last executing test programs: 33.659673034s ago: executing program 1 (id=181): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0xfffffffd, 0x0, 0x34324152, 0x7, 0xa, [{}, {0x10}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x21, 0xa, 0x10000000000002) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_tracing={0x1a, 0x6, &(0x7f00000003c0)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r0}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x3}, @map_fd={0x18, 0x4, 0x1, 0x0, r0}], &(0x7f0000000400)='syzkaller\x00', 0xa3a, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x5, 0x800000, 0x5}, 0x10, 0x2e57a, 0xffffffffffffffff, 0x3, &(0x7f00000005c0)=[r0, r3, r0, r0, r0, r0, 0xffffffffffffffff], &(0x7f0000000600)=[{0x2, 0x1, 0xd, 0xb}, {0x8d, 0x2, 0xb, 0xb}, {0x2, 0x3, 0xa, 0x2}], 0x10, 0x9, @void, @value}, 0x94) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000480)=ANY=[@ANYBLOB="080100000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000002000000000000000"], 0x5000) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) r5 = fcntl$dupfd(r4, 0x0, r4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TCFLSH(r5, 0x400455c8, 0x20000000009) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r7, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$rose(r2, &(0x7f0000000380)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, 0x1, @null}, 0x1c) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e22, 0x7, @local, 0x55437151}, {0xa, 0x4e20, 0xffffffff, @mcast1, 0xfffffffc}, 0x0, {[0x60000000, 0x435d3c68, 0x8, 0xe, 0x3, 0x4, 0x3, 0x2]}}, 0x5c) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000008080)={0x0, 0x0, &(0x7f0000001240)=[{0x0, 0x2198}, {0x0}], 0x2}, 0x0) 33.386453424s ago: executing program 1 (id=183): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) read(r0, &(0x7f00000002c0)=""/199, 0xc7) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x8000000000000000}, 0x18) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0xff07) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) quotactl$Q_QUOTAOFF(0x0, &(0x7f0000009180)=@filename='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) 25.83645242s ago: executing program 1 (id=183): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) read(r0, &(0x7f00000002c0)=""/199, 0xc7) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x8000000000000000}, 0x18) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0xff07) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) quotactl$Q_QUOTAOFF(0x0, &(0x7f0000009180)=@filename='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) 16.96790982s ago: executing program 1 (id=183): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) read(r0, &(0x7f00000002c0)=""/199, 0xc7) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x8000000000000000}, 0x18) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0xff07) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) quotactl$Q_QUOTAOFF(0x0, &(0x7f0000009180)=@filename='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) 10.735930848s ago: executing program 1 (id=183): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) read(r0, &(0x7f00000002c0)=""/199, 0xc7) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x8000000000000000}, 0x18) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0xff07) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) quotactl$Q_QUOTAOFF(0x0, &(0x7f0000009180)=@filename='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) 4.889236842s ago: executing program 3 (id=318): r0 = socket$packet(0x11, 0x3, 0x300) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000040)={0x1, 0x0, [{0x2, 0xffffffff, 0x1, 0x8, 0x4, 0x7, 0x8}]}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000010c0)=0x5, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000500)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="000087dd0003110004"], 0x7a) 4.708909598s ago: executing program 3 (id=319): r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000002880)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)={0x38, r2, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x38}}, 0x0) r3 = syz_pidfd_open(r0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xc}}, 0x14}}, 0x0) r6 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, &(0x7f0000000040)) write$USERIO_CMD_SET_PORT_TYPE(r6, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r6, &(0x7f00000000c0), 0x2) write$USERIO_CMD_REGISTER(r6, &(0x7f0000000800)={0x0, 0x2}, 0x2) ioctl$EXT4_IOC_MIGRATE(r3, 0xff05) getpid() (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000002880)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)={0x38, r2, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x38}}, 0x0) (async) syz_pidfd_open(r0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r4}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r5, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xc}}, 0x14}}, 0x0) (async) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) (async) arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, &(0x7f0000000040)) (async) write$USERIO_CMD_SET_PORT_TYPE(r6, &(0x7f00000002c0)={0x1, 0x5}, 0x2) (async) write$USERIO_CMD_REGISTER(r6, &(0x7f00000000c0), 0x2) (async) write$USERIO_CMD_REGISTER(r6, &(0x7f0000000800)={0x0, 0x2}, 0x2) (async) ioctl$EXT4_IOC_MIGRATE(r3, 0xff05) (async) 4.448774565s ago: executing program 3 (id=321): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$evdev(&(0x7f00000000c0), 0x3f, 0x822f01) openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r2 = fsopen(&(0x7f0000000000)='binfmt_misc\x00', 0x1) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x87) r4 = syz_io_uring_setup(0x2ddd, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25GETINFOOLD(r6, 0x541b, &(0x7f0000000100)) syz_io_uring_setup(0x5e2, &(0x7f0000000200)={0x0, 0x2, 0x0, 0x0, 0x2, 0x0, r4}, &(0x7f0000000180)=0x0, &(0x7f0000000380)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) clock_gettime(0x0, &(0x7f0000007080)={0x0, 0x0}) recvmmsg(r3, &(0x7f0000006fc0)=[{{&(0x7f0000000300)=@xdp, 0x80, &(0x7f0000002800)=[{0x0}, {&(0x7f00000003c0)=""/4, 0x4}, {&(0x7f0000000400)=""/224, 0xe0}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000007240)=""/4101, 0x1005}, {&(0x7f0000000080)=""/54, 0x36}, {&(0x7f0000000540)=""/168, 0xa8}, {&(0x7f0000002740)=""/137, 0x89}, {&(0x7f0000000640)=""/119, 0x77}], 0x9, &(0x7f0000002880)=""/205, 0xcd}, 0x2}, {{&(0x7f0000002980)=@nfc, 0x80, &(0x7f0000004d00)=[{&(0x7f0000002a00)=""/4096, 0x1000}, {&(0x7f0000003a00)=""/162, 0xa2}, {&(0x7f0000003ac0)=""/15, 0xf}, {&(0x7f0000003b00)=""/4096, 0x1000}, {&(0x7f0000004b00)=""/199, 0xc7}, {&(0x7f0000004c00)=""/253, 0xfd}], 0x6, &(0x7f0000004d40)=""/98, 0x62}, 0x5}, {{&(0x7f0000004dc0)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000005480)=[{&(0x7f0000004e40)=""/40, 0x28}, {&(0x7f0000004e80)=""/68, 0x44}, {&(0x7f0000004f00)=""/102, 0x66}, {&(0x7f0000004f80)=""/31, 0x1f}, {&(0x7f0000004fc0)=""/200, 0xc8}, {&(0x7f00000050c0)=""/129, 0x81}, {&(0x7f0000005180)=""/71, 0x47}, {&(0x7f0000005200)=""/70, 0x46}, {&(0x7f0000005380)=""/232, 0xe8}], 0x9, &(0x7f0000005500)=""/4096, 0x1000}, 0x701bc100}, {{&(0x7f0000006500)=@ethernet={0x0, @multicast}, 0x80, &(0x7f00000066c0)=[{&(0x7f0000006580)=""/222, 0xde}, {&(0x7f0000006680)}], 0x2, &(0x7f0000006700)=""/186, 0xba}, 0xc}, {{0x0, 0x0, &(0x7f0000006a80), 0x0, &(0x7f0000006ac0)=""/23, 0x17}, 0x5}, {{&(0x7f0000006b00)=@ieee802154, 0x80, &(0x7f0000006f40)=[{&(0x7f0000006b80)=""/234, 0xea}, {0x0}, {&(0x7f0000006d40)=""/188, 0xbc}, {&(0x7f0000006e00)=""/36, 0x24}, {&(0x7f0000006e40)=""/61, 0x3d}, {&(0x7f0000006e80)=""/192, 0xc0}], 0x6, &(0x7f0000006f80)}, 0x350}], 0x6, 0x40000002, &(0x7f00000070c0)={r8, r9+10000000}) r10 = epoll_create1(0x0) r11 = fcntl$dupfd(r10, 0x2, 0xffffffffffffffff) fanotify_mark(0xffffffffffffffff, 0x35feb67394f63e85, 0x0, r11, 0x0) recvfrom(r1, &(0x7f0000007100)=""/156, 0x9c, 0x2, &(0x7f00000071c0)=@phonet={0x23, 0x5, 0x2, 0x1}, 0x80) syz_io_uring_submit(r7, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) 3.918510978s ago: executing program 0 (id=322): memfd_create(0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @sliced={0x9, [0xd2, 0x7, 0xe7, 0xe, 0x3, 0x8, 0x1, 0x8, 0x9, 0x2, 0xfff5, 0x3, 0x1000, 0x8, 0xd, 0x0, 0x8186, 0x3, 0x403, 0xfff, 0x2, 0x3, 0x1, 0x8bb8, 0x1, 0xfff, 0x8, 0x1, 0x8cc4, 0x7fff, 0x208, 0x6, 0x5, 0x51, 0x3, 0x4, 0x4, 0x9, 0x401, 0x5, 0x5, 0x3, 0x5, 0x2, 0xfff8, 0x9, 0x2, 0x1]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x1000, 0x0) io_uring_enter(0xffffffffffffffff, 0x8aa, 0x0, 0x0, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r1, 0xc0044dff, &(0x7f0000001480)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240)='\x00', 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x6, {0x1, 0x8000000000000001}, 0x54}, 0x1) kexec_load(0x1000, 0x2, &(0x7f0000000280)=[{&(0x7f00000003c0)="227b35245201d1d907bee9a03cde7634c354e1e79f07e620b8da9d65418b4608788f1f330d02ba9ea185c541802b5c2afb56ddd7df69fb2ce8993a6bd014385f18e3a4bee2e979e7867505e649473555d5bef843a462977eff2acf9ff3b3fb80f4891c2fb63358753ee8e5254079c2bb009fe3dd64f4a9a44ebb9816ffa42b5067c302bd8dd14a1dacab1ca1bb5aaaf31e7d3ac17bf444fbaa7dd05dea8b4afd66337d78d94619b75b4d7cb22e635d086ad9f32fd8e3aecc4f35fa524fa3eaa586e2e4", 0xc3, 0x0, 0x7f}, {&(0x7f00000004c0)="4d1c8f288a6faa99968519dbf3ff247f909d4e5ea9f9add98251a4614d18f8812d1d46946d45dd0b4cf636d6cc71d5b488428b4ef25bdd104d09ad4bc5f057969fc7132c1478c93c281a6660fa3ba0214ec1d5be50c4c52a546a", 0x5a, 0xfffffffa}], 0xb0000) 3.069385622s ago: executing program 2 (id=324): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xfdb6c9e888cb62cd, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0xe5, 0xffe, 0x0, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x1, 0x0, {@ip4=@remote, 0x86dd}}}]}, 0x38}, 0x1, 0xfe0f0000, 0x0, 0x4}, 0x88800) 3.069128547s ago: executing program 1 (id=183): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) read(r0, &(0x7f00000002c0)=""/199, 0xc7) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x8000000000000000}, 0x18) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0xff07) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) quotactl$Q_QUOTAOFF(0x0, &(0x7f0000009180)=@filename='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) 2.449016154s ago: executing program 0 (id=325): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x84) ioctl$FS_IOC_GETFLAGS(r0, 0x80046601, &(0x7f0000000440)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x0, 0x9, 0x25}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_emit_vhci(0x0, 0xd) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x20, 0x0, @fd, 0x5, 0x0, 0x3ff}) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x10, 0x0) socket$unix(0x1, 0x5, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="5200000002"], 0x8) landlock_restrict_self(0xffffffffffffffff, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x2) 2.448603226s ago: executing program 2 (id=326): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @private=0xa010101}, 0x10) r1 = socket$rxrpc(0x21, 0x2, 0xa) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r2 = syz_open_dev$evdev(&(0x7f00000002c0), 0x4, 0x183000) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x4, [@typedef={0x10, 0x0, 0x0, 0x8, 0x3}, @ptr={0xd, 0x0, 0x0, 0x2, 0x2}, @enum={0x10, 0x1, 0x0, 0x6, 0x4, [{0x2, 0x82f}]}]}, {0x0, [0x0, 0x30]}}, &(0x7f0000000300), 0x48, 0x0, 0x1, 0x7ff, 0x10000, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0xfffffffe, 0x1, 0xa, 0xb}, {0x5, 0x2, 0x13, 0x2}], 0x10, 0x37, @void, @value}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async, rerun: 32) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 32) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) (async, rerun: 64) setresuid(0x0, 0x0, 0x0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r6 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r6, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1e) (async) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x1) writev(r7, &(0x7f0000000780)=[{0x0}], 0x1) (async, rerun: 64) connect$pptp(r6, &(0x7f0000000700)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) (rerun: 64) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000300)='net/arp\x00') (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000180)={0x0, 0x8, 0x0, 0x5, "2a000000000000005a957fe0213b2e100af028f0030b2eff0b61e6e66b8f37ff"}) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r1, 0x4) 2.448352839s ago: executing program 3 (id=327): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000001c0)={0x0, 0x3f00, &(0x7f0000000180)={&(0x7f0000000100)={0x34, r1, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xffffffffffff0103}}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x8000) 2.328358945s ago: executing program 3 (id=328): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0) mount$tmpfs(0x700, &(0x7f0000000140)='./file0\x00', 0x0, 0x820061, &(0x7f0000000200)={[{@size={'size', 0x3d, [0x35]}}]}) 2.328024595s ago: executing program 3 (id=329): writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000200)="4800000014", 0x5}], 0x1) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f00000000c0)={0x1, 0x0, 0x6, &(0x7f0000000080)={0xc, "df1e970974a75196eeb58543bd9d2ba55aeacc9859bdc9f2472342370527626623"}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) sendmsg$inet6(r3, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)="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", 0xfa}, {&(0x7f0000000700)="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", 0x2d7}], 0x2}, 0x40001880) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "fd9192068590ef44", "4ded6853efa14266912ec2cb350be183", "15861006", "84d6d4ab8749281f"}, 0x28) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r4) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x4060010}, 0x4080194) openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x546042, 0x0) 1.872552329s ago: executing program 0 (id=330): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0cc5640, &(0x7f0000000540)={0x1, @sliced={0x0, [0x12a9, 0x400, 0xea, 0x8, 0xffff, 0x3, 0x6, 0x8, 0x83, 0x1, 0xe3c7, 0x5, 0x6, 0x8, 0x9, 0x200, 0xa, 0x9, 0x5, 0x3, 0x1ff, 0xad3f, 0x5, 0x4, 0x0, 0x7, 0x6, 0x8, 0x101, 0x515, 0x7, 0x2, 0x5, 0x9, 0x2, 0xfc00, 0x10, 0xfff, 0x9, 0x23, 0x38, 0x4, 0xfff4, 0x675, 0xa, 0x6, 0x800, 0x8], 0x3}}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x0, 0x2449}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000040)={{@host, 0xfffffffd}, @host, 0x0, 0xf, 0x4, 0xfffffffffffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x13, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x7}, {}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, @printk={@p, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0xe1}, {0x5, 0x1, 0xb, 0x1, 0xa, 0xfff8}, {}, {}, {}, {0x85, 0x0, 0x0, 0x5}}]}, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r3, 0x7a4, &(0x7f0000000180)={{@host}, 0x400, 0x8f, 0x2, 0x4}) syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0xce5c, 0x80, 0x0, 0x89}, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000006780)=[{{0x0, 0x0, 0x0}}], 0x80000000000020c, 0x0) 1.06904754s ago: executing program 2 (id=331): ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000700)) 1.06879921s ago: executing program 2 (id=332): r0 = openat$6lowpan_enable(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r1) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a"], 0x54}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) write$6lowpan_enable(r0, &(0x7f0000000040)='1', 0x1) 1.018976058s ago: executing program 2 (id=333): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) read(r0, &(0x7f00000002c0)=""/199, 0xc7) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x8000000000000000}, 0x18) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0xff07) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) chdir(&(0x7f0000000140)='./bus\x00') quotactl$Q_QUOTAOFF(0x0, &(0x7f0000009180)=@filename='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000480)) 959.326394ms ago: executing program 0 (id=334): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x5607, 0x4) ioctl$VT_ACTIVATE(r0, 0x5606, 0x4) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 