390755][T10978] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1323'. [ 310.566855][ T6004] vhci_hcd: vhci_device speed not set [ 310.702260][T10984] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1325'. [ 310.799676][ T6486] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.670633][T10991] lo: entered promiscuous mode [ 311.672441][T10991] lo: entered allmulticast mode [ 311.675054][T10991] tunl0: entered promiscuous mode [ 311.677044][T10991] tunl0: entered allmulticast mode [ 311.682454][T10991] gre0: entered promiscuous mode [ 311.684434][T10991] gre0: entered allmulticast mode [ 311.691060][T10991] gretap0: entered allmulticast mode [ 311.694177][T10991] erspan0: entered allmulticast mode [ 311.698125][T10991] ip_vti0: entered promiscuous mode [ 311.699617][T10991] ip_vti0: entered allmulticast mode [ 311.702131][T10991] ip6_vti0: entered promiscuous mode [ 311.703546][T10991] ip6_vti0: entered allmulticast mode [ 311.706269][T10991] sit0: entered promiscuous mode [ 311.707664][T10991] sit0: entered allmulticast mode [ 311.711181][T10991] ip6tnl0: entered promiscuous mode [ 311.712654][T10991] ip6tnl0: entered allmulticast mode [ 311.715387][T10991] ip6gre0: entered promiscuous mode [ 311.717376][T10991] ip6gre0: entered allmulticast mode [ 311.722158][T10991] syz_tun: entered promiscuous mode [ 311.723873][T10991] syz_tun: entered allmulticast mode [ 311.731731][T10991] ip6gretap0: entered promiscuous mode [ 311.734342][T10991] ip6gretap0: entered allmulticast mode [ 311.737807][T10991] bridge0: entered promiscuous mode [ 311.739228][T10991] bridge0: entered allmulticast mode [ 311.742031][T10991] vcan0: entered promiscuous mode [ 311.743834][T10991] vcan0: entered allmulticast mode [ 311.749406][T10991] bond0: entered promiscuous mode [ 311.751120][T10991] bond0: entered allmulticast mode [ 311.755247][T10991] team0: entered promiscuous mode [ 311.757492][T10991] team0: entered allmulticast mode [ 311.760601][T10991] dummy0: entered promiscuous mode [ 311.761993][T10991] dummy0: entered allmulticast mode [ 311.764852][T10991] nlmon0: entered promiscuous mode [ 311.766338][T10991] nlmon0: entered allmulticast mode [ 311.768312][T10991] caif0: entered promiscuous mode [ 311.769751][T10991] caif0: entered allmulticast mode [ 311.772240][T10991] vxcan0: entered promiscuous mode [ 311.774035][T10991] vxcan0: entered allmulticast mode [ 311.780899][T10991] vxcan1: entered promiscuous mode [ 311.782627][T10991] vxcan1: entered allmulticast mode [ 311.786603][T10991] veth0: entered promiscuous mode [ 311.788272][T10991] veth0: entered allmulticast mode [ 311.799462][T10991] veth1: entered promiscuous mode [ 311.800672][ T5946] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 311.801366][T10991] veth1: entered allmulticast mode [ 311.805511][ T5946] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 311.809994][ T5946] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 311.813044][ T5946] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 311.813059][T10991] wg0: entered promiscuous mode [ 311.817391][T10991] wg0: entered allmulticast mode [ 311.819457][ T5946] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 311.822323][ T5946] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 311.827980][T10991] wg1: entered promiscuous mode [ 311.829724][T10991] wg1: entered allmulticast mode [ 311.837798][T10991] wg2: entered promiscuous mode [ 311.839730][T10991] wg2: entered allmulticast mode [ 311.844905][T10991] veth0_to_bridge: entered promiscuous mode [ 311.847794][T10991] veth0_to_bridge: entered allmulticast mode [ 311.854122][T10991] bridge_slave_0: entered promiscuous mode [ 311.856642][T10991] bridge_slave_0: entered allmulticast mode [ 311.860258][T10991] veth1_to_bridge: entered promiscuous mode [ 311.862133][T10991] veth1_to_bridge: entered allmulticast mode [ 311.866598][T10991] bridge_slave_1: entered promiscuous mode [ 311.868723][T10991] bridge_slave_1: entered allmulticast mode [ 311.871405][T10991] veth0_to_bond: entered promiscuous mode [ 311.873284][T10991] veth0_to_bond: entered allmulticast mode [ 311.875764][T10991] bond_slave_0: entered promiscuous mode [ 311.877885][T10991] bond_slave_0: entered allmulticast mode [ 311.880696][T10991] veth1_to_bond: entered promiscuous mode [ 311.882647][T10991] veth1_to_bond: entered allmulticast mode [ 311.890733][T10991] bond_slave_1: entered promiscuous mode [ 311.893016][T10991] bond_slave_1: entered allmulticast mode [ 311.895671][T10991] veth0_to_team: entered promiscuous mode [ 311.897664][T10991] veth0_to_team: entered allmulticast mode [ 311.900162][T10991] team_slave_0: entered promiscuous mode [ 311.902207][T10991] team_slave_0: entered allmulticast mode [ 311.904971][T10991] veth1_to_team: entered promiscuous mode [ 311.911128][T10991] veth1_to_team: entered allmulticast mode [ 311.914830][T10991] team_slave_1: entered promiscuous mode [ 311.917419][T10991] team_slave_1: entered allmulticast mode [ 311.921640][T10991] veth0_to_batadv: entered promiscuous mode [ 311.923831][T10991] veth0_to_batadv: entered allmulticast mode [ 311.933952][T10991] batadv_slave_0: entered promiscuous mode [ 311.936622][T10991] batadv_slave_0: entered allmulticast mode [ 311.940778][T10991] veth1_to_batadv: entered promiscuous mode [ 311.942789][T10991] veth1_to_batadv: entered allmulticast mode [ 311.948624][T10991] batadv_slave_1: entered allmulticast mode [ 311.951690][T10991] xfrm0: entered promiscuous mode [ 311.953102][T10991] xfrm0: entered allmulticast mode [ 311.956618][T10991] veth0_to_hsr: entered promiscuous mode [ 311.958182][T10991] veth0_to_hsr: entered allmulticast mode [ 311.961070][T10991] hsr_slave_0: entered allmulticast mode [ 311.964221][T10991] veth1_to_hsr: entered