last executing test programs:

16.880611904s ago: executing program 2 (id=251):
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000000206050000000000000000000700000014000780080008400000009808000640200000000500010006000000050005000200000005000400000000000900020073797a310000000010000300686173683a69702c6d6163"], 0x5c}}, 0x20000000)

15.956589793s ago: executing program 2 (id=264):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'vlan0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x8000e}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x48}}, 0x844)

15.754581693s ago: executing program 2 (id=267):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000000)=0x200, 0x4)
sendmmsg$inet(r0, &(0x7f0000000340)=[{{&(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000400)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}, {{&(0x7f0000000480)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000440)="08000000001f009e", 0x8}], 0x1}}], 0x2, 0x4000)

15.754004986s ago: executing program 2 (id=269):
syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020)

15.748208135s ago: executing program 2 (id=270):
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffebb)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
creat(&(0x7f00000000c0)='./file0\x00', 0x0)

15.17889693s ago: executing program 2 (id=275):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=<r2=>r1, @ANYBLOB="01000000000000000000037400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080007002609090914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRESDEC=r1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES64=r2], 0x1b)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x2, &(0x7f0000000000)=0x4, 0x4)
bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8)
setsockopt$inet6_int(r4, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4)
recvmmsg(r4, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$sock_ifreq(r5, 0x89f0, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'})

15.061579287s ago: executing program 32 (id=275):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=<r2=>r1, @ANYBLOB="01000000000000000000037400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080007002609090914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRESDEC=r1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES64=r2], 0x1b)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x2, &(0x7f0000000000)=0x4, 0x4)
bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8)
setsockopt$inet6_int(r4, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4)
recvmmsg(r4, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$sock_ifreq(r5, 0x89f0, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'})

9.171533255s ago: executing program 3 (id=327):
set_mempolicy(0x1, &(0x7f0000000080)=0x8, 0x9)

9.170700451s ago: executing program 3 (id=328):
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00')
pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
execve(&(0x7f0000019240)='./file0\x00', &(0x7f0000019300)={[&(0x7f0000000380)=' T\xfc\x81\x8e\x9f5\x0e \x043[B\xad\x13\x9f\xae\x8f\xbb\x9a\x0f\x9f\x03\xa5\xfc9\xbb\xa4.\xf4\xeb\x03\xf1\xb6\x8c\xc4E\x93\n&k\xec\xc8\xdch\xd6\x1e\xcb\fA\\da/O\xdcn7\x1b@\xbf\xfb\x17J\xaaD\xe4\x01\xbc', &(0x7f0000000000)='.-+\x00']}, &(0x7f0000019100)={[&(0x7f0000000200)=' ']})

9.061497686s ago: executing program 3 (id=332):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x7c8})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
madvise(&(0x7f00003cd000/0x1000)=nil, 0x1000, 0x8)
readv(r0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/13, 0xd}, {&(0x7f0000000180)=""/31, 0x1f}], 0x2)

8.940416809s ago: executing program 3 (id=336):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f0000000380)={[{@nogrpid}, {@resuid={'resuid', 0x3d, 0xee01}}, {@resgid}, {@nomblk_io_submit}, {@nombcache}, {@resgid={'resgid', 0x3d, 0xee00}}]}, 0x1, 0x42f, &(0x7f0000000940)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3813009, 0x0, 0x1, 0x0, 0x0)
setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000000), &(0x7f0000000b40), 0xfe1c, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

