last executing test programs: 55.836931061s ago: executing program 1 (id=1123): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000240)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x38, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 55.754273852s ago: executing program 1 (id=1124): keyctl$search(0xa, 0x0, 0x0, 0x0, 0x0) (async) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e24, @multicast1}, 0x10) (async) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)="67d8902400aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db7", 0x2d}, {&(0x7f0000000900)="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", 0x424}], 0x2, 0x0, 0x0, 0x4008000}, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x8031, r0, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) getrlimit(0xf, &(0x7f00000002c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$pppl2tp(r0, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @multicast1}, 0x0, 0x2, 0x0, 0x4}}, 0x26) syz_open_dev$sg(&(0x7f0000000380), 0x4, 0x4200) (async) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) pipe(&(0x7f0000000080)) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) (async) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @local}, 0x20}, 0x1c) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) (async) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r5}, &(0x7f0000000180), &(0x7f00000001c0)) (async) r6 = openat$ptmx(0xffffff9c, &(0x7f0000000080), 0x240, 0x0) ioctl$TIOCSBRK(r6, 0x5427) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) 55.753990446s ago: executing program 1 (id=1125): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r1, 0x0, 0x40000}, 0x18) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r2, &(0x7f0000000300)='1\x00', 0xffffff4a) write$sysctl(r2, &(0x7f00000000c0)='2\x00', 0x2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000ac0)={0x2, &(0x7f0000000a80)=[{0x48}, {0x16}]}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$phonet_pipe(0x23, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, 0x0, 0x0) r7 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7079, 0x0, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x1f, 0x2, 0x4f8, 0xd4, 0x484, 0x1cc, 0x1cc, 0x2b8, 0x568, 0x568, 0x568, 0x568, 0x568, 0x6, 0x0, {[{{@uncond, 0x0, 0xa4, 0xd4}, @common=@inet=@SET2={0x30}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, [], [], 'pim6reg1\x00', 'syzkaller0\x00'}, 0x0, 0xa4, 0xc8}, @HL={0x24}}, {{@uncond, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @remote, [], [], 'veth0_to_bond\x00', 'batadv_slave_0\x00'}, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv4=@multicast1, @ipv6=@local}}}, {{@uncond, 0x0, 0xa4, 0xe4}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "e55e1ce7f055212ed44dfcfb28597e5737f560d3619569f7ef719fa49521"}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x554) 55.084272735s ago: executing program 1 (id=1126): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0xa07, &(0x7f0000000200)={0x0, 0xcc72, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) rename(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000280)='./file0\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x3f00) r5 = dup(r4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000380)=ANY=[@ANYBLOB="700000000009010400000000000000000000000008000540000000000900010073797a30000000003c0002000c00028005000100000000002c000180140003002001000000000000000000000000000214000400fe8000000000000000000000000000aa0c00048008000140000000008bad42ae35b1a8a9528a33d22ffa23c741bfc3bcb84c68319adad88902030b25e8510622e2b2c88d5a846a59"], 0x70}}, 0x0) write$binfmt_script(r4, &(0x7f0000000080)={'#! ', './file0'}, 0xfffffffffffffcf3) ioctl$EXT4_IOC_MOVE_EXT(r5, 0x40305828, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, r7, 0x0, 0x41000004, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$9p_virtio(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x190, &(0x7f00000002c0)=ANY=[@ANYBLOB="7472616e733d7669727449862c0000000081000000000000002c00a8b520bbae5766af18c6b1c43e5050512dee66c6befdeea3a348feb58c177938829b5b0eba631d50b42d60be2f3cd0b85243640f1dd9c63d6ff4a8d88ef03cb0cf8932eb35ac5891c416c1c11e984d2dabd20a8ddb346da9510b1df3"]) syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') 54.644806759s ago: executing program 1 (id=1127): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) rename(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000280)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x3f00) r1 = dup(r0) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0'}, 0xfffffffffffffcf3) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$9p_virtio(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x190, &(0x7f00000002c0)=ANY=[@ANYBLOB="7472616e733d7669727449862c0000000081000000000000002c00a8b520bbae5766af18c6b1c43e5050512dee66c6befdeea3a348feb58c177938829b5b0eba631d50b42d60be2f3cd0b85243640f1dd9c63d6ff4a8d88ef03cb0cf8932eb35ac5891c416c1c11e984d2dabd20a8ddb346da9510b1df3"]) 54.184493902s ago: executing program 1 (id=1129): ioctl$SNDRV_PCM_IOCTL_DRAIN(0xffffffffffffffff, 0x4144, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12, 0x4, 0x424, 0x9}}) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7f, 0x0, &(0x7f0000001180)) socket(0x28, 0x5, 0xffffffff) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="04080401c8000296dea574a42b9aa03eeacf630555d11c553a7dcccfb6eb4523496620a2fe990f60907c222906b85b10170b7cda94f5300600000026fc4a5fa94ea234e9c100000000823ce9547684b9ecebb4189caa928220edc42933e468adf1da092edb7afa761cf79a4c96b9fe298abb1b7d53d9efecf108fcd08df68594751468a93bbc885491920088417c9bb05ad3fc01b4e8bd902d89763953d6d5a8967f34e168a3f3b6e37ef7cfcb0b751c4b2368402f42d974272016a36ba71dc4e9ae7f203b393dc76c9d9f90b90b7100815000e9c7306d6c3e17f790f495263995098f780f0edaaf5d6720b01ae100e3f1ba9b1a656dc49605ce8868df16e15b853326c166ec7a91d33871a94006c3d6f29539f28ae3df5d94e6fa205f33c8"], 0x7) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1ff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc2c45513, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) io_setup(0x3, 0x0) syz_usb_connect(0x5, 0x6a, 0x0, 0x0) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r7, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r7, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 54.167243512s ago: executing program 32 (id=1129): ioctl$SNDRV_PCM_IOCTL_DRAIN(0xffffffffffffffff, 0x4144, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12, 0x4, 0x424, 0x9}}) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7f, 0x0, &(0x7f0000001180)) socket(0x28, 0x5, 0xffffffff) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="04080401c8000296dea574a42b9aa03eeacf630555d11c553a7dcccfb6eb4523496620a2fe990f60907c222906b85b10170b7cda94f5300600000026fc4a5fa94ea234e9c100000000823ce9547684b9ecebb4189caa928220edc42933e468adf1da092edb7afa761cf79a4c96b9fe298abb1b7d53d9efecf108fcd08df68594751468a93bbc885491920088417c9bb05ad3fc01b4e8bd902d89763953d6d5a8967f34e168a3f3b6e37ef7cfcb0b751c4b2368402f42d974272016a36ba71dc4e9ae7f203b393dc76c9d9f90b90b7100815000e9c7306d6c3e17f790f495263995098f780f0edaaf5d6720b01ae100e3f1ba9b1a656dc49605ce8868df16e15b853326c166ec7a91d33871a94006c3d6f29539f28ae3df5d94e6fa205f33c8"], 0x7) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1ff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc2c45513, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) io_setup(0x3, 0x0) syz_usb_connect(0x5, 0x6a, 0x0, 0x0) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r7, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r7, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 42.323644375s ago: executing program 3 (id=1093): r0 = socket$nl_generic(0x10, 0x3, 0x10) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT, @ANYBLOB=',rootmode=0000000000000000040000,user_i', @ANYRESDEC=0x0]) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_open_dev$MSR(0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000008, 0x8010, 0xffffffffffffffff, 0x8000000) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_io_uring_setup(0x1002943, &(0x7f0000001400)={0x0, 0x8b18, 0x2}, &(0x7f0000001480), &(0x7f00000014c0)) r6 = syz_io_uring_setup(0x7540, 0x0, 0x0, &(0x7f0000000200)=0x0) r8 = syz_io_uring_setup(0x34ef, &(0x7f0000000400)={0x0, 0x0, 0x1}, &(0x7f00000003c0)=0x0, &(0x7f0000001480)) syz_io_uring_submit(r9, r7, &(0x7f00000001c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r8, 0x0, 0x0}) io_uring_enter(r6, 0x2003, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private}, 0x1, 0x3c}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe4) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x4010, r1, 0x10000000) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0xffffff1a, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000003c00072301fcffffff00000003"], 0x24}, 0x1, 0x0, 0x0, 0x480c4}, 0xc040) 34.70377148s ago: executing program 3 (id=1093): r0 = socket$nl_generic(0x10, 0x3, 0x10) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT, @ANYBLOB=',rootmode=0000000000000000040000,user_i', @ANYRESDEC=0x0]) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_open_dev$MSR(0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000008, 0x8010, 0xffffffffffffffff, 0x8000000) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_io_uring_setup(0x1002943, &(0x7f0000001400)={0x0, 0x8b18, 0x2}, &(0x7f0000001480), &(0x7f00000014c0)) r6 = syz_io_uring_setup(0x7540, 0x0, 0x0, &(0x7f0000000200)=0x0) r8 = syz_io_uring_setup(0x34ef, &(0x7f0000000400)={0x0, 0x0, 0x1}, &(0x7f00000003c0)=0x0, &(0x7f0000001480)) syz_io_uring_submit(r9, r7, &(0x7f00000001c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r8, 0x0, 0x0}) io_uring_enter(r6, 0x2003, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private}, 0x1, 0x3c}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe4) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x4010, r1, 0x10000000) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0xffffff1a, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000003c00072301fcffffff00000003"], 0x24}, 0x1, 0x0, 0x0, 0x480c4}, 0xc040) 28.528530814s ago: executing program 0 (id=1289): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61123400000000006113500000000000bf200000000000001500000008ffffffbd0301000000000095000000000000006916323000000000bf67000000000000a406000007ff07006706000002000000070600000ee60000bf050000000000002e650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d4301000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9755ba08554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a6538b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c51231422bb8fab4d4d897db2c544c0ec50b8eac8c63d2b1cd06a39702bd547f5ebaa6954f01cef3c9bacec15e2e3b2bd352e93a2aadfe8efe33ff2f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564b8f8a621483fb2a5ff221e0d831d64759d17b8c59d0f2b0727f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d54574164bbea3e7b7f8a13cce7014137f250370b8a70ae3eaf736f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf4b1be6f29358d4f5dfec405bde000000000000000000000000000000902e647cc5962eccaad64429335f3ce2a10ce72da82875427c1d16db24dca08487ba41a3fb337f8432d8176a515229e32ee11a1dd23dac038f989eafdd67f60b63f7be4d1bf325b57335b9973c73bfa89517a98b1fc15f8a2713718feb01059d8b570a0000e3b2a93bd745a74f9bf7f7abc5d15d56331055cc0820c5c9d676d92557c4e47cfbe27f91f0eb18e21dfdab3c84ec11377fbbfd1e000000000000b542a536559eed87b58edcfee83a50077ee0e8fb6e787cb3076dfeeb79f55927fef9651e176b40e64740a01944577caea4ceb9e907cec36a8429445c833b9d24d53dc91f15af1f4a1db9fa452fa3f0b812355aab5b58659ffd56034fdbb169f3e86660acdc65dc699d3e6364a80f45e54d6efcb99b41a080494f842706f3c1716d2e252bf89663393356296d89fbf95aa7966fa700b710008311d6f25e05f77d68799e671d90cb04131742790941d83ffdfa857e9e085a59a78e7a17f008ce55866fcc4de388f270a1ba675f43481bd2"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 28.473738704s ago: executing program 0 (id=1291): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00'}, 0x10) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000000000000000000000000200", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 28.414219776s ago: executing program 0 (id=1292): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x102080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS2(r1, 0x4068aea3, &(0x7f0000000000)={0xd5, 0x0, 0x1b}) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000000)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000140)=ANY=[@ANYBLOB="090000000000000001"]) 28.100843402s ago: executing program 0 (id=1293): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0xa07, &(0x7f0000000200)={0x0, 0xcc72, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) rename(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000280)='./file0\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x3f00) r5 = dup(r4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000380)=ANY=[@ANYBLOB="700000000009010400000000000000000000000008000540000000000900010073797a30000000003c0002000c00028005000100000000002c000180140003002001000000000000000000000000000214000400fe8000000000000000000000000000aa0c00048008000140000000008bad42ae35b1a8a9528a33d22ffa23c741bfc3bcb84c68319adad88902030b25e8510622e2b2c88d5a846a59"], 0x70}}, 0x0) write$binfmt_script(r4, &(0x7f0000000080)={'#! ', './file0'}, 0xfffffffffffffcf3) ioctl$EXT4_IOC_MOVE_EXT(r5, 0x40305828, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, r7, 0x0, 0x41000004, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r8, &(0x7f0000001b80)=""/4084, 0xff4, 0x0) 28.002520216s ago: executing program 4 (id=1294): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0xa07, &(0x7f0000000200)={0x0, 0xcc72, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) rename(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000280)='./file0\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x3f00) r5 = dup(r4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000380)=ANY=[@ANYBLOB="700000000009010400000000000000000000000008000540000000000900010073797a30000000003c0002000c00028005000100000000002c000180140003002001000000000000000000000000000214000400fe8000000000000000000000000000aa0c00048008000140000000008bad42ae35b1a8a9528a33d22ffa23c741bfc3bcb84c68319adad88902030b25e8510622e2b2c88d5a846a59"], 0x70}}, 0x0) write$binfmt_script(r4, &(0x7f0000000080)={'#! ', './file0'}, 0xfffffffffffffcf3) ioctl$EXT4_IOC_MOVE_EXT(r5, 0x40305828, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, r7, 0x0, 0x41000004, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r8, &(0x7f0000001b80)=""/4084, 0xff4, 0x0) 27.724375546s ago: executing program 0 (id=1295): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000000000000100000408000000000000000200000020000000000000000000000f03"], 0x0, 0x4a, 0x0, 0xffffff, 0x0, 0x0, @void, @value}, 0x28) 27.683290097s ago: executing program 3 (id=1093): r0 = socket$nl_generic(0x10, 0x3, 0x10) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT, @ANYBLOB=',rootmode=0000000000000000040000,user_i', @ANYRESDEC=0x0]) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_open_dev$MSR(0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000008, 0x8010, 0xffffffffffffffff, 0x8000000) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_io_uring_setup(0x1002943, &(0x7f0000001400)={0x0, 0x8b18, 0x2}, &(0x7f0000001480), &(0x7f00000014c0)) r6 = syz_io_uring_setup(0x7540, 0x0, 0x0, &(0x7f0000000200)=0x0) r8 = syz_io_uring_setup(0x34ef, &(0x7f0000000400)={0x0, 0x0, 0x1}, &(0x7f00000003c0)=0x0, &(0x7f0000001480)) syz_io_uring_submit(r9, r7, &(0x7f00000001c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r8, 0x0, 0x0}) io_uring_enter(r6, 0x2003, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private}, 0x1, 0x3c}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe4) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x4010, r1, 0x10000000) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0xffffff1a, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000003c00072301fcffffff00000003"], 0x24}, 0x1, 0x0, 0x0, 0x480c4}, 0xc040) 27.340005331s ago: executing program 0 (id=1296): fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000808000000000000000000850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x4f) syz_open_dev$tty1(0xc, 0x4, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x50009404, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002dbd7000fbdbdf255e00000008000300", @ANYRES32=r3, @ANYBLOB="bd6278105bd08fb11baa8e1c21e07051e4e97ea26eac764ed2351cc643c808735b59a2ded711fa01226a06c3565deccc59896ec2a69039a7f7abc70895d0795e"], 0x1c}}, 0x40000) 27.33979047s ago: executing program 33 (id=1296): fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000808000000000000000000850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x4f) syz_open_dev$tty1(0xc, 0x4, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x50009404, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002dbd7000fbdbdf255e00000008000300", @ANYRES32=r3, @ANYBLOB="bd6278105bd08fb11baa8e1c21e07051e4e97ea26eac764ed2351cc643c808735b59a2ded711fa01226a06c3565deccc59896ec2a69039a7f7abc70895d0795e"], 0x1c}}, 0x40000) 27.325815832s ago: executing program 4 (id=1297): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x403}, 0x20}, 0x1, 0x2000000000000000}, 0x0) r2 = openat$autofs(0xffffff9c, &(0x7f0000000180), 0x8000, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='\x00', 0x0, 0x800000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r3, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) 27.234138782s ago: executing program 4 (id=1299): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newtaction={0xec, 0x30, 0x1, 0x0, 0x0, {}, [{0xd8, 0x1, [@m_ct={0x8c, 0x2, 0x0, 0x0, {{0x7}, {0x64, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @mcast2}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @remote}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e21}, @TCA_CT_LABELS={0x14, 0x7, "6fbc60e3409551c67f0b80edc831e1cf"}, @TCA_CT_LABELS={0x14, 0x7, "4641235c488b05a36ac4213509ad156e"}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x3e}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x50007a2) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000000)='.