promiscuous mode [ 311.965696][T10991] veth1_to_hsr: entered allmulticast mode [ 311.969818][T10991] hsr_slave_1: entered allmulticast mode [ 311.973238][T10991] hsr0: entered promiscuous mode [ 311.974682][T10991] hsr0: entered allmulticast mode [ 311.980642][T10991] veth1_virt_wifi: entered promiscuous mode [ 311.982932][T10991] veth1_virt_wifi: entered allmulticast mode [ 311.986896][T10991] veth0_virt_wifi: entered promiscuous mode [ 311.988575][T10991] veth0_virt_wifi: entered allmulticast mode [ 311.991077][T10991] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 311.993041][T10991] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 311.996419][T10991] veth1_vlan: entered allmulticast mode [ 312.001192][T10991] veth0_vlan: entered allmulticast mode [ 312.006894][T10991] vlan0: entered promiscuous mode [ 312.008245][T10991] vlan0: entered allmulticast mode [ 312.009632][T10991] vlan1: entered promiscuous mode [ 312.011145][T10991] vlan1: entered allmulticast mode [ 312.013293][T10991] macvlan0: entered promiscuous mode [ 312.015254][T10991] macvlan0: entered allmulticast mode [ 312.020648][T10991] macvlan1: entered promiscuous mode [ 312.022563][T10991] macvlan1: entered allmulticast mode [ 312.026114][T10991] ipvlan0: entered promiscuous mode [ 312.028190][T10991] ipvlan0: entered allmulticast mode [ 312.030183][T10991] ipvlan1: entered promiscuous mode [ 312.031966][T10991] ipvlan1: entered allmulticast mode [ 312.035837][T10991] veth1_macvtap: entered allmulticast mode [ 312.041335][T10991] veth0_macvtap: entered allmulticast mode [ 312.046878][T10991] macvtap0: entered promiscuous mode [ 312.048908][T10991] macvtap0: entered allmulticast mode [ 312.052815][T10991] macsec0: entered promiscuous mode [ 312.054692][T10991] macsec0: entered allmulticast mode [ 312.059166][T10991] geneve0: entered promiscuous mode [ 312.061016][T10991] geneve0: entered allmulticast mode [ 312.065385][T10991] geneve1: entered promiscuous mode [ 312.067414][T10991] geneve1: entered allmulticast mode [ 312.070899][T10991] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 312.073408][T10991] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 312.076149][T10991] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 312.078716][T10991] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 312.081351][T10991] batadv1: entered promiscuous mode [ 312.083191][T10991] batadv1: entered allmulticast mode [ 312.086087][T10991] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.088797][T10991] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.091839][T10991] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.094780][T10991] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.100077][T10991] hsr1: entered promiscuous mode [ 312.102011][T10991] hsr1: entered allmulticast mode [ 312.104849][T10991] netdevsim netdevsim4 eth0: entered promiscuous mode [ 312.107387][T10991] netdevsim netdevsim4 eth0: entered allmulticast mode [ 312.109948][T10991] netdevsim netdevsim4 eth1: entered promiscuous mode [ 312.112427][T10991] netdevsim netdevsim4 eth1: entered allmulticast mode [ 312.114856][T10991] netdevsim netdevsim4 eth2: entered promiscuous mode [ 312.117182][T10991] netdevsim netdevsim4 eth2: entered allmulticast mode [ 312.119567][T10991] netdevsim netdevsim4 eth3: entered promiscuous mode [ 312.122064][T10991] netdevsim netdevsim4 eth3: entered allmulticast mode [ 312.126123][T10991] ip6gretap1: entered promiscuous mode [ 312.128074][T10991] ip6gretap1: entered allmulticast mode [ 312.131214][T10991] bridge1: entered promiscuous mode [ 312.133133][T10991] bridge1: entered allmulticast mode [ 312.146172][T11001] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 312.313743][T10996] chnl_net:caif_netlink_parms(): no params data found [ 312.532990][T10996] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.535622][T10996] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.538344][T10996] bridge_slave_0: entered allmulticast mode [ 312.540540][T10996] bridge_slave_0: entered promiscuous mode [ 312.543955][T10996] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.546017][T10996] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.547931][T10996] bridge_slave_1: entered allmulticast mode [ 312.550334][T10996] bridge_slave_1: entered promiscuous mode [ 312.699148][T10996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.741244][ T6486] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.749768][T10996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.780306][T10996] team0: Port device team_slave_0 added [ 312.786378][T10996] team0: Port device team_slave_1 added [ 312.822831][T10996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.824990][T10996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.836201][T10996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.878537][ T6486] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.910380][T10996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.912985][T10996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.925379][T10996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.971365][T11022] __nla_validate_parse: 2 callbacks suppressed [ 312.971375][T11022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1334'. [ 312.997615][T10996] hsr_slave_0: entered promiscuous mode [ 313.006120][T10996] hsr_slave_1: entered promiscuous mode [ 313.012278][T10996] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 313.014457][T10996] Cannot create hsr debugfs directory [ 313.029841][ T6486] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.127253][ T6486] bridge_slave_1: left allmulticast mode [ 313.136593][ T6486] bridge_slave_1: left promiscuous mode [ 313.139353][ T6486] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.144062][ T6486] bridge_slave_0: left allmulticast mode [ 313.150272][ T6486] bridge_slave_0: left promiscuous mode [ 313.152699][ T6486] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.530114][ T6486] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 313.536718][ T6486] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 313.541490][ T6486] bond0 (unregistering): Released all slaves [ 313.604030][T11034] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 313.605814][T11034] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 313.610397][T11034] vhci_hcd vhci_hcd.0: Device attached [ 313.786635][ T1489] vhci_hcd: vhci_device speed not set [ 313.847537][ T5946] Bluetooth: hci3: command tx timeout [ 313.886087][ T1489] usb 37-1: new full-speed USB device number 10 using vhci_hcd [ 314.013109][T11047] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 314.017072][T11047] overlayfs: maximum fs stacking depth exceeded [ 314.304668][T11048] xt_limit: Overflow, try lower: 0/0 [ 314.395984][ T6486] hsr_slave_0: left promiscuous mode [ 314.415844][ T6486] hsr_slave_1: left promiscuous mode [ 314.419745][ T6486] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.421766][ T6486] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.424193][ T6486] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.426302][ T6486] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.448730][ T6486] veth1_macvtap: left promiscuous mode [ 314.450211][ T6486] veth0_macvtap: left promiscuous mode [ 314.451721][ T6486] veth1_vlan: left promiscuous mode [ 314.453108][ T6486] veth0_vlan: left promiscuous mode [ 314.934752][T11036] vhci_hcd: connection reset by peer [ 314.936810][ T1139] vhci_hcd: stop threads [ 314.938382][ T1139] vhci_hcd: release socket [ 314.940055][ T1139] vhci_hcd: disconnect device [ 315.285900][ T6486] team0 (unregistering): Port device team_slave_1 removed [ 315.398624][ T6486] team0 (unregistering): Port device team_slave_0 removed [ 315.936042][ T5946] Bluetooth: hci3: command tx timeout [ 316.117879][T11055] lo: left promiscuous mode [ 316.119157][T11055] tunl0: left promiscuous mode [ 316.120432][T11055] gre0: left promiscuous mode [ 316.121703][T11055] ip_vti0: left promiscuous mode [ 316.122986][T11055] ip6_vti0: left promiscuous mode [ 316.124338][T11055] sit0: left promiscuous mode [ 316.125593][T11055] ip6tnl0: left promiscuous mode [ 316.127051][T11055] ip6gre0: left promiscuous mode [ 316.128379][T11055] syz_tun: left promiscuous mode [ 316.129813][T11055] ip6gretap0: left promiscuous mode [ 316.131467][T11055] bridge0: left promiscuous mode [ 316.132939][T11055] vcan0: left promiscuous mode [ 316.134499][T11055] bond0: left promiscuous mode [ 316.136344][T11055] team0: left promiscuous mode [ 316.137987][T11055] dummy0: left promiscuous mode [ 316.139345][T11055] nlmon0: left promiscuous mode [ 316.140627][T11055] caif0: left promiscuous mode [ 316.141875][T11055] vxcan0: left promiscuous mode [ 316.143185][T11055] vxcan1: left promiscuous mode [ 316.144484][T11055] veth0: left promiscuous mode [ 316.145700][T11055] veth1: left promiscuous mode [ 316.147063][T11055] wg0: left promiscuous mode [ 316.148335][T11055] wg1: left promiscuous mode [ 316.149635][T11055] wg2: left promiscuous mode [ 316.150907][T11055] veth0_to_bridge: left promiscuous mode [ 316.152520][T11055] bridge_slave_0: left promiscuous mode [ 316.154018][T11055] veth1_to_bridge: left promiscuous mode [ 316.155501][T11055] bridge_slave_1: left promiscuous mode [ 316.157023][T11055] veth0_to_bond: left promiscuous mode [ 316.158708][T11055] bond_slave_0: left promiscuous mode [ 316.160292][T11055] veth1_to_bond: left promiscuous mode [ 316.162255][T11055] bond_slave_1: left promiscuous mode [ 316.164202][T11055] veth0_to_team: left promiscuous mode [ 316.167888][T11055] team_slave_0: left promiscuous mode [ 316.169411][T11055] veth1_to_team: left promiscuous mode [ 316.171071][T11055] team_slave_1: left promiscuous mode [ 316.172602][T11055] veth0_to_batadv: left promiscuous mode [ 316.174478][T11055] batadv_slave_0: left promiscuous mode [ 316.176652][T11055] veth1_to_batadv: left promiscuous mode [ 316.178257][T11055] xfrm0: left promiscuous mode [ 316.179620][T11055] veth0_to_hsr: left promiscuous mode [ 316.181115][T11055] veth1_to_hsr: left promiscuous mode [ 316.182566][T11055] hsr0: left promiscuous mode [ 316.183827][T11055] veth1_virt_wifi: left promiscuous mode [ 316.185299][T11055] veth0_virt_wifi: left promiscuous mode [ 316.186909][T11055] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 316.188778][T11055] vlan0: left promiscuous mode [ 316.190097][T11055] vlan1: left promiscuous mode [ 316.191362][T11055] macvlan0: left promiscuous mode [ 316.192721][T11055] macvlan1: left promiscuous mode [ 316.194095][T11055] ipvlan0: left promiscuous mode [ 316.195452][T11055] ipvlan1: left promiscuous mode [ 316.197171][T11055] macvtap0: left promiscuous mode [ 316.198605][T11055] macsec0: left promiscuous mode [ 316.200142][T11055] geneve0: left promiscuous mode [ 316.201667][T11055] geneve1: left promiscuous mode [ 316.203007][T11055] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 316.204817][T11055] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 316.206717][T11055] batadv1: left promiscuous mode [ 316.208103][T11055] geneve2: left promiscuous mode [ 316.209464][T11055] hsr1: left promiscuous mode [ 316.210811][T11055] netdevsim netdevsim4 eth0: left promiscuous mode [ 316.212600][T11055] netdevsim netdevsim4 eth1: left promiscuous mode [ 316.214346][T11055] netdevsim netdevsim4 eth2: left promiscuous mode [ 316.216379][T11055] netdevsim netdevsim4 eth3: left promiscuous mode [ 316.218156][T11055] ip6gretap1: left promiscuous mode [ 