8.611386489s ago: executing program 3 (id=343):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
sendmmsg(r3, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x48d4)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x19, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18060000ffffffff", @ANYBLOB], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = syz_open_dev$vim2m(&(0x7f00000005c0), 0x1ff, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000680)={0x3, @win={{0x2, 0x2, 0x4, 0xffffffff}, 0x0, 0x0, &(0x7f0000000640)={{0x0, 0x79b, 0x6, 0x3}}, 0x9, &(0x7f0000002840)="0e394b5016a3981381c931c3d9949f02f69b10b195eeede9246431bc46a031b26fa61da3d47f53e66908870b79a02a49337b2641bf5f5bc58c148e97a95f93bc1bff7c32cad24f512eb4964768ae8a926735b4bb7405f2510b3ec5496f0e6d5893e6f5a5bc6629ae5e6dd6ac04462347dc781ba8cbade21fa1b33f77c49afafc75f48c4dbefc47e874977c4680113ad67e35d0721f9d9d8020c74573b144608e2e59936a9c232063b9c289c0484d9348823faee2e50d8c54c04d4b31991c104535ef9b0619d7c0b2ca10d24f1f6e9bf0041710f99ba1d041ddff1557850aac9971f790f865b6fe6b428272941e50b2c5f4f67f447e89e38fccb0ba11e04679c78550aaeec5ab5c95fa654328203e9612a966c27696006e84c9ce6d3c044c22a9c00da06cca4c97b90f6cb4fa9bdb90e6f38e6d254f3a306b6d73c97d117217934970de3f865aafbfede8009aaf648b5003031ece3b668955bb43a9f86fb220fe788af038ce64c99e541563c36bfd685d06d54f6aac6c0c2c7820d7ce9d15e1afbe2b0d0e163ecb416dd64d71f8021f4395967fb317ace924b57fce87d921da96809f3f1ad23c59e67a725165d3372f285283d6bc7bcd23a7787d404196b8b1e4d53cdc970bbd902f5f2daa5c163a3aea2b045c680c917d3b8224ab16bd1077354a5ea4b9b6f2199321298b4f0c3a97a5183f4e1d2c265c5ba35a223bea57fa632248e4a66f1c2e832b9d75b7d950911edc33724bbb013935e59d4c77829313649163e64582a2e4b91f73b71de3466b50ca5693a93f2ff8854dc5786a635b629fb41dc1328ffc46142b0fc9e367d4776e93e2fd59a01755928578e4a03a4beb998a4e543471d47a0b1fed07828d0eb4169a893b8626bc4dee0285d2a9649dafd804247824ea00537535ff2b506ec85e142be56dcc6d72045855fc6ef6d18cbe3b4312c8498666fd17d94bc6363664b442cb355bb320c58e642540bcc174418fc30e48289322a47b82144e2a4487b9008e5df1e5a844eddd31e39fa56ff71137afdeb8521a64547af1d2fe6a2b27f7e7f66b1ad0c4565472395b679d3d946cc9c6ffacaaea414d89151e2d1a6a887e9f7ca3d02ac9b3fb70eed176cf0ed4ea96c60d783a8c227cb30445b8ec6be51e83187ba15d82e752e4c2b934ca3c2790e0dd475b4ef95f3e9b3a07bf5997bb16205795346240bb738b12c4e521aa2ae19cfdbf3ed1c204fcac50f8c8a005dfd15e95ff4cc5ea34e05843d98c290cceafb875243bf606d2bd755d5ab77f6d85f483a367724ac75e1b6bc1e9fe7c3cc3865ba7840924f4271c32f14056961d5a5cdcc13f61e104b00fbbb95b824435e856632cccbc6d2a18ea63e27a880428bedd9f96985eb3d5ff2fd1f3a3eb1cc8596869beb96afffbe6102e4a0830109d721755cd465e6b69c64e782f71a086444d028e6896aa35a300b03aedacadcd7074c3941c49d66825b865f401935e6eb0233a6375b97f673587442bd01c7cd2e6490ed4c2cb69e1461d9fb73628f1cea97c5d54ce77205b147400e605ec4584d677bf35f81c96797b1fbb993e942afb44eeb579429f7adbd15deaf7b7b0399dfafbbbff793131898dc43e3291ed453f2298f335eff8e692478c199a78b791a90d523a0082ccb8e43535ca43c222d221e3c9e89438c028a4dac3a43096d0b3e1e4113bf5ef8a8262c40b7dafb76a24f7d16946f56610939653d92a1adaa66205d1449d6cfeb6074393e665d866684c3268c56eb5a3bb10829ed553a506f2ce3c8b90b77d94a326376c6eeb6884467726e129305299e00fa8f1d0c465527b38d7bca901445a9df15e56688f155f2d696e41b10486a36472698bca33e80950bda2f66a23c8c0669e28ac2265750f6fc1eccaf880bdb37a1e83469b97918a34931df6a16354bfe947e4b268e73a426d89821843408635a5c681bac9a9d1b86cae9484c38d321c13c9448ecdced9c92d7f4871e592820df26bbdac0977427749dab025411c0bb1915669799970dc54ad81cdd19d321747de1bb14373d1044b827c6adcf9e93f2a6c2269604e4fb7f57cf25d0bc5ad39b42d5b4566c1b7cda87f0a2ad7a2c7dbf5b3d57dca34326df467d06ed381fc139139ac0d15515cc3321de8bab85d48111c1505d8e0b940148e046f0a0011ec5f029dc71a5e89a0dca8dbdd95813d06f291fbc11358018c7ec1d4c06ebf120c2e10160a1c7640cb718fe832912d1e509a1f01184769bb9b268bf56c85fc5fd3e1822a659a0fbd51af7e3f805f5ee14d4e0412e5874a9414c7032bbbd76af82fccea691feae462a2d4e7ef3af9f6dcd75cd00c0eec391fbdab6516db5fb8be2602ec9c7bffccd2f89ef5460066927fba544e76d3b2db4cc1ae6b6918842c8395ea82d2ec6add7a8076c89931584491d32b34de5796d1ff0d1099757ec15892722cdfa547f4c64a4506672f1aed59c7c5276ae6b6e909a5f349bbedbf2dc2cad8b6d4dc451c0ae4ceaa248511dec10e817fdf491de243e0941fe5053ecb83a1f181d245bae09c85ead7e541e6531b3b07dbe984ff8c26dc395846cdd2aefec7336c03249115ec821b662423d991b25d7f0ae418599e02dc1831dadb1a9a579cd3f4553083b61cbd60a1195932f715b3dd6785a962d208fa25d5f6f56661888f33e62e13bad7570ffa66433b0277816c3c8a69dcc8755374770202505e7baafb637ac142769ab66c07c7fb22b9d1c9db87e7688ac427213148080eb732ca5e133d6ece6cfa1a4d72de4ce3fe860e2690d754d4cab69ed2c4b5c2e4511c4a9b851708d1fb5f125f7bd0c57c470a0284e5c58f40a8e9d6c194230f34e7778bd2eb4ad219d6a363f281e86a93969ee56edfd58a472a45bfb67bc02257a653e37bf426c85efbfa615614e5dfa1626f1bc56de01cedf5af1a2eeb3cdf54d79ff219c974bb0844c9664ddeaae1d851f7a951c5a22820d8a15c491ef00fcef592ad12af71104391266fef5e9f4a4fc296d3f8a0aef00a5b0864705dd2efa6886432090112e0044dc4c15ca9d6ceb0d38ae79e8f82c4e1f02613d8e38dbb3b03a9c28a8d9a4da074f83eb51ee507ea35e28c9afb95827cda8adf55529393bd68a8b5319dbd0a12ce24d3e472e1c7488e1790abab614180b4f445af613ae1779ed6f006565dc1bef3b59b0175999cb21f4b122673e2e815dfe798311d2736dc57a7c2c0abe8b12bbba7b6a9ba331955354d0a0b8c409848ed887eafb42f53d4ab1acb6804c9585c3495233a37f289bc88ff98744e205aa6b591cc6063257e552023c7ae389abfc135e9766473f2a40e6ec5f9badef0dfa1bf2dd30b402766cf977fba74297c760566f5ac4017c91595dfd353bc932f51596173694f847e854f8e8e1974e9218036c43ba4ea5b35b7318ddc7f6e10dcfc6504d9ea9d95011d9c838289afd1fb85e972051396f44ab2df15945c1f0a987f65fa12fb1acd50bfe305cf39286df0ebb20091a69db6f4acecef5fbe690e0543b374a02dcd0a48d8bcaeefa020df928f553b8c4b54a9c77d1c7916575c43e0c69d8668080f78789ced119bf50d8aeea32a8b7a9e0439e523599529719e4892513bf0e3c9e8f2c241d187ffac1d49fa0e054307d6f18d0012515aba415c40589e2212d268e7effad6dad8d29b1d8c57f15506c8f1473129a1c65f22a8ad74c7da68ab0caa0a8883268b86fa97e504b00ab645222054f4abbbfc6d7ded9949b4c4a14a25ac27013a20bce8c34f47e25c8d4c54c2c97e35641fe7bfaa538654060e76e6de6990263a898fd07ff549e3cbe5402f6a27c84776d96e932dd34e52fa1b5e8bcf4e32860419a871c2a70b911adb108c6a015aba18a08279d8c7d9d65efa46bb6501046fa59a35502268c07cef09907735fcd7a4d9f9ac47968e2fa2a4737f7b4e642fe1650381c63ca0e4f791803a96c51e27f58062d1cf9d35f1a30c6b7eb46bcff197cca28b014b5b0e5c52a41f60c3c73bc9b90acfe818ab577e8b7bc3f988b7372c6f78b0284bc097b9011791d8aed3dd818cacf625ebf90fff746cd13d9ef90f6f6705f96d22e3539625f3951061b5643da1d85bd9900524259df9f73ec4d2d583477f661738e6f163a210f8366d5fe3198af6a9bc80379d683c0343dd21222da3b3b93f0b86588b2114c7445f5c43dd82ca48f854ca39d339c36da46e027667f0ad4671ed4ea1fdcbc8ff8154370f66fb9c99f97bc47f3b3be2743d84f6ba86d83f682e10924cb1fa5795be825f4f5d3927d62811d091799d78540e6a62d291d8c1757c2ed045602a278de6858fe4597a94441816225baa7c76f77b4c91e0ec78b56368a108c5a3e18fbf6b0f5b0885e544b992ebc0b46a149f0519bf8e91d284a175b8bf88388be90ee0b64f45dd60ffaa8bf1c67fa704777f9f9efae1bd4c551e79bd911bf983fda39ff84bdca333f492c09b23dfc12be6e761e378d94aa8277f73605b85ad4f1e34a23cff14b560d69599da215894264a01c523ca9e554fddf065cf7c579ec3f55992090bcf695457457a1962b334cc53fb7d73500966cb61a856cff2ecaf3e844379b3c78f566a13abaab3efdbe7ebb18f694aa7005f11a11c5881bccb0c6197c92ec9ff4e74efeaf82627d86419a1b709cd7b9decef7597c3b6a7a70619744582b98379912b1a08b23009a9021e975a468619b5d4c26b5d943cb5dabd2eedc5588783e64eeb9a041837dd4169e29c01dbd67ad0115f772b80790ab5538030591e307d4ebc6535ac7d4dbd4f4db7db2f5d8e5c04b475bfc6022b522d67649e95f8ba35631808b2ccb8f0495ac60d9c90682154631bcd3b00971dc2e67eee1d7d8a06c2a740151361314f5b7907dd2cda9af79cc5b64ce2cf4e46c125e1ef4d2862929dd19e7cd7db8ae68bba75669e38612bd0a805ded8bc5d3ee73b4506caf246918ed5066ea46d3904305ff710d4db7d3bb7779964d9b29212c2ebd5cd4a8dc287a0b707e3789b98c51502f368749e9b0c0cea227b18a3a43732ae31f03bb67f4d2cd7e1ca7240e0bb0b71e0da5338b2262785eff91bc84e241e574bffea605ac8da50c53abd08f68db87a5af869cf3a950b79a0d5c3d96c4748708e1adcf3979a58da1f6e999e01a88ada46cc1da9ae2c9be0214e3ef621f97c8d95ade203bd4413ebe90df0530a1a41748912e1158c7407c743048167302191512069ef2c4fd431af6ba0b27fba2a08829be802bd83a4c65038139ab5d7ea0ee4b292c73aba5047e1a2174c8c5b400d41cce667cdc8008d7e8fead1f5554877a7b4f96442d75976ac4b39d36a7cf862c6fc70edb1532a0a671fae9524e19a5fb50d462f097eba3bcc2dfa3a6f4b6d331a80fc184c52e5523f0d56c1680167416ca0b75dce30a418db5376d35e1dbd9ae5e2fd433734f39d363ead2b1a97afadf8211f5e97b166edb6dc5a0cc7720213f93f36b179caa46fdaafd6dbd96178498387bb9033fd039559ee90bfbb00941fad8a2fd2e5c1123845ca95055c55a94f91f4bb11a06231a52c0b3c56f0272ba37eac2d082989d6fae7ad546b848fc0f5ffa276d73a9c105a56b2dd099a9f0d62fb34bc6bca02caa5420fe3cc32f9c4e05c02cb4220ee01f282b56dbf170394395b9c8dc124c91755fc5761dd4fb7ad6d74a56b7c5f87fd63a58741b78ae69ea33eb55189cd632bbd9179873a6b873edfe0b51aee78b715d24b7d330fc7733d1367923921c9001a7ff1190fc988b60d92150ace247adfefb6f1bbe5324b4f8d22b7d33ef0bff9004d1dba2b", 0x7}})
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000001000), r5)
r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2)
ioctl$VIDIOC_G_CTRL(r6, 0xc008561b, &(0x7f0000007c40)={0x98f908, 0x5})
syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0x4}}, 0x9)
r7 = syz_usb_connect(0x0, 0x0, 0x0, 0x0)
syz_open_dev$dri(&(0x7f00000000c0), 0x3fe, 0x8001)
unshare(0x20000400)
syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000500)=ANY=[], &(0x7f0000000240)={0x0, 0xa, 0x1}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000002c0)={0x20, 0x80, 0x1c, {0x1, 0x8, 0x7, 0x3, 0x7fff, 0x3ff, 0x2, 0x1, 0x4649, 0x5, 0x4, 0x9}}, &(0x7f0000000300)={0x20, 0x85, 0x4, 0xc}, &(0x7f0000000340)={0x20, 0x83, 0x2, 0x1}, 0x0, &(0x7f00000003c0)={0x20, 0x89, 0x2}})
unshare(0x68020080)
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x12000, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000080)={0xc})