\x00', 0x400017e) fcntl$notify(r2, 0x402, 0x25) close_range(r0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="07000000040000000025008040"], 0x48) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r7 = syz_open_dev$tty1(0xc, 0x4, 0x3) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) 27.02310623s ago: executing program 4 (id=1303): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0xa07, &(0x7f0000000200)={0x0, 0xcc72, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) rename(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000280)='./file0\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x3f00) r5 = dup(r4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000380)=ANY=[@ANYBLOB="700000000009010400000000000000000000000008000540000000000900010073797a30000000003c0002000c00028005000100000000002c000180140003002001000000000000000000000000000214000400fe8000000000000000000000000000aa0c00048008000140000000008bad42ae35b1a8a9528a33d22ffa23c741bfc3bcb84c68319adad88902030b25e8510622e2b2c88d5a846a59"], 0x70}}, 0x0) write$binfmt_script(r4, &(0x7f0000000080)={'#! ', './file0'}, 0xfffffffffffffcf3) ioctl$EXT4_IOC_MOVE_EXT(r5, 0x40305828, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, r7, 0x0, 0x41000004, 0x0) mount$9p_virtio(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x190, &(0x7f00000002c0)=ANY=[@ANYBLOB="7472616e733d7669727449862c0000000081000000000000002c00a8b520bbae5766af18c6b1c43e5050512dee66c6befdeea3a348feb58c177938829b5b0eba631d50b42d60be2f3cd0b85243640f1dd9c63d6ff4a8d88ef03cb0cf8932eb35ac5891c416c1c11e984d2dabd20a8ddb346da9510b1df3"]) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r8, &(0x7f0000001b80)=""/4084, 0xff4, 0x0) 26.657583326s ago: executing program 4 (id=1305): socket(0x10, 0x803, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x15, 0x5, 0x0) recvfrom$ax25(r1, 0x0, 0x0, 0x105, &(0x7f0000001c00)={{0x3, @default}, [@bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x20000000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) 26.244169326s ago: executing program 4 (id=1306): sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="10002dbd7000fcdbdf250a00ffff08000300070000003891299a577cf573205d5726bcf7329932c54f8cc87edc78e25f9283a7b804bdba0dd671140f6b2929f110e2b2f86b07e14edec7b89aa5f33fbb79a439b7d6bb5f849d559eee79988b65158eae25ae8daf66e91d5fb39a9b356ee3943acda3aa037fa6fa6795f850a1c1b5eaa0cf0ccdbf91f2"], 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40) creat(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0x0, 0xb, 0x101, 0x0, 0x0, {}, [@NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0x11, 0x1, '/proc/mdstat\x00'}, @NFTA_COMPAT_REV={0x8}]}, 0x38}}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r1) write$P9_RLERRORu(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='S\x00\x00\x00\a\x00\x00F\x00'], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) 26.216533058s ago: executing program 34 (id=1306): sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="10002dbd7000fcdbdf250a00ffff08000300070000003891299a577cf573205d5726bcf7329932c54f8cc87edc78e25f9283a7b804bdba0dd671140f6b2929f110e2b2f86b07e14edec7b89aa5f33fbb79a439b7d6bb5f849d559eee79988b65158eae25ae8daf66e91d5fb39a9b356ee3943acda3aa037fa6fa6795f850a1c1b5eaa0cf0ccdbf91f2"], 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40) creat(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0x0, 0xb, 0x101, 0x0, 0x0, {}, [@NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0x11, 0x1, '/proc/mdstat\x00'}, @NFTA_COMPAT_REV={0x8}]}, 0x38}}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r1) write$P9_RLERRORu(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='S\x00\x00\x00\a\x00\x00F\x00'], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) 25.0841173s ago: executing program 2 (id=1309): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000000000000000086d0ee52b1be875a8622b000000000f35ed57d5fdc760fa4bde3cac7cf5c410082b0cfc44bf965941538bec9000000000000000000007400a391793ba7f400000000a4fdf74e29bd0c1e29cc88fef9de4753b0fab517a9e00cfc5b90645761199dee5b177e8312291b5769eb0c081ee67a8e7f5b469689b6ee8b451b17b1ba66ea72c97234b7b868177824f8d297bf6cbb846af29ad4"], 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index=0x8, 0x57, 0x20000000, 0x2, 0x0, 0x1, {0x1}}) r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8002) r5 = fcntl$dupfd(r1, 0x0, r4) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5393, &(0x7f0000000000)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000100)=0xcc7) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000080)=r7) r8 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x40, 0x2) dup2(r6, r8) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000940)) 24.572893159s ago: executing program 2 (id=1310): socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x5, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/stat\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) sendfile(r4, r3, 0x0, 0x180000504) 24.572448585s ago: executing program 2 (id=1311): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) r0 = socket$inet6(0xa, 0x4, 0x10022) setsockopt$inet6_int(r0, 0x29, 0x49, &(0x7f0000000180), 0x4) socket$can_bcm(0x1d, 0x2, 0x2) (async) r1 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r1, &(0x7f0000001880)={&(0x7f00000000c0)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000001700)=[{&(0x7f0000000140)}, {&(0x7f0000000300)=""/202, 0xca}, {&(0x7f00000001c0)=""/47, 0x2f}, {&(0x7f0000000200)=""/44, 0x2c}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/163, 0xa3}, {&(0x7f00000014c0)=""/119, 0x77}, {&(0x7f0000001540)=""/134, 0x86}, {&(0x7f0000000240)=""/53, 0x35}, {&(0x7f0000001600)=""/252, 0xfc}], 0xa, &(0x7f0000001780)=""/193, 0xc1}, 0x40010002) (async) recvmsg$can_bcm(r1, &(0x7f0000001880)={&(0x7f00000000c0)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000001700)=[{&(0x7f0000000140)}, {&(0x7f0000000300)=""/202, 0xca}, {&(0x7f00000001c0)=""/47, 0x2f}, {&(0x7f0000000200)=""/44, 0x2c}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/163, 0xa3}, {&(0x7f00000014c0)=""/119, 0x77}, {&(0x7f0000001540)=""/134, 0x86}, {&(0x7f0000000240)=""/53, 0x35}, {&(0x7f0000001600)=""/252, 0xfc}], 0xa, &(0x7f0000001780)=""/193, 0xc1}, 0x40010002) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}}) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53048c4) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x9801) r3 = openat$dlm_control(0xffffff9c, &(0x7f0000000040), 0x4140, 0x0) fchdir(r3) umount2(&(0x7f00000002c0)='./file0\x00', 0x7) (async) umount2(&(0x7f00000002c0)='./file0\x00', 0x7) 24.444290877s ago: executing program 2 (id=1312): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0xa07, &(0x7f0000000200)={0x0, 0xcc72, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) rename(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000280)='./file0\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x3f00) r5 = dup(r4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000380)=ANY=[@ANYBLOB="700000000009010400000000000000000000000008000540000000000900010073797a30000000003c0002000c00028005000100000000002c000180140003002001000000000000000000000000000214000400fe8000000000000000000000000000aa0c00048008000140000000008bad42ae35b1a8a9528a33d22ffa23c741bfc3bcb84c68319adad88902030b25e8510622e2b2c88d5a846a59"], 0x70}}, 0x0) write$binfmt_script(r4, &(0x7f0000000080)={'#! ', './file0'}, 0xfffffffffffffcf3) ioctl$EXT4_IOC_MOVE_EXT(r5, 0x40305828, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, r7, 0x0, 0x41000004, 0x0) mount$9p_virtio(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x190, &(0x7f00000002c0)=ANY=[@ANYBLOB="7472616e733d7669727449862c0000000081000000000000002c00a8b520bbae5766af18c6b1c43e5050512dee66c6befdeea3a348feb58c177938829b5b0eba631d50b42d60be2f3cd0b85243640f1dd9c63d6ff4a8d88ef03cb0cf8932eb35ac5891c416c1c11e984d2dabd20a8ddb346da9510b1df3"]) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r8, &(0x7f0000001b80)=""/4084, 0xff4, 0x0) 24.124265051s ago: executing program 2 (id=1313): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/74, 0x32a000, 0x800}, 0x20) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000004140)=[{0x8dffffff, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)="14", 0x1}, {&(0x7f0000000280)="3b942cdf3dbb4d708446209c8a7a9893c711167b6aee1ac4a8cc59d92a394f460b20f21b9add9e84d2dba9e6df8034c449e64138a4aea2a8df6d35031bd3263f", 0x40}], 0x2, 0x0, 0x0, 0xd0}], 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 23.014617079s ago: executing program 2 (id=1316): openat$kvm(0xffffff9c, &(0x7f0000000040), 0xa441, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00400008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) 23.008004488s ago: executing program 35 (id=1316): openat$kvm(0xffffff9c, &(0x7f0000000040), 0xa441, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00400008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) 20.660666747s ago: executing program 3 (id=1093): r0 = socket$nl_generic(0x10, 0x3, 0x10) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT, @ANYBLOB=',rootmode=0000000000000000040000,user_i', @ANYRESDEC=0x0]) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_open_dev$MSR(0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000008, 0x8010, 0xffffffffffffffff, 0x8000000) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_io_uring_setup(0x1002943, &(0x7f0000001400)={0x0, 0x8b18, 0x2}, &(0x7f0000001480), &(0x7f00000014c0)) r6 = syz_io_uring_setup(0x7540, 0x0, 0x0, &(0x7f0000000200)=0x0) r8 = syz_io_uring_setup(0x34ef, &(0x7f0000000400)={0x0, 0x0, 0x1}, &(0x7f00000003c0)=0x0, &(0x7f0000001480)) syz_io_uring_submit(r9, r7, &(0x7f00000001c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r8, 0x0, 0x0}) io_uring_enter(r6, 0x2003, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private}, 0x1, 0x3c}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe4) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x4010, r1, 0x10000000) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0xffffff1a, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000003c00072301fcffffff00000003"], 0x24}, 0x1, 0x0, 0x0, 0x480c4}, 0xc040) 11.739819141s ago: executing program 3 (id=1093): r0 = socket$nl_generic(0x10, 0x3, 0x10) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT, @ANYBLOB=',rootmode=0000000000000000040000,user_i', @ANYRESDEC=0x0]) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_open_dev$MSR(0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000008, 0x8010, 0xffffffffffffffff, 0x8000000) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_io_uring_setup(0x1002943, &(0x7f0000001400)={0x0, 0x8b18, 0x2}, &(0x7f0000001480), &(0x7f00000014c0)) r6 = syz_io_uring_setup(0x7540, 0x0, 0x0, &(0x7f0000000200)=0x0) r8 = syz_io_uring_setup(0x34ef, &(0x7f0000000400)={0x0, 0x0, 0x1}, &(0x7f00000003c0)=0x0, &(0x7f0000001480)) syz_io_uring_submit(r9, r7, &(0x7f00000001c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r8, 0x0, 0x0}) io_uring_enter(r6, 0x2003, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private}, 0x1, 0x3c}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe4) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x4010, r1, 0x10000000) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0xffffff1a, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000003c00072301fcffffff00000003"], 0x24}, 0x1, 0x0, 0x0, 0x480c4}, 0xc040) 5.169350252s ago: executing program 6 (id=1383): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000240)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8040000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 5.108335327s ago: executing program 6 (id=1384): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$pppoe(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x0, {0x0, @local, 'bond_slave_0\x00'}}, 0x1e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) timer_create(0x2, &(0x7f0000000000)={0x0, 0x29, 0x1, @thr={0x0, &(0x7f0000000a40)="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"}}, &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) writev(r2, &(0x7f0000000800)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b4", 0x9}, {0x0}], 0x2) r3 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x9772, 0x1000, 0x1}, &(0x7f0000000100), &(0x7f0000000280)) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) io_uring_enter(r3, 0x6b4d, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) gettid() mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100fcffffff0007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f00800", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xd7, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x6f, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x2, &(0x7f0000000000)=@raw=[@generic={0x1, 0x8, 0x8, 0x7f, 0x5}, @call={0x85, 0x0, 0x0, 0xf}], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5}, 0x0, &(0x7f00000000c0)}, 0x1c) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000001400)={0x0, 0xc182, 0x9, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000001800)={0x0, 0xda3b, 0x6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r5, 0xc400941d, &(0x7f0000001c00)={0x0, 0x5, 0x8}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002000)={0x0, 0xe5a7c63b00761233, {0x8, @struct={0x4, 0x437}, r7, 0x5, 0x4, 0x2d, 0x1, 0x8000000000000001, 0xa, @struct={0x6, 0x18}, 0x839, 0x8, [0x2af, 0x4, 0x2, 0x800, 0x401, 0x1d8e]}, {0x3ff, @struct={0x8, 0x570e67d3}, r8, 0x7, 0x0, 0x1f2, 0x2, 0x1, 0x80, @usage=0x10000000000000, 0x0, 0x3, [0x3, 0x67, 0x4, 0xfffffffffffffffb, 0x3, 0x3]}, {0x5f, @usage=0xc, r9, 0x3, 0xffff, 0x8, 0x5, 0x1ff, 0x440, @struct={0x2}, 0x7, 0x5, [0xffffffffffffff81, 0xa120, 0x7, 0x7, 0x6, 0xffffffffffffffff]}, {0x401, 0x0, 0x100}}) 5.107978213s ago: executing program 3 (id=1093): r0 = socket$nl_generic(0x10, 0x3, 0x10) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT, @ANYBLOB=',rootmode=0000000000000000040000,user_i', @ANYRESDEC=0x0]) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_open_dev$MSR(0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000008, 0x8010, 0xffffffffffffffff, 0x8000000) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_io_uring_setup(0x1002943, &(0x7f0000001400)={0x0, 0x8b18, 0x2}, &(0x7f0000001480), &(0x7f00000014c0)) r6 = syz_io_uring_setup(0x7540, 0x0, 0x0, &(0x7f0000000200)=0x0) r8 = syz_io_uring_setup(0x34ef, &(0x7f0000000400)={0x0, 0x0, 0x1}, &(0x7f00000003c0)=0x0, &(0x7f0000001480)) syz_io_uring_submit(r9, r7, &(0x7f00000001c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r8, 0x0, 0x0}) io_uring_enter(r6, 0x2003, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private}, 0x1, 0x3c}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe4) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x4010, r1, 0x10000000) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0xffffff1a, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000003c00072301fcffffff00000003"], 0x24}, 0x1, 0x0, 0x0, 0x480c4}, 0xc040) 4.112805797s ago: executing program 6 (id=1386): ioctl$SNDRV_PCM_IOCTL_DRAIN(0xffffffffffffffff, 0x4144, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12, 0x4, 0x424, 0x9}}) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7f, 0x0, &(0x7f0000001180)) socket(0x28, 0x5, 0xffffffff) syz_emit_vhci(&(0x7f00000005c0)=ANY=[], 0x7) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1ff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc2c45513, &(0x7f0000000040)={{0x2, 0x8, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x2, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x8000000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) io_setup(0x3, 0x0) syz_usb_connect(0x5, 0x6a, 0x0, 0x0) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r7, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r7, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 2.102496462s ago: executing program 7 (id=1396): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0186415, &(0x7f0000000040)={&(0x7f00007ff000/0x800000)=nil, 0x400, 0x0, 0x5e}) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r4, 0xff, 0x7, &(0x7f0000000000)="fa794bfa", 0x4) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$int_in(r3, 0x5421, &(0x7f0000000180)=0x1) sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(0x3) pread64(r1, &(0x7f0000001600)=""/4102, 0x1006, 0x4b) 1.952566256s ago: executing program 7 (id=1397): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="14010000330001fff00000000000000003"], 0x114}], 0x1}, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x3cb041) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0x1) r4 = syz_io_uring_setup(0x23c, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0xfffffffd, 0x0, 0x0, r3}, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0xffffffffffff8000, 0x0) (async) shutdown(r1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$netlink(0x10, 0x3, 0x15) (async) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev={0xac, 0x14, 0x14, 0x12}, 0x0, 0x0, 'dh\x00'}, 0x2c) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}}, 0x0) (async) r7 = syz_open_dev$sndpcmc(&(0x7f0000001800), 0x1, 0x20080) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000a40)=ANY=[@ANYBLOB="f00200001000000429bd7000fbdbdf25070000000700f000646800006a00d980c85db455de7262f81f8362f26d3402458bd69e66246eed22e076f931b5dd4e7161547de2d8b443b6351f6b14083900fc02000000000000000000000000000004008780040031800c0068006e6c38303231310008008400db9c7034b4d72d197261fdeac0eecd4d169d71e7c2516fb306e9a79b838d8a78f9c95800c152a99fcbb17ca651d210cfde7ae85fe286e179649b495f62006de340db0575346cddc8499a9274caa2a92f9f5d2b10e97e83c4f4928e36efcb5957016f33a5204bf643346304ac76032455b240b85f42c798e3a7a958784000"/255, @ANYRES32=0x0, @ANYBLOB="00000800f700ac1414aa58014d8005e6abf36d44409f002e71749dd6406be477fb5627309455fe1781fe6bfa3192804c83c263d243e707df746a9cddf55c176ca1aa1ed4f1e94cb0d5666fb8efa14d6776756b994c1e63f7b8a48f5855e1259cda6a1999f2aa66a1039f530f70cd41ff323b5af1f4d4bfead1fcce892baa61f8f6fafec1eebb7c7c16dd0e4ba4b485b28632ec2a2f4015654252c494ddcaf8063c307552e802d4760d568ebacb243dd496e0bf321c1b39fa9e31f7bd37cd2e4ad2980ed50c9037213a3e83dad6a9792a2e9e40daa57246310db65491696c6dc5472840534ccb7bcf8d7eb0ea203a4b4db396be625322df6aa0ee223595f3be1ff4eb166a9f52bb2785c585d78480c56019ef6e34b68df8634c74d3e66607955e3e059250935d1ce8ba04029dd17b2834b4fcfaca475389e2b43bcf910917114279a0dc4afa13c4f363db45c582d4e04f2d769a6b16bd13a40cc52d2d397ab197fa99ab8dfd6169966c301170ee57f0230b91b4cad3c1d973664b315884b1f651e7f73ed97638bfcb419a70523e5c9f20e3fc921969bfba64dca0adec97a7eef5125fa2513f12c1c6aed7fdf106c9b0288af9e30aeac582f62f7224fadf0fc0d51aca2bd7a0f1bec5d06b9d5c02beff898dabbe1f83d263a21d0c3414edc49ce6fdeca2ea12c206faebdd590ecdbaeadc9e4d45a4e3b12c046e2a83ca74f9e8313135fa05fd5e9740c6c946eadb3a9e23521b0b6cf2bfe72189539c150f21d5bedeee11d598e0cd0e556178564053546c802049fed240e1fd61b64d28b4188ab7b99a727a1ab1c66c0ebd9f6d9dcb5a919e9d2c66864c3207ace78458a73c08008100ffffffff04002c00"], 0x2f0}, 0x1, 0x0, 0x0, 0x81}, 0x44) (async) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r7, 0xc0884123, &(0x7f0000001840)={0x1, "3dba1ae023b40a2f8fc6fe5cef4c0ac9d94581e617e2bf8279933b9ea1cc1ef986462fdf92b30f220382b2dbefa52971af1bf19862302bb2fbf48a9c3cdb2e38", {0x77c4, 0x5}}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r8 = syz_io_uring_setup(0x1111, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x8, 0x0, 0x7, 0x0, 0x0}) io_uring_enter(r8, 0x47fa, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000001002000000000000001b000025004b0013000000"], 0x18}}, 0x0) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE(r8, 0x18, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff]}, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 1.89169807s ago: executing program 7 (id=1399): sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000380)={0x0, 0x80000}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) keyctl$chown(0x4, 0x0, 0xee00, 0x0) keyctl$setperm(0x5, 0x0, 0x1100100) fsmount(0xffffffffffffffff, 0x0, 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0xffffff9e, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x18000000, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x74, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x4, 0x6, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x480}}}]}]}]}]}], {0x14, 0x10}}, 0xe4}}, 0x0) 1.783638493s ago: executing program 5 (id=1400): r0 = socket(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_ct={0x90, 0xf, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9, 0x11e41e7a, 0x5, 0xfffffffc, 0xf}}]}, {0x4f, 0x6, "dba929b2697c30c108770253b966f48af3296ca7055f3dd4a88ff3b724aaeb39d135374994db4fee038567fbec5f440df4c360b1c83659e0d081b650e7cc1813ad5575138192d88b4e9cf5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0) open_by_handle_at(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="0c0000000100010004"], 0x408100) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000008fb7600caf48a858909de57ebbe010000786c6c2508000000002020207b1af8ff0000000000f8ffffffb7020067b0000000b703000000000000856232d2eb8b50e976f60000002d000000950000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) connect$vsock_stream(r0, &(0x7f0000000280)={0x28, 0x0, 0xffffffff}, 0x10) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r9, 0x0, 0x218, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 1.493857465s ago: executing program 6 (id=1401): unshare(0x62040200) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x4}, @NL80211_ATTR_AKM_SUITES={0x4}]]}, 0x30}}, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) shutdown(r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) sendmmsg$inet(r6, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r7, 0x0, 0x40, &(0x7f0000000100)={'filter\x00', 0x7003, [0x4a5, 0x4004000b, 0x80000000, 0x207, 0x804009]}, &(0x7f0000000040)=0x54) 973.837615ms ago: executing program 7 (id=1402): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mkdir(&(0x7f0000000280)='./file0\x00', 0x2) chdir(&(0x7f0000000280)='./file0\x00') sendmmsg(r0, &(0x7f00000007c0)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e24, @loopback}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000040)='`', 0x1}], 0x1}}], 0x1, 0x2c000011) sendto(r0, &(0x7f00000002c0)="b0bf", 0xfffffffffffffd0c, 0x4040814, 0x0, 0x0) 890.943051ms ago: executing program 7 (id=1403): socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x5, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/stat\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) sendfile(r4, r3, 0x0, 0x180000504) 382.997685ms ago: executing program 5 (id=1404): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20], 0x20}}, 0x0) 243.658419ms ago: executing program 5 (id=1405): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) 83.889358ms ago: executing program 5 (id=1406): r0 = socket(0x200000000000011, 0x2, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) 83.55905ms ago: executing program 5 (id=1407): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00'}, 0x10) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000ffffffff00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 77.046645ms ago: executing program 6 (id=1408): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001680)=@newsa={0x144, 0x10, 0x713, 0x0, 0x0, {{@in, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@local, 0x0, 0x32}, @in=@empty, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @offload={0xc, 0x1c, {0x0, 0x38224007eaa0d79c}}]}, 0x144}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 29.407011ms ago: executing program 5 (id=1409): ioctl$SNDRV_PCM_IOCTL_DRAIN(0xffffffffffffffff, 0x4144, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12, 