879.364029ms ago: executing program 0 (id=335): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2a, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vim2m(0xffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0cc5640, &(0x7f0000000540)={0x1, @sliced={0x0, [0x12a9, 0x400, 0xea, 0x8, 0xffff, 0x3, 0x6, 0x8, 0x83, 0x1, 0xe3c7, 0x5, 0x6, 0x8, 0x9, 0x200, 0xa, 0x9, 0x5, 0x3, 0x1ff, 0xad3f, 0x5, 0x4, 0x0, 0x7, 0x6, 0x8, 0x101, 0x515, 0x7, 0x2, 0x5, 0x9, 0x2, 0xfc00, 0x10, 0xfff, 0x9, 0x23, 0x38, 0x4, 0xfff4, 0x675, 0xa, 0x6, 0x800, 0x8], 0x3}}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x0, 0x2449}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000040)={{@host, 0xfffffffd}, @host, 0x0, 0xf, 0x4, 0xfffffffffffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x13, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x7}, {}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, @printk={@p, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0xe1}, {0x5, 0x1, 0xb, 0x1, 0xa, 0xfff8}, {}, {}, {}, {0x85, 0x0, 0x0, 0x5}}]}, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r3, 0x7a4, &(0x7f0000000180)={{@host}, 0x400, 0x8f, 0x2, 0x4}) syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0xce5c, 0x80, 0x0, 0x89}, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c0000002000010300000000fbdbdd25022000000000000000000000080001000000000008000b"], 0x2c}}, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000006780)=[{{0x0, 0x0, 0x0}}], 0x80000000000020c, 0x0) 158.813801ms ago: executing program 2 (id=336): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/173, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) tkill(r0, 0x2c) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x6, 0x4, 0x24b5, 0x1be, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7ff, 0x81, 0xd, 0x4005, 0x2}) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r5, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="740000000a0a0101000000eaffffff00020000080c0010400000030800064000000000080007400000003a08000440000000020900020073797a3000000000300011800d00010073796e70726f7879400000001c000280060001400001000005000200ff000000050002000a"], 0x74}, 0x1, 0x0, 0x0, 0x4010}, 0x200000d0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000000100)=0x2, 0x4) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x2, 0x0, 0x0}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f00000005c0)=ANY=[@ANYRES8=0x0, @ANYRES32, @ANYBLOB], &(0x7f0000000480)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)=[{0x1, 0x4, 0x9, 0x7}], 0x10, 0x6, @void, @value}, 0x94) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 0s ago: executing program 0 (id=337): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = openat$vicodec0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0185647, &(0x7f0000000300)={0xf000000, 0x101, 0xffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x8000000, '\x00', @string=0x0}}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x1c0000, 'syz1\x00', 0x5}, 0x0, 0x3, 0xffffffff, 0xffffffffffffffff, 0x0, 0x4, 'syz0\x00', 0x0}) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f00000000c0)={0x0, 0x4533, 0x10100, 0xffffdffe, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f0000000340)=0x0) syz_open_dev$rtc(0x0, 0x9, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0x6, 0x3, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000030000000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x400, 0x70bd2c, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x5, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$ptys(0xc, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x7c45, &(0x7f0000000080)={0x0, 0x20, 0x13100, 0x0, 0xfffffffc}, 0x0, 0x0) r9 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r9, 0x5381) mkdirat(r9, &(0x7f0000000000)='./file2\x00', 0x7c) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x145842, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:45184' (ED25519) to the list of known hosts. [ 41.732922][ T5934] cgroup: Unknown subsys name 'net' [ 41.853538][ T5934] cgroup: Unknown subsys name 'cpuset' [ 41.856736][ T5934] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 42.653410][ T5934] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 44.913657][ T5952] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 44.923809][ T5955] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 44.924270][ T5954] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 44.924630][ T5960] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 44.925315][ T5960] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 44.926128][ T5955] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 44.926838][ T5960] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 44.927259][ T5960] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 44.927385][ T5957] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 44.928201][ T5961] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 44.929438][ T5954] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 44.931270][ T5955] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 44.934420][ T5954] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 44.936590][ T5961] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 44.936728][ T5955] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 44.938761][ T5954] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 44.940376][ T5955] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 44.941539][ T5960] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 44.941904][ T5960] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 44.942023][ T5960] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 44.942672][ T5954] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 44.944759][ T5955] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 44.947834][ T5954] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 44.978421][ T5954] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 45.133712][ T5956] chnl_net:caif_netlink_parms(): no params data found [ 45.150282][ T5945] chnl_net:caif_netlink_parms(): no params data found [ 45.189276][ T5946] chnl_net:caif_netlink_parms(): no params data found [ 45.251687][ T5947] chnl_net:caif_netlink_parms(): no params data found [ 45.284345][ T5956] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.286831][ T5956] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.289074][ T5956] bridge_slave_0: entered allmulticast mode [ 45.291462][ T5956] bridge_slave_0: entered promiscuous mode [ 45.298522][ T5956] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.301799][ T5956] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.304679][ T5956] bridge_slave_1: entered allmulticast mode [ 45.307840][ T5956] bridge_slave_1: entered promiscuous mode [ 45.321093][ T5945] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.323741][ T5945] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.325817][ T5945] bridge_slave_0: entered allmulticast mode [ 45.328283][ T5945] bridge_slave_0: entered promiscuous mode [ 45.365654][ T5945] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.367750][ T5945] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.369827][ T5945] bridge_slave_1: entered allmulticast mode [ 45.372232][ T5945] bridge_slave_1: entered promiscuous mode [ 45.404022][ T5956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.442473][ T5946] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.445443][ T5946] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.448358][ T5946] bridge_slave_0: entered allmulticast mode [ 45.451768][ T5946] bridge_slave_0: entered promiscuous mode [ 45.467171][ T5956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.472188][ T5945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.475961][ T5945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.478677][ T5946] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.480844][ T5946] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.482903][ T5946] bridge_slave_1: entered allmulticast mode [ 45.485192][ T5946] bridge_slave_1: entered promiscuous mode [ 45.502372][ T5947] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.504445][ T5947] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.506519][ T5947] bridge_slave_0: entered allmulticast mode [ 45.508647][ T5947] bridge_slave_0: entered promiscuous mode [ 45.544824][ T5947] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.546898][ T5947] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.548988][ T5947] bridge_slave_1: entered allmulticast mode [ 45.553105][ T5947] bridge_slave_1: entered promiscuous mode [ 45.567253][ T5956] team0: Port device team_slave_0 added [ 45.582289][ T5946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.595656][ T5947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.599678][ T5956] team0: Port device team_slave_1 added [ 45.606636][ T5947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.611280][ T5945] team0: Port device team_slave_0 added [ 45.613957][ T5946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.643086][ T5945] team0: Port device team_slave_1 added [ 45.675705][ T5947] team0: Port device team_slave_0 added [ 45.687044][ T5946] team0: Port device team_slave_0 added [ 45.689335][ T5956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.691506][ T5956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.698711][ T5956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.704463][ T5956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.706725][ T5956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.714213][ T5956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.718438][ T5947] team0: Port device team_slave_1 added [ 45.728351][ T5946] team0: Port device team_slave_1 added [ 45.770923][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.773015][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.780408][ T5945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.784481][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.786504][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.795117][ T5945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.816601][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.819460][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.829881][ T5946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.835864][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.837900][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.845385][ T5947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.874732][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.877554][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.887526][ T5946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.892596][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.895444][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.904598][ T5947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.910578][ T5956] hsr_slave_0: entered promiscuous mode [ 45.914428][ T5956] hsr_slave_1: entered promiscuous mode [ 45.946656][ T5945] hsr_slave_0: entered promiscuous mode [ 45.948645][ T5945] hsr_slave_1: entered promiscuous mode [ 45.950672][ T5945] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.952950][ T5945] Cannot create hsr debugfs directory [ 46.027408][ T5946] hsr_slave_0: entered promiscuous mode [ 46.030218][ T5946] hsr_slave_1: entered promiscuous mode [ 46.033502][ T5946] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.036592][ T5946] Cannot create hsr debugfs directory [ 46.058449][ T5947] hsr_slave_0: entered promiscuous mode [ 46.061174][ T5947] hsr_slave_1: entered promiscuous mode [ 46.063132][ T5947] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.065793][ T5947] Cannot create hsr debugfs directory [ 46.227669][ T5956] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 46.250178][ T5956] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 46.255758][ T5956] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 46.260175][ T5956] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 46.289610][ T5945] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 46.295451][ T5945] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 46.300514][ T5945] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 46.305516][ T5945] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 46.332249][ T5946] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 46.341791][ T5946] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 46.345234][ T5946] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 46.348840][ T5946] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 46.362155][ T5947] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 46.368283][ T5947] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 46.371964][ T5947] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 46.382840][ T5947] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 46.414347][ T5945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.423410][ T5956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.436742][ T5945] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.445602][ T5956] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.463528][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.465791][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.469070][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.471296][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.474983][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.477211][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.488930][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.491149][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.500200][ T5946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.523070][ T5946] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.539613][ T5947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.543430][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.546111][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.557774][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.560721][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.577044][ T5947] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.583471][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.585569][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.591988][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.594362][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.599304][ T5946] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 46.634227][ T5956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.656729][ T5956] veth0_vlan: entered promiscuous mode [ 46.665104][ T5945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.667750][ T5956] veth1_vlan: entered promiscuous mode [ 46.687839][ T5956] veth0_macvtap: entered promiscuous mode [ 46.695302][ T5946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.700453][ T5947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.704211][ T5956] veth1_macvtap: entered promiscuous mode [ 46.709085][ T5945] veth0_vlan: entered promiscuous mode [ 46.717544][ T5945] veth1_vlan: entered promiscuous mode [ 46.721962][ T5956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.734280][ T5956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.738973][ T5947] veth0_vlan: entered promiscuous mode [ 46.741717][ T5956] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.744374][ T5956] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.746852][ T5956] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.749347][ T5956] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.766073][ T5947] veth1_vlan: entered promiscuous mode [ 46.773009][ T5946] veth0_vlan: entered promiscuous mode [ 46.777866][ T5946] veth1_vlan: entered promiscuous mode [ 46.788189][ T5945] veth0_macvtap: entered promiscuous mode [ 46.796888][ T5945] veth1_macvtap: entered promiscuous mode [ 46.808614][ T5947] veth0_macvtap: entered promiscuous mode [ 46.819130][ T5947] veth1_macvtap: entered promiscuous mode [ 46.824954][ T5945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.828594][ T5945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.832522][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.836797][ T5945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.839880][ T5945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.843529][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.848698][ T5945] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.849040][ T220] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.851731][ T5945] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.853810][ T220] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.856390][ T5945] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.861277][ T5945] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.866335][ T5946] veth0_macvtap: entered promiscuous mode [ 46.879125][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.882551][ T5946] veth1_macvtap: entered promiscuous mode [ 46.882692][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.890284][ T5946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.893857][ T5946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.897626][ T5946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.902352][ T5946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.907210][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.912229][ T5947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.915372][ T5947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.918315][ T5947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.922098][ T5947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.924885][ T5947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.927830][ T5947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.932033][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.936057][ T5946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.939085][ T5946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.942547][ T5946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.946669][ T5946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.951821][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.955796][ T5947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.957993][ T5956] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 46.958812][ T5947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.964198][ T5301] Bluetooth: hci2: command tx timeout [ 46.968568][ T5947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.970590][ T5301] Bluetooth: hci3: command tx timeout [ 46.970623][ T5954] Bluetooth: hci0: command tx timeout [ 46.971973][ T5947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.978483][ T5947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.981923][ T5947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.985875][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.997125][ T5947] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.999852][ T5947] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.002756][ T5947] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.005255][ T5947] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.010820][ T5946] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.014382][ T5946] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.017939][ T5946] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.021901][ T5946] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.040219][ T1234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.041797][ T5301] Bluetooth: hci1: command tx timeout [ 47.043070][ T1234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.068815][ T1137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.073811][ T1137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.081474][ T84] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.088775][ T84] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.094057][ T1137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.097067][ T1137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.102797][ T1234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.105148][ T1234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.123801][ T84] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.126520][ T84] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.166805][ T6015] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:0 [ 47.175461][ T6016] overlayfs: failed to resolve './file1': -2 [ 47.259775][ T6023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5'. [ 47.443978][ T6030] Process accounting resumed [ 47.592984][ T35] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 47.756769][ T35] usb 6-1: config 64 has an invalid interface number: 55 but max is 0 [ 47.759600][ T35] usb 6-1: config 64 has no interface number 0 [ 47.764878][ T35] usb 6-1: config 64 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 47.769030][ T35] usb 6-1: config 64 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 47.776726][ T35] usb 6-1: config 64 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 30328, setting to 64 [ 47.781554][ T35] usb 6-1: config 64 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 47.786015][ T35] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 47.789697][ T35] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.799519][ T6027] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 47.807125][ T35] ldusb 6-1:64.55: LD USB Device #0 now attached to major 180 minor 0 [ 48.059269][ T6006] usb 6-1: USB disconnect, device number 2 [ 48.091394][ T6006] ldusb 6-1:64.55: LD USB Device #0 now disconnected [ 48.155772][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 48.203391][ T6041] ======================================================= [ 48.203391][ T6041] WARNING: The mand mount option has been deprecated and [ 48.203391][ T6041] and is ignored by this kernel. Remove the mand [ 48.203391][ T6041] option from the mount to silence this warning. [ 48.203391][ T6041] ======================================================= [ 48.329700][ T6043] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:0 [ 49.041424][ T5301] Bluetooth: hci3: command tx timeout [ 49.041450][ T5954] Bluetooth: hci2: command tx timeout [ 49.050935][ T5954] Bluetooth: hci0: command tx timeout [ 49.130591][ T5954] Bluetooth: hci1: command tx timeout [ 49.199866][ T6053] can0: slcan on ttyS3. [ 49.583671][ T6052] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12'. [ 49.756578][ T6068] program syz.2.13 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 49.761160][ T6068] ubi0: attaching mtd0 [ 49.765858][ T6068] ubi0: scanning is finished [ 49.767299][ T6068] ubi0: empty MTD device detected [ 49.888426][ T6068] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 49.893871][ T6068] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 49.897073][ T6068] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 49.900086][ T6068] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 49.904253][ T6068] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 49.906970][ T6068] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 49.910273][ T6068] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3895817182 [ 49.914430][ T6068] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 49.918859][ T6073] ubi0: background thread "ubi_bgt0d" started, PID 6073 [ 49.951023][ T6048] can0 (unregistered): slcan off ttyS3. [ 50.195638][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 51.019564][ T6099] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:0 [ 51.121178][ T5954] Bluetooth: hci0: command tx timeout [ 51.122801][ T5954] Bluetooth: hci3: command tx timeout [ 51.124367][ T5954] Bluetooth: hci2: command tx timeout [ 51.146449][ T6102] capability: warning: `syz.3.19' uses deprecated v2 capabilities in a way that may be insecure [ 51.200399][ T5954] Bluetooth: hci1: command tx timeout [ 51.289557][ T6106] Process accounting resumed [ 51.917613][ T6113] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:0 [ 52.274950][ T6123] xt_CT: You must specify a L4 protocol and not use inversions on it [ 52.371984][ T5951] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 52.520712][ T5951] usb 8-1: Using ep0 maxpacket: 8 [ 52.524062][ T5951] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 52.528113][ T5951] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 52.534751][ T5951] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 52.538323][ T5951] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 52.548822][ T5951] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 52.552932][ T5951] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.203032][ T5954] Bluetooth: hci3: command tx timeout [ 53.204754][ T5954] Bluetooth: hci0: command tx timeout [ 53.206451][ T5954] Bluetooth: hci2: command tx timeout [ 53.280516][ T64] Bluetooth: hci1: command tx timeout [ 53.341907][ T6120] mkiss: ax0: crc mode is auto. [ 53.378105][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 53.453587][ T6137] Process accounting resumed [ 53.690498][ T6120] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.730420][ T6140] misc userio: Invalid payload size [ 53.732332][ T6140] misc userio: No port type given on /dev/userio [ 53.734918][ T6140] misc userio: Invalid payload size [ 53.749613][ T6142] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:0 [ 53.752808][ T6120] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.856096][ T6120] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.952718][ T6120] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.165064][ T6120] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.201922][ T6120] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.207404][ T6120] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.221216][ T6120] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.394581][ T6152] program syz.1.30 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 54.398837][ T6152] ubi: mtd0 is already attached to ubi0 [ 54.715771][ T6158] openvswitch: netlink: IPv4 tunnel dst address is zero [ 54.762503][ T6158] infiniband syz1: set down [ 54.764783][ T6158] infiniband syz1: added ipvlan0 [ 54.787281][ T6160] overlayfs: failed to resolve './file1': -2 [ 54.804757][ T6158] RDS/IB: syz1: added [ 54.806306][ T6158] smc: adding ib device syz1 with port count 1 [ 54.817448][ T6158] smc: ib device syz1 port 1 has pnetid [ 55.089005][ T6156] block nbd2: shutting down sockets [ 55.383286][ T5951] usb 8-1: usb_control_msg returned -71 [ 55.384965][ T5951] usbtmc 8-1:16.0: can't read capabilities [ 55.412611][ T5951] usb 8-1: USB disconnect, device number 2 [ 55.857612][ T6184] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:0 [ 56.747091][ T6198] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:0 [ 56.771185][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 56.775330][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 57.210599][ T6209] Process accounting resumed [ 57.951276][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 57.954864][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 57.960522][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 58.026428][ T6225] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:0 [ 58.121930][ T6227] netlink: 28 bytes leftover after parsing attributes in process `syz.3.45'. [ 58.244810][ T6229] Process accounting resumed [ 58.983395][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 58.986695][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 58.990733][ T6237] program syz.2.49 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.004268][ T6237] ubi: mtd0 is already attached to ubi0 [ 59.128855][ T6241] program syz.1.50 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.136106][ T6241] ubi: mtd0 is already attached to ubi0 [ 59.526040][ T6246] syz.3.51 uses obsolete (PF_INET,SOCK_PACKET) [ 59.730724][ T6256] program syz.3.55 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.750721][ T6256] ubi: mtd0 is already attached to ubi0 [ 59.906900][ T6263] ISOFS: Unable to identify CD-ROM format. [ 60.384502][ T6269] program syz.3.57 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 60.389132][ T6269] ubi: mtd0 is already attached to ubi0 [ 60.492741][ T6263] Process accounting resumed [ 60.715499][ T6278] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:0 [ 60.822037][ T6281] Process accounting resumed [ 61.652506][ T6309] input: syz1 as /devices/virtual/input/input6 [ 61.757865][ T6315] netlink: 288 bytes leftover after parsing attributes in process `syz.1.67'. [ 61.800006][ T6320] xt_NFQUEUE: number of queues (257) out of range (got 65786) [ 62.226123][ T6324] Process accounting resumed [ 62.456490][ T6328] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 62.458652][ T6328] overlayfs: failed to set xattr on upper [ 62.462336][ T6328] overlayfs: ...falling back to redirect_dir=nofollow. [ 62.464673][ T6328] overlayfs: ...falling back to index=off. [ 62.466366][ T6328] overlayfs: ...falling back to uuid=null. [ 62.475320][ T6328] evm: overlay not supported [ 62.521957][ T6334] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:0 [ 62.671159][ T6338] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:0 [ 62.824372][ T6343] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:0 [ 63.815331][ T6368] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:0 [ 64.420758][ T6383] overlayfs: failed to resolve './file1': -2 [ 64.567653][ T6386] Process accounting resumed [ 64.758245][ T6391] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:0 [ 65.128234][ T6397] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:0 [ 65.592223][ T6406] Process accounting resumed [ 67.053245][ T6442] futex_wake_op: syz.2.97 tries to shift op by -1; fix this program [ 67.083985][ T6439] overlayfs: failed to resolve './file1': -2 [ 67.107370][ T6442] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.185597][ T6448] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:0 [ 67.210144][ T6442] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.340786][ T6442] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.341191][ T6451] Process accounting resumed [ 67.428927][ T6442] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.619301][ T6442] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.625212][ T6442] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.632062][ T6442] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.637869][ T6442] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.901981][ T6460] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:0 [ 68.468991][ T6472] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 68.471658][ T6472] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 68.487947][ T6474] Cannot find add_set index 3 as target [ 69.135256][ T3221] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.137584][ T3221] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.139711][ T3221] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.142005][ T3221] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.144135][ T3221] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.146277][ T3221] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.148406][ T3221] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.151332][ T3221] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.154079][ T3221] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.156819][ T3221] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.158325][ T6490] overlayfs: failed to resolve './file1': -2 [ 69.159553][ T3221] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.165078][ T3221] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.167258][ T3221] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.169357][ T3221] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.171628][ T3221] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.174188][ T3221] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.176509][ T3221] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.179258][ T3221] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.182151][ T3221] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.184881][ T3221] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.189840][ T3221] hid-generic 0000:0000:0000.0002: hidraw1: HID v1000.00 Device [syz0] on syz0 [ 69.330439][ T6033] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 69.380459][ T6006] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 