6.332459654s ago: executing program 3 (id=364):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8794}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)=""/205, 0xcd}, {&(0x7f0000000340)=""/257, 0x101}, {&(0x7f0000005e40)=""/4109, 0x100d}, {&(0x7f0000000a40)=""/243, 0xf3}, {&(0x7f0000000480)=""/168, 0xa8}], 0x5}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x44}, {{0x0, 0x0, 0x0}, 0x7f}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000003e00)=""/4093, 0xffd}, {&(0x7f0000002e00)=""/4094, 0xffe}, {&(0x7f0000000600)=""/86, 0x56}], 0x5}, 0xb1}, {{0x0, 0x0, 0x0}, 0x4a}], 0x8, 0x0, 0x0)

5.776708133s ago: executing program 33 (id=364):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8794}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)=""/205, 0xcd}, {&(0x7f0000000340)=""/257, 0x101}, {&(0x7f0000005e40)=""/4109, 0x100d}, {&(0x7f0000000a40)=""/243, 0xf3}, {&(0x7f0000000480)=""/168, 0xa8}], 0x5}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x44}, {{0x0, 0x0, 0x0}, 0x7f}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000003e00)=""/4093, 0xffd}, {&(0x7f0000002e00)=""/4094, 0xffe}, {&(0x7f0000000600)=""/86, 0x56}], 0x5}, 0xb1}, {{0x0, 0x0, 0x0}, 0x4a}], 0x8, 0x0, 0x0)

5.70849184s ago: executing program 0 (id=367):
r0 = syz_io_uring_setup(0x3a65, &(0x7f0000000700)={0x0, 0xa011, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x18000, 0xfffffffffffffffc, 0x0, 0x2, 0x8000000000000001, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x9, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x1c, 0x5, 0x3, 0x2, 0x4000000000002, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x5, 0x7ff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0xac18, 0x0, 0x0, 0x4000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1]})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB=';'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000003, 0x0, {0xfffe}})
io_uring_enter(r0, 0x5d62, 0x0, 0x0, 0x0, 0x0)