0x4, 0x424, 0x9}}) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7f, 0x0, &(0x7f0000001180)) socket(0x28, 0x5, 0xffffffff) syz_emit_vhci(&(0x7f00000005c0)=ANY=[], 0x7) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1ff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc2c45513, &(0x7f0000000040)={{0x2, 0x8, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x2, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x8000000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) io_setup(0x3, 0x0) syz_usb_connect(0x5, 0x6a, 0x0, 0x0) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r7, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r7, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 474.956µs ago: executing program 7 (id=1410): syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0xf4, 0xf4, 0x0, 0xffffffff, 0xffffffff, 0x2cc, 0x2cc, 0x2cc, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@ip={@dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010100, 0xffffff00, 0x0, 'batadv0\x00', 'veth1_virt_wifi\x00', {}, {}, 0x5e, 0x1, 0x1}, 0x0, 0xd0, 0xf4, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x0, 0x5, 0x9, 0x1, 0x1, 0x2], 0x2}}}, @common=@socket0={{0x20}}]}, @common=@inet=@TCPMSS={0x24}}, {{@ip={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffff7f, 0xffffff00, 'netdevsim0\x00', 'batadv_slave_0\x00', {}, {}, 0x5c, 0x2, 0x22}, 0x0, 0xb0, 0x10c, 0x0, {}, [@common=@set={{0x40}, {{0xffffffffffffffff, [0x2, 0x0, 0x0, 0x6, 0x6, 0x4], 0x5, 0x1}}}]}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x1, @broadcast, 0x8, 0x5, [0x1b, 0x9, 0x2d, 0x35, 0x26, 0x21, 0x3a, 0x18, 0x31, 0x7, 0x28, 0xc, 0x3, 0x1a, 0x8, 0x2c], 0x2, 0x5, 0x1}}}, {{@uncond, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0x7, 0x2, [0x7, 0x18, 0x35, 0xe, 0x3, 0x30, 0x1e, 0x2a, 0x33, 0x13, 0x15, 0x22, 0x1c, 0x6, 0x35, 0x35], 0x1, 0x1000, 0xc0}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x3bc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) tkill(r1, 0x2c) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7ff, 0x81, 0xd, 0x4005, 0x2}) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x3, 0x4, 0x3fc, 0x0, 0x32}, 0x9c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r6, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="740000000a0a0101000000eaffffff00020000080c0010400000030800064000000000080007400000003a08000440000000020900020073797a3000000000300011800d00010073796e70726f7879400000001c000280060001400001000005000200ff000000050002000a000000"], 0x74}, 0x1, 0x0, 0x0, 0x4010}, 0x200000d0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$sock_int(r2, 0x1, 0x1d, &(0x7f0000000100)=0xffffffff, 0x4) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 0s ago: executing program 6 (id=1411): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000790000000000000018110000096e54b6086eb45d18d85263b1a9618fb508c9e354a0d404adb77f888f3ab569e87ccf6a9f2080fb30427fcfc8995e7307ee5d06b8c2ee3ea2a7c2c81e8e889626cfa36158b2d6e6d15ed51079363bdf5287667f26841727e14bd0b82086b51ae611fd22da72e4f62587e6060accd5756b736e8b536f66da5a2ebcac8f46e86aeb4e882f983b10cbe6146bd50fc0b784f67056db1100c0d2ad11952f58f9ad8bdcbf1d9d0b23f98cc75bc9fe22764ac965bd9591685595472060bab4253112d8c7e7df1eb1f9c72bb6909cc4948ca4149f078813db4da4fabca8670a2f5bd6ec", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CHANGE_FD(r1, 0x80041285, r1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) msgget(0x2, 0x624) msgsnd(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02"], 0x2000, 0x0) msgctl$IPC_RMID(0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100001041fea19cd198925533597d8eb", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000000)={{0x5, 0xfffffffc}, {0x7}, 0xfffffffd, 0x7}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) r9 = socket$unix(0x1, 0x2, 0x0) bind$unix(r9, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$unix(0x1, 0x2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r2, 0x9362, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000680)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f00000012c0)={r10, "716316c9bb72d78fad565fa4a36b0f9f"}) recvmmsg(r9, &(0x7f0000005100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000050c0)}, 0xb}], 0x5562404a00a6b253, 0x1000000000be, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x50, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x1c, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0xfffffffc}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x1}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x5}]}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002500)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x2, 0x8}}}]}]}]}}]}, 0x54}}, 0x0) kernel console output (not intermixed with test programs): 0xf70de579 code=0x7ffc0000 [ 252.682747][T10232] loop2: detected capacity change from 0 to 7 [ 252.684832][T10232] Dev loop2: unable to read RDB block 7 [ 252.686511][T10232] loop2: AHDI p1 [ 252.689130][T10232] loop2: partition table partially beyond EOD, truncated [ 253.085144][ T5957] Bluetooth: hci0: command tx timeout [ 253.815114][T10235] lo speed is unknown, defaulting to 1000 [ 253.888435][ T216] bridge_slave_1: left allmulticast mode [ 253.890093][ T216] bridge_slave_1: left promiscuous mode [ 253.892069][ T216] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.895807][ T216] bridge_slave_0: left allmulticast mode [ 253.897501][ T216] bridge_slave_0: left promiscuous mode [ 253.899170][ T216] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.178235][ T216] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.187178][ T216] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.192532][ T216] bond0 (unregistering): Released all slaves [ 254.195420][T10251] netlink: 'syz.1.1126': attribute type 2 has an invalid length. [ 254.197775][T10251] netlink: 'syz.1.1126': attribute type 1 has an invalid length. [ 254.391867][T10250] 9pnet: Could not find request transport: virtI† [ 254.626942][ T216] hsr_slave_0: left promiscuous mode [ 254.629039][ T216] hsr_slave_1: left promiscuous mode [ 254.630995][ T216] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.633190][ T216] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.635851][ T216] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.638015][ T216] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.683079][ T216] veth1_macvtap: left promiscuous mode [ 254.691020][ T216] veth0_macvtap: left promiscuous mode [ 254.692677][ T216] veth1_vlan: left promiscuous mode [ 254.694198][ T216] veth0_vlan: left promiscuous mode [ 255.028855][ T5954] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 255.053932][ T5954] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 255.060489][ T5954] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 255.075573][ T5954] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 255.090154][ T5954] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 255.094767][ T5954] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 255.161791][ T5954] Bluetooth: hci0: command tx timeout [ 255.352121][ T216] team0 (unregistering): Port device team_slave_1 removed [ 255.431057][ T216] team0 (unregistering): Port device team_slave_0 removed [ 255.993302][T10271] lo speed is unknown, defaulting to 1000 [ 256.071082][T10271] chnl_net:caif_netlink_parms(): no params data found [ 256.074349][T10216] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 256.079741][T10216] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 256.086035][T10216] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 256.095721][T10216] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 256.140130][T10271] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.143456][T10271] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.146427][T10271] bridge_slave_0: entered allmulticast mode [ 256.149647][T10271] bridge_slave_0: entered promiscuous mode [ 256.155213][T10271] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.157424][T10271] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.159694][T10271] bridge_slave_1: entered allmulticast mode [ 256.170461][T10271] bridge_slave_1: entered promiscuous mode [ 256.196991][T10271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.202059][T10271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.228226][T10271] team0: Port device team_slave_0 added [ 256.233036][T10271] team0: Port device team_slave_1 added [ 256.250784][T10271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.254097][T10271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.263140][T10271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.268227][T10271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.270246][T10271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.279501][T10271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.326642][T10271] hsr_slave_0: entered promiscuous mode [ 256.328722][T10271] hsr_slave_1: entered promiscuous mode [ 256.330680][T10271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 256.332982][T10271] Cannot create hsr debugfs directory [ 256.369445][T10216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.498268][T10216] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.512106][ T5983] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 256.543179][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.545245][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.557826][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.559951][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.606644][T10309] syzkaller0: entered promiscuous mode [ 256.608281][T10309] syzkaller0: entered allmulticast mode [ 257.251385][ T5957] Bluetooth: hci2: command tx timeout [ 257.251538][ T5954] Bluetooth: hci0: command tx timeout [ 257.395129][T10314] netlink: 'syz.0.1140': attribute type 10 has an invalid length. [ 257.454959][T10315] netlink: 'syz.0.1140': attribute type 10 has an invalid length. [ 257.510198][T10316] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1140'. [ 257.795586][T10314] team0: Port device netdevsim0 added [ 257.800713][T10315] team0: Port device netdevsim0 removed [ 257.805092][T10315] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 257.812047][T10271] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 257.812938][ T39] kauditd_printk_skb: 154 callbacks suppressed [ 257.812953][ T39] audit: type=1326 audit(1737356690.938:3033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10305 comm="syz.2.1139" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 257.824965][ T39] audit: type=1326 audit(1737356690.938:3034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10305 comm="syz.2.1139" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 257.827944][T10271] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 257.835684][T10271] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 257.838980][T10271] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 257.868522][T10271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.889715][T10271] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.899217][ T8933] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.901523][ T8933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.908230][ T8933] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.910316][ T8933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.915866][T10216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.965978][T10216] veth0_vlan: entered promiscuous mode [ 257.970120][T10216] veth1_vlan: entered promiscuous mode [ 257.984188][T10216] veth0_macvtap: entered promiscuous mode [ 257.987245][T10216] veth1_macvtap: entered promiscuous mode [ 257.994690][T10216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.998125][T10216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.003723][T10216] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.011657][T10216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.015768][T10216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.019053][T10216] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.045740][T10271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.051236][T10216] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.053763][T10216] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.056258][T10216] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.058740][T10216] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.084475][ T8933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.087616][ T8933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.090349][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.093170][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.151850][T10334] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1142'. [ 258.154518][T10334] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1142'. [ 258.474062][ T216] bond0 (unregistering): Released all slaves [ 258.478271][ T216] bond1 (unregistering): Released all slaves [ 258.507186][T10271] veth0_vlan: entered promiscuous mode [ 258.514533][T10271] veth1_vlan: entered promiscuous mode [ 258.528529][T10271] veth0_macvtap: entered promiscuous mode [ 258.532862][T10271] veth1_macvtap: entered promiscuous mode [ 258.550007][T10271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.554534][T10271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.558262][T10271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.565601][T10271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.576439][T10271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.582008][T10271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.586081][T10271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.589773][T10271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.593953][T10271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.600245][T10271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.640895][T10271] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.644667][T10271] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.648119][T10271] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.651907][T10271] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.715265][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.717798][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.742927][ T8935] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.745682][ T8935] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.852445][ T216] hsr_slave_0: left promiscuous mode [ 258.855577][ T216] hsr_slave_1: left promiscuous mode [ 259.311341][ T5957] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 259.328494][ T5957] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 259.332474][ T5956] Bluetooth: hci2: command tx timeout [ 259.334994][ T5957] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 259.350809][ T5957] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 259.353317][ T5957] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 259.357241][ T5957] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 259.769361][T10370] netlink: 'syz.2.1148': attribute type 2 has an invalid length. [ 259.772283][T10370] netlink: 'syz.2.1148': attribute type 1 has an invalid length. [ 259.954315][T10371] 9pnet: Could not find request transport: virtI† [ 260.229084][T10362] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1147'. [ 260.382212][T10366] chnl_net:caif_netlink_parms(): no params data found [ 260.495521][T10366] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.497719][T10366] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.499930][T10366] bridge_slave_0: entered allmulticast mode [ 260.504975][T10366] bridge_slave_0: entered promiscuous mode [ 260.509756][T10366] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.512959][T10366] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.515187][T10366] bridge_slave_1: entered allmulticast mode [ 260.517516][T10366] bridge_slave_1: entered promiscuous mode [ 260.541646][T10366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.547578][T10366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.576996][T10366] team0: Port device team_slave_0 added [ 260.580666][T10366] team0: Port device team_slave_1 added [ 260.600758][T10366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.605802][T10366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.620985][T10366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.624969][T10366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.626968][T10366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.634524][T10366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.664360][T10366] hsr_slave_0: entered promiscuous mode [ 260.666583][T10366] hsr_slave_1: entered promiscuous mode [ 260.766760][ T1142] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.387389][ T1142] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.401055][ T5957] Bluetooth: hci2: command tx timeout [ 261.401130][ T5956] Bluetooth: hci0: command tx timeout [ 261.565701][ T1142] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.682779][ T1142] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.016547][ T1142] bridge_slave_1: left allmulticast mode [ 262.018849][ T1142] bridge_slave_1: left promiscuous mode [ 262.022942][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.027461][ T1142] bridge_slave_0: left allmulticast mode [ 262.029704][ T1142] bridge_slave_0: left promiscuous mode [ 262.032697][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.332721][T10452] Cannot find add_set index 0 as target [ 262.341958][ T1142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 262.345870][ T1142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 262.352163][ T1142] bond0 (unregistering): Released all slaves [ 262.591054][ T25] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 262.680700][ T1142] hsr_slave_0: left promiscuous mode [ 262.683904][ T1142] hsr_slave_1: left promiscuous mode [ 262.685937][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.688103][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.690621][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.700233][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.729902][ T1142] veth1_macvtap: left promiscuous mode [ 262.731708][ T1142] veth0_macvtap: left promiscuous mode [ 262.733365][ T1142] veth1_vlan: left promiscuous mode [ 262.734914][ T1142] veth0_vlan: left promiscuous mode [ 262.741002][ T25] usb 7-1: Using ep0 maxpacket: 8 [ 262.751055][ T25] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 262.754887][ T25] usb 7-1: config 0 has no interface number 0 [ 262.760987][ T25] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 262.764082][ T25] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 262.768315][ T25] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 262.773854][ T25] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 262.778705][ T25] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 262.782084][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.785801][ T25] usb 7-1: config 0 descriptor?? [ 262.792734][ T25] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 263.044033][ T1449] usb 7-1: USB disconnect, device number 22 [ 263.047379][ T1449] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 263.372313][ T1142] team0 (unregistering): Port device team_slave_1 removed [ 263.453257][ T1142] team0 (unregistering): Port device team_slave_0 removed [ 263.481329][ T5954] Bluetooth: hci0: command tx timeout [ 263.491033][ T5954] Bluetooth: hci2: command 0x0419 tx timeout [ 263.857713][T10505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1162'. [ 264.053805][T10488] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1158'. [ 264.065348][T10366] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 264.083809][ T25] hid (null): unknown global tag 0xe [ 264.085500][ T25] hid (null): unknown global tag 0xe [ 264.087389][ T25] hid (null): unknown global tag 0xc [ 264.088963][ T25] hid (null): unknown global tag 0xd [ 264.093383][T10366] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 264.098914][T10366] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 264.101548][ T25] hid-generic 0000:0004:00A9.0005: unknown main item tag 0x0 [ 264.104927][ T25] hid-generic 0000:0004:00A9.0005: unknown global tag 0xe [ 264.110515][ T25] hid-generic 0000:0004:00A9.0005: item 0 2 1 14 parsing failed [ 264.111775][T10366] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 264.113326][ T25] hid-generic 0000:0004:00A9.0005: probe with driver hid-generic failed with error -22 [ 264.165685][T10366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.173138][T10366] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.177054][ T8935] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.179138][ T8935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.185821][ T216] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.187931][ T216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.325155][T10366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.351788][T10366] veth0_vlan: entered promiscuous mode [ 264.361863][T10366] veth1_vlan: entered promiscuous mode [ 264.382123][T10366] veth0_macvtap: entered promiscuous mode [ 264.387680][T10366] veth1_macvtap: entered promiscuous mode [ 264.406315][T10366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.421136][T10366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.424297][T10366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.427367][T10366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.436304][T10366] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.445666][T10366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.450696][T10366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.455681][T10366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.459032][T10366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.464420][T10366] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.475130][T10366] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.478242][T10366] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.486393][T10366] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.490712][T10366] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.589246][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.594368][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.608057][ T8933] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.618529][ T8933] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.126212][T10528] trusted_key: syz.0.1168 sent an empty control message without MSG_MORE. [ 265.184552][T10538] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1168'. [ 265.276297][T10530] ubi0: attaching mtd0 [ 265.278227][T10530] ubi0 error: ubi_attach_mtd_dev: bad VID header (16) or data offsets (80) [ 265.281793][T10530] trusted_key: encrypted_key: insufficient parameters specified [ 265.421500][ T39] audit: type=1326 audit(1737356698.548:3035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10545 comm="syz.0.1170" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 265.428787][ T39] audit: type=1326 audit(1737356698.548:3036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10545 comm="syz.0.1170" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 265.437086][ T39] audit: type=1326 audit(1737356698.548:3037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10545 comm="syz.0.1170" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 265.443601][ T39] audit: type=1326 audit(1737356698.548:3038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10545 comm="syz.0.1170" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 265.449743][ T39] audit: type=1326 audit(1737356698.548:3039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10545 comm="syz.0.1170" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 265.456113][ T39] audit: type=1326 audit(1737356698.548:3040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10545 comm="syz.0.1170" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 265.456132][ T39] audit: type=1326 audit(1737356698.548:3041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10545 comm="syz.0.1170" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 265.456148][ T39] audit: type=1326 audit(1737356698.548:3042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10545 comm="syz.0.1170" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 265.456164][ T39] audit: type=1326 audit(1737356698.548:3043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10545 comm="syz.0.1170" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 265.456179][ T39] audit: type=1326 audit(1737356698.548:3044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10545 comm="syz.0.1170" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ee579 code=0x7ffc0000 [ 265.504672][T10546] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1170'. [ 265.532411][T10553] netlink: 'syz.0.1172': attribute type 27 has an invalid length. [ 265.561244][ T5954] Bluetooth: hci2: command 0x0419 tx timeout [ 265.636056][T10556] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1172'. [ 265.692511][T10553] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.702740][T10553] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.777413][T10553] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.780039][T10553] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.782735][T10553] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.785274][T10553] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.813283][T10553] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.816009][T10553] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.818549][T10553] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.821354][T10553] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.824495][T10553] vxlan0: left promiscuous mode [ 265.853979][T10554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.856576][T10554] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.859799][T10554] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 265.898624][T10564] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1175'. [ 265.931288][T10572] input: syz0 as /devices/virtual/input/input8 [ 266.773510][ T216] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.816115][T10606] binder: 10603:10606 ioctl 4018620d 0 returned -22 [ 267.326996][T10612] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1188'. [ 267.406091][ T5956] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 267.409016][ T5956] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 267.413592][ T5956] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 267.415993][ T5956] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 267.418442][ T5956] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 267.420733][ T5956] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 267.501518][T10621] chnl_net:caif_netlink_parms(): no params data found [ 267.542136][T10621] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.544289][T10621] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.546385][T10621] bridge_slave_0: entered allmulticast mode [ 267.548554][T10621] bridge_slave_0: entered promiscuous mode [ 267.552292][T10621] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.554394][T10621] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.556505][T10621] bridge_slave_1: entered allmulticast mode [ 267.558655][T10621] bridge_slave_1: entered promiscuous mode [ 267.580111][T10621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.584160][T10621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.615977][T10621] team0: Port device team_slave_0 added [ 267.618712][T10621] team0: Port device team_slave_1 added [ 267.659180][T10621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.662882][T10621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.673320][T10621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.681162][T10621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.683091][T10621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.689948][T10621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.775070][T10621] hsr_slave_0: entered promiscuous mode [ 267.777593][T10621] hsr_slave_1: entered promiscuous mode [ 267.780603][T10621] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 267.786148][T10621] Cannot create hsr debugfs directory [ 268.457349][T10663] mmap: syz.4.1198 (10663): VmData 37507072 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data. [ 268.466454][T10663] program syz.4.1198 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 268.672583][ T216] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.780398][ T216] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.866839][ T216] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.016070][T10668] syz.2.1199 (10668): drop_caches: 2 [ 269.055240][T10672] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1200'. [ 269.184959][T10676] mkiss: ax0: crc mode is auto. [ 269.185064][ T216] bridge_slave_1: left allmulticast mode [ 269.193071][ T216] bridge_slave_1: left promiscuous mode [ 269.194775][ T216] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.198887][ T216] bridge_slave_0: left allmulticast mode [ 269.200585][ T216] bridge_slave_0: left promiscuous mode [ 269.203031][ T216] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.482301][ T5954] Bluetooth: hci0: command tx timeout [ 269.669978][ T216] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.677492][ T216] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.694198][ T216] bond0 (unregistering): Released all slaves [ 269.833904][ T6004] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 270.121280][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.176304][ T216] hsr_slave_0: left promiscuous mode [ 270.178449][ T216] hsr_slave_1: left promiscuous mode [ 270.180453][ T216] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.183737][ T216] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.187308][ T216] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.189455][ T216] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.198504][T10697] netlink: 'syz.4.1206': attribute type 1 has an invalid length. [ 270.200771][T10697] netlink: 'syz.4.1206': attribute type 1 has an invalid length. [ 270.203358][T10697] netlink: 'syz.4.1206': attribute type 1 has an invalid length. [ 270.205661][T10697] netlink: 'syz.4.1206': attribute type 1 has an invalid length. [ 270.211165][T10697] netlink: 'syz.4.1206': attribute type 1 has an invalid length. [ 270.213702][T10697] netlink: 'syz.4.1206': attribute type 1 has an invalid length. [ 270.216062][T10697] netlink: 'syz.4.1206': attribute type 1 has an invalid length. [ 270.218346][T10697] netlink: 'syz.4.1206': attribute type 1 has an invalid length. [ 270.220805][T10697] netlink: 'syz.4.1206': attribute type 1 has an invalid length. [ 270.233451][ T216] veth1_macvtap: left promiscuous mode [ 270.236302][ T216] veth0_macvtap: left promiscuous mode [ 270.238721][ T216] veth1_vlan: left promiscuous mode [ 270.242528][ T216] veth0_vlan: left promiscuous mode [ 270.472029][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.505140][ T6008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.002204][ T216] team0 (unregistering): Port device team_slave_1 removed [ 271.082412][ T216] team0 (unregistering): Port device team_slave_0 removed [ 271.161151][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.407699][T10709] syz.0.1208 (10709) used greatest stack depth: 20560 bytes left [ 271.561025][ T5954] Bluetooth: hci0: command tx timeout [ 271.615705][T10710] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1209'. [ 271.638843][T10621] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 271.643894][T10713] loop2: detected capacity change from 0 to 7 [ 271.647206][T10713] Dev loop2: unable to read RDB block 7 [ 271.647542][T10621] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 271.648908][T10713] loop2: AHDI p1 [ 271.655123][T10713] loop2: partition table partially beyond EOD, truncated [ 271.656327][T10621] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 271.662637][T10621] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 271.721982][T10621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.752871][T10621] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.756781][ T8933] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.758870][ T8933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.763720][ T8933] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.765966][ T8933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.858036][T10732] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1214'. [ 271.858758][T10621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.879470][T10621] veth0_vlan: entered promiscuous mode [ 271.885518][T10621] veth1_vlan: entered promiscuous mode [ 271.896967][T10621] veth0_macvtap: entered promiscuous mode [ 271.901656][T10621] veth1_macvtap: entered promiscuous mode [ 271.908800][T10621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.911962][T10621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.917652][T10621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.922627][T10621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.925730][T10621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.928967][T10621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.937368][T10621] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.939945][T10621] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.942800][T10621] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.945307][T10621] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.966998][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.970753][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.987622][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.989892][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.101530][T10740] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 272.217032][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.463819][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.985861][T10767] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1219'. [ 272.993924][T10767] validate_nla: 121 callbacks suppressed [ 272.993934][T10767] netlink: 'syz.2.1219': attribute type 4 has an invalid length. [ 272.997861][T10767] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1219'. [ 273.003618][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.022519][T10767] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1219'. [ 273.071323][T10771] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1220'. [ 273.241689][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.250363][T10782] netdevsim netdevsim2: Direct firmware load for . [ 273.250363][T10782] failed with error -2 [ 273.254301][T10782] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 273.254301][T10782] [ 273.290143][T10785] loop2: detected capacity change from 0 to 7 [ 273.292631][T10785] Dev loop2: unable to read RDB block 7 [ 273.294253][T10785] loop2: AHDI p1 [ 273.295411][T10785] loop2: partition table partially beyond EOD, truncated [ 273.358692][ T39] kauditd_printk_skb: 90 callbacks suppressed [ 273.358703][ T39] audit: type=1326 audit(1737356706.478:3135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10788 comm="syz.2.1226" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 273.367465][ T39] audit: type=1326 audit(1737356706.478:3136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10788 comm="syz.2.1226" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 273.373895][ T39] audit: type=1326 audit(1737356706.478:3137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10788 comm="syz.2.1226" exe="/syz-executor" sig=0 arch=40000003 syscall=277 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 273.380157][ T39] audit: type=1326 audit(1737356706.478:3138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10788 comm="syz.2.1226" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 273.386559][ T39] audit: type=1326 audit(1737356706.478:3139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10788 comm="syz.2.1226" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 273.393182][ T39] audit: type=1326 audit(1737356706.478:3140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10788 comm="syz.2.1226" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 273.394681][T10789] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 273.399440][ T39] audit: type=1326 audit(1737356706.478:3141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10788 comm="syz.2.1226" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 273.405968][T10789] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 273.408205][ T39] audit: type=1326 audit(1737356706.478:3142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10788 comm="syz.2.1226" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 273.410484][T10789] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 273.416513][T10789] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1226'. [ 273.421033][ T39] audit: type=1326 audit(1737356706.518:3143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10788 comm="syz.2.1226" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 273.428067][ T39] audit: type=1326 audit(1737356706.518:3144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10788 comm="syz.2.1226" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 273.467861][T10796] netlink: 'syz.4.1228': attribute type 2 has an invalid length. [ 273.515415][T10801] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1230'. [ 273.641117][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.281106][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.391213][ T1139] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.940275][T10859] loop2: detected capacity change from 0 to 7 [ 274.942595][T10859] Dev loop2: unable to read RDB block 7 [ 274.944252][T10859] loop2: AHDI p1 [ 274.945345][T10859] loop2: partition table partially beyond EOD, truncated [ 275.024053][ T5956] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 275.027857][ T5956] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 275.030592][ T5956] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 275.037740][ T5956] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 275.039591][ T5956] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 275.039834][ T5956] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 275.137104][T10870] chnl_net:caif_netlink_parms(): no params data found [ 275.182622][T10870] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.184721][T10870] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.186785][T10870] bridge_slave_0: entered allmulticast mode [ 275.189040][T10870] bridge_slave_0: entered promiscuous mode [ 275.192049][T10870] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.194164][T10870] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.196248][T10870] bridge_slave_1: entered allmulticast mode [ 275.198356][T10870] bridge_slave_1: entered promiscuous mode [ 275.211602][T10881] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1239'. [ 275.226409][T10870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.230719][T10870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.262622][T10870] team0: Port device team_slave_0 added [ 275.265977][T10870] team0: Port device team_slave_1 added [ 275.284127][T10870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.286176][T10870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.295734][T10870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.299587][T10870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.302297][T10870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.310676][T10870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.321374][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.344061][T10870] hsr_slave_0: entered promiscuous mode [ 275.346258][T10870] hsr_slave_1: entered promiscuous mode [ 275.486454][T10896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1244'. [ 275.489294][T10896] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1244'. [ 275.921704][ T1139] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.011965][ T1139] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.034587][T10907] loop2: detected capacity change from 0 to 7 [ 276.037287][T10907] Dev loop2: unable to read RDB block 7 [ 276.039705][T10907] loop2: AHDI p1 [ 276.041517][T10907] loop2: partition table partially beyond EOD, truncated [ 276.089341][ T1139] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.131046][T10914] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1250'. [ 276.194328][ T1139] bridge_slave_1: left allmulticast mode [ 276.196429][ T1139] bridge_slave_1: left promiscuous mode [ 276.198630][ T1139] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.204264][ T1139] bridge_slave_0: left allmulticast mode [ 276.205934][ T1139] bridge_slave_0: left promiscuous mode [ 276.207683][ T1139] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.361169][ T5953] net_ratelimit: 1 callbacks suppressed [ 276.361181][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.444800][ T1139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 276.448887][ T1139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 276.452407][ T1139] bond0 (unregistering): Released all slaves [ 276.742074][ T1139] hsr_slave_0: left promiscuous mode [ 276.745761][ T1139] hsr_slave_1: left promiscuous mode [ 276.748906][ T1139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.753429][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.759407][ T1139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.764308][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.813280][ T1139] veth1_macvtap: left promiscuous mode [ 276.815306][ T1139] veth0_macvtap: left promiscuous mode [ 276.816992][ T1139] veth1_vlan: left promiscuous mode [ 276.818684][ T1139] veth0_vlan: left promiscuous mode [ 276.852021][T10951] loop2: detected capacity change from 0 to 7 [ 276.854945][T10951] Dev loop2: unable to read RDB block 7 [ 276.856734][T10951] loop2: AHDI p1 [ 276.858066][T10951] loop2: partition table partially beyond EOD, truncated [ 276.999618][T10954] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 277.004456][T10954] overlayfs: failed to set xattr on upper [ 277.006136][T10954] overlayfs: ...falling back to redirect_dir=nofollow. [ 277.008234][T10954] overlayfs: ...falling back to index=off. [ 277.009998][T10954] overlayfs: ...falling back to uuid=null. [ 277.083347][ T5956] Bluetooth: hci0: command tx timeout [ 277.411102][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.685230][ T1139] team0 (unregistering): Port device team_slave_1 removed [ 277.812418][ T1139] team0 (unregistering): Port device team_slave_0 removed [ 278.115663][T10972] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1265'. [ 278.118408][T10972] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1265'. [ 278.413900][T10970] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1264'. [ 278.453531][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.545546][T10870] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 278.548920][T10870] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 278.552502][T10870] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 278.555858][T10870] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 278.583312][T10870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.589953][T10870] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.604555][ T8935] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.606614][ T8935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.610825][ T216] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.612987][ T216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.678842][T10987] netlink: 'syz.4.1266': attribute type 12 has an invalid length. [ 278.756741][T11000] loop2: detected capacity change from 0 to 7 [ 278.761194][T11000] Dev loop2: unable to read RDB block 7 [ 278.762823][T11000] loop2: AHDI p1 [ 278.763910][T11000] loop2: partition table partially beyond EOD, truncated [ 278.806845][T10870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.832901][T10870] veth0_vlan: entered promiscuous mode [ 278.836850][T10870] veth1_vlan: entered promiscuous mode [ 278.858031][T10870] veth0_macvtap: entered promiscuous mode [ 278.870173][T10870] veth1_macvtap: entered promiscuous mode [ 278.880082][T10870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.884659][T10870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.888102][T10870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.899842][T10870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.903079][T10870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.906521][T10870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.910652][T10870] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.913571][T10870] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.916320][T10870] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.918843][T10870] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.953600][ T8935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.955894][ T8935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.977830][ T8935] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.980179][ T8935] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.081262][ T5983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.232791][T11016] netlink: 'syz.2.1273': attribute type 2 has an invalid length. [ 279.235176][T11016] netlink: 'syz.2.1273': attribute type 1 has an invalid length. [ 279.356850][T11019] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1274'. [ 279.482326][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.652278][T11029] loop2: detected capacity change from 0 to 7 [ 279.654543][T11029] Dev loop2: unable to read RDB block 7 [ 279.656177][T11029] loop2: AHDI p1 [ 279.657291][T11029] loop2: partition table partially beyond EOD, truncated [ 279.661050][ T5983] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 279.833014][ T5983] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.837194][ T5983] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 279.842520][ T5983] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 279.846031][ T5983] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.850659][ T5983] usb 9-1: config 0 descriptor?? [ 279.855307][ T5983] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 280.076241][ T63] usb 9-1: USB disconnect, device number 2 [ 280.107762][T11038] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1282'. [ 280.263193][T11043] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1284'. [ 280.531507][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.536516][ T9] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 280.542504][T11054] netlink: 'syz.2.1288': attribute type 1 has an invalid length. [ 280.589487][T11064] loop2: detected capacity change from 0 to 7 [ 280.591615][T11064] Dev loop2: unable to read RDB block 7 [ 280.593074][T11064] loop2: AHDI p1 [ 280.594044][T11064] loop2: partition table partially beyond EOD, truncated [ 280.685108][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 280.688748][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 280.692997][ T9] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 280.698375][ T9] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 280.702265][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.706864][ T9] usb 9-1: config 0 descriptor?? [ 280.710372][ T9] ldusb 9-1:0.0: Interrupt in endpoint not found [ 280.721198][ T9] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 280.996875][ T5983] usb 9-1: USB disconnect, device number 3 [ 281.108011][T11073] netlink: 'syz.0.1293': attribute type 2 has an invalid length. [ 281.111307][T11073] netlink: 'syz.0.1293': attribute type 1 has an invalid length. [ 281.238348][T11077] 9pnet_virtio: no channels available for device syz [ 281.248870][T11077] netlink: 'syz.4.1294': attribute type 2 has an invalid length. [ 281.252708][T11077] netlink: 'syz.4.1294': attribute type 1 has an invalid length. [ 281.431667][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.568624][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.752923][T11086] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1297'. [ 281.828742][ T5954] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 281.832593][ T5954] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 281.835059][ T5954] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 281.838584][ T5954] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 281.843976][ T5954] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 281.846677][ T5954] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 281.859023][ T5957] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 281.869660][ T5957] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 281.874463][ T5957] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 281.877748][ T5957] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 281.880082][ T5957] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 281.884405][ T5957] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 281.952112][T11090] chnl_net:caif_netlink_parms(): no params data found [ 282.051349][T11090] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.053914][T11090] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.056199][T11090] bridge_slave_0: entered allmulticast mode [ 282.058336][T11090] bridge_slave_0: entered promiscuous mode [ 282.064379][T11090] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.066539][T11090] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.068624][T11090] bridge_slave_1: entered allmulticast mode [ 282.070786][T11090] bridge_slave_1: entered promiscuous mode [ 282.075619][T11092] chnl_net:caif_netlink_parms(): no params data found [ 282.110338][T11090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.115988][T11090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.121257][ T5983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.154227][T11092] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.156432][T11092] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.158499][T11092] bridge_slave_0: entered allmulticast mode [ 282.160665][T11092] bridge_slave_0: entered promiscuous mode [ 282.169766][T11090] team0: Port device team_slave_0 added [ 282.172155][T11092] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.174233][T11092] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.176310][T11092] bridge_slave_1: entered allmulticast mode [ 282.178818][T11092] bridge_slave_1: entered promiscuous mode [ 282.189686][T11090] team0: Port device team_slave_1 added [ 282.194915][T11112] netlink: 'syz.4.1303': attribute type 2 has an invalid length. [ 282.197400][T11112] netlink: 'syz.4.1303': attribute type 1 has an invalid length. [ 282.211068][T11092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.222723][T11092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.234365][T11090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.236480][T11090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.244440][T11090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.257770][T11090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.259896][T11090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.260997][ T7787] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 282.268343][T11090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.278667][T11092] team0: Port device team_slave_0 added [ 282.303045][T11092] team0: Port device team_slave_1 added [ 282.306270][T11090] hsr_slave_0: entered promiscuous mode [ 282.308422][T11090] hsr_slave_1: entered promiscuous mode [ 282.310414][T11090] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 282.313019][T11090] Cannot create hsr debugfs directory [ 282.328508][T11110] 9pnet: Could not find request transport: virtI† [ 282.368902][T11092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.370974][T11092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.378181][T11092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.384947][T11092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.387077][T11092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.396266][T11092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.436467][ T7787] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 282.440195][ T7787] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 282.461948][ T7787] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 282.465562][ T7787] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.469430][ T7787] usb 7-1: config 0 descriptor?? [ 282.472666][T11092] hsr_slave_0: entered promiscuous mode [ 282.474717][T11092] hsr_slave_1: entered promiscuous mode [ 282.475605][ T7787] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 282.479122][T11092] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 282.481505][T11092] Cannot create hsr debugfs directory [ 282.595370][T11090] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 282.598592][T11090] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 282.601318][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.604381][T11090] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 282.607466][T11090] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 282.634674][T11090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.651670][T11090] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.655697][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.658315][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.663211][ T8933] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.665792][ T8933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.681348][ T7787] usb 7-1: USB disconnect, device number 23 [ 282.770219][T11090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.862503][T11090] veth0_vlan: entered promiscuous mode [ 282.866515][T11090] veth1_vlan: entered promiscuous mode [ 282.876884][T11090] veth0_macvtap: entered promiscuous mode [ 282.879769][T11090] veth1_macvtap: entered promiscuous mode [ 282.886713][T11090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.889700][T11090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.892747][T11090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.895719][T11090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.899011][T11090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.906565][T11090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.909525][T11090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.913074][T11090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.916040][T11090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.919261][T11090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.923972][T11090] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.927213][T11090] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.930024][T11090] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.933750][T11090] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.951813][ T5957] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 282.958402][ T5957] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 282.961886][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.962736][ T5957] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 282.964175][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.968264][ T5957] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 282.973508][ T5957] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 282.975741][ T5957] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 282.976544][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.979980][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.046175][T11130] chnl_net:caif_netlink_parms(): no params data found [ 283.121204][ T7787] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 283.122167][T11130] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.125538][T11130] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.127666][T11130] bridge_slave_0: entered allmulticast mode [ 283.129826][T11130] bridge_slave_0: entered promiscuous mode [ 283.132741][T11130] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.134781][T11130] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.136844][T11130] bridge_slave_1: entered allmulticast mode [ 283.138969][T11130] bridge_slave_1: entered promiscuous mode [ 283.164652][T11130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 283.169471][T11130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 283.194384][T11130] team0: Port device team_slave_0 added [ 283.198383][T11130] team0: Port device team_slave_1 added [ 283.221728][T11130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.223752][T11130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.231162][T11130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.235665][T11130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.238070][T11130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.245511][T11130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.278056][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.280981][ T7787] usb 7-1: Using ep0 maxpacket: 32 [ 283.291480][ T7787] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.295600][ T7787] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 283.300351][ T7787] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 283.304011][ T7787] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.305280][T11130] hsr_slave_0: entered promiscuous mode [ 283.307230][ T7787] usb 7-1: config 0 descriptor?? [ 283.309929][T11130] hsr_slave_1: entered promiscuous mode [ 283.311302][ T7787] ldusb 7-1:0.0: Interrupt in endpoint not found [ 283.313614][T11130] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 283.313941][ T7787] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 283.315806][T11130] Cannot create hsr debugfs directory [ 283.351776][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.412132][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.526285][ T12] bridge_slave_1: left allmulticast mode [ 283.528438][ T12] bridge_slave_1: left promiscuous mode [ 283.530636][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.536372][ T12] bridge_slave_0: left allmulticast mode [ 283.538013][ T12] bridge_slave_0: left promiscuous mode [ 283.539673][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.617978][ T64] usb 7-1: USB disconnect, device number 24 [ 283.651439][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.803943][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.814139][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.821502][ T12] bond0 (unregistering): Released all slaves [ 283.893127][ T5954] Bluetooth: hci0: command tx timeout [ 283.962142][ T5954] Bluetooth: hci3: command tx timeout [ 284.174512][ T12] hsr_slave_0: left promiscuous mode [ 284.176849][ T12] hsr_slave_1: left promiscuous mode [ 284.179069][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.185545][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.188492][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.190712][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.230421][ T12] veth1_macvtap: left promiscuous mode [ 284.234180][ T12] veth0_macvtap: left promiscuous mode [ 284.235950][ T12] veth1_vlan: left promiscuous mode [ 284.237553][ T12] veth0_vlan: left promiscuous mode [ 284.694056][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.733522][T11171] netlink: 'syz.2.1312': attribute type 2 has an invalid length. [ 284.735815][T11171] netlink: 'syz.2.1312': attribute type 1 has an invalid length. [ 284.853017][T11172] 9pnet: Could not find request transport: virtI† [ 285.001410][ T5954] Bluetooth: hci2: command tx timeout [ 285.053858][ T12] team0 (unregistering): Port device team_slave_1 removed [ 285.147441][ T12] team0 (unregistering): Port device team_slave_0 removed [ 285.164803][ T5983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.733744][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.763236][T11176] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 285.803739][ T39] kauditd_printk_skb: 60 callbacks suppressed [ 285.803750][ T39] audit: type=1326 audit(1737356718.928:3205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11181 comm="syz.5.1315" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04579 code=0x7ffc0000 [ 285.812970][ T39] audit: type=1326 audit(1737356718.928:3206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11181 comm="syz.5.1315" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04579 code=0x7ffc0000 [ 285.819296][ T39] audit: type=1326 audit(1737356718.928:3207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11181 comm="syz.5.1315" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f04579 code=0x7ffc0000 [ 285.828263][ T39] audit: type=1326 audit(1737356718.928:3208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11181 comm="syz.5.1315" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04579 code=0x7ffc0000 [ 285.836675][ T39] audit: type=1326 audit(1737356718.928:3209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11181 comm="syz.5.1315" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04579 code=0x7ffc0000 [ 285.869554][ T39] audit: type=1326 audit(1737356718.928:3210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11181 comm="syz.5.1315" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf7f04579 code=0x7ffc0000 [ 285.893781][ T39] audit: type=1326 audit(1737356718.928:3211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11181 comm="syz.5.1315" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04579 code=0x7ffc0000 [ 285.905952][ T39] audit: type=1326 audit(1737356718.928:3212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11181 comm="syz.5.1315" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04579 code=0x7ffc0000 [ 285.918413][ T39] audit: type=1326 audit(1737356718.928:3213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11181 comm="syz.5.1315" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f04579 code=0x7ffc0000 [ 285.926727][ T39] audit: type=1326 audit(1737356718.928:3214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11181 comm="syz.5.1315" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04579 code=0x7ffc0000 [ 285.971885][ T5957] Bluetooth: hci0: command 0x041b tx timeout [ 286.051364][ T5957] Bluetooth: hci3: command tx timeout [ 286.056421][ T6004] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 286.082568][T11092] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 