69.492324][ T6033] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 69.494807][ T6033] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 69.497740][ T6033] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 69.500469][ T6033] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 69.503622][ T6033] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 69.510464][ T6033] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 69.513106][ T6033] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 69.515418][ T6033] usb 6-1: Product: syz [ 69.516774][ T6033] usb 6-1: Manufacturer: syz [ 69.528610][ T6033] cdc_wdm 6-1:1.0: skipping garbage [ 69.530181][ T6033] cdc_wdm 6-1:1.0: skipping garbage [ 69.535920][ T6033] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 69.537734][ T6033] cdc_wdm 6-1:1.0: Unknown control protocol [ 69.545262][ T6006] usb 7-1: config 0 has no interfaces? [ 69.547836][ T6006] usb 7-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 69.551551][ T6006] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.557709][ T6006] usb 7-1: config 0 descriptor?? [ 69.781446][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 69.782537][ T6006] usb 6-1: USB disconnect, device number 3 [ 69.783501][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 69.787561][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 70.074313][ T6033] usb 7-1: USB disconnect, device number 2 [ 70.813839][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.816539][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.033652][ T6524] loop6: detected capacity change from 0 to 16384 [ 72.179869][ T39] audit: type=1326 audit(1737276876.441:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6525 comm="syz.0.118" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 72.189187][ T39] audit: type=1326 audit(1737276876.441:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6525 comm="syz.0.118" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 72.197558][ T39] audit: type=1326 audit(1737276876.461:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6525 comm="syz.0.118" exe="/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 72.207931][ T39] audit: type=1326 audit(1737276876.461:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6525 comm="syz.0.118" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 72.217015][ T39] audit: type=1326 audit(1737276876.461:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6525 comm="syz.0.118" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 72.229551][ T39] audit: type=1326 audit(1737276876.461:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6525 comm="syz.0.118" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 72.257134][ T39] audit: type=1326 audit(1737276876.461:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6525 comm="syz.0.118" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 72.265732][ T39] audit: type=1326 audit(1737276876.461:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6525 comm="syz.0.118" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 72.284415][ T39] audit: type=1326 audit(1737276876.461:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6525 comm="syz.0.118" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 72.291862][ T6529] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:0 [ 72.292148][ T39] audit: type=1326 audit(1737276876.461:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6525 comm="syz.0.118" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 72.580580][ T56] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 72.755257][ T56] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 72.757852][ T56] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 72.762851][ T56] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 72.765482][ T56] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 72.768725][ T56] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 72.774392][ T56] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 72.777095][ T56] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 72.779773][ T56] usb 7-1: Product: syz [ 72.781208][ T56] usb 7-1: Manufacturer: syz [ 72.831094][ T56] cdc_wdm 7-1:1.0: skipping garbage [ 72.833233][ T56] cdc_wdm 7-1:1.0: skipping garbage [ 72.837185][ T56] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 72.839441][ T56] cdc_wdm 7-1:1.0: Unknown control protocol [ 73.118590][ T6530] Bluetooth: Short BCSP packet [ 73.124221][ T45] Bluetooth: Error in BCSP hdr checksum [ 73.382193][ T1234] Bluetooth: Error in BCSP hdr checksum [ 73.659448][ T6005] usb 7-1: USB disconnect, device number 3 [ 73.949168][ T6564] netlink: 'syz.1.127': attribute type 10 has an invalid length. [ 73.963946][ T6564] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.968668][ T6564] team0: Port device batadv0 added [ 74.707899][ T6572] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:0 [ 75.097646][ T6577] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:0 [ 75.200566][ T5954] Bluetooth: hci4: command 0x1003 tx timeout [ 75.202571][ T64] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 75.754961][ T6592] fuse: Bad value for 'user_id' [ 75.756434][ T6592] fuse: Bad value for 'user_id' [ 75.912827][ T6598] program syz.1.136 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 75.917355][ T6598] ubi: mtd0 is already attached to ubi0 [ 76.302679][ T6605] Process accounting resumed [ 76.513192][ T6610] overlayfs: failed to resolve './file1': -2 [ 77.229550][ T6630] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 77.654414][ T6653] block device autoloading is deprecated and will be removed. [ 77.657740][ T6651] md: md2 stopped. [ 78.093824][ T6659] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:0 [ 78.410389][ T25] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 78.580395][ T25] usb 7-1: Using ep0 maxpacket: 8 [ 78.585690][ T25] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 78.590738][ T25] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 78.599573][ T25] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 78.610421][ T25] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 78.617906][ T25] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 78.627387][ T25] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 78.631235][ T25] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 78.638134][ T25] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 78.647649][ T25] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 78.656027][ T25] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 78.663785][ T25] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 78.666790][ T25] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 78.675482][ T25] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 78.682642][ T25] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 78.689122][ T25] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 78.726002][ T25] usb 7-1: string descriptor 0 read error: -22 [ 78.728758][ T25] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 78.734826][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.753341][ T25] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 78.845679][ T6668] overlayfs: failed to resolve './file1': -2 [ 78.965814][ T35] usb 7-1: USB disconnect, device number 4 [ 79.051409][ T6673] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:0 [ 79.175832][ T6676] input: syz1 as /devices/virtual/input/input7 [ 79.213636][ T6678] trusted_key: syz.1.156 sent an empty control message without MSG_MORE. [ 79.271523][ T6679] netlink: 224 bytes leftover after parsing attributes in process `syz.1.156'. [ 79.926696][ T6699] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:0 [ 80.251371][ T6711] Process accounting resumed [ 80.491318][ T6713] Process accounting resumed [ 81.041894][ T946] cfg80211: failed to load regulatory.db [ 81.100718][ T6725] overlayfs: failed to resolve './file1': -2 [ 81.133903][ T6730] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 81.220520][ T6718] overlayfs: workdir and upperdir must be separate subtrees [ 81.245967][ T6730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.168'. [ 81.881172][ T6758] Process accounting resumed [ 81.988511][ T6763] program syz.1.175 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 82.661062][ T6780] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 82.817341][ T45] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.912503][ T45] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.001955][ T45] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.069298][ T45] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.159816][ T45] bridge_slave_1: left allmulticast mode [ 83.161700][ T45] bridge_slave_1: left promiscuous mode [ 83.163990][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.171177][ T45] bridge_slave_0: left allmulticast mode [ 83.172849][ T45] bridge_slave_0: left promiscuous mode [ 83.174566][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.398512][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.403709][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.408709][ T45] bond0 (unregistering): Released all slaves [ 83.810492][ T45] hsr_slave_0: left promiscuous mode [ 83.813640][ T45] hsr_slave_1: left promiscuous mode [ 83.816634][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.819652][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.823832][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.826669][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.852830][ T45] veth1_macvtap: left promiscuous mode [ 83.855427][ T45] veth0_macvtap: left promiscuous mode [ 83.857676][ T45] veth1_vlan: left promiscuous mode [ 83.860034][ T45] veth0_vlan: left promiscuous mode [ 84.422655][ T45] team0 (unregistering): Port device team_slave_1 removed [ 84.476348][ T45] team0 (unregistering): Port device team_slave_0 removed [ 84.788272][ T45] team0 (unregistering): Port device batadv0 removed [ 84.800553][ T64] Bluetooth: hci0: command 0x0c1a tx timeout [ 84.800754][ T6780] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 85.617426][ T6780] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 85.623985][ T6780] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 85.627664][ T6780] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 85.629469][ T6780] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 85.633127][ T6780] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 85.637001][ T6780] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 85.639039][ T6780] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 85.643308][ T6780] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 85.660685][ T5954] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.664588][ T5954] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.667989][ T5954] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.671196][ T5954] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.674238][ T5954] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 85.677278][ T5954] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.848981][ T6868] program syz.2.188 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 85.854945][ T6868] ubi: mtd0 is already attached to ubi0 [ 85.906994][ T6786] chnl_net:caif_netlink_parms(): no params data found [ 86.022085][ T6786] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.029383][ T6786] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.033060][ T6786] bridge_slave_0: entered allmulticast mode [ 86.036909][ T6786] bridge_slave_0: entered promiscuous mode [ 86.044741][ T6786] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.047985][ T6786] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.055162][ T6786] bridge_slave_1: entered allmulticast mode [ 86.059751][ T6786] bridge_slave_1: entered promiscuous mode [ 86.114146][ T6786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.130141][ T6786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.195464][ T6786] team0: Port device team_slave_0 added [ 86.198908][ T6786] team0: Port device team_slave_1 added [ 86.224925][ T6786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.227420][ T6786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.234449][ T6786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.238149][ T6786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.240183][ T6786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.247902][ T6786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.277131][ T6786] hsr_slave_0: entered promiscuous mode [ 86.279482][ T6786] hsr_slave_1: entered promiscuous mode [ 86.283083][ T6786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.285742][ T6786] Cannot create hsr debugfs directory [ 86.892574][ T64] Bluetooth: hci0: command 0x0c1a tx timeout [ 87.257728][ T6786] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.273627][ T6786] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.276936][ T6786] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.280147][ T6786] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.321306][ T6786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.329011][ T6786] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.347457][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.350030][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.362202][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.364371][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.556635][ T6786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.610883][ T6786] veth0_vlan: entered promiscuous mode [ 87.621965][ T6786] veth1_vlan: entered promiscuous mode [ 87.665961][ T6786] veth0_macvtap: entered promiscuous mode [ 87.668948][ T6786] veth1_macvtap: entered promiscuous mode [ 87.677177][ T6786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.680089][ T6786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.682003][ T64] Bluetooth: hci2: command 0x0c1a tx timeout [ 87.684952][ T64] Bluetooth: hci3: command 0x0405 tx timeout [ 87.685401][ T6956] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:0 [ 87.688814][ T6786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.692260][ T6786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.697710][ T6786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.701191][ T6786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.704730][ T6786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.707954][ T6786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.712421][ T6786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.735794][ T6786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.739689][ T6786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.744609][ T6786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.748443][ T6786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.752728][ T6786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.760450][ T5954] Bluetooth: hci1: command tx timeout [ 87.763359][ T6786] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.766598][ T6786] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.769940][ T6786] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.774041][ T6786] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.811168][ T1234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.813609][ T1234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.833224][ T1234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.835482][ T1234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.156449][ T6957] Process accounting resumed [ 88.924152][ T7011] program syz.2.200 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 88.927298][ T7011] ubi: mtd0 is already attached to ubi0 [ 88.960583][ T5954] Bluetooth: hci0: command 0x0c1a tx timeout [ 89.571223][ T7027] input: syz1 as /devices/virtual/input/input8 [ 89.760418][ T5954] Bluetooth: hci3: command 0x0405 tx timeout [ 89.762956][ T5954] Bluetooth: hci2: command 0x0c1a tx timeout [ 89.784046][ T7036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.209'. [ 89.887781][ T7036] netlink: 104 bytes leftover after parsing attributes in process `syz.0.209'. [ 89.893060][ T7036] netlink: 104 bytes leftover after parsing attributes in process `syz.0.209'. [ 90.105409][ T7042] netlink: ct family unspecified [ 90.111041][ T7042] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 90.128574][ T7042] 9pnet: p9_errstr2errno: server reported unknown error @ [ 90.483554][ T1137] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.584558][ T7058] FAULT_INJECTION: forcing a failure. [ 90.584558][ T7058] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 90.596939][ T7055] IPv6: NLM_F_CREATE should be specified when creating new route [ 90.609380][ T7058] CPU: 0 UID: 0 PID: 7058 Comm: syz.0.213 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 90.610629][ T5954] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.612954][ T7058] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 90.612964][ T7058] Call Trace: [ 90.612968][ T7058] [ 90.612973][ T7058] dump_stack_lvl+0x16c/0x1f0 [ 90.621493][ T7058] should_fail_ex+0x497/0x5b0 [ 90.622885][ T7058] _copy_from_iter+0x29b/0x1400 [ 90.624320][ T7058] ? _copy_from_iter+0x159/0x1400 [ 90.625748][ T7058] ? __pfx__copy_from_iter+0x10/0x10 [ 90.627312][ T7058] ? __pfx__copy_from_iter+0x10/0x10 [ 90.628860][ T7058] ? __virt_addr_valid+0x1a4/0x590 [ 90.630388][ T7058] copy_page_from_iter+0xa5/0x120 [ 90.631870][ T7058] skb_copy_datagram_from_iter+0x29b/0x710 [ 90.633609][ T7058] packet_sendmsg+0x21ac/0x5660 [ 90.635060][ T7058] ? __pfx___might_resched+0x10/0x10 [ 90.636622][ T7058] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 90.638370][ T7058] ? __pfx_packet_sendmsg+0x10/0x10 [ 90.639900][ T7058] ? aa_pivotroot+0xeee/0x10a0 [ 90.641339][ T7058] ____sys_sendmsg+0x9ae/0xb40 [ 90.642751][ T7058] ? __pfx_____sys_sendmsg+0x10/0x10 [ 90.644305][ T7058] ? get_compat_msghdr+0x11b/0x170 [ 90.645836][ T7058] ___sys_sendmsg+0x135/0x1e0 [ 90.647249][ T7058] ? __pfx____sys_sendmsg+0x10/0x10 [ 90.648781][ T7058] ? __pfx_lock_release+0x10/0x10 [ 90.650324][ T7058] ? trace_lock_acquire+0x14e/0x1f0 [ 90.651854][ T7058] ? __fget_files+0x206/0x3a0 [ 90.653256][ T7058] __sys_sendmsg+0x16e/0x220 [ 90.654637][ T7058] ? __pfx___sys_sendmsg+0x10/0x10 [ 90.656163][ T7058] __do_fast_syscall_32+0x73/0x120 [ 90.657694][ T7058] do_fast_syscall_32+0x32/0x80 [ 90.659137][ T7058] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 90.660996][ T7058] RIP: 0023:0xf7f51579 [ 90.662221][ T7058] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 90.667838][ T7058] RSP: 002b:00000000f50a655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 90.670279][ T7058] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020002ac0 [ 90.672574][ T7058] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 90.674861][ T7058] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 90.677126][ T7058] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 90.679414][ T7058] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 90.681735][ T7058] [ 90.686225][ T5954] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.691809][ T5954] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.698208][ T5954] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.705095][ T5954] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 90.709260][ T5954] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.824422][ T7070] netlink: 277 bytes leftover after parsing attributes in process `syz.0.214'. [ 90.828236][ T7070] netlink: 277 bytes leftover after parsing attributes in process `syz.0.214'. [ 90.859149][ T7062] chnl_net:caif_netlink_parms(): no params data found [ 90.877637][ T7083] 9pnet: Unknown protocol version 9p2000. [ 90.947756][ T7062] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.950911][ T7062] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.953849][ T7062] bridge_slave_0: entered allmulticast mode [ 90.957171][ T7062] bridge_slave_0: entered promiscuous mode [ 90.961444][ T7062] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.964289][ T7062] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.967491][ T7062] bridge_slave_1: entered allmulticast mode [ 90.971315][ T7062] bridge_slave_1: entered promiscuous mode [ 91.006464][ T7062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.012874][ T7062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.040442][ T69] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 91.063745][ T7062] team0: Port device team_slave_0 added [ 91.068333][ T7062] team0: Port device team_slave_1 added [ 91.163592][ T7062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.165719][ T7062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.173429][ T7062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.177211][ T7062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.179230][ T7062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.186613][ T7062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.210463][ T69] usb 7-1: Using ep0 maxpacket: 16 [ 91.215244][ T69] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 91.218336][ T69] usb 7-1: config 0 has no interface number 0 [ 91.220888][ T69] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 91.225259][ T69] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 91.231756][ T69] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 91.232743][ T7062] hsr_slave_0: entered promiscuous mode [ 91.235251][ T69] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 91.240144][ T69] usb 7-1: Product: syz [ 91.242489][ T69] usb 7-1: SerialNumber: syz [ 91.242722][ T7062] hsr_slave_1: entered promiscuous mode [ 91.246651][ T7062] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.248804][ T7062] Cannot create hsr debugfs directory [ 91.278876][ T69] usb 7-1: config 0 descriptor?? [ 91.283562][ T69] cm109 7-1:0.8: invalid payload size 0, expected 4 [ 91.300934][ T69] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.8/input/input10 [ 91.551482][ C3] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 91.551586][ T5951] usb 7-1: USB disconnect, device number 5 [ 91.553681][ C3] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 91.559384][ T7097] FAULT_INJECTION: forcing a failure. [ 91.559384][ T7097] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.561369][ T5951] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 91.563030][ T7097] CPU: 3 UID: 0 PID: 7097 Comm: syz.0.220 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 91.568532][ T7097] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 91.571418][ T7097] Call Trace: [ 91.572350][ T7097] [ 91.573193][ T7097] dump_stack_lvl+0x16c/0x1f0 [ 91.574953][ T7097] should_fail_ex+0x497/0x5b0 [ 91.576688][ T7097] _copy_from_iter+0x29b/0x1400 [ 91.578064][ T7097] ? trace_lock_acquire+0x14e/0x1f0 [ 91.579572][ T7097] ? __alloc_skb+0x200/0x380 [ 91.580873][ T7097] ? __pfx__copy_from_iter+0x10/0x10 [ 91.582378][ T7097] ? __virt_addr_valid+0x1a4/0x590 [ 91.583905][ T7097] ? __virt_addr_valid+0x5e/0x590 [ 91.585361][ T7097] ? __phys_addr_symbol+0x30/0x80 [ 91.586822][ T7097] ? __check_object_size+0x488/0x710 [ 91.588359][ T7097] netlink_sendmsg+0x813/0xd70 [ 91.589761][ T7097] ? __pfx_netlink_sendmsg+0x10/0x10 [ 91.591238][ T7097] ____sys_sendmsg+0x9ae/0xb40 [ 91.592566][ T7097] ? __pfx_____sys_sendmsg+0x10/0x10 [ 91.594359][ T7097] ? get_compat_msghdr+0x11b/0x170 [ 91.596316][ T7097] ___sys_sendmsg+0x135/0x1e0 [ 91.597650][ T7097] ? __pfx____sys_sendmsg+0x10/0x10 [ 91.599115][ T7097] ? __pfx_lock_release+0x10/0x10 [ 91.600535][ T7097] ? trace_lock_acquire+0x14e/0x1f0 [ 91.601986][ T7097] ? __fget_files+0x206/0x3a0 [ 91.603286][ T7097] __sys_sendmsg+0x16e/0x220 [ 91.605007][ T7097] ? __pfx___sys_sendmsg+0x10/0x10 [ 91.606629][ T7097] __do_fast_syscall_32+0x73/0x120 [ 91.607987][ T7097] do_fast_syscall_32+0x32/0x80 [ 91.609372][ T7097] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 91.611117][ T7097] RIP: 0023:0xf7f51579 [ 91.612230][ T7097] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 91.618379][ T7097] RSP: 002b:00000000f50a655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 91.620747][ T7097] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200004c0 [ 91.623030][ T7097] RDX: 0000000000000110 RSI: 0000000000000000 RDI: 0000000000000000 [ 91.625257][ T7097] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 91.627501][ T7097] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 91.629733][ T7097] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 91.631974][ T7097] [ 91.678123][ T7101] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:0 [ 91.841012][ T64] Bluetooth: hci2: command 0x0c1a tx timeout [ 91.841056][ T5954] Bluetooth: hci3: command 0x0405 tx timeout [ 92.811140][ T5954] Bluetooth: hci1: command tx timeout [ 92.896556][ T1137] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.988159][ T1137] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.063361][ T1137] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.143021][ T7123] 9p: Unknown Cache mode or invalid value fscac [ 93.184338][ T1137] bridge_slave_1: left allmulticast mode [ 93.186674][ T1137] bridge_slave_1: left promiscuous mode [ 93.189007][ T1137] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.197079][ T1137] bridge_slave_0: left allmulticast mode [ 93.199359][ T1137] bridge_slave_0: left promiscuous mode [ 93.202740][ T1137] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.483411][ T1137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.490917][ T1137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.500241][ T1137] bond0 (unregistering): Released all slaves [ 93.810784][ T7147] input: syz0 as /devices/virtual/input/input11 [ 93.921449][ T1137] hsr_slave_0: left promiscuous mode [ 93.929413][ T1137] hsr_slave_1: left promiscuous mode [ 93.938382][ T7154] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:0 [ 93.939231][ T1137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.944402][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.949884][ T1137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.953180][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.972525][ T1137] veth1_macvtap: left promiscuous mode [ 93.974187][ T1137] veth0_macvtap: left promiscuous mode [ 93.975882][ T1137] veth1_vlan: left promiscuous mode [ 93.978418][ T1137] veth0_vlan: left promiscuous mode [ 94.689749][ T1137] team0 (unregistering): Port device team_slave_1 removed [ 94.715240][ T7163] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:0 [ 94.759817][ T1137] team0 (unregistering): Port device team_slave_0 removed [ 94.880901][ T5954] Bluetooth: hci1: command tx timeout [ 95.297927][ T7062] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.304107][ T7062] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.308719][ T7062] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.322152][ T7062] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.373888][ T7062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.397138][ T7062] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.404438][ T84] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.407375][ T84] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.415873][ T84] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.418137][ T84] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.510131][ T7062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.531309][ T7062] veth0_vlan: entered promiscuous mode [ 95.537829][ T7062] veth1_vlan: entered promiscuous mode [ 95.568353][ T7062] veth0_macvtap: entered promiscuous mode [ 95.595464][ T7062] veth1_macvtap: entered promiscuous mode [ 95.609578][ T7062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.614530][ T7062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.619263][ T7062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.623832][ T7062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.627716][ T7062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.631997][ T7062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.637057][ T7062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.646072][ T7062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.649571][ T7062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.652452][ T7062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.655998][ T7062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.659286][ T7062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.662638][ T7062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.667290][ T7062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.671870][ T7062] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.675213][ T7062] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.678513][ T7062] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.682043][ T7062] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.726184][ T220] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.728559][ T220] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.736946][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.741128][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.935182][ T7191] program syz.2.242 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.939674][ T7191] ubi: mtd0 is already attached to ubi0 [ 96.053303][ T7193] Zero length message leads to an empty skb [ 96.057960][ T7193] trusted_key: encrypted_key: insufficient parameters specified [ 96.198162][ T7194] Process accounting resumed [ 96.393556][ T7198] openvswitch: netlink: Actions may not be safe on all matching packets [ 96.794515][ T7210] netlink: 12 bytes leftover after parsing attributes in process `syz.2.248'. [ 96.803488][ T7211] bridge_slave_1: left allmulticast mode [ 96.803707][ T7210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.248'. [ 96.805256][ T7211] bridge_slave_1: left promiscuous mode [ 96.810757][ T7211] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.833938][ T7210] netlink: 'syz.2.248': attribute type 11 has an invalid length. [ 96.838043][ T7210] bridge_slave_1: left allmulticast mode [ 96.846802][ T7210] bridge_slave_1: left promiscuous mode [ 96.849697][ T7210] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.870687][ T7210] bridge1: port 1(bridge_slave_1) entered blocking state [ 96.871751][ T7213] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:0 [ 96.875150][ T7210] bridge1: port 1(bridge_slave_1) entered disabled state [ 96.880960][ T7210] bridge_slave_1: entered allmulticast mode [ 96.883358][ T7210] bridge_slave_1: entered promiscuous mode [ 97.141335][ T7216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.247'. [ 97.682821][ T7211] process 'syz.0.247' launched './file0' with NULL argv: empty string added [ 99.317362][ T68] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.549917][ T64] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 99.553839][ T64] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 99.557264][ T64] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 99.566113][ T64] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 99.571526][ T64] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 99.574617][ T64] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 99.845885][ T7240] chnl_net:caif_netlink_parms(): no params data found [ 99.919028][ T7240] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.929423][ T7240] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.933635][ T7240] bridge_slave_0: entered allmulticast mode [ 99.935826][ T7240] bridge_slave_0: entered promiscuous mode [ 99.938303][ T7240] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.940574][ T7240] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.942708][ T7240] bridge_slave_1: entered allmulticast mode [ 99.944792][ T7240] bridge_slave_1: entered promiscuous mode [ 99.983685][ T7240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.987809][ T7240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.042049][ T7240] team0: Port device team_slave_0 added [ 100.045957][ T7240] team0: Port device team_slave_1 added [ 100.101922][ T7240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.104607][ T7240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.116098][ T7240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.119905][ T7240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.122198][ T7240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.129550][ T7240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.154789][ T7240] hsr_slave_0: entered promiscuous mode [ 100.156959][ T7240] hsr_slave_1: entered promiscuous mode [ 100.158962][ T7240] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.161456][ T7240] Cannot create hsr debugfs directory [ 100.306222][ T7272] can0: slcan on ptm0. [ 100.323611][ T7272] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 100.342267][ T7272] batman_adv: batadv0: Adding interface: gretap1 [ 100.344165][ T7272] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.360370][ T7272] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 100.410091][ T68] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.413675][ T7277] SET target dimension over the limit! [ 100.424205][ T7277] No such timeout policy "syz0" [ 100.498314][ T68] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.577893][ T68] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.702448][ T68] bridge_slave_1: left allmulticast mode [ 100.704111][ T68] bridge_slave_1: left promiscuous mode [ 100.706108][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.711167][ T68] bridge_slave_0: left allmulticast mode [ 100.713365][ T68] bridge_slave_0: left promiscuous mode [ 100.715104][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.940909][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.946241][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.951723][ T68] bond0 (unregistering): Released all slaves [ 101.126592][ T7262] can0 (unregistered): slcan off ptm0. [ 101.310283][ T7306] netlink: 32 bytes leftover after parsing attributes in process `syz.2.266'. [ 101.554067][ T68] hsr_slave_0: left promiscuous mode [ 101.556503][ T68] hsr_slave_1: left promiscuous mode [ 101.558528][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.560934][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.575088][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.577306][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.597718][ T68] veth1_macvtap: left promiscuous mode [ 101.599433][ T68] veth0_macvtap: left promiscuous mode [ 101.600503][ T5954] Bluetooth: hci1: command tx timeout [ 101.601675][ T68] veth1_vlan: left promiscuous mode [ 101.604245][ T68] veth0_vlan: left promiscuous mode [ 101.688412][ T7334] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 102.135841][ T68] team0 (unregistering): Port device team_slave_1 removed [ 102.200092][ T68] team0 (unregistering): Port device team_slave_0 removed [ 102.690570][ T946] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 102.722420][ T7240] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 102.726132][ T7240] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 102.729391][ T7240] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 102.740729][ T7240] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 102.790045][ T7240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.805791][ T7240] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.814151][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.816305][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.823185][ T7349] netlink: 32 bytes leftover after parsing attributes in process `syz.0.275'. [ 102.844983][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.847095][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.870476][ T946] usb 7-1: Using ep0 maxpacket: 16 [ 102.873267][ T946] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.876394][ T946] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.879172][ T946] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 102.890501][ T946] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 102.895381][ T946] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.899039][ T946] usb 7-1: config 0 descriptor?? [ 102.930587][ T7240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.959360][ T7240] veth0_vlan: entered promiscuous mode [ 102.965451][ T7240] veth1_vlan: entered promiscuous mode [ 102.985759][ T7240] veth0_macvtap: entered promiscuous mode [ 102.989255][ T7240] veth1_macvtap: entered promiscuous mode [ 103.001571][ T7240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.005750][ T7240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.009693][ T7240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.014516][ T7240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.018427][ T7240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.024055][ T7240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.029094][ T7240] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.040929][ T7240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.044264][ T7240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.047341][ T7240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.050643][ T7240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.053501][ T7240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.057658][ T7240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.061958][ T7240] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.070186][ T7240] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.073448][ T7240] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.077042][ T7240] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.079548][ T7240] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.112855][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.115134][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.132143][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.134735][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.342792][ T7339] netlink: 112 bytes leftover after parsing attributes in process `syz.2.273'. [ 103.550398][ T946] usbhid 7-1:0.0: can't add hid device: -71 [ 103.552587][ T946] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 103.571582][ T946] usb 7-1: USB disconnect, device number 6 [ 103.757359][ T7376] netlink: 'syz.0.277': attribute type 10 has an invalid length. [ 103.766606][ T7376] FAULT_INJECTION: forcing a failure. [ 103.766606][ T7376] name failslab, interval 1, probability 0, space 0, times 1 [ 103.772060][ T7376] CPU: 2 UID: 0 PID: 7376 Comm: syz.0.277 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 103.775154][ T7376] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 103.778229][ T7376] Call Trace: [ 103.779202][ T7376] [ 103.780064][ T7376] dump_stack_lvl+0x16c/0x1f0 [ 103.781444][ T7376] should_fail_ex+0x497/0x5b0 [ 103.782810][ T7376] ? fs_reclaim_acquire+0xae/0x150 [ 103.784295][ T7376] should_failslab+0xc2/0x120 [ 103.785665][ T7376] kmem_cache_alloc_lru_noprof+0x73/0x3b0 [ 103.787311][ T7376] ? alloc_inode+0xbf/0x230 [ 103.788636][ T7376] alloc_inode+0xbf/0x230 [ 103.789910][ T7376] new_inode+0x22/0x210 [ 103.791122][ T7376] ? start_creating.part.0+0x25d/0x3a0 [ 103.792706][ T7376] debugfs_create_dir+0xdd/0x5f0 [ 103.794165][ T7376] ieee80211_debugfs_recreate_netdev+0x225/0x1700 [ 103.796026][ T7376] ? __pfx_ieee80211_debugfs_recreate_netdev+0x10/0x10 [ 103.798006][ T7376] ? __pfx___might_resched+0x10/0x10 [ 103.799548][ T7376] drv_remove_interface+0x1b9/0x610 [ 103.801051][ T7376] ieee80211_do_stop+0x1677/0x2520 [ 103.802544][ T7376] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 103.804132][ T7376] ? mark_held_locks+0x9f/0xe0 [ 103.805537][ T7376] ieee80211_stop+0x11e/0x6b0 [ 103.806904][ T7376] ? __pfx_ieee80211_stop+0x10/0x10 [ 103.808396][ T7376] __dev_close_many+0x1c5/0x310 [ 103.809815][ T7376] ? __pfx___dev_close_many+0x10/0x10 [ 103.811367][ T7376] ? mark_held_locks+0x9f/0xe0 [ 103.812786][ T7376] ? __local_bh_enable_ip+0xa4/0x120 [ 103.814324][ T7376] __dev_change_flags+0x4dc/0x720 [ 103.815779][ T7376] ? __pfx_llist_add_batch+0x10/0x10 [ 103.817312][ T7376] ? __pfx___dev_change_flags+0x10/0x10 [ 103.818905][ T7376] ? __lock_acquire+0x15a9/0x3c40 [ 103.820347][ T7376] ? __pfx_validate_linkmsg+0x10/0x10 [ 103.821903][ T7376] dev_change_flags+0x8f/0x160 [ 103.823299][ T7376] do_setlink.constprop.0+0x17b9/0x3f20 [ 103.824903][ T7376] ? __pfx_lock_release+0x10/0x10 [ 103.826357][ T7376] ? __pfx_do_setlink.constprop.0+0x10/0x10 [ 103.828057][ T7376] ? lock_acquire.part.0+0x11b/0x380 [ 103.829648][ T7376] ? __mutex_trylock_common+0xea/0x250 [ 103.831227][ T7376] ? __pfx___mutex_trylock_common+0x10/0x10 [ 103.832923][ T7376] ? rtnl_newlink+0x5e4/0x1d70 [ 103.834313][ T7376] ? rcu_is_watching+0x12/0xc0 [ 103.835703][ T7376] ? trace_contention_end+0xee/0x140 [ 103.837252][ T7376] ? __mutex_lock+0x1cc/0xa60 [ 103.838615][ T7376] ? rtnl_newlink+0x5e4/0x1d70 [ 103.840001][ T7376] ? __pfx___mutex_lock+0x10/0x10 [ 103.841455][ T7376] ? apparmor_capable+0x114/0x1d0 [ 103.842912][ T7376] ? netlink_ns_capable+0xfa/0x130 [ 103.844386][ T7376] rtnl_newlink+0x131c/0x1d70 [ 103.845773][ T7376] ? __pfx_rtnl_newlink+0x10/0x10 [ 103.847245][ T7376] ? __pfx___lock_acquire+0x10/0x10 [ 103.848721][ T7376] ? kmem_cache_free+0x152/0x4c0 [ 103.850180][ T7376] ? aa_get_newest_label+0x376/0x680 [ 103.851700][ T7376] ? find_held_lock+0x2d/0x110 [ 103.853089][ T7376] ? find_held_lock+0x2d/0x110 [ 103.854489][ T7376] ? rtnetlink_rcv_msg+0x93a/0xea0 [ 103.855977][ T7376] ? __pfx_lock_release+0x10/0x10 [ 103.857453][ T7376] ? trace_lock_acquire+0x14e/0x1f0 [ 103.858960][ T7376] ? __pfx_rtnl_newlink+0x10/0x10 [ 103.860416][ T7376] rtnetlink_rcv_msg+0x95b/0xea0 [ 103.862145][ T7376] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 103.863610][ T7376] ? __pfx___dev_queue_xmit+0x10/0x10 [ 103.865148][ T7376] netlink_rcv_skb+0x165/0x410 [ 103.866548][ T7376] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 103.868111][ T7376] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 103.869613][ T7376] ? netlink_deliver_tap+0x1ae/0xca0 [ 103.871141][ T7376] netlink_unicast+0x53c/0x7f0 [ 103.872534][ T7376] ? __pfx_netlink_unicast+0x10/0x10 [ 103.874066][ T7376] ? __phys_addr_symbol+0x30/0x80 [ 103.875523][ T7376] ? __check_object_size+0x488/0x710 [ 103.877097][ T7376] netlink_sendmsg+0x8b8/0xd70 [ 103.878503][ T7376] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.880056][ T7376] ____sys_sendmsg+0x9ae/0xb40 [ 103.881463][ T7376] ? __pfx_____sys_sendmsg+0x10/0x10 [ 103.882994][ T7376] ? get_compat_msghdr+0x11b/0x170 [ 103.884486][ T7376] ___sys_sendmsg+0x135/0x1e0 [ 103.885869][ T7376] ? __pfx____sys_sendmsg+0x10/0x10 [ 103.887410][ T7376] ? __pfx_lock_release+0x10/0x10 [ 103.888876][ T7376] ? trace_lock_acquire+0x14e/0x1f0 [ 103.890391][ T7376] ? __fget_files+0x206/0x3a0 [ 103.891734][ T7376] __sys_sendmsg+0x16e/0x220 [ 103.893028][ T7376] ? __pfx___sys_sendmsg+0x10/0x10 [ 103.894529][ T7376] __do_fast_syscall_32+0x73/0x120 [ 103.896018][ T7376] do_fast_syscall_32+0x32/0x80 [ 103.897421][ T7376] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 103.899246][ T7376] RIP: 0023:0xf7f51579 [ 103.900431][ T7376] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 103.905924][ T7376] RSP: 002b:00000000f50a655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 103.908248][ T7376] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000600 [ 103.910489][ T7376] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 103.912746][ T7376] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 103.915043][ T7376] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 103.917295][ T7376] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 103.919519][ T7376] [ 103.920446][ C2] vkms_vblank_simulate: vblank timer overrun [ 103.927807][ T7379] Driver unsupported XDP return value 0 on prog (id 64) dev N/A, expect packet loss! [ 103.930392][ T7376] debugfs: out of free dentries, can not create directory 'stations' [ 103.937791][ T7376] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 104.868241][ T7394] program syz.2.283 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 104.877813][ T7394] ubi: mtd0 is already attached to ubi0 [ 105.493398][ T45] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.063937][ T64] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 106.066653][ T64] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 106.069856][ T64] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 106.074847][ T64] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 106.077317][ T64] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 106.079457][ T64] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 106.098034][ T64] Bluetooth: hci3: unexpected event for opcode 0x0c1c [ 106.192160][ T7425] ptrace attach of "/syz-executor exec"[5947] was attempted by "/syz-executor exec"[7425] [ 106.230614][ T7418] chnl_net:caif_netlink_parms(): no params data found [ 106.339196][ T7418] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.342685][ T7418] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.345013][ T7418] bridge_slave_0: entered allmulticast mode [ 106.347557][ T7418] bridge_slave_0: entered promiscuous mode [ 106.354395][ T7418] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.356952][ T7418] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.359735][ T7418] bridge_slave_1: entered allmulticast mode [ 106.362683][ T7418] bridge_slave_1: entered promiscuous mode [ 106.405680][ T7418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.413156][ T7418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.454577][ T7418] team0: Port device team_slave_0 added [ 106.457815][ T7418] team0: Port device team_slave_1 added [ 106.477109][ T7418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.479977][ T7418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.489734][ T7418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.505875][ T7418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.508349][ T7418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.522397][ T7418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.578309][ T7418] hsr_slave_0: entered promiscuous mode [ 106.584424][ T7418] hsr_slave_1: entered promiscuous mode [ 106.587228][ T7418] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 106.589445][ T7418] Cannot create hsr debugfs directory [ 106.920440][ T7437] netlink: 'syz.2.294': attribute type 10 has an invalid length. [ 106.927838][ T7437] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 107.048177][ T7441] program syz.2.295 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.054619][ T7441] ubi: mtd0 is already attached to ubi0 [ 107.087766][ T7445] Process accounting resumed [ 107.329197][ T45] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.472307][ T45] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.553904][ T45] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.730918][ T45] bridge_slave_1: left allmulticast mode [ 107.732678][ T45] bridge_slave_1: left promiscuous mode [ 107.734420][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.739667][ T45] bridge_slave_0: left allmulticast mode [ 107.743909][ T45] bridge_slave_0: left promiscuous mode [ 107.745660][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.063174][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.066836][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.070021][ T45] bond0 (unregistering): Released all slaves [ 108.162017][ T5954] Bluetooth: hci1: command tx timeout [ 108.174973][ T7458] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 108.531625][ T45] hsr_slave_0: left promiscuous mode [ 108.544891][ T45] hsr_slave_1: left promiscuous mode [ 108.547486][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.549935][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.557195][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.560623][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.593947][ T45] veth1_macvtap: left promiscuous mode [ 108.595623][ T45] veth0_macvtap: left promiscuous mode [ 108.597277][ T45] veth1_vlan: left promiscuous mode [ 108.598766][ T45] veth0_vlan: left promiscuous mode [ 108.710489][ T7478] nbd3: detected capacity change from 0 to 12 [ 108.717318][ T5938] block nbd3: Send control failed (result -89) [ 108.719790][ T5938] block nbd3: Request send failed, requeueing [ 108.728575][ T5954] block nbd3: Receive control failed (result -32) [ 108.730601][ T1156] block nbd3: Dead connection, failed to find a fallback [ 108.734302][ T1156] block nbd3: shutting down sockets [ 108.736624][ T1156] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.739579][ T1156] Buffer I/O error on dev nbd3, logical block 