5.656916182s ago: executing program 0 (id=368):
r0 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={<r1=>r0})
bind$xdp(r1, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10)
close(r0)

5.509111983s ago: executing program 0 (id=370):
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xa)
setresuid(0x0, r1, 0x0)
add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe)
add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe)

5.404818735s ago: executing program 0 (id=373):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800002, &(0x7f0000000600)={[{@force}, {@nodecompose}, {@gid}, {@nls={'nls', 0x3d, 'macinuit'}}, {@gid}, {@type={'type', 0x3d, "1e4310ee"}}, {@nobarrier}, {@nobarrier}]}, 0x3, 0x6b3, &(0x7f0000000780)="$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")
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0)

5.262100248s ago: executing program 0 (id=374):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), r0)
sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x34, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x9}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x9}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8080}, 0x4000000)

4.830637815s ago: executing program 0 (id=377):
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{0x20, 0x3, 0x2, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6, 0x0, 0x0, 0x1}]}, 0x10)
sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0)

4.570343924s ago: executing program 34 (id=377):
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{0x20, 0x3, 0x2, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6, 0x0, 0x0, 0x1}]}, 0x10)
sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0)

1.189381886s ago: executing program 1 (id=393):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x555, &(0x7f0000000640)="$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")
quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x100000000006, 0x5, 0xfffb, 0x80, 0xfffffffffffeffff, 0xffffffffffffffff, 0x1ff, 0xe, 0x36})

1.188860019s ago: executing program 1 (id=394):
io_setup(0x9, &(0x7f0000000000)=<r0=>0x0)
r1 = socket$pptp(0x18, 0x1, 0x2)
io_submit(r0, 0x1, &(0x7f0000001200)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}])
io_getevents(r0, 0x0, 0x3c, 0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3938700})

1.061113776s ago: executing program 1 (id=395):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000bdb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xb)
syz_clone(0x8009080, 0x0, 0x0, 0x0, 0x0, 0x0)

971.943782ms ago: executing program 1 (id=396):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000806010300000000000000000a00000005000100070000000900020073797a3100000000050001"], 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x8)

971.486851ms ago: executing program 1 (id=397):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x35}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