286.087006][T11092] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 286.100262][T11092] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 286.116588][T11092] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 286.146237][T11130] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 286.154328][T11130] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 286.177124][T11130] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 286.183965][T11130] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 286.220582][ T5954] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 286.224815][ T5954] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 286.226556][T11092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.228963][ T5954] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 286.234308][ T5954] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 286.236975][ T5954] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 286.239251][ T5954] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 286.239734][T11130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.244758][T11092] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.263308][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.265383][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.283815][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.286048][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.328750][T11092] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 286.334616][T11092] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 286.338732][T11130] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.354887][ T216] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.356991][ T216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.361630][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.363739][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.443006][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.452598][T11092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.459424][T11200] chnl_net:caif_netlink_parms(): no params data found [ 286.683432][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.715040][T11130] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.717851][T11200] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.719920][T11200] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.725027][T11200] bridge_slave_0: entered allmulticast mode [ 286.727204][T11200] bridge_slave_0: entered promiscuous mode [ 286.736107][T11092] veth0_vlan: entered promiscuous mode [ 286.738675][T11200] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.740969][T11200] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.743045][T11200] bridge_slave_1: entered allmulticast mode [ 286.745202][T11200] bridge_slave_1: entered promiscuous mode [ 286.766508][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.772360][T11092] veth1_vlan: entered promiscuous mode [ 286.786518][T11223] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1319'. [ 286.790785][T11200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.794887][T11200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.839061][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.848667][T11200] team0: Port device team_slave_0 added [ 286.855665][T11092] veth0_macvtap: entered promiscuous mode [ 286.858803][T11092] veth1_macvtap: entered promiscuous mode [ 286.866589][T11200] team0: Port device team_slave_1 added [ 286.888331][T11200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.890639][T11200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.898326][T11200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.911733][T11200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.913724][T11200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.921214][T11200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.936250][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.962181][T11092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.966287][T11092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.969353][T11092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.972870][T11092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.977378][T11092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.003118][T11200] hsr_slave_0: entered promiscuous mode [ 287.006419][T11200] hsr_slave_1: entered promiscuous mode [ 287.033032][T11130] veth0_vlan: entered promiscuous mode [ 287.041761][T11092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.045258][T11092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.048072][T11092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.052202][T11092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.055634][T11092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.081510][ T5957] Bluetooth: hci2: command tx timeout [ 287.092270][T11130] veth1_vlan: entered promiscuous mode [ 287.103116][T11092] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.105627][T11092] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.107930][T11092] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.110364][T11092] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.203853][T11130] veth0_macvtap: entered promiscuous mode [ 287.211729][ T8936] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.213994][ T8936] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.232126][T11130] veth1_macvtap: entered promiscuous mode [ 287.262187][T11200] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 287.267487][T11200] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 287.271697][ T8933] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.272179][T11130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.274056][ T8933] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.276797][T11130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.283608][T11130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.286542][T11130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.289309][T11130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.292656][T11130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.296028][T11130] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.305059][T11200] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 287.308293][T11200] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 287.314017][T11130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.317140][T11130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.320016][T11130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.324662][T11130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.327595][T11130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.331049][T11130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.335626][T11130] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.358777][T11130] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.362008][T11130] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.364776][T11130] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.367472][T11130] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.474464][ T12] bond0: (slave netdevsim0): Releasing backup interface [ 287.512956][T11200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.517924][ T8933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.520170][ T8933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.540146][T11200] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.542962][ T8893] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.545568][ T8893] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.548255][ T216] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.550320][ T216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.555755][ T216] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.558206][ T216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.630535][ T12] bridge_slave_1: left allmulticast mode [ 287.633956][ T12] bridge_slave_1: left promiscuous mode [ 287.641216][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.645302][ T12] bridge_slave_0: left allmulticast mode [ 287.647055][ T12] bridge_slave_0: left promiscuous mode [ 287.648838][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.042175][T11249] loop2: detected capacity change from 0 to 7 [ 288.044934][T11249] Dev loop2: unable to read RDB block 7 [ 288.046595][T11249] loop2: AHDI p1 [ 288.047703][T11249] loop2: partition table partially beyond EOD, truncated [ 288.051100][ T5957] Bluetooth: hci0: command 0x041b tx timeout [ 288.065788][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.069956][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.074569][ T12] bond0 (unregistering): Released all slaves [ 288.185041][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.189821][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.193620][ T12] bond0 (unregistering): Released all slaves [ 288.284595][ T12] bond1 (unregistering): Released all slaves [ 288.291033][ T5957] Bluetooth: hci1: command tx timeout [ 288.295335][ T12] bond2 (unregistering): Released all slaves [ 288.356988][T11258] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 288.366360][T11200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 288.597675][T11200] veth0_vlan: entered promiscuous mode [ 288.603519][T11200] veth1_vlan: entered promiscuous mode [ 288.613359][T11200] veth0_macvtap: entered promiscuous mode [ 288.618124][T11200] veth1_macvtap: entered promiscuous mode [ 288.624638][T11200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.627625][T11200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.630398][T11200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.634337][T11200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.637105][T11200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.640044][T11200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.643049][T11200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.645993][T11200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.649287][T11200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.657071][T11200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.660882][T11200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.664778][T11200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.668575][T11200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.672537][T11200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.676323][T11200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.679910][T11200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.684299][T11200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.690447][T11200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.694575][T11200] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.697771][T11200] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.701327][T11200] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.704503][T11200] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.756634][ T8893] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.758942][ T8893] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.772368][ T8936] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.774623][ T8936] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.941956][ T12] hsr_slave_0: left promiscuous mode [ 288.943898][ T12] hsr_slave_1: left promiscuous mode [ 288.945808][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.947963][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.950466][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.953506][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.958165][ T12] hsr_slave_0: left promiscuous mode [ 288.960138][ T12] hsr_slave_1: left promiscuous mode [ 288.965533][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.967981][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.999348][ T12] veth1_macvtap: left promiscuous mode [ 289.001262][ T12] veth0_macvtap: left promiscuous mode [ 289.002886][ T12] veth1_vlan: left promiscuous mode [ 289.004437][ T12] veth0_vlan: left promiscuous mode [ 289.171180][ T5957] Bluetooth: hci2: command tx timeout [ 289.364327][ T5954] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 289.372888][ T5954] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 289.383343][ T5954] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 289.388084][ T5954] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 289.393401][ T5954] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 289.395657][ T5954] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 289.426216][T11318] loop2: detected capacity change from 0 to 7 [ 289.428811][T11318] Dev loop2: unable to read RDB block 7 [ 289.430992][T11318] loop2: AHDI p1 [ 289.432360][T11318] loop2: partition table partially beyond EOD, truncated [ 289.849550][ T12] team0 (unregistering): Port device team_slave_1 removed [ 289.933417][ T12] team0 (unregistering): Port device team_slave_0 removed [ 290.121229][ T5954] Bluetooth: hci0: command 0x041b tx timeout [ 290.361033][ T5954] Bluetooth: hci1: command tx timeout [ 290.406972][T11326] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 291.239778][ T12] team0 (unregistering): Port device team_slave_1 removed [ 291.241050][ T5957] Bluetooth: hci2: command tx timeout [ 291.287627][ T12] team0 (unregistering): Port device team_slave_0 removed [ 291.483319][ T5957] Bluetooth: hci3: command tx timeout [ 291.865860][T11316] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1328'. [ 291.980231][T11309] chnl_net:caif_netlink_parms(): no params data found [ 292.034223][T11309] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.036293][T11309] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.038337][T11309] bridge_slave_0: entered allmulticast mode [ 292.040499][T11309] bridge_slave_0: entered promiscuous mode [ 292.045822][T11309] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.047971][T11309] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.050078][T11309] bridge_slave_1: entered allmulticast mode [ 292.052516][T11309] bridge_slave_1: entered promiscuous mode [ 292.077970][T11309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.082239][T11309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.117030][T11309] team0: Port device team_slave_0 added [ 292.122260][T11309] team0: Port device team_slave_1 added [ 292.163091][T11309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.165121][T11309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.176633][T11309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.180456][T11309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.182535][T11309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.189774][T11309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.201000][ T5957] Bluetooth: hci0: command 0x041b tx timeout [ 292.227902][T11309] hsr_slave_0: entered promiscuous mode [ 292.231573][T11309] hsr_slave_1: entered promiscuous mode [ 292.233784][T11309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 292.236051][T11309] Cannot create hsr debugfs directory [ 292.364970][T11309] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.434680][T11309] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.441359][ T5957] Bluetooth: hci1: command tx timeout [ 292.550717][T11309] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.664132][T11379] cgroup: fork rejected by pids controller in /syz5 [ 292.856822][T11309] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.898942][T11489] loop2: detected capacity change from 0 to 7 [ 292.902639][T11489] Dev loop2: unable to read RDB block 7 [ 292.904351][T11489] loop2: AHDI p1 [ 292.905447][T11489] loop2: partition table partially beyond EOD, truncated [ 292.969453][ T12] bridge_slave_1: left allmulticast mode [ 292.975410][ T12] bridge_slave_1: left promiscuous mode [ 292.979003][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.985653][ T12] bridge_slave_0: left allmulticast mode [ 292.987392][ T12] bridge_slave_0: left promiscuous mode [ 292.989068][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.171114][ T5954] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 293.284924][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.400546][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.405828][ T12] bond0 (unregistering): Released all slaves [ 293.573047][ T5954] Bluetooth: hci3: command tx timeout [ 293.606070][T11309] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 293.612344][T11309] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 293.616366][T11309] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 293.619796][T11309] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 293.685027][T11309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.694696][T11309] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.698690][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.700764][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.821639][ T6004] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 293.854549][T11503] bond0: entered promiscuous mode [ 293.856107][T11503] bond_slave_0: entered promiscuous mode [ 293.858021][T11503] bond_slave_1: entered promiscuous mode [ 293.862412][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.864582][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.870067][ T12] hsr_slave_0: left promiscuous mode [ 293.872860][ T12] hsr_slave_1: left promiscuous mode [ 293.875566][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.878323][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.881844][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.884526][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.909655][ T12] veth1_macvtap: left promiscuous mode [ 293.911550][ T12] veth0_macvtap: left promiscuous mode [ 293.913176][ T12] veth1_vlan: left promiscuous mode [ 293.914703][ T12] veth0_vlan: left promiscuous mode [ 294.221111][T11513] netlink: 'syz.6.1343': attribute type 2 has an invalid length. [ 294.223507][T11513] netlink: 'syz.6.1343': attribute type 1 has an invalid length. [ 294.308849][ T5957] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 294.316008][ T5957] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 294.319643][ T5957] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 294.325720][ T5957] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 294.328975][ T5957] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 294.331301][ T5957] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 294.479416][T11519] 9pnet: Could not find request transport: virtI† [ 294.531609][ T5954] Bluetooth: hci1: command tx timeout [ 294.797309][ T12] team0 (unregistering): Port device team_slave_1 removed [ 294.897908][ T12] team0 (unregistering): Port device team_slave_0 removed [ 295.641737][ T5954] Bluetooth: hci3: command tx timeout [ 295.742905][T11518] chnl_net:caif_netlink_parms(): no params data found [ 295.826065][T11309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.848419][T11518] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.850594][T11518] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.853694][T11518] bridge_slave_0: entered allmulticast mode [ 295.855992][T11518] bridge_slave_0: entered promiscuous mode [ 295.864422][T11518] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.866591][T11518] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.868728][T11518] bridge_slave_1: entered allmulticast mode [ 295.871675][T11518] bridge_slave_1: entered promiscuous mode [ 295.907629][T11518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 295.912195][T11309] veth0_vlan: entered promiscuous mode [ 295.915327][T11518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 295.928273][T11309] veth1_vlan: entered promiscuous mode [ 295.944695][T11518] team0: Port device team_slave_0 added [ 295.948369][T11518] team0: Port device team_slave_1 added [ 295.972180][T11518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.974295][T11518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.981773][T11518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.986995][T11518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.989009][T11518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.997358][T11518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.021656][T11518] hsr_slave_0: entered promiscuous mode [ 296.025635][T11518] hsr_slave_1: entered promiscuous mode [ 296.027804][T11518] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 296.030257][T11518] Cannot create hsr debugfs directory [ 296.065701][T11309] veth0_macvtap: entered promiscuous mode [ 296.068666][T11309] veth1_macvtap: entered promiscuous mode [ 296.083681][T11553] loop2: detected capacity change from 0 to 7 [ 296.086024][T11553] Dev loop2: unable to read RDB block 7 [ 296.088166][T11553] loop2: AHDI p1 [ 296.089642][T11553] loop2: partition table partially beyond EOD, truncated [ 