0, async page read [ 108.745182][ T5938] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.752571][ T5938] Buffer I/O error on dev nbd3, logical block 0, async page read [ 108.757591][ T5938] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.760155][ T5938] Buffer I/O error on dev nbd3, logical block 0, async page read [ 108.765779][ T5938] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.768438][ T5938] Buffer I/O error on dev nbd3, logical block 0, async page read [ 108.771707][ T5938] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.775092][ T5938] Buffer I/O error on dev nbd3, logical block 0, async page read [ 108.777561][ T5938] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.780264][ T5938] Buffer I/O error on dev nbd3, logical block 0, async page read [ 108.783720][ T5938] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.786708][ T5938] Buffer I/O error on dev nbd3, logical block 0, async page read [ 108.789085][ T5938] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.792051][ T5938] Buffer I/O error on dev nbd3, logical block 0, async page read [ 108.794896][ T5938] ldm_validate_partition_table(): Disk read failed. [ 108.801058][ T5938] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.803769][ T5938] Buffer I/O error on dev nbd3, logical block 0, async page read [ 108.806105][ T5938] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.808762][ T5938] Buffer I/O error on dev nbd3, logical block 0, async page read [ 108.812065][ T5938] Dev nbd3: unable to read RDB block 0 [ 108.814046][ T5938] nbd3: unable to read partition table [ 108.815922][ T5938] nbd3: partition table beyond EOD, truncated [ 108.823622][ T5938] ldm_validate_partition_table(): Disk read failed. [ 108.830028][ T5938] Dev nbd3: unable to read RDB block 0 [ 108.832242][ T5938] nbd3: unable to read partition table [ 108.834098][ T5938] nbd3: partition table beyond EOD, truncated [ 109.174817][ T7485] Process accounting resumed [ 109.261199][ T45] team0 (unregistering): Port device team_slave_1 removed [ 109.327468][ T45] team0 (unregistering): Port device team_slave_0 removed [ 109.965988][ T7491] tipc: Started in network mode [ 109.967421][ T7491] tipc: Node identity 6, cluster identity 4711 [ 109.969117][ T7491] tipc: Node number set to 6 [ 110.041499][ T7418] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 110.067523][ T39] kauditd_printk_skb: 6 callbacks suppressed [ 110.067573][ T39] audit: type=1326 audit(1737277427.303:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7495 comm="syz.0.309" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 110.082477][ T39] audit: type=1326 audit(1737277427.313:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7495 comm="syz.0.309" exe="/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 110.100488][ T39] audit: type=1326 audit(1737277427.313:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7503 comm="syz.0.309" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 110.115168][ T39] audit: type=1326 audit(1737277427.323:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7495 comm="syz.0.309" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 110.125448][ T39] audit: type=1326 audit(1737277427.323:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7495 comm="syz.0.309" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 110.185770][ T7418] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 110.189808][ T39] audit: type=1326 audit(1737277427.453:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7495 comm="syz.0.309" exe="/syz-executor" sig=0 arch=40000003 syscall=270 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 110.197580][ T39] audit: type=1326 audit(1737277427.463:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7495 comm="syz.0.309" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 110.205429][ T7418] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 110.209455][ T7418] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 110.226418][ T39] audit: type=1326 audit(1737277427.493:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7495 comm="syz.0.309" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 110.239678][ T39] audit: type=1326 audit(1737277427.503:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7495 comm="syz.0.309" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 110.248279][ T39] audit: type=1326 audit(1737277427.503:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7495 comm="syz.0.309" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 110.267356][ T5954] Bluetooth: hci1: command 0x041b tx timeout [ 110.690657][ T7418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.704662][ T7418] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.708478][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.710617][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.718108][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.720202][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.765256][ T7418] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 110.850199][ T7418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.860584][ T6033] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 110.876288][ T7418] veth0_vlan: entered promiscuous mode [ 110.884293][ T7418] veth1_vlan: entered promiscuous mode [ 110.947173][ T7418] veth0_macvtap: entered promiscuous mode [ 110.951164][ T7418] veth1_macvtap: entered promiscuous mode [ 110.957536][ T7418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.965010][ T7418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.967793][ T7418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.970974][ T7418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.973710][ T7418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.976749][ T7418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.979991][ T7418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.986212][ T7418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.989307][ T7418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.996068][ T7418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.999029][ T7418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.002834][ T7418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.005793][ T7418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.009249][ T7418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.015821][ T7418] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.018246][ T7418] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.022343][ T6033] usb 7-1: config 0 has no interfaces? [ 111.024440][ T6033] usb 7-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 111.025266][ T7418] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.028356][ T6033] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.030250][ T7418] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.038928][ T6033] usb 7-1: config 0 descriptor?? [ 111.089513][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.095008][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.111046][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.113654][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.124130][ T7539] FAULT_INJECTION: forcing a failure. [ 111.124130][ T7539] name failslab, interval 1, probability 0, space 0, times 0 [ 111.128912][ T7539] CPU: 0 UID: 0 PID: 7539 Comm: syz.3.317 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 111.132335][ T7539] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 111.135568][ T7539] Call Trace: [ 111.136544][ T7539] [ 111.137413][ T7539] dump_stack_lvl+0x16c/0x1f0 [ 111.138788][ T7539] should_fail_ex+0x497/0x5b0 [ 111.140154][ T7539] ? fs_reclaim_acquire+0xae/0x150 [ 111.141716][ T7539] should_failslab+0xc2/0x120 [ 111.143088][ T7539] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 111.144761][ T7539] ? __alloc_skb+0x2b3/0x380 [ 111.146107][ T7539] ? bpf_lsm_capable+0x9/0x10 [ 111.147467][ T7539] __alloc_skb+0x2b3/0x380 [ 111.148766][ T7539] ? __pfx___alloc_skb+0x10/0x10 [ 111.150189][ T7539] ? genl_rcv_msg+0x480/0x800 [ 111.151819][ T7539] ? genl_rcv_msg+0x4bd/0x800 [ 111.153741][ T7539] netlink_ack+0x164/0xb20 [ 111.154944][ T7539] netlink_rcv_skb+0x327/0x410 [ 111.156283][ T7539] ? __pfx_genl_rcv_msg+0x10/0x10 [ 111.157753][ T7539] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 111.159223][ T7539] ? down_read+0xc9/0x330 [ 111.160477][ T7539] ? __pfx_down_read+0x10/0x10 [ 111.161941][ T7539] ? netlink_deliver_tap+0x1ae/0xca0 [ 111.163467][ T7539] genl_rcv+0x28/0x40 [ 111.164639][ T7539] netlink_unicast+0x53c/0x7f0 [ 111.166050][ T7539] ? __pfx_netlink_unicast+0x10/0x10 [ 111.167599][ T7539] ? __phys_addr_symbol+0x30/0x80 [ 111.169068][ T7539] ? __check_object_size+0x488/0x710 [ 111.170610][ T7539] netlink_sendmsg+0x8b8/0xd70 [ 111.172483][ T7539] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.174215][ T7539] ____sys_sendmsg+0x9ae/0xb40 [ 111.175591][ T7539] ? __pfx_____sys_sendmsg+0x10/0x10 [ 111.177139][ T7539] ? get_compat_msghdr+0x11b/0x170 [ 111.178634][ T7539] ___sys_sendmsg+0x135/0x1e0 [ 111.179991][ T7539] ? __pfx____sys_sendmsg+0x10/0x10 [ 111.181586][ T7539] ? __pfx_lock_release+0x10/0x10 [ 111.183043][ T7539] ? trace_lock_acquire+0x14e/0x1f0 [ 111.184550][ T7539] ? __fget_files+0x206/0x3a0 [ 111.185931][ T7539] __sys_sendmsg+0x16e/0x220 [ 111.187273][ T7539] ? __pfx___sys_sendmsg+0x10/0x10 [ 111.188764][ T7539] __do_fast_syscall_32+0x73/0x120 [ 111.190259][ T7539] do_fast_syscall_32+0x32/0x80 [ 111.192008][ T7539] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 111.194488][ T7539] RIP: 0023:0xf70ee579 [ 111.195668][ T7539] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 111.201204][ T7539] RSP: 002b:00000000f50e055c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 111.203534][ T7539] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000040 [ 111.205703][ T7539] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 111.207827][ T7539] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 111.209990][ T7539] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 111.212813][ T7539] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 111.215146][ T7539] [ 111.300038][ T7544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.303016][ T7544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.306927][ T7544] usb usb9: usbfs: process 7544 (syz.2.313) did not claim interface 0 before use [ 111.468393][ T7546] misc userio: Begin command sent, but we're already running [ 111.527852][ T35] usb 7-1: USB disconnect, device number 7 [ 113.186346][ T84] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.826162][ T7576] Bluetooth: MGMT ver 1.23 [ 114.044677][ T64] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 114.048193][ T64] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 114.051230][ T64] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 114.054928][ T64] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 114.057546][ T64] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 114.059912][ T64] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 114.080573][ T56] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 114.254623][ T7582] chnl_net:caif_netlink_parms(): no params data found [ 114.336262][ T7582] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.338529][ T7582] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.341043][ T7582] bridge_slave_0: entered allmulticast mode [ 114.344276][ T7582] bridge_slave_0: entered promiscuous mode [ 114.348314][ T7582] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.350900][ T7582] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.353210][ T7582] bridge_slave_1: entered allmulticast mode [ 114.355484][ T7582] bridge_slave_1: entered promiscuous mode [ 114.375501][ T7582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.379405][ T7582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.402840][ T7582] team0: Port device team_slave_0 added [ 114.406066][ T7582] team0: Port device team_slave_1 added [ 114.423459][ T7582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.425523][ T7582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.433861][ T7582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.439408][ T7582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.443119][ T7582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.450559][ T7582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.472146][ T56] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 114.475132][ T56] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.481940][ T56] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 114.484842][ T56] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 114.486141][ T7582] hsr_slave_0: entered promiscuous mode [ 114.487407][ T56] usb 7-1: Manufacturer: syz [ 114.491059][ T7582] hsr_slave_1: entered promiscuous mode [ 114.493219][ T7582] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 114.495099][ T56] usb 7-1: config 0 descriptor?? [ 114.495443][ T7582] Cannot create hsr debugfs directory [ 114.540447][ T56] rc_core: IR keymap rc-hauppauge not found [ 114.544733][ T56] Registered IR keymap rc-empty [ 114.550468][ T56] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 114.556698][ T56] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input13 [ 114.870787][ T84] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.956605][ T84] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.040698][ T35] usb 7-1: USB disconnect, device number 8 [ 115.044688][ T84] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.155760][ T84] bridge_slave_1: left allmulticast mode [ 115.157379][ T84] bridge_slave_1: left promiscuous mode [ 115.158969][ T84] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.163543][ T84] bridge_slave_0: left allmulticast mode [ 115.167190][ T84] bridge_slave_0: left promiscuous mode [ 115.169559][ T84] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.483161][ T84] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.487480][ T84] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.492566][ T84] bond0 (unregistering): Released all slaves [ 116.081401][ T5954] Bluetooth: hci1: command tx timeout [ 116.169021][ T84] hsr_slave_0: left promiscuous mode [ 116.174513][ T84] hsr_slave_1: left promiscuous mode [ 116.178345][ T84] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.181268][ T84] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.186639][ T84] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.189328][ T84] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.218921][ T84] veth1_macvtap: left promiscuous mode [ 116.221239][ T84] veth0_macvtap: left promiscuous mode [ 116.223057][ T84] veth1_vlan: left promiscuous mode [ 116.225190][ T84] veth0_vlan: left promiscuous mode [ 116.596656][ T7645] [ 116.597471][ T7645] ====================================================== [ 116.599496][ T7645] WARNING: possible circular locking dependency detected SYZFAIL: failed to recv rpc [ 116.601446][ T7645] 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 Not tainted [ 116.604565][ T7645] ------------------------------------------------------ [ 116.607329][ T7645] syz.2.336/7645 is trying to acquire lock: [ 116.609050][ T7645] ffff88804c3f76e0 (&mm->mmap_lock){++++}-{4:4}, at: __might_fault+0xe3/0x190 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 116.611672][ T7645] [ 116.611672][ T7645] but task is already holding lock: [ 116.614025][ T7645] ffff8880241b92e0 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x33/0x70 [ 116.616719][ T7645] [ 116.616719][ T7645] which lock already depends on the new lock. [ 116.616719][ T7645] [ 116.619733][ T7645] [ 116.619733][ T7645] the existing dependency chain (in reverse order) is: [ 116.622301][ T7645] [ 116.622301][ T7645] -> #5 (&q->debugfs_mutex){+.+.