0s ago: executing program 1 (id=398):
r0 = socket(0x18, 0x3, 0x0)
connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x1, @empty}}, 0x1e)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:60715' (ED25519) to the list of known hosts.
syzkaller login: [   56.935914][ T5833] cgroup: Unknown subsys name 'net'
[   57.047865][ T5833] cgroup: Unknown subsys name 'cpuset'
[   57.052546][ T5833] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.245002][ T5833] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   64.394505][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   64.397503][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   64.400100][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   64.404042][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   64.406837][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   64.474889][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   64.478357][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   64.481585][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   64.489726][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   64.493289][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   64.519266][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   64.522151][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   64.525301][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   64.530691][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   64.533932][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.640803][ T5847] chnl_net:caif_netlink_parms(): no params data found
[   64.759247][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.762980][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.766279][ T5847] bridge_slave_0: entered allmulticast mode
[   64.770223][ T5847] bridge_slave_0: entered promiscuous mode
[   64.776593][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.779287][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.782154][ T5847] bridge_slave_1: entered allmulticast mode
[   64.786234][ T5847] bridge_slave_1: entered promiscuous mode
[   64.828282][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.839724][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.880474][ T5847] team0: Port device team_slave_0 added
[   64.889511][ T5847] team0: Port device team_slave_1 added
[   64.949590][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.952234][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.962065][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.980197][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.982606][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.991347][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.064602][ T5847] hsr_slave_0: entered promiscuous mode
[   65.066996][ T5847] hsr_slave_1: entered promiscuous mode
[   65.070027][ T5852] chnl_net:caif_netlink_parms(): no params data found
[   65.109710][ T5856] chnl_net:caif_netlink_parms(): no params data found
[   65.233120][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.235568][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.237807][ T5852] bridge_slave_0: entered allmulticast mode
[   65.240863][ T5852] bridge_slave_0: entered promiscuous mode
[   65.275231][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.277766][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.279983][ T5852] bridge_slave_1: entered allmulticast mode
[   65.283262][ T5852] bridge_slave_1: entered promiscuous mode
[   65.285985][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.288854][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.291111][ T5856] bridge_slave_0: entered allmulticast mode
[   65.294093][ T5856] bridge_slave_0: entered promiscuous mode
[   65.297557][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.299738][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.302106][ T5856] bridge_slave_1: entered allmulticast mode
[   65.305037][ T5856] bridge_slave_1: entered promiscuous mode
[   65.351562][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.380453][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.385614][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.399047][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.446476][ T5852] team0: Port device team_slave_0 added
[   65.451122][ T5852] team0: Port device team_slave_1 added
[   65.476942][ T5856] team0: Port device team_slave_0 added
[   65.493183][ T5856] team0: Port device team_slave_1 added
[   65.550055][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.553142][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.563325][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.571526][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.574859][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.586397][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.591456][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.595028][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.605686][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.610347][ T5847] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   65.628136][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.630967][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.639422][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.645298][ T5847] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   65.652226][ T5847] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   65.660925][ T5847] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   65.700501][ T5852] hsr_slave_0: entered promiscuous mode
[   65.703418][ T5852] hsr_slave_1: entered promiscuous mode
[   65.705944][ T5852] debugfs: 'hsr0' already exists in 'hsr'
[   65.707783][ T5852] Cannot create hsr debugfs directory
[   65.745261][ T5856] hsr_slave_0: entered promiscuous mode
[   65.747573][ T5856] hsr_slave_1: entered promiscuous mode
[   65.749820][ T5856] debugfs: 'hsr0' already exists in 'hsr'
[   65.751644][ T5856] Cannot create hsr debugfs directory
[   66.058720][ T5852] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   66.065650][ T5852] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   66.072232][ T5852] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   66.097027][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.100044][ T5852] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   66.149445][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[   66.173002][ T5856] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   66.182805][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.185774][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.197082][ T5856] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   66.204458][ T5856] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   66.216607][ T5856] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   66.233556][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.236457][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.365172][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.386557][ T5852] 8021q: adding VLAN 0 to HW filter on device team0
[   66.400709][  T133] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.403355][  T133] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.417438][  T133] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.420058][  T133] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.453405][   T55] Bluetooth: hci0: command tx timeout
[   66.476871][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.525008][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.533898][   T55] Bluetooth: hci1: command tx timeout
[   66.543670][ T5856] 8021q: adding VLAN 0 to HW filter on device team0
[   66.560138][  T133] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.563217][  T133] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.598314][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.601361][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.613959][   T55] Bluetooth: hci2: command tx timeout
[   66.643776][ T5847] veth0_vlan: entered promiscuous mode
[   66.666833][ T5847] veth1_vlan: entered promiscuous mode
[   66.713741][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.764385][ T5847] veth0_macvtap: entered promiscuous mode
[   66.781149][ T5847] veth1_macvtap: entered promiscuous mode
[   66.788159][ T5852] veth0_vlan: entered promiscuous mode
[   66.816681][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.827531][ T5852] veth1_vlan: entered promiscuous mode
[   66.841863][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.851976][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.868869][ T5716] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.874425][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.880665][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.887506][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.916948][ T5852] veth0_macvtap: entered promiscuous mode
[   66.926173][ T5852] veth1_macvtap: entered promiscuous mode
[   66.966761][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.995945][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.022028][ T5856] veth0_vlan: entered promiscuous mode
[   67.039338][ T5865] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.045647][ T5865] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.046856][ T3640] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.055982][ T3640] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.061788][ T5856] veth1_vlan: entered promiscuous mode
[   67.065497][ T5865] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.083149][ T5865] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.122870][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.128617][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.158251][ T5856] veth0_macvtap: entered promiscuous mode
[   67.165729][ T5856] veth1_macvtap: entered promiscuous mode
[   67.167908][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.170993][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.216898][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.230199][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.234135][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.240823][ T5865] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.241118][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.251078][ T5847] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   67.260447][ T5865] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.266448][ T5865] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.281877][ T5865] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.342199][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.347799][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.389324][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.391901][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.423534][ T5913] loop2: detected capacity change from 0 to 1024