296.099901][T11309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.106723][T11309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.109796][T11309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.113153][T11309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.115666][T11309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.118931][T11309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.123865][T11309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.125737][ T39] kauditd_printk_skb: 37 callbacks suppressed [ 296.125744][ T39] audit: type=1326 audit(1737356729.248:3252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11554 comm="syz.6.1349" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98579 code=0x7ffc0000 [ 296.136574][ T39] audit: type=1326 audit(1737356729.248:3253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11554 comm="syz.6.1349" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98579 code=0x7ffc0000 [ 296.143730][ T39] audit: type=1326 audit(1737356729.258:3254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11554 comm="syz.6.1349" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f98579 code=0x7ffc0000 [ 296.154772][ T39] audit: type=1326 audit(1737356729.258:3255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11554 comm="syz.6.1349" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98579 code=0x7ffc0000 [ 296.165058][ T39] audit: type=1326 audit(1737356729.258:3256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11554 comm="syz.6.1349" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98579 code=0x7ffc0000 [ 296.174860][ T39] audit: type=1326 audit(1737356729.268:3257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11554 comm="syz.6.1349" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf7f98579 code=0x7ffc0000 [ 296.183291][ T39] audit: type=1326 audit(1737356729.268:3258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11554 comm="syz.6.1349" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98579 code=0x7ffc0000 [ 296.192399][ T39] audit: type=1326 audit(1737356729.268:3259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11554 comm="syz.6.1349" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98579 code=0x7ffc0000 [ 296.194222][T11518] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.199192][ T39] audit: type=1326 audit(1737356729.268:3260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11554 comm="syz.6.1349" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f98579 code=0x7ffc0000 [ 296.208363][ T39] audit: type=1326 audit(1737356729.268:3261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11554 comm="syz.6.1349" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98579 code=0x7ffc0000 [ 296.211404][T11309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.219689][T11309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.223466][T11309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.226550][T11309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.229058][T11309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.232260][T11309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.235642][T11309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.341452][ T57] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 296.386843][T11518] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.410325][T11309] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.413349][T11309] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.416108][T11309] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.419174][T11309] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.452781][ T5954] Bluetooth: hci0: command tx timeout [ 296.466904][ T8936] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.469825][ T8936] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.512742][T11518] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.544178][ T8933] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.547295][ T8933] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.711755][T11518] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.001596][ T12] bridge_slave_1: left allmulticast mode [ 297.003857][ T12] bridge_slave_1: left promiscuous mode [ 297.006144][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.015583][ T12] bridge_slave_0: left allmulticast mode [ 297.017229][ T12] bridge_slave_0: left promiscuous mode [ 297.018888][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.325457][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 297.335676][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 297.340734][ T12] bond0 (unregistering): Released all slaves [ 297.382616][T11518] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 297.392261][T11518] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 297.404714][T11518] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 297.417797][T11518] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 297.481743][T11518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.489356][T11518] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.494371][ T8933] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.496375][ T8933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.506285][ T8893] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.509106][ T8893] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.629344][T11518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.635632][ T12] hsr_slave_0: left promiscuous mode [ 297.638398][ T12] hsr_slave_1: left promiscuous mode [ 297.642164][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.645184][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.649009][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.653366][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.681110][ T12] veth1_macvtap: left promiscuous mode [ 297.682747][ T12] veth0_macvtap: left promiscuous mode [ 297.684372][ T12] veth1_vlan: left promiscuous mode [ 297.685896][ T12] veth0_vlan: left promiscuous mode [ 297.994803][ T5957] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 298.000745][ T5957] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 298.010718][ T5957] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 298.017216][ T5957] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 298.020490][ T5957] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 298.024986][ T5957] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 298.148986][T11616] netlink: 'syz.6.1352': attribute type 2 has an invalid length. [ 298.152329][T11616] netlink: 'syz.6.1352': attribute type 1 has an invalid length. [ 298.220417][T11619] binder: 11618:11619 ioctl c018620c 20000140 returned -22 [ 298.299478][T11621] input: syz0 as /devices/virtual/input/input11 [ 298.316332][T11616] 9pnet: Could not find request transport: virtI† [ 298.523521][ T5957] Bluetooth: hci0: command tx timeout [ 298.884326][ T12] team0 (unregistering): Port device team_slave_1 removed [ 298.989522][ T12] team0 (unregistering): Port device team_slave_0 removed [ 299.771607][T11518] veth0_vlan: entered promiscuous mode [ 299.775467][T11518] veth1_vlan: entered promiscuous mode [ 299.778890][T11607] chnl_net:caif_netlink_parms(): no params data found [ 299.801611][T11664] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1363'. [ 299.831896][T11607] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.834599][T11607] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.837281][T11607] bridge_slave_0: entered allmulticast mode [ 299.839333][T11607] bridge_slave_0: entered promiscuous mode [ 299.842340][T11518] veth0_macvtap: entered promiscuous mode [ 299.844781][T11607] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.847576][T11607] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.850512][T11607] bridge_slave_1: entered allmulticast mode [ 299.855020][T11607] bridge_slave_1: entered promiscuous mode [ 299.894402][T11607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.898145][T11518] veth1_macvtap: entered promiscuous mode [ 299.901436][T11607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.926271][T11607] team0: Port device team_slave_0 added [ 299.931544][T11607] team0: Port device team_slave_1 added [ 299.960764][T11518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.970953][T11518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.973776][T11518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.976776][T11518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.979510][T11518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.989974][T11518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.994975][T11518] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.013310][T11607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.015316][T11607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.022944][T11607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.026822][T11518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.029894][T11518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.034711][T11518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.038390][T11518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.042064][T11518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.045066][T11518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.048325][T11518] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.050753][T11607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.053092][ T5957] Bluetooth: hci3: command tx timeout [ 300.056193][T11607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.064270][T11607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.074860][T11518] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.077388][T11518] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.079873][T11518] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.082996][T11518] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.113170][T11607] hsr_slave_0: entered promiscuous mode [ 300.118839][T11607] hsr_slave_1: entered promiscuous mode [ 300.120702][T11607] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 300.123045][T11607] Cannot create hsr debugfs directory [ 300.171018][ T8931] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.173302][ T8931] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.265206][T11607] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.277048][ T8933] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.280669][ T8933] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.576545][T11607] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.601185][ T5957] Bluetooth: hci0: command tx timeout [ 300.636136][T11607] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.668358][T11679] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1344'. [ 300.707725][T11607] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.791451][ T12] bridge_slave_1: left allmulticast mode [ 300.796271][ T12] bridge_slave_1: left promiscuous mode [ 300.798189][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.801352][ T12] bridge_slave_0: left allmulticast mode [ 300.802981][ T12] bridge_slave_0: left promiscuous mode [ 300.804647][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.139764][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 301.146113][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 301.164241][ T12] bond0 (unregistering): Released all slaves [ 301.222770][T11607] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 301.226154][T11607] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 301.229692][T11607] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 301.236813][T11607] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 301.264937][T11607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.279339][T11607] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.294240][ T8933] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.296455][ T8933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.301976][ T8933] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.304179][ T8933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.320816][T11607] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 301.326214][T11607] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 301.447169][T11607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.467812][T11607] veth0_vlan: entered promiscuous mode [ 301.474818][T11692] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 301.482075][T11607] veth1_vlan: entered promiscuous mode [ 301.540219][T11607] veth0_macvtap: entered promiscuous mode [ 301.547491][T11607] veth1_macvtap: entered promiscuous mode [ 301.578963][T11607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.582450][T11607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.586310][T11607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.589533][T11607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.593751][T11607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.597252][T11607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.600104][T11607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.603378][T11607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.608146][T11607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.614566][T11607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.617741][T11607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.620551][T11607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.623932][T11607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.626835][T11607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.630033][T11607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.633037][T11607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.636208][T11607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.640666][T11607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.650487][ T12] hsr_slave_0: left promiscuous mode [ 301.658840][ T12] hsr_slave_1: left promiscuous mode [ 301.665471][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.667726][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.675702][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 301.679978][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.748770][ T12] veth1_macvtap: left promiscuous mode [ 301.750135][ T12] veth0_macvtap: left promiscuous mode [ 301.752427][ T12] veth1_vlan: left promiscuous mode [ 301.752526][ T12] veth0_vlan: left promiscuous mode [ 301.767093][T11706] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 301.767114][T11706] CIFS mount error: No usable UNC path provided in device string! [ 301.767114][T11706] [ 301.767312][T11706] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 302.113602][T11714] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1372'. [ 302.124883][ T5957] Bluetooth: hci3: command tx timeout [ 302.151970][T11711] xt_CT: No such helper "snmp_trap" [ 302.513099][ T12] team0 (unregistering): Port device team_slave_1 removed [ 302.612291][ T12] team0 (unregistering): Port device team_slave_0 removed [ 302.691036][ T5957] Bluetooth: hci0: command tx timeout [ 303.207679][T11607] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.210212][T11607] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.212802][T11607] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.215276][T11607] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.264150][ T8935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.267265][ T8935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.280626][ T8933] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.283060][ T8933] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.346032][ T39] kauditd_printk_skb: 37 callbacks suppressed [ 303.346043][ T39] audit: type=1804 audit(1737356736.468:3299): pid=11726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.1375" name="/newroot/20/file1" dev="fuse" ino=1 res=1 errno=0 [ 303.355028][ T39] audit: type=1804 audit(1737356736.468:3300): pid=11719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.1375" name="/newroot/20/file1" dev="fuse" ino=1 res=1 errno=0 [ 303.374689][T11732] loop2: detected capacity change from 0 to 7 [ 303.377856][T11732] Dev loop2: unable to read RDB block 7 [ 303.379800][T11732] loop2: AHDI p1 [ 303.380888][T11732] loop2: partition table partially beyond EOD, truncated [ 303.657369][T11751] netlink: 'syz.6.1379': attribute type 2 has an invalid length. [ 303.753501][T11753] netlink: 'syz.5.1381': attribute type 2 has an invalid length. [ 303.755947][T11753] netlink: 'syz.5.1381': attribute type 1 has an invalid length. [ 303.834644][T11755] 9pnet: Could not find request transport: virtI† [ 303.978868][ T8933] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.303193][ T8933] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.372212][ T8933] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.956589][T11785] loop2: detected capacity change from 0 to 7 [ 304.959165][T11785] Dev loop2: unable to read RDB block 7 [ 304.962524][T11785] loop2: AHDI p1 [ 304.965505][T11785] loop2: partition table partially beyond EOD, truncated [ 305.049580][ T5954] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 305.054859][ T5954] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 305.059270][ T5954] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 305.063647][ T5954] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 305.066503][ T5954] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 305.070371][ T5954] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 305.183150][T11789] chnl_net:caif_netlink_parms(): no params data found [ 305.250392][T11789] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.254100][T11789] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.256271][T11789] bridge_slave_0: entered allmulticast mode [ 305.258495][T11789] bridge_slave_0: entered promiscuous mode [ 305.265476][T11789] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.267663][T11789] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.269929][T11789] bridge_slave_1: entered allmulticast mode [ 305.276374][T11789] bridge_slave_1: entered promiscuous mode [ 305.325873][T11789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.337846][T11789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.401246][T11789] team0: Port device team_slave_0 added [ 305.410103][T11789] team0: Port device team_slave_1 added [ 305.421795][T11801] bond0: entered promiscuous mode [ 305.423461][T11801] bond_slave_0: entered promiscuous mode [ 305.425712][T11801] bond_slave_1: entered promiscuous mode [ 305.527003][T11789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.529063][T11789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.537237][T11789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.542443][T11789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.544450][T11789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.551816][T11789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.571988][ T8933] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.604068][T11789] hsr_slave_0: entered promiscuous mode [ 305.606243][T11789] hsr_slave_1: entered promiscuous mode [ 305.608267][T11789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 305.610487][T11789] Cannot create hsr debugfs directory [ 305.905873][ T8933] bridge_slave_1: left allmulticast mode [ 305.907543][ T8933] bridge_slave_1: left promiscuous mode [ 305.909250][ T8933] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.913414][ T8933] bridge_slave_0: left allmulticast mode [ 305.915074][ T8933] bridge_slave_0: left promiscuous mode [ 305.916745][ T8933] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.240542][T11813] netlink: 'syz.7.1393': attribute type 2 has an invalid length. [ 306.243960][T11813] netlink: 'syz.7.1393': attribute type 1 has an invalid length. [ 306.301509][T11813] 9pnet: Could not find request transport: virtI† [ 306.569382][ T8933] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.574714][ T8933] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 306.578504][ T8933] bond0 (unregistering): Released all slaves [ 306.917140][ T39] audit: type=1800 audit(1737356740.038:3301): pid=11811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1393" name="cpuset.effective_cpus" dev="9p" ino=37618395 res=0 errno=0 [ 306.975977][ T8933] hsr_slave_0: left promiscuous mode [ 306.984758][ T8933] hsr_slave_1: left promiscuous mode [ 306.989123][ T8933] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.991717][ T8933] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.997360][ T8933] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.999501][ T8933] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 307.033652][ T8933] veth1_macvtap: left promiscuous mode [ 307.035293][ T8933] veth0_macvtap: left promiscuous mode [ 307.036982][ T8933] veth1_vlan: left promiscuous mode [ 307.038514][ T8933] veth0_vlan: left promiscuous mode [ 307.107399][T11841] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1397'. [ 307.161048][ T5957] Bluetooth: hci3: command tx timeout [ 307.367267][T11855] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1399'. [ 307.920474][ T8933] team0 (unregistering): Port device team_slave_1 removed [ 308.000982][ T8933] team0 (unregistering): Port device team_slave_0 removed [ 308.653161][T11789] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 308.657535][T11789] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 308.661500][T11789] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 308.676457][T11789] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 308.723222][T11789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.730534][T11789] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.736208][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.739242][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.745507][ T216] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.748491][ T216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.877326][T11789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.902096][T11789] veth0_vlan: entered promiscuous mode [ 308.909004][T11789] veth1_vlan: entered promiscuous mode [ 308.927756][T11789] veth0_macvtap: entered promiscuous mode [ 308.931707][T11789] veth1_macvtap: entered promiscuous mode [ 308.939965][T11789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.943504][T11789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.946370][T11789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.949428][T11789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.953334][T11789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.956459][T11789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.961997][T11789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.966908][T11789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.969993][T11789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.973843][T11789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.977110][T11789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.980081][T11789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.983369][T11789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.989335][T11895] loop2: detected capacity change from 0 to 7 [ 308.992730][T11789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.995542][T11895] Dev loop2: unable to read RDB block 7 [ 308.996489][T11789] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.997212][T11895] loop2: AHDI p1 [ 309.000872][T11789] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.001075][T11789] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.001101][T11789] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.004252][T11897] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1408'. [ 309.007892][T11895] loop2: partition table partially beyond EOD, truncated [ 309.068327][ T216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.073359][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.074116][ T216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.076704][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.165636][T11908] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1411'. [ 309.182123][T11908] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1411'. [ 309.340836][T11927] [ 309.341601][T11927] ====================================================== [ 309.343710][T11927] WARNING: possible circular locking dependency detected [ 309.345702][T11927] 6.13.0-rc7-syzkaller-00209-g9528d418de4d #0 Not tainted SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 309.348338][T11927] ------------------------------------------------------ [ 309.351436][T11927] syz.7.1410/11927 is trying to acquire lock: [ 309.353600][T11927] ffff88801ac79560 (&mm->mmap_lock){++++}-{4:4}, at: __might_fault+0xe3/0x190 [ 309.356764][T11927] [ 309.356764][T11927] but task is already holding lock: [ 309.358942][T11927] ffff888023fbd758 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x33/0x70 [ 309.361745][T11927] [ 309.361745][T11927] which lock already depends on the new lock. [ 309.361745][T11927] [ 309.364874][T11927] [ 309.364874][T11927] the existing dependency chain (in reverse order) is: [ 309.368550][T11927] [ 309.368550][T11927] -> #4 (&q->debugfs_mutex){+.+.}-{4:4}: [ 309.371732][T11927] __mutex_lock+0x19b/0xa60 [ 309.373347][T11927] blk_register_queue+0x13c/0x4f0 [ 309.374957][T11927] add_disk_fwnode+0x785/0x1300 [ 309.376679][T11927] brd_alloc.isra.0+0x50a/0x7c0 [ 309.378222][T11927] brd_init+0x12b/0x1d0 [ 309.379578][T11927] do_one_initcall+0x128/0x630 [ 309.381100][T11927] kernel_init_freeable+0x58f/0x8b0 [ 309.382806][T11927] kernel_init+0x1c/0x2b0 [ 309.384624][T11927] ret_from_fork+0x45/0x80 [ 309.386574][T11927] ret_from_fork_asm+0x1a/0x30 [ 309.388205][T11927] [ 309.388205][T11927] -> #3 (&q->sysfs_lock){+.+.}-{4:4}: [ 309.390478][T11927] __mutex_lock+0x19b/0xa60 [ 309.392485][T11927] __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 309.394953][T11927] blk_mq_update_nr_hw_queues+0x2a/0x40 [ 309.396855][T11927] nbd_start_device+0x15b/0xd70 [ 309.398978][T11927] nbd_ioctl+0x21a/0xfd0 [ 309.400908][T11927] compat_blkdev_ioctl+0x2f7/0x750 [ 309.403130][T11927] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 309.405427][T11927] __do_fast_syscall_32+0x73/0x120 [ 309.407607][T11927] do_fast_syscall_32+0x32/0x80 [ 309.409318][T11927] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 309.411329][T11927] [ 309.411329][T11927] -> #2 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 309.413762][T11927] blk_mq_submit_bio+0x1fb6/0x24c0 [ 309.415390][T11927] __submit_bio+0x384/0x540 [ 309.416898][T11927] submit_bio_noacct_nocheck+0x698/0xd70 [ 309.418774][T11927] submit_bio_noacct+0x93a/0x1e20 [ 309.420386][T11927] mpage_readahead+0x41d/0x590 [ 309.421905][T11927] read_pages+0x1a8/0xdc0 [ 309.423311][T11927] page_cache_ra_unbounded+0x3dc/0x750 [ 309.425002][T11927] force_page_cache_ra+0x24b/0x340 [ 309.426616][T11927] page_cache_sync_ra+0x110/0x9c0 [ 309.428273][T11927] filemap_get_pages+0xd7b/0x1be0 [ 309.430432][T11927] filemap_read+0x3ca/0xd70 [ 309.432490][T11927] blkdev_read_iter+0x187/0x480 [ 309.434651][T11927] vfs_read+0x87f/0xbe0 [ 309.436314][T11927] ksys_read+0x12b/0x250 [ 309.438089][T11927] do_syscall_64+0xcd/0x250 [ 309.439797][T11927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.441654][T11927] [ 309.441654][T11927] -> #1 (mapping.invalidate_lock#2){++++}-{4:4}: [ 309.444083][T11927] down_read+0x9a/0x330 [ 309.445492][T11927] page_cache_ra_unbounded+0x173/0x750 [ 309.447511][T11927] page_cache_ra_order+0x8f2/0xc80 [ 309.449141][T11927] page_cache_async_ra+0x5cb/0x8a0 [ 309.450902][T11927] filemap_fault+0xd69/0x2820 [ 309.452445][T11927] __do_fault+0x10a/0x490 [ 309.453842][T11927] do_pte_missing+0xebd/0x3e00 [ 309.455377][T11927] __handle_mm_fault+0x103c/0x2a40 [ 309.456973][T11927] handle_mm_fault+0x3fa/0xaa0 [ 309.458493][T11927] __get_user_pages+0x8d9/0x3b50 [ 309.460116][T11927] get_dump_page+0xff/0x230 [ 309.461968][T11927] dump_user_range+0x135/0x8c0 [ 309.464080][T11927] elf_core_dump+0x2baa/0x3df0 [ 309.466213][T11927] do_coredump+0x2dd5/0x43e0 [ 309.468216][T11927] get_signal+0x23f3/0x2610 [ 309.469654][T11927] arch_do_signal_or_restart+0x90/0x7e0 [ 309.471631][T11927] syscall_exit_to_user_mode+0x150/0x2a0 [ 309.474113][T11927] __do_fast_syscall_32+0x80/0x120 [ 309.476023][T11927] do_fast_syscall_32+0x32/0x80 [ 309.477575][T11927] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 309.479543][T11927] [ 309.479543][T11927] -> #0 (&mm->mmap_lock){++++}-{4:4}: [ 309.481874][T11927] __lock_acquire+0x249e/0x3c40 [ 309.483469][T11927] lock_acquire.part.0+0x11b/0x380 [ 309.485148][T11927] __might_fault+0x11b/0x190 [ 309.486625][T11927] _copy_from_user+0x29/0xd0 [ 309.488114][T11927] __blk_trace_setup+0xa8/0x180 [ 309.489664][T11927] blk_trace_setup+0x47/0x70 [ 309.491168][T11927] sg_ioctl+0x7a3/0x26b0 [ 309.492632][T11927] compat_ptr_ioctl+0x6b/0xa0 [ 309.494686][T11927] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 309.497044][T11927] __do_fast_syscall_32+0x73/0x120 [ 309.499320][T11927] do_fast_syscall_32+0x32/0x80 [ 309.501504][T11927] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 309.503600][T11927] [ 309.503600][T11927] other info that might help us debug this: [ 309.503600][T11927] [ 309.506532][T11927] Chain exists of: [ 309.506532][T11927] &mm->mmap_lock --> &q->sysfs_lock --> &q->debugfs_mutex [ 309.506532][T11927] [ 309.510201][T11927] Possible unsafe locking scenario: [ 309.510201][T11927] [ 309.512340][T11927] CPU0 CPU1 [ 309.513913][T11927] ---- ---- [ 309.515651][T11927] lock(&q->debugfs_mutex); [ 309.517388][T11927] lock(&q->sysfs_lock); [ 309.520132][T11927] lock(&q->debugfs_mutex); [ 309.522992][T11927] rlock(&mm->mmap_lock); [ 309.524402][T11927] [ 309.524402][T11927] *** DEADLOCK *** [ 309.524402][T11927] [ 309.526860][T11927] 1 lock held by syz.7.1410/11927: [ 309.528362][T11927] #0: ffff888023fbd758 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x33/0x70 [ 309.531130][T11927] [ 309.531130][T11927] stack backtrace: [ 309.533000][T11927] CPU: 1 UID: 0 PID: 11927 Comm: syz.7.1410 Not tainted 6.13.0-rc7-syzkaller-00209-g9528d418de4d #0 [ 309.536421][T11927] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 309.540708][T11927] Call Trace: [ 309.542068][T11927] [ 309.543266][T11927] dump_stack_lvl+0x116/0x1f0 [ 309.544878][T11927] print_circular_bug+0x41c/0x610 [ 309.546582][T11927] check_noncircular+0x31a/0x400 [ 309.548170][T11927] ? __pfx_check_noncircular+0x10/0x10 [ 309.549799][T11927] ? lockdep_lock+0xc6/0x200 [ 309.551202][T11927] ? __pfx_lockdep_lock+0x10/0x10 [ 309.552670][T11927] __lock_acquire+0x249e/0x3c40 [ 309.554135][T11927] ? __pfx___lock_acquire+0x10/0x10 [ 309.555708][T11927] ? __pfx_mark_lock+0x10/0x10 [ 309.557255][T11927] lock_acquire.part.0+0x11b/0x380 [ 309.559227][T11927] ? __might_fault+0xe3/0x190 [ 309.561079][T11927] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 309.563181][T11927] ? rcu_is_watching+0x12/0xc0 [ 309.564589][T11927] ? trace_lock_acquire+0x14e/0x1f0 [ 309.566074][T11927] ? blk_trace_setup+0x33/0x70 [ 309.567515][T11927] ? __might_fault+0xe3/0x190 [ 309.568949][T11927] ? lock_acquire+0x2f/0xb0 [ 309.570289][T11927] ? __might_fault+0xe3/0x190 [ 309.571666][T11927] ? __might_fault+0xe3/0x190 [ 309.573013][T11927] __might_fault+0x11b/0x190 [ 309.574318][T11927] ? __might_fault+0xe3/0x190 [ 309.575677][T11927] _copy_from_user+0x29/0xd0 [ 309.577006][T11927] __blk_trace_setup+0xa8/0x180 [ 309.578530][T11927] ? __pfx___blk_trace_setup+0x10/0x10 [ 309.580319][T11927] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 309.582036][T11927] blk_trace_setup+0x47/0x70 [ 309.583372][T11927] sg_ioctl+0x7a3/0x26b0 [ 309.584600][T11927] ? __pfx_sg_ioctl+0x10/0x10 [ 309.585957][T11927] ? __pfx_lock_release+0x10/0x10 [ 309.587421][T11927] ? trace_lock_acquire+0x14e/0x1f0 [ 309.588985][T11927] ? __fget_files+0x206/0x3a0 [ 309.590613][T11927] ? __pfx_sg_ioctl+0x10/0x10 [ 309.592319][T11927] compat_ptr_ioctl+0x6b/0xa0 [ 309.594127][T11927] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 309.596254][T11927] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 309.598293][T11927] __do_fast_syscall_32+0x73/0x120 [ 309.600279][T11927] do_fast_syscall_32+0x32/0x80 [ 309.602233][T11927] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 309.604685][T11927] RIP: 0023:0xf7f02579 [ 309.606254][T11927] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 309.613407][T11927] RSP: 002b:00000000f501455c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 309.616603][T11927] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000c0481273 [ 309.619634][T11927] RDX: 00000000200000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 309.622660][T11927] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 309.625431][T11927] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 309.627696][T11927] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 309.630178][T11927] [ 309.954069][ T8933] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.108694][ T8933] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.220685][ T8933] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.354844][ T8933] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.471687][ T8933] bridge_slave_1: left allmulticast mode [ 310.473337][ T8933] bridge_slave_1: left promiscuous mode [ 310.475083][ T8933] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.477838][ T8933] bridge_slave_0: left allmulticast mode [ 310.479560][ T8933] bridge_slave_0: left promiscuous mode [ 310.481470][ T8933] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.681365][ T8933] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 310.683943][ T8933] bond_slave_0: left promiscuous mode [ 310.686149][ T8933] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 310.688731][ T8933] bond_slave_1: left promiscuous mode [ 310.690686][ T8933] bond0 (unregistering): Released all slaves [ 311.044095][ T8933] hsr_slave_0: left promiscuous mode [ 311.045916][ T8933] hsr_slave_1: left promiscuous mode [ 311.047675][ T8933] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.049826][ T8933] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.052402][ T8933] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.054548][ T8933] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.057675][ T8933] veth1_macvtap: left promiscuous mode [ 311.059294][ T8933] veth0_macvtap: left promiscuous mode [ 311.061128][ T8933] veth1_vlan: left promiscuous mode [ 311.062676][ T8933] veth0_vlan: left promiscuous mode [ 311.234041][ T8933] team0 (unregistering): Port device team_slave_1 removed [ 311.273686][ T8933] team0 (unregistering): Port device team_slave_0 removed [ 311.746159][ T8933] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.244146][ T8933] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.283079][ T8933] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.333694][ T8933] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.393091][ T8933] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.453656][ T8933] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.513630][ T8933] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.579535][ T8933] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.622769][ T8933] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.675099][ T8933] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.723769][ T8933] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.785099][ T8933] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.856801][ T8933] bridge_slave_1: left allmulticast mode [ 313.858569][ T8933] bridge_slave_1: left promiscuous mode [ 313.860264][ T8933] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.863706][ T8933] bridge_slave_0: left allmulticast mode [ 313.865353][ T8933] bridge_slave_0: left promiscuous mode [ 313.866989][ T8933] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.872039][ T8933] bridge_slave_1: left allmulticast mode [ 313.874303][ T8933] bridge_slave_1: left promiscuous mode [ 313.876582][ T8933] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.880446][ T8933] bridge_slave_0: left allmulticast mode [ 313.882837][ T8933] bridge_slave_0: left promiscuous mode [ 313.884519][ T8933] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.887272][ T8933] bridge_slave_1: left allmulticast mode [ 313.888900][ T8933] bridge_slave_1: left promiscuous mode [ 313.890540][ T8933] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.893997][ T8933] bridge_slave_0: left allmulticast mode [ 313.895617][ T8933] bridge_slave_0: left promiscuous mode [ 313.897236][ T8933] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.254203][ T8933] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 314.257593][ T8933] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 314.260579][ T8933] bond0 (unregistering): Released all slaves [ 314.335818][ T8933] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 314.338572][ T8933] bond_slave_0: left promiscuous mode [ 314.340789][ T8933] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 314.343422][ T8933] bond_slave_1: left promiscuous mode [ 314.345250][ T8933] bond0 (unregistering): Released all slaves [ 314.350284][ T8933] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 314.353392][ T8933] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 314.356270][ T8933] bond0 (unregistering): Released all slaves [ 314.867045][ T8933] hsr_slave_0: left promiscuous mode [ 314.869027][ T8933] hsr_slave_1: left promiscuous mode [ 314.870896][ T8933] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.873313][ T8933] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.875667][ T8933] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.877767][ T8933] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.882081][ T8933] hsr_slave_0: left promiscuous mode [ 314.884489][ T8933] hsr_slave_1: left promiscuous mode [ 314.886850][ T8933] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.889075][ T8933] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.891650][ T8933] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.893942][ T8933] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.897515][ T8933] hsr_slave_0: left promiscuous mode [ 314.899836][ T8933] hsr_slave_1: left promiscuous mode [ 314.903319][ T8933] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.906267][ T8933] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.909335][ T8933] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.912296][ T8933] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.917240][ T8933] veth1_macvtap: left promiscuous mode [ 314.918917][ T8933] veth0_macvtap: left promiscuous mode [ 314.920587][ T8933] veth1_vlan: left promiscuous mode [ 314.922593][ T8933] veth0_vlan: left promiscuous mode [ 314.925291][ T8933] veth1_macvtap: left promiscuous mode [ 314.927145][ T8933] veth0_macvtap: left promiscuous mode [ 314.928795][ T8933] veth1_vlan: left promiscuous mode [ 314.930325][ T8933] veth0_vlan: left promiscuous mode [ 314.932623][ T8933] veth1_macvtap: left promiscuous mode [ 314.934435][ T8933] veth0_macvtap: left promiscuous mode [ 314.936052][ T8933] veth1_vlan: left promiscuous mode [ 314.937564][ T8933] veth0_vlan: left promiscuous mode [ 315.194482][ T8933] team0 (unregistering): Port device team_slave_1 removed [ 315.239045][ T8933] team0 (unregistering): Port device team_slave_0 removed [ 315.487327][ T8933] team0 (unregistering): Port device team_slave_1 removed [ 315.529573][ T8933] team0 (unregistering): Port device team_slave_0 removed [ 315.849354][ T8933] team0 (unregistering): Port device team_slave_1 removed [ 315.889486][ T8933] team0 (unregistering): Port device team_slave_0 removed VM DIAGNOSIS: 07:05:42 Registers: info registers vcpu 0 CPU#0 RAX=ffffed100c970128 RBX=ffffed100c970129 RCX=ffffffff8176c14e RDX=ffffed100c970129 RSI=0000000000000004 RDI=ffff888064b80940 RBP=ffffed100c970128 RSP=ffffc90003487638 R8 =0000000000000001 R9 =ffffed100c970128 R10=ffff888064b80943 R11=0000000000000000 R12=ffff888064b80948 R13=ffff888064b80950 R14=ffff888064b80928 R15=ffffc90003487898 RIP=ffffffff81fbb883 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b400000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002001d000 CR3=0000000068f70000 CR4=00352ef0 DR0=0000000000000003 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000033 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85145395 RDI=ffffffff9a66e200 RBP=ffffffff9a66e1c0 RSP=ffffc90006457310 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=0000000000000033 R14=ffffffff85145330 R15=0000000000000000 RIP=ffffffff851453bf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b500000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000068f70000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000002 RBX=0000000000037f68 RCX=ffffffff817645e9 RDX=fffffbfff203a53b RSI=ffffffff8bb19b00 RDI=ffffffff8bb19b40 RBP=0000000000000002 RSP=ffffc90003ba7708 R8 =0000000000000000 R9 =fffffbfff203a53a R10=ffffffff901d29d7 R11=0000000000000000 R12=ffffffff8ddbac80 R13=0000000000000008 R14=0000000000000001 R15=ffffc90003ba7cb8 RIP=ffffffff817f194e RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7fb6e40 CR3=000000000db7e000 CR4=00352ef0 DR0=0000000000000003 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f7453ff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000002cc474 RBX=0000000000000003 RCX=ffffffff8b1a8899 RDX=ffffed10056e6fee RSI=ffffffff8bb19b00 RDI=ffffffff81702c79 RBP=ffffed10039df488 RSP=ffffc9000049fe08 R8 =0000000000000000 R9 =ffffed10056e6fed R10=ffff88802b737f6b R11=0000000000000001 R12=0000000000000003 R13=ffff88801cefa440 R14=ffffffff901d29d0 R15=0000000000000000 RIP=ffffffff8b1a9c7f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffdd72ac018 CR3=0000000000862000 CR4=00352ef0 DR0=0000000000000003 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000