316.219617][T11055] bridge1: left promiscuous mode [ 316.226313][T10996] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 316.230198][T10996] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 316.233607][T10996] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 316.241940][T10996] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 316.284795][T10996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.295229][T10996] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.302271][ T1249] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.304575][ T1249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.309749][ T1249] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.311721][ T1249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.341959][T11081] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1345'. [ 316.434890][T11082] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 316.437921][T11082] overlayfs: maximum fs stacking depth exceeded [ 316.455584][T11082] xt_limit: Overflow, try lower: 0/0 [ 316.492033][ T1412] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.493814][ T1412] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.532589][T10996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.565476][T10996] veth0_vlan: entered promiscuous mode [ 316.569639][T10996] veth1_vlan: entered promiscuous mode [ 316.620841][T10996] veth0_macvtap: entered promiscuous mode [ 316.624973][T10996] veth1_macvtap: entered promiscuous mode [ 316.648144][T10996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 316.655349][T10996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 316.659914][T10996] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.662406][T10996] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.664827][T10996] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.668116][T10996] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.766668][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.769645][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.798523][ T6484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.806008][ T6484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.184553][T11105] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 317.189765][T11105] overlayfs: maximum fs stacking depth exceeded [ 317.213889][T11105] xt_limit: Overflow, try lower: 0/0 [ 317.302854][T11110] ext3: Unknown parameter 'discazd' [ 317.697694][T11126] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1360'. [ 317.925860][T11133] bridge2: entered promiscuous mode [ 317.928889][T11133] bridge2: entered allmulticast mode [ 317.933737][T11133] team0: Device bridge2 is up. Set it down before adding it as a team port [ 318.730770][T11147] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 318.738004][T11147] overlayfs: maximum fs stacking depth exceeded [ 318.743673][T11147] xt_limit: Overflow, try lower: 0/0 [ 318.876049][ T6004] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 318.906708][ T6486] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.030190][ T6004] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 319.032489][ T6004] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 319.035893][ T6004] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 319.036043][ T1489] vhci_hcd: vhci_device speed not set [ 319.040334][ T6004] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 319.043211][ T6004] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 319.048086][ T6004] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 319.050433][ T6004] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 319.052468][ T6004] usb 9-1: Product: syz [ 319.053769][ T6004] usb 9-1: Manufacturer: syz [ 319.057061][ T6004] cdc_wdm 9-1:1.0: skipping garbage [ 319.058474][ T6004] cdc_wdm 9-1:1.0: skipping garbage [ 319.062200][ T6004] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 319.063812][ T6004] cdc_wdm 9-1:1.0: Unknown control protocol [ 319.315723][T11152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.319122][T11152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.323224][ C3] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 319.325125][ C3] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 319.326925][ C3] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 319.328663][ C3] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 319.330625][ C3] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 319.332396][ C3] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 319.334267][ T1969] usb 9-1: USB disconnect, device number 2 [ 319.336492][ C3] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 319.336510][ C3] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 319.336524][ C3] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 320.036356][ T5948] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 320.038212][T11164] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1372'. [ 320.047763][ T5948] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 320.051714][ T5948] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 320.057667][ T5948] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 320.060102][ T5948] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 320.062292][ T5948] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 320.081795][T11167] lo: entered allmulticast mode [ 320.091871][T11167] pimreg: entered allmulticast mode [ 320.098274][T11167] pimreg: left allmulticast mode [ 320.100391][T11167] lo: left allmulticast mode [ 320.345460][T11163] chnl_net:caif_netlink_parms(): no params data found [ 320.429946][T11177] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1374'. [ 320.432372][T11177] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1374'. [ 320.437729][T11166] netlink: 