[   67.427705][ T5913] EXT4-fs: Ignoring removed orlov option
[   67.488742][ T5913] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   67.512151][ T5920] program syz.1.4 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   67.515813][   T33] audit: type=1800 audit(1755335962.821:2): pid=5913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3" name="file1" dev="loop2" ino=15 res=0 errno=0
[   67.548754][ T5922] loop0: detected capacity change from 0 to 256
[   67.572393][ T5852] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   67.579026][ T5922] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[   67.595280][ T5922] exFAT-fs (loop0): start_clu is invalid cluster(0x0)
[   67.632124][ T5924] loop1: detected capacity change from 0 to 1764
[   68.103398][ T5939] loop1: detected capacity change from 0 to 32768
[   68.106247][ T5939] =======================================================
[   68.106247][ T5939] WARNING: The mand mount option has been deprecated and
[   68.106247][ T5939]          and is ignored by this kernel. Remove the mand
[   68.106247][ T5939]          option from the mount to silence this warning.
[   68.106247][ T5939] =======================================================
[   68.131691][ T5939] ERROR: (device loop1): dbAlloc: unable to allocate blocks
[   68.131691][ T5939] 
[   68.135974][ T5909] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[   68.141276][ T5939] jfs_create: dtInsert returned -EIO
[   68.143470][ T5939] ERROR: (device loop1): jfs_create: 
[   68.143470][ T5939] 
[   68.287996][ T5909] usb 1-1: config 1 interface 0 has no altsetting 0
[   68.298114][ T5909] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[   68.306776][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   68.310574][ T5909] usb 1-1: Product: syz
[   68.312346][ T5909] usb 1-1: Manufacturer: syz
[   68.317454][ T5909] usb 1-1: SerialNumber: syz
[   68.501837][ T5953] loop1: detected capacity change from 0 to 256
[   68.533291][   T55] Bluetooth: hci0: command tx timeout
[   68.566401][ T5909] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[   68.590646][ T5909] usb 1-1: USB disconnect, device number 2
[   68.620651][ T5909] usblp0: removed
[   68.623319][   T55] Bluetooth: hci1: command tx timeout
[   68.700220][   T55] Bluetooth: hci2: command tx timeout
[   68.783248][ T5898] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   68.842224][ T5882] libceph: connect (1)[c::]:6789 error -101
[   68.847691][ T5882] libceph: mon0 (1)[c::]:6789 connect error
[   68.993641][ T5959] loop1: detected capacity change from 0 to 32768
[   69.005036][ T5963] ceph: No mds server is up or the cluster is laggy
[   69.049112][ T5959] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   69.099450][ T5959] XFS (loop1): Ending clean mount
[   69.177683][ T5847] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   69.652958][   T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   69.733659][ T5909] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   70.344085][ T6022] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[   70.398772][ T6024] loop2: detected capacity change from 0 to 1024
[   70.458631][ T3640] hfsplus: b-tree write err: -5, ino 4
[   70.554069][ T6028] loop0: detected capacity change from 0 to 64
[   70.717665][ T5849] Bluetooth: hci1: command tx timeout
[   70.720703][   T55] Bluetooth: hci0: command tx timeout
[   70.753347][ T5865] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   70.756612][ T5865] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   70.783424][   T55] Bluetooth: hci2: command tx timeout
[   70.849757][ T6035] loop2: detected capacity change from 0 to 128
[   70.855163][ T6035] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   71.077860][ T5882] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   71.090687][ T6035] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   71.257659][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[   71.262859][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[   71.336006][ T6030] loop1: detected capacity change from 0 to 32768
[   71.340139][ T6030] /dev/loop1: Can't open blockdev
[   71.597744][ T6045] loop2: detected capacity change from 0 to 512
[   71.601453][ T6045] EXT4-fs (loop2): Test dummy encryption mode enabled
[   71.603951][ T6045] EXT4-fs (loop2): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0
[   71.606831][ T6045] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[   71.614121][ T6045] EXT4-fs (loop2): The Hurd can't support 64-bit file systems
[   71.726514][ T6045] loop2: detected capacity change from 0 to 512
[   71.766692][ T6045] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.48: bad orphan inode 15
[   71.787119][ T6045] ext4_test_bit(bit=14, block=5) = 0
[   71.789769][ T6045] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   71.899664][ T5852] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.756464][ T6072] netlink: 'syz.0.55': attribute type 4 has an invalid length.
[   72.772774][ T5849] Bluetooth: hci1: command tx timeout
[   72.774866][   T55] Bluetooth: hci0: command tx timeout
[   72.785080][ T6072] netlink: 'syz.0.55': attribute type 4 has an invalid length.
[   72.852796][   T55] Bluetooth: hci2: command tx timeout
[   73.902511][    C1] vcan0: j1939_tp_rxtimer: 0xffff888109b5ec00: rx timeout, send abort
[   73.907088][    C1] vcan0: j1939_tp_rxtimer: 0xffff888109b5f000: rx timeout, send abort
[   73.910353][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888109b5ec00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   73.916015][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888109b5f000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   74.219601][ T6104] loop0: detected capacity change from 0 to 512
[   74.229676][ T6104] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.64: bg 0: block 16: invalid block bitmap
[   74.236459][ T6104] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem
[   74.239523][ T6104] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.64: attempt to clear invalid blocks 1669132790 len 1
[   74.245348][ T6104] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.64: invalid indirect mapped block 4294967295 (level 1)
[   74.251534][ T6104] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.64: invalid indirect mapped block 4294967295 (level 2)
[   74.256723][ T6104] EXT4-fs (loop0): 1 truncate cleaned up
[   74.259701][ T6104] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   74.363765][ T5856] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.497573][ T6128] program syz.0.67 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   74.546908][ T6131] loop2: detected capacity change from 0 to 1024
[   74.612661][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   74.618000][ T6131] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[   74.808518][ T6148] ksmbd: Unknown IPC event: 4, ignore.
[   74.847072][ T6142] loop2: detected capacity change from 0 to 164
[   74.882048][ T6152] loop0: detected capacity change from 0 to 512
[   74.898580][ T6142] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet.
[   74.927808][ T6152] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.77: corrupted in-inode xattr: invalid ea_ino
[   74.959199][ T6152] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.77: couldn't read orphan inode 15 (err -117)
[   74.974438][ T6152] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   75.024160][ T6152] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000.
[   75.057887][ T6165] loop2: detected capacity change from 0 to 512
[   75.067230][ T6165] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   75.071943][ T6165] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   75.094687][ T6165] EXT4-fs (loop2): 1 truncate cleaned up
[   75.098349][ T6165] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   75.237841][ T5852] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.567378][ T5909] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   75.722570][ T5909] usb 3-1: Using ep0 maxpacket: 8
[   75.727133][ T5909] usb 3-1: unable to get BOS descriptor or descriptor too short
[   75.731393][ T5909] usb 3-1: config 6 has an invalid interface number: 81 but max is 0
[   75.735437][ T5909] usb 3-1: config 6 has no interface number 0
[   75.737831][ T5909] usb 3-1: config 6 interface 81 has no altsetting 0
[   75.738681][ T6190] process 'syz.1.86' launched './file2' with NULL argv: empty string added
[   75.749298][ T5909] usb 3-1: New USB device found, idVendor=061d, idProduct=c1a0, bcdDevice=f7.ec
[   75.753573][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   75.763635][ T5909] usb 3-1: Product: syz
[   75.765522][ T5909] usb 3-1: Manufacturer: syz
[   75.767462][ T5909] usb 3-1: SerialNumber: syz
[   75.795420][ T5856] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.011328][ T5909] quatech2 3-1:6.81: Quatech 2nd gen USB to Serial Driver converter detected
[   76.023944][ T5909] usb 3-1: qt2_attach - failed to power on unit: -71
[   76.032891][ T5909] quatech2 3-1:6.81: probe with driver quatech2 failed with error -71
[   76.048037][ T5909] usb 3-1: USB disconnect, device number 2
[   76.468571][ T6230] openvswitch: netlink: Unknown key attributes 2
[   76.721317][ T6252] vcan0: tx drop: invalid da for name 0xfffffffffffffffe
[   76.862677][   T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   76.956066][ T6268] loop2: detected capacity change from 0 to 512
[   76.961596][ T6268] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[   76.976426][ T6268] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.111: bg 0: block 104: invalid block bitmap
[   76.984074][ T6268] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem
[   76.988220][ T6268] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.111: invalid indirect mapped block 1 (level 1)