}-{4:4}: [ 116.624604][ T7645] __mutex_lock+0x19b/0xa60 [ 116.626096][ T7645] blk_mq_init_sched+0x42b/0x640 [ 116.627706][ T7645] elevator_init_mq+0x2cd/0x420 [ 116.629276][ T7645] add_disk_fwnode+0x113/0x1300 [ 116.630884][ T7645] sd_probe+0xa66/0xfa0 [ 116.632261][ T7645] really_probe+0x23e/0xa90 [ 116.633730][ T7645] __driver_probe_device+0x1de/0x440 [ 116.635478][ T7645] driver_probe_device+0x4c/0x1b0 [ 116.637166][ T7645] __device_attach_driver+0x1df/0x310 [ 116.638948][ T7645] bus_for_each_drv+0x157/0x1e0 [ 116.640493][ T7645] __device_attach_async_helper+0x1d3/0x290 [ 116.642404][ T7645] async_run_entry_fn+0x9c/0x530 [ 116.643974][ T7645] process_one_work+0x958/0x1b30 [ 116.645587][ T7645] worker_thread+0x6c8/0xf00 [ 116.647096][ T7645] kthread+0x2c1/0x3a0 [ 116.648498][ T7645] ret_from_fork+0x45/0x80 [ 116.649946][ T7645] ret_from_fork_asm+0x1a/0x30 [ 116.651543][ T7645] [ 116.651543][ T7645] -> #4 (&q->q_usage_counter(queue)#51){++++}-{0:0}: [ 116.654152][ T7645] blk_queue_enter+0x50f/0x640 [ 116.655697][ T7645] blk_mq_alloc_request+0x59b/0x950 [ 116.657412][ T7645] scsi_execute_cmd+0x20a/0xf30 [ 116.658975][ T7645] read_capacity_16+0x21a/0xe20 [ 116.660677][ T7645] sd_revalidate_disk.isra.0+0x1a06/0xa8d0 [ 116.662499][ T7645] sd_probe+0x8ee/0xfa0 [ 116.663859][ T7645] really_probe+0x23e/0xa90 [ 116.665402][ T7645] __driver_probe_device+0x1de/0x440 [ 116.667082][ T7645] driver_probe_device+0x4c/0x1b0 [ 116.668735][ T7645] __device_attach_driver+0x1df/0x310 [ 116.670503][ T7645] bus_for_each_drv+0x157/0x1e0 [ 116.672045][ T7645] __device_attach_async_helper+0x1d3/0x290 [ 116.673891][ T7645] async_run_entry_fn+0x9c/0x530 [ 116.675464][ T7645] process_one_work+0x958/0x1b30 [ 116.677108][ T7645] worker_thread+0x6c8/0xf00 [ 116.678604][ T7645] kthread+0x2c1/0x3a0 [ 116.679897][ T7645] ret_from_fork+0x45/0x80 [ 116.681378][ T7645] ret_from_fork_asm+0x1a/0x30 [ 116.682924][ T7645] [ 116.682924][ T7645] -> #3 (&q->limits_lock){+.+.}-{4:4}: [ 116.685084][ T7645] __mutex_lock+0x19b/0xa60 [ 116.686549][ T7645] __nbd_set_size+0x2c0/0x730 [ 116.688041][ T7645] nbd_start_device+0x8fd/0xd70 [ 116.689593][ T7645] nbd_ioctl+0x21a/0xfd0 [ 116.690923][ T7645] compat_blkdev_ioctl+0x2f7/0x750 [ 116.692482][ T7645] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 116.694141][ T7645] __do_fast_syscall_32+0x73/0x120 [ 116.695736][ T7645] do_fast_syscall_32+0x32/0x80 [ 116.697282][ T7645] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 116.699221][ T7645] [ 116.699221][ T7645] -> #2 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 116.701614][ T7645] blk_mq_submit_bio+0x1fb6/0x24c0 [ 116.703064][ T7645] __submit_bio+0x384/0x540 [ 116.704488][ T7645] submit_bio_noacct_nocheck+0x698/0xd70 [ 116.706226][ T7645] submit_bio_noacct+0x93a/0x1e20 [ 116.707802][ T7645] block_read_full_folio+0x812/0xa50 [ 116.709488][ T7645] filemap_read_folio+0xc6/0x2a0 [ 116.711052][ T7645] filemap_get_pages+0x155f/0x1be0 [ 116.712691][ T7645] filemap_read+0x3ca/0xd70 [ 116.714150][ T7645] blkdev_read_iter+0x187/0x480 [ 116.715591][ T7645] vfs_read+0x87f/0xbe0 [ 116.716878][ T7645] ksys_read+0x12b/0x250 [ 116.718244][ T7645] do_syscall_64+0xcd/0x250 [ 116.719602][ T7645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.721410][ T7645] [ 116.721410][ T7645] -> #1 (mapping.invalidate_lock#2){.+.+}-{4:4}: [ 116.723799][ T7645] down_read+0x9a/0x330 [ 116.725159][ T7645] filemap_fault+0x2e0/0x2820 [ 116.726623][ T7645] __do_fault+0x10a/0x490 [ 116.727949][ T7645] do_pte_missing+0xebd/0x3e00 [ 116.729441][ T7645] __handle_mm_fault+0x103c/0x2a40 [ 116.731028][ T7645] handle_mm_fault+0x3fa/0xaa0 [ 116.732517][ T7645] __get_user_pages+0x8d9/0x3b50 [ 116.734063][ T7645] faultin_page_range+0x24a/0x980 [ 116.735650][ T7645] do_madvise+0x504/0x770 [ 116.737097][ T7645] __ia32_sys_madvise+0xa7/0x110 [ 116.738678][ T7645] __do_fast_syscall_32+0x73/0x120 [ 116.740297][ T7645] do_fast_syscall_32+0x32/0x80 [ 116.741851][ T7645] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 116.743757][ T7645] [ 116.743757][ T7645] -> #0 (&mm->mmap_lock){++++}-{4:4}: [ 116.746038][ T7645] __lock_acquire+0x249e/0x3c40 [ 116.747618][ T7645] lock_acquire.part.0+0x11b/0x380 [ 116.749326][ T7645] __might_fault+0x11b/0x190 [ 116.750799][ T7645] _copy_from_user+0x29/0xd0 [ 116.752314][ T7645] __blk_trace_setup+0xa8/0x180 [ 116.753894][ T7645] blk_trace_setup+0x47/0x70 [ 116.755394][ T7645] sg_ioctl+0x7a3/0x26b0 [ 116.756905][ T7645] compat_ptr_ioctl+0x6b/0xa0 [ 116.758491][ T7645] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 116.760173][ T7645] __do_fast_syscall_32+0x73/0x120 [ 116.761818][ T7645] do_fast_syscall_32+0x32/0x80 [ 116.763397][ T7645] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 116.765441][ T7645] [ 116.765441][ T7645] other info that might help us debug this: [ 116.765441][ T7645] [ 116.768382][ T7645] Chain exists of: [ 116.768382][ T7645] &mm->mmap_lock --> &q->q_usage_counter(queue)#51 --> &q->debugfs_mutex [ 116.768382][ T7645] [ 116.772481][ T7645] Possible unsafe locking scenario: [ 116.772481][ T7645] [ 116.774683][ T7645] CPU0 CPU1 [ 116.776236][ T7645] ---- ---- [ 116.777876][ T7645] lock(&q->debugfs_mutex); [ 116.779253][ T7645] lock(&q->q_usage_counter(queue)#51); [ 116.781638][ T7645] lock(&q->debugfs_mutex); [ 116.783647][ T7645] rlock(&mm->mmap_lock); [ 116.784974][ T7645] [ 116.784974][ T7645] *** DEADLOCK *** [ 116.784974][ T7645] [ 116.787364][ T7645] 1 lock held by syz.2.336/7645: [ 116.788815][ T7645] #0: ffff8880241b92e0 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0x33/0x70 [ 116.791584][ T7645] [ 116.791584][ T7645] stack backtrace: [ 116.793327][ T7645] CPU: 3 UID: 0 PID: 7645 Comm: syz.2.336 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 116.796403][ T7645] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 116.799521][ T7645] Call Trace: [ 116.800491][ T7645] [ 116.801362][ T7645] dump_stack_lvl+0x116/0x1f0 [ 116.802726][ T7645] print_circular_bug+0x41c/0x610 [ 116.804235][ T7645] check_noncircular+0x31a/0x400 [ 116.805688][ T7645] ? __pfx_check_noncircular+0x10/0x10 [ 116.807362][ T7645] ? lockdep_lock+0xc6/0x200 [ 116.808739][ T7645] ? __pfx_lockdep_lock+0x10/0x10 [ 116.810191][ T7645] __lock_acquire+0x249e/0x3c40 [ 116.811600][ T7645] ? __pfx___lock_acquire+0x10/0x10 [ 116.813112][ T7645] ? __pfx_mark_lock+0x10/0x10 [ 116.814563][ T7645] lock_acquire.part.0+0x11b/0x380 [ 116.816057][ T7645] ? __might_fault+0xe3/0x190 [ 116.817496][ T7645] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 116.819183][ T7645] ? rcu_is_watching+0x12/0xc0 [ 116.820555][ T7645] ? trace_lock_acquire+0x14e/0x1f0 [ 116.822074][ T7645] ? blk_trace_setup+0x33/0x70 [ 116.823455][ T7645] ? __might_fault+0xe3/0x190 [ 116.824869][ T7645] ? lock_acquire+0x2f/0xb0 [ 116.826230][ T7645] ? __might_fault+0xe3/0x190 [ 116.827684][ T7645] ? __might_fault+0xe3/0x190 [ 116.829124][ T7645] __might_fault+0x11b/0x190 [ 116.830476][ T7645] ? __might_fault+0xe3/0x190 [ 116.831844][ T7645] _copy_from_user+0x29/0xd0 [ 116.833206][ T7645] __blk_trace_setup+0xa8/0x180 [ 116.834624][ T7645] ? __pfx___blk_trace_setup+0x10/0x10 [ 116.836245][ T7645] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 116.837963][ T7645] blk_trace_setup+0x47/0x70 [ 116.839381][ T7645] sg_ioctl+0x7a3/0x26b0 [ 116.840610][ T7645] ? __pfx_sg_ioctl+0x10/0x10 [ 116.842021][ T7645] ? __pfx_lock_release+0x10/0x10 [ 116.843461][ T7645] ? trace_lock_acquire+0x14e/0x1f0 [ 116.844969][ T7645] ? __pfx___might_resched+0x10/0x10 [ 116.846586][ T7645] ? __fget_files+0x206/0x3a0 [ 116.847953][ T7645] ? __pfx_sg_ioctl+0x10/0x10 [ 116.849384][ T7645] compat_ptr_ioctl+0x6b/0xa0 [ 116.850751][ T7645] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 116.852340][ T7645] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 116.853902][ T7645] __do_fast_syscall_32+0x73/0x120 [ 116.855390][ T7645] do_fast_syscall_32+0x32/0x80 [ 116.856862][ T7645] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 116.858787][ T7645] RIP: 0023:0xf708e579 [ 116.859969][ T7645] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 116.865499][ T7645] RSP: 002b:00000000f505f55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 116.867957][ T7645] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000c0481273 [ 116.870272][ T7645] RDX: 00000000200000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 116.872567][ T7645] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 116.874860][ T7645] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 116.877163][ T7645] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 116.879532][ T7645] [ 117.390114][ T84] team0 (unregistering): Port device team_slave_1 removed [ 117.463428][ T84] team0 (unregistering): Port device team_slave_0 removed [ 118.423649][ T84] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.462948][ T84] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.501785][ T84] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.541654][ T84] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.617042][ T84] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.723328][ T84] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.752689][ T84] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.833191][ T84] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.925114][ T84] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.974700][ T84] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.042256][ T84] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.112530][ T84] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.181075][ T84] bridge_slave_1: left allmulticast mode [ 119.182714][ T84] bridge_slave_1: left promiscuous mode [ 119.184347][ T84] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.187218][ T84] bridge_slave_0: left allmulticast mode [ 119.188868][ T84] bridge_slave_0: left promiscuous mode [ 119.190895][ T84] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.194033][ T84] bridge_slave_1: left allmulticast mode [ 119.195674][ T84] bridge_slave_1: left promiscuous mode [ 119.197396][ T84] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.201632][ T84] bridge_slave_0: left allmulticast mode [ 119.203882][ T84] bridge_slave_0: left promiscuous mode [ 119.206100][ T84] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.209248][ T84] bridge_slave_0: left allmulticast mode [ 119.211022][ T84] bridge_slave_0: left promiscuous mode [ 119.212661][ T84] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.215746][ T84] bridge_slave_0: left allmulticast mode [ 119.217456][ T84] bridge_slave_0: left promiscuous mode [ 119.219664][ T84] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.223344][ T84] bridge_slave_1: left allmulticast mode [ 119.225631][ T84] bridge_slave_1: left promiscuous mode [ 119.227380][ T84] bridge1: port 1(bridge_slave_1) entered disabled state [ 119.311801][ T84] batman_adv: batadv0: Removing interface: gretap1 [ 119.664904][ T84] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.669569][ T84] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.673122][ T84] bond0 (unregistering): Released all slaves [ 119.677004][ T84] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.681002][ T84] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.684926][ T84] bond0 (unregistering): Released all slaves [ 119.692810][ T84] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.697127][ T84] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.701704][ T84] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 119.706930][ T84] bond0 (unregistering): Released all slaves [ 119.714791][ T84] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.718752][ T84] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.723226][ T84] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 119.728659][ T84] bond0 (unregistering): Released all slaves [ 119.817502][ T84] tipc: Left network mode [ 120.427966][ T84] hsr_slave_0: left promiscuous mode [ 120.429950][ T84] hsr_slave_1: left promiscuous mode [ 120.433457][ T84] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.436160][ T84] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.439194][ T84] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.442323][ T84] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.447101][ T84] hsr_slave_0: left promiscuous mode [ 120.460694][ T84] hsr_slave_1: left promiscuous mode [ 120.462763][ T84] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.465164][ T84] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.468828][ T84] hsr_slave_0: left promiscuous mode [ 120.471784][ T84] hsr_slave_1: left promiscuous mode [ 120.473932][ T84] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.476784][ T84] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.480039][ T84] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.482503][ T84] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.485962][ T84] hsr_slave_0: left promiscuous mode [ 120.487829][ T84] hsr_slave_1: left promiscuous mode [ 120.489634][ T84] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.492063][ T84] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.494398][ T84] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.496969][ T84] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.503142][ T84] veth1_macvtap: left promiscuous mode [ 120.504746][ T84] veth0_macvtap: left promiscuous mode [ 120.506349][ T84] veth1_vlan: left promiscuous mode [ 120.507882][ T84] veth0_vlan: left promiscuous mode [ 120.509812][ T84] veth1_macvtap: left promiscuous mode [ 120.511439][ T84] veth0_macvtap: left promiscuous mode [ 120.513031][ T84] veth1_vlan: left promiscuous mode [ 120.514564][ T84] veth0_vlan: left promiscuous mode [ 120.516484][ T84] veth1_macvtap: left promiscuous mode [ 120.518106][ T84] veth0_macvtap: left promiscuous mode [ 120.519693][ T84] veth1_vlan: left promiscuous mode [ 120.522282][ T84] veth0_vlan: left promiscuous mode [ 120.746628][ T84] team0 (unregistering): Port device team_slave_1 removed [ 120.781335][ T84] team0 (unregistering): Port device team_slave_0 removed [ 121.030199][ T84] team0 (unregistering): Port device team_slave_1 removed [ 121.059919][ T84] team0 (unregistering): Port device team_slave_0 removed [ 121.338478][ T84] team0 (unregistering): Port device team_slave_1 removed [ 121.373241][ T84] team0 (unregistering): Port device team_slave_0 removed [ 121.529962][ T11] smc: removing ib device syz1 [ 121.654195][ T84] team0 (unregistering): Port device team_slave_1 removed [ 121.690883][ T84] team0 (unregistering): Port device team_slave_0 removed VM DIAGNOSIS: 08:55:21 Registers: info registers vcpu 0 CPU#0 RAX=00000002000008fd RBX=ffff888020878000 RCX=0000000000000830 RDX=0000000000000002 RSI=00000000000000fd RDI=0000000000000002 RBP=0000000000000008 RSP=ffffc90007247908 R8 =0000000000000000 R9 =fffffbfff203a582 R10=ffffffff901d2c17 R11=00000000000a201e R12=0000000000000003 R13=1ffff92000e48f22 R14=0000000000000001 R15=ffffc90007247930 RIP=ffffffff8147a098 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b400000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020533000 CR3=0000000060b48000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff81756e1c RDX=fffffbfff203a583 RSI=0000000000000008 RDI=ffffffff901d2c10 RBP=0000000000000000 RSP=ffffc90003a275e0 R8 =0000000000000000 R9 =fffffbfff203a582 R10=ffffffff901d2c17 R11=000000000000e14f R12=0000000000000000 R13=000000000003da4c R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81756e24 RFL=00000247 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b500000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020374000 CR3=0000000060b48000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffffc90007440000 RBX=ffff8880252b8000 RCX=ffffffff817a7ac7 RDX=1ffff11004a5724d RSI=ffffffff86567a3f RDI=0000000000000016 RBP=0000000000000080 RSP=ffffc90000548eb8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=ffffc90000548ff8 R12=0000000000000000 R13=dffffc0000000000 R14=ffff8880252b9268 R15=0000000000000000 RIP=ffffffff86567a67 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7fc6e40 CR3=000000000db7e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f7463ff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000005d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85146355 RDI=ffffffff9a66e200 RBP=ffffffff9a66e1c0 RSP=ffffc90004e4f310 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=000000000000005d R14=ffffffff851462f0 R15=0000000000000000 RIP=ffffffff8514637f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b700000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000056080d620131 CR3=000000006993e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000