'syz.0.1373': attribute type 29 has an invalid length. [ 320.440090][T11166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1373'. [ 320.444935][T11163] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.448005][T11163] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.451135][T11163] bridge_slave_0: entered allmulticast mode [ 320.453205][T11163] bridge_slave_0: entered promiscuous mode [ 320.457599][T11163] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.459918][T11163] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.462620][T11163] bridge_slave_1: entered allmulticast mode [ 320.466849][T11163] bridge_slave_1: entered promiscuous mode [ 320.501750][T11163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.506157][T11163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.531712][T11163] team0: Port device team_slave_0 added [ 320.534425][T11163] team0: Port device team_slave_1 added [ 320.551660][T11163] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.553520][T11163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.560356][T11163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.563948][T11163] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.580739][T11163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.587479][T11163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.626478][T11163] hsr_slave_0: entered promiscuous mode [ 320.628788][T11163] hsr_slave_1: entered promiscuous mode [ 320.630718][T11163] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 320.632777][T11163] Cannot create hsr debugfs directory [ 320.827898][T11187] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 320.830726][T11187] overlayfs: maximum fs stacking depth exceeded [ 320.848243][T11187] xt_limit: Overflow, try lower: 0/0 [ 321.026903][ T6486] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.116300][ T6486] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.175999][ T6486] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.217032][T11195] random: crng reseeded on system resumption [ 321.264199][ T6486] bridge_slave_1: left allmulticast mode [ 321.266687][ T6486] bridge_slave_1: left promiscuous mode [ 321.268836][ T6486] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.277497][ T6486] bridge_slave_0: left allmulticast mode [ 321.279619][ T6486] bridge_slave_0: left promiscuous mode [ 321.281762][ T6486] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.569606][ T6486] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.573391][ T6486] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 321.577629][ T6486] bond0 (unregistering): Released all slaves [ 321.974860][ T6486] hsr_slave_0: left promiscuous mode [ 321.977713][ T6486] hsr_slave_1: left promiscuous mode [ 321.979625][ T6486] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.981643][ T6486] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.985212][ T6486] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.998003][ T6486] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.032087][ T6486] veth1_macvtap: left promiscuous mode [ 322.033586][ T6486] veth0_macvtap: left promiscuous mode [ 322.035060][ T6486] veth1_vlan: left promiscuous mode [ 322.043650][ T6486] veth0_vlan: left promiscuous mode [ 322.089279][ T5946] Bluetooth: hci3: command tx timeout [ 322.255789][T11233] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1385'. [ 322.259157][T11233] netlink: 'syz.0.1385': attribute type 7 has an invalid length. [ 322.261691][T11233] netlink: 'syz.0.1385': attribute type 8 has an invalid length. [ 322.264117][T11233] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1385'. [ 322.320094][T11230] input: syz1 as /devices/virtual/input/input11 [ 322.884102][ T6486] team0 (unregistering): Port device team_slave_1 removed [ 322.982282][ T6486] team0 (unregistering): Port device team_slave_0 removed [ 323.601115][T11163] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 323.605758][T11163] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 323.618796][T11163] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 323.623528][T11163] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 323.718108][T11163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.726315][T11163] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.741416][ T1133] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.743335][ T1133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.747597][ T6484] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.750045][ T6484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.817716][T11248] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1390'. [ 323.890322][T11163] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.912962][T11163] veth0_vlan: entered promiscuous mode [ 323.921628][T11163] veth1_vlan: entered promiscuous mode [ 323.933145][T11163] veth0_macvtap: entered promiscuous mode [ 323.940487][T11163] veth1_macvtap: entered promiscuous mode [ 323.960681][T11163] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.965808][T11163] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.976956][T11163] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.979862][T11163] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.982665][T11163] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.985617][T11163] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.080085][ T6484] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.086783][ T6484] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.123301][ T6486] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.125573][ T6486] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.166064][ C1] ------------[ cut here ]------------ [ 324.167913][ C1] WARNING: CPU: 1 PID: 11163 