[   76.993748][ T6268] EXT4-fs (loop2): 1 truncate cleaned up
[   77.004502][ T6268] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   77.028496][   T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   77.032388][   T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[   77.049347][   T24] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[   77.054630][ T5852] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.066139][   T24] usb 1-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5
[   77.072611][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   77.075750][   T24] usb 1-1: Product: syz
[   77.090737][ T6278] warning: `syz.2.114' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   77.093378][   T24] usb 1-1: Manufacturer: syz
[   77.097004][   T24] usb 1-1: SerialNumber: syz
[   77.114216][   T24] usb 1-1: config 0 descriptor??
[   77.334850][   T24] usb 1-1: Found UVC 34.00 device syz (8086:0b5b)
[   77.346593][   T24] usb 1-1: No valid video chain found.
[   77.353172][   T24] usb 1-1: USB disconnect, device number 3
[   77.517758][ T6298] loop2: detected capacity change from 0 to 128
[   78.317464][ T6311] Zero length message leads to an empty skb
[   78.486423][ T3640] kworker/u9:5: attempt to access beyond end of device
[   78.486423][ T3640] loop2: rw=1, sector=145, nr_sectors = 8 limit=128
[   78.512130][ T3640] kworker/u9:5: attempt to access beyond end of device
[   78.512130][ T3640] loop2: rw=1, sector=161, nr_sectors = 8 limit=128
[   78.527665][ T3640] kworker/u9:5: attempt to access beyond end of device
[   78.527665][ T3640] loop2: rw=1, sector=177, nr_sectors = 8 limit=128
[   78.548356][ T3640] kworker/u9:5: attempt to access beyond end of device
[   78.548356][ T3640] loop2: rw=1, sector=193, nr_sectors = 8 limit=128
[   78.563128][ T3640] kworker/u9:5: attempt to access beyond end of device
[   78.563128][ T3640] loop2: rw=1, sector=209, nr_sectors = 8 limit=128
[   78.567494][ T3640] kworker/u9:5: attempt to access beyond end of device
[   78.567494][ T3640] loop2: rw=1, sector=225, nr_sectors = 8 limit=128
[   78.582917][ T3640] kworker/u9:5: attempt to access beyond end of device
[   78.582917][ T3640] loop2: rw=1, sector=241, nr_sectors = 8 limit=128
[   78.587646][ T3640] kworker/u9:5: attempt to access beyond end of device
[   78.587646][ T3640] loop2: rw=1, sector=257, nr_sectors = 8 limit=128
[   78.592070][ T3640] kworker/u9:5: attempt to access beyond end of device
[   78.592070][ T3640] loop2: rw=1, sector=273, nr_sectors = 8 limit=128
[   78.634168][ T3640] kworker/u9:5: attempt to access beyond end of device
[   78.634168][ T3640] loop2: rw=1, sector=289, nr_sectors = 8 limit=128
[   79.641247][ T6322] loop2: detected capacity change from 0 to 32768
[   79.648907][ T6322] 
[   79.648907][ T6322]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   79.648907][ T6322] 
[   79.724676][ T6329] read_mapping_page failed!
[   79.728465][ T6329] ERROR: (device loop2): txCommit: 
[   79.728465][ T6329] 
[   79.759101][ T5852] 
[   79.759101][ T5852]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   79.759101][ T5852] 
[   79.769336][ T5852] 
[   79.769336][ T5852]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   79.769336][ T5852] 
[   80.419515][    C1] IPv4: Oversized IP packet from 172.20.20.24
[   81.688649][ T6414] loop0: detected capacity change from 0 to 24
[   81.691995][ T6414] MTD: Attempt to mount non-MTD device "/dev/loop0"
[   81.817780][ T6414] romfs: Mounting image 'rom 637cf1fa' through the block layer
[   82.581538][ T6427] loop0: detected capacity change from 0 to 512
[   82.589955][ T6427] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[   82.607015][ T6426] loop2: detected capacity change from 0 to 2048
[   82.659420][ T6426] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[   82.661897][ T6426] UDF-fs: Scanning with blocksize 512 failed
[   82.680870][ T6426] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   82.772764][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   82.807720][ T6448] loop0: detected capacity change from 0 to 512
[   82.813731][ T6448] /dev/loop0: Can't open blockdev
[   83.867370][ T6495] loop2: detected capacity change from 0 to 32768
[   83.903952][ T6495] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[   83.939110][ T6495] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   83.982915][   T33] audit: type=1800 audit(1755335979.281:3): pid=6495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.177" name="file1" dev="loop2" ino=17058 res=0 errno=0
[   84.019063][ T6522] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   84.061970][ T5852] ocfs2: Unmounting device (7,2) on (node local)
[   84.370403][ T6551] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6)
[   84.448644][ T6554] netlink: 'syz.1.198': attribute type 1 has an invalid length.
[   84.723358][ T6554] 8021q: adding VLAN 0 to HW filter on device bond1
[   84.733536][ T6595] gretap1: entered promiscuous mode
[   84.737913][ T6595] bond1: (slave gretap1): making interface the new active one
[   84.741192][ T6595] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   85.207445][ T6612] loop2: detected capacity change from 0 to 512
[   85.234245][ T6612] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[   85.242990][ T6612] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[   85.246378][ T6612] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.207: Failed to acquire dquot type 1
[   85.265753][ T6612] EXT4-fs (loop2): 1 truncate cleaned up
[   85.268578][ T6612] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   85.273160][ T6612] ext4 filesystem being mounted at /65/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[   85.292046][ T6612] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[   85.306934][ T6612] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[   85.310036][ T6612] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.207: Failed to acquire dquot type 1
[   85.339015][ T5852] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.615591][  T793] cfg80211: failed to load regulatory.db
[   86.909385][ T6693] loop0: detected capacity change from 0 to 8192
[   86.916819][ T6693] NILFS (loop0): unsupported revision (superblock rev.=0.0, current rev.=2.0). Please check the version of mkfs.nilfs(2).
[   86.966084][ T6699] pimreg: entered allmulticast mode
[   86.975990][ T6699] pimreg: left allmulticast mode
[   87.036823][ T6703] netlink: 72 bytes leftover after parsing attributes in process `syz.0.239'.
[   88.372245][ T6742] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   88.950622][ T6764] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[   89.230009][ T6787] netlink: 24 bytes leftover after parsing attributes in process `syz.0.266'.
[   89.907933][ T5865] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.979113][ T5865] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.176574][ T5865] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.183959][ T6821] program syz.0.279 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   90.314915][ T5865] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.345174][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   90.351942][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   90.362436][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   90.377347][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   90.382641][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   90.555798][ T5865] bridge_slave_1: left allmulticast mode
[   90.558206][ T5865] bridge_slave_1: left promiscuous mode
[   90.561466][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.585262][ T5865] bridge_slave_0: left allmulticast mode
[   90.587587][ T5865] bridge_slave_0: left promiscuous mode
[   90.590191][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.951558][ T5865] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   90.958962][ T5865] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   90.972711][   T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   91.042003][ T5865] bond0 (unregistering): Released all slaves
[   91.149581][   T10] usb 1-1: unable to get BOS descriptor or descriptor too short
[   91.159397][   T10] usb 1-1: config 3 has an invalid interface number: 8 but max is 3
[   91.170786][   T10] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[   91.190596][   T10] usb 1-1: config 3 has 1 interface, different from the descriptor's value: 4
[   91.557819][   T10] usb 1-1: config 3 has no interface number 0
[   91.560386][   T10] usb 1-1: config 3 interface 8 altsetting 6 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   91.573123][   T10] usb 1-1: config 3 interface 8 altsetting 6 endpoint 0x82 has invalid wMaxPacketSize 0
[   91.591162][   T10] usb 1-1: config 3 interface 8 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[   91.598591][   T10] usb 1-1: config 3 interface 8 has no altsetting 0
[   91.617682][   T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=921d, bcdDevice=c2.be
[   91.625620][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.628851][   T10] usb 1-1: Product: syz
[   91.630530][   T10] usb 1-1: Manufacturer: syz
[   91.632431][   T10] usb 1-1: SerialNumber: syz
[   91.915757][   T10] appledisplay 1-1:3.8: Submitting URB failed
[   91.933990][   T10] appledisplay 1-1:3.8: probe with driver appledisplay failed with error -5
[   91.959236][   T10] usb 1-1: USB disconnect, device number 4
[   91.978475][ T6832] chnl_net:caif_netlink_parms(): no params data found
[   92.091246][ T5865] hsr_slave_0: left promiscuous mode
[   92.094959][ T5865] hsr_slave_1: left promiscuous mode
[   92.097128][ T5865] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   92.099531][ T5865] batman_adv: batadv0: Removing interface: batadv_slave_0
[   92.106765][ T5865] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   92.109132][ T5865] batman_adv: batadv0: Removing interface: batadv_slave_1
[   92.123248][ T5865] veth1_macvtap: left promiscuous mode
[   92.125190][ T5865] veth0_macvtap: left promiscuous mode
[   92.127212][ T5865] veth1_vlan: left promiscuous mode
[   92.129267][ T5865] veth0_vlan: left promiscuous mode
[   92.455882][   T55] Bluetooth: hci1: command tx timeout
[   92.642167][ T5865] team0 (unregistering): Port device team_slave_1 removed
[   92.725421][ T5865] team0 (unregistering): Port device team_slave_0 removed