at kernel/workqueue.c:2257 __queue_work+0xc3a/0x1080 [ 324.170373][ C1] Modules linked in: [ 324.171622][ C1] CPU: 1 UID: 0 PID: 11163 Comm: syz-executor Not tainted 6.13.0-rc3-syzkaller-00073-geabcdba3ad40 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 324.176208][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 324.179101][ C1] RIP: 0010:__queue_work+0xc3a/0x1080 [ 324.180553][ C1] Code: 07 83 c0 03 38 d0 7c 09 84 d2 74 05 e8 1f e7 98 00 8b 5b 2c 31 ff 83 e3 20 89 de e8 10 7f 36 00 85 db 75 60 e8 c7 7c 36 00 90 <0f> 0b 90 e9 f9 f7 ff ff e8 b9 7c 36 00 90 0f 0b 90 e9 7e f6 ff ff [ 324.185899][ C1] RSP: 0018:ffffc900005a0be8 EFLAGS: 00010046 [ 324.187466][ C1] RAX: 0000000000000000 RBX: 0000000000000100 RCX: ffffffff8162d1d1 [ 324.189564][ C1] RDX: ffff8880252a8000 RSI: ffffffff8162d229 RDI: 0000000000000005 [ 324.191706][ C1] RBP: ffff8880632a0930 R08: 0000000000000005 R09: 0000000000000000 [ 324.194155][ C1] R10: 0000000000000100 R11: 0000000000000002 R12: 1ffff920000b418f [ 324.196963][ C1] R13: 0000000000000001 R14: 0000000080000100 R15: ffff888029917800 [ 324.199993][ C1] FS: 0000000000000000(0000) GS:ffff88802b500000(0000) knlGS:0000000000000000 [ 324.203171][ C1] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 324.205528][ C1] CR2: 00000000ff86864c CR3: 000000006df14000 CR4: 0000000000352ef0 [ 324.208519][ C1] DR0: 0040000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 324.211453][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 324.213678][ C1] Call Trace: [ 324.214547][ C1] [ 324.215306][ C1] ? __warn+0xea/0x3c0 [ 324.216427][ C1] ? __queue_work+0xc3a/0x1080 [ 324.217702][ C1] ? report_bug+0x3c0/0x580 [ 324.218924][ C1] ? handle_bug+0x54/0xa0 [ 324.220185][ C1] ? exc_invalid_op+0x17/0x50 [ 324.221415][ C1] ? asm_exc_invalid_op+0x1a/0x20 [ 324.222735][ C1] ? __queue_work+0xbe1/0x1080 [ 324.224012][ C1] ? __queue_work+0xc39/0x1080 [ 324.225264][ C1] ? __queue_work+0xc3a/0x1080 [ 324.226516][ C1] ? __queue_work+0xc39/0x1080 [ 324.227782][ C1] ? lock_acquire+0x2f/0xb0 [ 324.229005][ C1] ? call_timer_fn+0x11a/0x610 [ 324.230335][ C1] call_timer_fn+0x1a0/0x610 [ 324.231567][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 324.233082][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 324.234422][ C1] ? __pfx_lock_release+0x10/0x10 [ 324.235750][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 324.237144][ C1] ? lock_acquire+0x2f/0xb0 [ 324.238336][ C1] ? __run_timers+0x6f0/0x930 [ 324.239727][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 324.241233][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 324.242747][ C1] __run_timers+0x56a/0x930 [ 324.243956][ C1] ? __pfx___run_timers+0x10/0x10 [ 324.245526][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 324.247543][ C1] ? rcu_is_watching+0x12/0xc0 [ 324.249327][ C1] ? lock_acquire+0x2f/0xb0 [ 324.250927][ C1] ? run_timer_base+0x10c/0x190 [ 324.252738][ C1] run_timer_base+0x114/0x190 [ 324.254454][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 324.256379][ C1] run_timer_softirq+0x1a/0x40 [ 324.258159][ C1] handle_softirqs+0x213/0x8f0 [ 324.259926][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 324.261832][ C1] __irq_exit_rcu+0x109/0x170 [ 324.263546][ C1] irq_exit_rcu+0x9/0x30 [ 324.265096][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 324.266762][ C1] [ 324.267569][ C1] [ 324.268351][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 324.269935][ C1] RIP: 0010:lock_acquire.part.0+0x155/0x380 [ 324.271513][ C1] Code: b8 ff ff ff ff 65 0f c1 05 20 34 8c 7e 83 f8 01 0f 85 d0 01 00 00 9c 58 f6 c4 02 0f 85 e5 01 00 00 48 85 ed 0f 85 b6 01 00 00 <48> b8 00 00 00 00 00 fc ff df 48 01 c3 48 c7 03 00 00 00 00 48 c7 [ 324.276472][ C1] RSP: 0018:ffffc90002f578f8 EFLAGS: 00000206 [ 324.278077][ C1] RAX: 0000000000000046 RBX: 1ffff920005eaf20 RCX: 0000000000000001 [ 324.280390][ C1] RDX: 0000000000000001 RSI: ffffffff8b4cd480 RDI: ffffffff8bb16ec0 [ 324.282474][ C1] RBP: 0000000000000200 R08: 00000000002096e8 R09: fffffbfff2d6a08f [ 324.284539][ C1] R10: ffffffff96b5047f R11: 00000000000a201e R12: 0000000000000000 [ 324.286585][ C1] R13: ffff888029917948 R14: 0000000000000000 R15: 0000000000000000 [ 324.288685][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 324.290214][ C1] ? rcu_is_watching+0x12/0xc0 [ 324.291502][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 324.292859][ C1] ? touch_wq_lockdep_map+0xa7/0x1c0 [ 324.294236][ C1] ? lock_acquire+0x2f/0xb0 [ 324.295420][ C1] ? touch_wq_lockdep_map+0xa7/0x1c0 [ 324.296832][ C1] ? touch_wq_lockdep_map+0xa7/0x1c0 [ 324.298233][ C1] touch_wq_lockdep_map+0xad/0x1c0 [ 324.299617][ C1] ? touch_wq_lockdep_map+0xa7/0x1c0 [ 324.300998][ C1] __flush_workqueue+0x129/0x1200 [ 324.302339][ C1] ? __mutex_lock+0x1cc/0xa60 [ 324.303579][ C1] ? __pfx___flush_workqueue+0x10/0x10 [ 324.305009][ C1] drain_workqueue+0x18f/0x3d0 [ 324.306267][ C1] hci_dev_close_sync+0x339/0x1250 [ 324.307602][ C1] ? up_write+0x1b2/0x520 [ 324.308730][ C1] ? rcu_is_watching+0x12/0xc0 [ 324.310022][ C1] hci_dev_do_close+0x2e/0x90 [ 324.311258][ C1] hci_unregister_dev+0x213/0x620 [ 324.312600][ C1] ? __pfx_vhci_release+0x10/0x10 [ 324.313916][ C1] vhci_release+0x79/0xf0 [ 324.315045][ C1] __fput+0x3f8/0xb60 [ 324.316103][ C1] task_work_run+0x14e/0x250 [ 324.317311][ C1] ? __pfx_task_work_run+0x10/0x10 [ 324.318661][ C1] do_exit+0xadd/0x2d70 [ 324.319973][ C1] ? do_group_exit+0x1c3/0x2a0 [ 324.321362][ C1] ? __pfx_lock_release+0x10/0x10 [ 324.322751][ C1] ? do_raw_spin_lock+0x12d/0x2c0 [ 324.324094][ C1] ? __pfx_do_exit+0x10/0x10 [ 324.325264][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 324.326666][ C1] do_group_exit+0xd3/0x2a0 [ 324.327867][ C1] __ia32_sys_exit_group+0x3e/0x50 [ 324.329200][ C1] ia32_sys_call+0x1b1c/0x1c20 [ 324.330479][ C1] __do_fast_syscall_32+0x73/0x120 [ 324.331813][ C1] do_fast_syscall_32+0x32/0x80 [ 324.333088][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 324.334724][ C1] RIP: 0023:0xf7f14579 [ 324.335737][ C1] Code: Unable to access opcode bytes at 0xf7f1454f. [ 324.337439][ C1] RSP: 002b:00000000ff86a65c EFLAGS: 00000286 ORIG_RAX: 00000000000000fc [ 324.339601][ C1] RAX: ffffffffffffffda RBX: 0000000000000043 RCX: 00000000ff86a6a8 [ 324.341744][ C1] RDX: 0000000000000000 RSI: 00000000f73a3ff4 RDI: 00000000f719e026 [ 324.344521][ C1] RBP: 00000000f73a3ff4 R08: 0000000000000000 R09: 0000000000000000 [ 324.347345][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 324.349762][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 324.351774][ C1] [ 324.352545][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 324.354401][ C1] CPU: 1 UID: 0 PID: 11163 Comm: syz-executor Not tainted 6.13.0-rc3-syzkaller-00073-geabcdba3ad40 #0 [ 324.357199][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 324.360601][ C1] Call Trace: [ 324.361478][ C1] [ 324.362208][ C1] dump_stack_lvl+0x3d/0x1f0 [ 324.363423][ C1] panic+0x71d/0x800 [ 324.364444][ C1] ? __pfx_panic+0x10/0x10 [ 324.365589][ C1] ? show_trace_log_lvl+0x29d/0x3d0 [ 324.366947][ C1] ? check_panic_on_warn+0x1f/0xb0 [ 324.368314][ C1] ? __queue_work+0xc3a/0x1080 [ 324.369563][ C1] check_panic_on_warn+0xab/0xb0 [ 324.370831][ C1] __warn+0xf6/0x3c0 [ 324.371831][ C1] ? __queue_work+0xc3a/0x1080 [ 324.373023][ C1] report_bug+0x3c0/0x580 [ 324.374082][ C1] handle_bug+0x54/0xa0 [ 324.375092][ C1] exc_invalid_op+0x17/0x50 [ 324.376267][ C1] asm_exc_invalid_op+0x1a/0x20 [ 324.377541][ C1] RIP: 0010:__queue_work+0xc3a/0x1080 [ 324.378943][ C1] Code: 07 83 c0 03 38 d0 7c 09 84 d2 74 05 e8 1f e7 98 00 8b 5b 2c 31 ff 83 e3 20 89 de e8 10 7f 36 00 85 db 75 60 e8 c7 7c 36 00 90 <0f> 0b 90 e9 f9 f7 ff ff e8 b9 7c 36 00 90 0f 0b 90 e9 7e f6 ff ff [ 324.384159][ C1] RSP: 0018:ffffc900005a0be8 EFLAGS: 00010046 [ 324.385737][ C1] RAX: 0000000000000000 RBX: 0000000000000100 RCX: ffffffff8162d1d1 [ 324.387802][ C1] RDX: ffff8880252a8000 RSI: ffffffff8162d229 RDI: 0000000000000005 [ 324.389850][ C1] RBP: ffff8880632a0930 R08: 0000000000000005 R09: 0000000000000000 [ 324.391924][ C1] R10: 0000000000000100 R11: 0000000000000002 R12: 1ffff920000b418f [ 324.393968][ C1] R13: 0000000000000001 R14: 0000000080000100 R15: ffff888029917800 [ 324.396035][ C1] ? __queue_work+0xbe1/0x1080 [ 324.397283][ C1] ? __queue_work+0xc39/0x1080 [ 324.398559][ C1] ? __queue_work+0xc39/0x1080 [ 324.399842][ C1] ? lock_acquire+0x2f/0xb0 [ 324.401038][ C1] ? call_timer_fn+0x11a/0x610 [ 324.402317][ C1] call_timer_fn+0x1a0/0x610 [ 324.403551][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 324.405085][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 324.406422][ C1] ? __pfx_lock_release+0x10/0x10 [ 324.407750][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 324.409161][ C1] ? lock_acquire+0x2f/0xb0 [ 324.410361][ C1] ? __run_timers+0x6f0/0x930 [ 324.411639][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 324.413119][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 324.414611][ C1] __run_timers+0x56a/0x930 [ 324.415787][ C1] ? __pfx___run_timers+0x10/0x10 [ 324.417045][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 324.418512][ C1] ? rcu_is_watching+0x12/0xc0 [ 324.419762][ C1] ? lock_acquire+0x2f/0xb0 [ 324.420939][ C1] ? run_timer_base+0x10c/0x190 [ 324.422235][ C1] run_timer_base+0x114/0x190 [ 324.423461][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 324.424835][ C1] run_timer_softirq+0x1a/0x40 [ 324.426084][ C1] handle_softirqs+0x213/0x8f0 [ 324.427330][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 324.428653][ C1] __irq_exit_rcu+0x109/0x170 [ 324.429812][ C1] irq_exit_rcu+0x9/0x30 [ 324.430869][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 324.432326][ C1] [ 324.433109][ C1] [ 324.433888][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 324.435451][ C1] RIP: 0010:lock_acquire.part.0+0x155/0x380 [ 324.437002][ C1] Code: b8 ff ff ff ff 65 0f c1 05 20 34 8c 7e 83 f8 01 0f 85 d0 01 00 00 9c 58 f6 c4 02 0f 85 e5 01 00 00 48 85 ed 0f 85 b6 01 00 00 <48> b8 00 00 00 00 00 fc ff df 48 01 c3 48 c7 03 00 00 00 00 48 c7 [ 324.442004][ C1] RSP: 0018:ffffc90002f578f8 EFLAGS: 00000206 [ 324.443598][ C1] RAX: 0000000000000046 RBX: 1ffff920005eaf20 RCX: 0000000000000001 [ 324.445643][ C1] RDX: 0000000000000001 RSI: ffffffff8b4cd480 RDI: ffffffff8bb16ec0 [ 324.447692][ C1] RBP: 0000000000000200 R08: 00000000002096e8 R09: fffffbfff2d6a08f [ 324.449785][ C1] R10: ffffffff96b5047f R11: 00000000000a201e R12: 0000000000000000 [ 324.451871][ C1] R13: ffff888029917948 R14: 0000000000000000 R15: 0000000000000000 [ 324.453920][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 324.455387][ C1] ? rcu_is_watching+0x12/0xc0 [ 324.456645][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 324.458573][ C1] ? touch_wq_lockdep_map+0xa7/0x1c0 [ 324.459956][ C1] ? lock_acquire+0x2f/0xb0 [ 324.461137][ C1] ? touch_wq_lockdep_map+0xa7/0x1c0 [ 324.462519][ C1] ? touch_wq_lockdep_map+0xa7/0x1c0 [ 324.463901][ C1] touch_wq_lockdep_map+0xad/0x1c0 [ 324.465247][ C1] ? touch_wq_lockdep_map+0xa7/0x1c0 [ 324.466629][ C1] __flush_workqueue+0x129/0x1200 [ 324.467956][ C1] ? __mutex_lock+0x1cc/0xa60 [ 324.469198][ C1] ? __pfx___flush_workqueue+0x10/0x10 [ 324.470664][ C1] drain_workqueue+0x18f/0x3d0 [ 324.471944][ C1] hci_dev_close_sync+0x339/0x1250 [ 324.473260][ C1] ? up_write+0x1b2/0x520 [ 324.474404][ C1] ? rcu_is_watching+0x12/0xc0 [ 324.475666][ C1] hci_dev_do_close+0x2e/0x90 [ 324.476913][ C1] hci_unregister_dev+0x213/0x620 [ 324.478246][ C1] ? __pfx_vhci_release+0x10/0x10 [ 324.479564][ C1] vhci_release+0x79/0xf0 [ 324.480708][ C1] __fput+0x3f8/0xb60 [ 324.481787][ C1] task_work_run+0x14e/0x250 [ 324.483004][ C1] ? __pfx_task_work_run+0x10/0x10 [ 324.484353][ C1] do_exit+0xadd/0x2d70 [ 324.485446][ C1] ? do_group_exit+0x1c3/0x2a0 [ 324.486699][ C1] ? __pfx_lock_release+0x10/0x10 [ 324.488018][ C1] ? do_raw_spin_lock+0x12d/0x2c0 [ 324.489333][ C1] ? __pfx_do_exit+0x10/0x10 [ 324.490545][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 324.491966][ C1] do_group_exit+0xd3/0x2a0 [ 324.493159][ C1] __ia32_sys_exit_group+0x3e/0x50 [ 324.494495][ C1] ia32_sys_call+0x1b1c/0x1c20 [ 324.495750][ C1] __do_fast_syscall_32+0x73/0x120 [ 324.497086][ C1] do_fast_syscall_32+0x32/0x80 [ 324.498376][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 324.500028][ C1] RIP: 0023:0xf7f14579 [ 324.501096][ C1] Code: Unable to access opcode bytes at 0xf7f1454f. [ 324.502836][ C1] RSP: 002b:00000000ff86a65c EFLAGS: 00000286 ORIG_RAX: 00000000000000fc [ 324.505024][ C1] RAX: ffffffffffffffda RBX: 0000000000000043 RCX: 00000000ff86a6a8 [ 324.507080][ C1] RDX: 0000000000000000 RSI: 00000000f73a3ff4 RDI: 00000000f719e026 [ 324.509568][ C1] RBP: 00000000f73a3ff4 R08: 0000000000000000 R09: 0000000000000000 [ 324.512350][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 324.515174][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 324.517313][ C1] [ 324.518713][ C1] Kernel Offset: disabled [ 324.519942][ C1] Rebooting in 86400 seconds.. VM DIAGNOSIS: 19:46:18 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffffc90003917b60 RCX=0000000000000000 RDX=0000000000000000 RSI=ffffffff84c8d784 RDI=ffffc90003917b60 RBP=ffffc90003917b20 RSP=ffffc90003917a80 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000000 R13=ffffc90003917b60 R14=ffffc90003917b28 R15=0000000000000000 RIP=ffffffff84c8d7ad RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b400000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002002a000 CR3=000000006df14000 CR4=00352ef0 DR0=0040000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000006e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85141f75 RDI=ffffffff9a6672c0 RBP=ffffffff9a667280 RSP=ffffc900005a0548 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000007 R12=0000000000000000 R13=000000000000006e R14=ffffffff85141f10 R15=0000000000000000 RIP=ffffffff85141f9f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000ff86864c CR3=000000006df14000 CR4=00352ef0 DR0=0040000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000007 RBX=0000000000000000 RCX=ffffffff820767cd RDX=0000000000000000 RSI=0000000000000000 RDI=0000000000000005 RBP=ffff8880410d16a0 RSP=ffffc90003ff7380 R8 =0000000000000000 R9 =ffffed100821a2dd R10=ffff8880410d16ef R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=ffff8880410d16ec R15=dffffc0000000000 RIP=ffffffff81994f70 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f06e40 CR3=000000000db7e000 CR4=00352ef0 DR0=0040000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f73a3ff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000045c83f RBX=0000000000000003 RCX=ffffffff8b1a1819 RDX=0000000000000000 RSI=ffffffff8b4cd180 RDI=ffffffff8bb16ec0 RBP=ffffed10036ed488 RSP=ffffc9000049fe08 R8 =0000000000000001 R9 =ffffed10056e6fed R10=ffff88802b737f6b R11=0000000000000000 R12=0000000000000003 R13=ffff88801b76a440 R14=ffffffff901ce210 R15=0000000000000000 RIP=ffffffff8b1a2bff RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020e20000 CR3=000000007727e000 CR4=00352ef0 DR0=0040000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000004080 Opmask01=0000000000000000 Opmask02=000000000000ffdf Opmask03=0104100080810010 Opmask04=00000000fffffff7 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3762031644e4f738 828843f239d4034e ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0b9afea35c437510 560b7e35ab820319 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 df6e150c9f1877d2 56ed10554252db99 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7ad3f60155c0d115 0ecadec65f3db46f ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 00000000000000b4 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000034 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ea0239b91c22504d a51da8b1abfd982e ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a405d3db95627fcb 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 914b494245560545 9e404d8fe53ca0f4 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f8da89b400000000 6f457905b6267c1c ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c3e41977b87fbae8 3e1f71a2c2d1e358 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a0c2c8b032ef83d a8c3c23427a0f881 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 0000562c6326c600 44455a494c414954 494e495f43455355 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6f742079617272 6120656c75722079 7261726f706d6574 002a3f005b3f2a00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a4a51055c445757 440540495057055c 5744574a55484051 000f1a005b1a0f00 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656565692f30336d 697377682f6d6973 77685f3131323038 63616d2f6c617574 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001e1 0000000038346c6c 696b66722f313379 68702f3131323038 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7f17bf1f40 00007f7f17bf1f40 0000000000000561 0000000000000033 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6667263f3b263e3b 263b3b263a3b263e 2639263b263a6b78 2639383826383838 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692054524f50202c 2064696c61696d20 0070253a20252054 524f504d49005452 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692020520050202c 2025204f504d4900 0061253a20252000 2527204d49005452 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000