[   93.469191][ T6832] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.472134][ T6832] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.495557][ T6832] bridge_slave_0: entered allmulticast mode
[   93.499334][ T6832] bridge_slave_0: entered promiscuous mode
[   93.518055][ T6832] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.520916][ T6832] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.525342][ T6832] bridge_slave_1: entered allmulticast mode
[   93.529094][ T6832] bridge_slave_1: entered promiscuous mode
[   93.652313][ T6832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   93.683980][ T6832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   93.801732][ T6832] team0: Port device team_slave_0 added
[   93.805937][ T6832] team0: Port device team_slave_1 added
[   93.921566][ T6832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   93.942419][ T6832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.971124][ T6832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   93.986193][ T6832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   93.988449][ T6832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.002716][ T6832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   94.012299][ T7184] loop0: detected capacity change from 0 to 64
[   94.128367][ T6832] hsr_slave_0: entered promiscuous mode
[   94.130661][ T6832] hsr_slave_1: entered promiscuous mode
[   94.139631][ T7224] netlink: 28 bytes leftover after parsing attributes in process `syz.0.305'.
[   94.143764][ T6832] debugfs: 'hsr0' already exists in 'hsr'
[   94.147068][ T6832] Cannot create hsr debugfs directory
[   94.152228][ T7224] netlink: 28 bytes leftover after parsing attributes in process `syz.0.305'.
[   94.172362][ T7224] erspan0: entered promiscuous mode
[   94.174951][ T7224] gretap0: entered promiscuous mode
[   94.365768][ T7293] loop0: detected capacity change from 0 to 128
[   94.533150][   T55] Bluetooth: hci1: command tx timeout
[   94.557077][ T6832] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   94.584107][ T6832] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   94.590224][ T6832] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   94.605337][ T6832] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   94.731081][ T6832] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.757480][ T6832] 8021q: adding VLAN 0 to HW filter on device team0
[   94.768050][  T133] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.770368][  T133] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.789524][  T133] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.791862][  T133] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.009413][ T6832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   95.035732][ T6832] veth0_vlan: entered promiscuous mode
[   95.041837][ T6832] veth1_vlan: entered promiscuous mode
[   95.059433][ T6832] veth0_macvtap: entered promiscuous mode
[   95.066202][ T6832] veth1_macvtap: entered promiscuous mode
[   95.080039][ T6832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.086822][ T6832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.142766][ T5865] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.146398][ T5865] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.156862][ T5865] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.165001][ T5865] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.564385][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.567887][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.624154][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.626917][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.653519][ T7393] netlink: 36 bytes leftover after parsing attributes in process `syz.0.323'.
[   95.661153][ T7393] block nbd0: shutting down sockets
[   96.168807][ T7441] loop3: detected capacity change from 0 to 512
[   96.183703][ T7441] EXT4-fs: Ignoring removed nomblk_io_submit option
[   96.221032][ T7441] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   96.258569][ T7441] EXT4-fs (loop3): 1 truncate cleaned up
[   96.261493][ T7441] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   96.347458][ T7441] overlayfs: invalid origin (00000079001c1f2bae8ab57ef9f5ea9bedeabfa3f83b203bff7b5b5eff2bf10f26f5ebb5f39bafe3ea1f9fb79dd36cf5fadf95bcddb0efc3c985854be311bb92)
[   96.399028][ T7460] tap0: tun_chr_ioctl cmd 2148553947
[   96.422032][ T6832] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /5/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[   96.438329][ T6832] EXT4-fs error (device loop3): ext4_empty_dir:3124: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[   96.438487][ T7465] netlink: 108 bytes leftover after parsing attributes in process `syz.1.342'.
[   96.448326][ T7465] netlink: 108 bytes leftover after parsing attributes in process `syz.1.342'.
[   96.448330][ T6832] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /5/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[   96.451626][ T7465] netlink: 108 bytes leftover after parsing attributes in process `syz.1.342'.
[   96.460095][ T6832] EXT4-fs error (device loop3): ext4_empty_dir:3124: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[   96.475714][ T6832] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /5/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[   96.492429][ T6832] EXT4-fs error (device loop3): ext4_empty_dir:3124: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[   96.520901][ T6832] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /5/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[   96.557174][ T6832] EXT4-fs error (device loop3): ext4_empty_dir:3124: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[   96.578588][ T6832] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /5/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[   96.595156][ T6832] EXT4-fs error (device loop3): ext4_empty_dir:3124: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[   96.612756][   T55] Bluetooth: hci1: command tx timeout
[   97.582676][ T7499] 9pnet: p9_errstr2errno: server reported unknown error @cDB0xffffffffffffffff
[   98.177600][ T7515] netlink: 2036 bytes leftover after parsing attributes in process `syz.0.353'.
[   98.181269][ T7515] netlink: 24 bytes leftover after parsing attributes in process `syz.0.353'.
[   98.316048][ T7523] netlink: 164 bytes leftover after parsing attributes in process `syz.1.358'.
[   98.618153][ T6832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.654847][   T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.864742][   T33] audit: type=1326 audit(1755335994.131:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7532 comm="syz.1.363" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffbbc58ebe9 code=0x0
[   99.027009][   T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.223639][   T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.268561][   T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.512866][   T12] bridge_slave_1: left allmulticast mode
[   99.515177][   T12] bridge_slave_1: left promiscuous mode
[   99.517595][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.574493][   T12] bridge_slave_0: left allmulticast mode
[   99.576812][   T12] bridge_slave_0: left promiscuous mode
[   99.580140][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.703806][ T7574] loop0: detected capacity change from 0 to 1024
[   99.777878][ T5856] hfsplus: bad catalog entry type
[   99.836537][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   99.843683][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   99.849479][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   99.856701][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   99.866250][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   99.997709][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  100.002210][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  100.006841][   T12] bond0 (unregistering): Released all slaves
[  100.210734][ T1091] hfsplus: b-tree write err: -5, ino 4
[  100.447827][   T12] hsr_slave_0: left promiscuous mode
[  100.451653][   T12] hsr_slave_1: left promiscuous mode
[  100.456977][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  100.459912][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  100.466944][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  100.469909][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  100.489903][   T12] veth1_macvtap: left promiscuous mode
[  100.492200][   T12] veth0_macvtap: left promiscuous mode
[  100.500908][   T12] veth1_vlan: left promiscuous mode
[  100.505643][   T12] veth0_vlan: left promiscuous mode
[  100.753708][   T33] audit: type=1326 audit(1755335996.061:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7689 comm="syz.1.382" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffbbc58ebe9 code=0x0
[  100.800590][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  100.807990][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  100.814784][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  100.824583][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  100.827930][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  100.965718][   T12] team0 (unregistering): Port device team_slave_1 removed
[  100.988092][   T12] team0 (unregistering): Port device team_slave_0 removed
[  101.355527][ T7580] chnl_net:caif_netlink_parms(): no params data found
[  101.578857][ T7820] capability: warning: `syz.1.383' uses deprecated v2 capabilities in a way that may be insecure
[  101.595965][ T7580] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.599539][ T7580] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.602387][ T7580] bridge_slave_0: entered allmulticast mode
[  101.616053][ T7580] bridge_slave_0: entered promiscuous mode
[  101.663127][ T7580] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.667651][ T7580] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.670547][ T7580] bridge_slave_1: entered allmulticast mode
[  101.674932][ T7580] bridge_slave_1: entered promiscuous mode
[  101.744702][ T7580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  101.753818][ T7580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  101.798245][ T7580] team0: Port device team_slave_0 added
[  101.836192][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.856363][ T7580] team0: Port device team_slave_1 added
[  101.894868][ T5849] Bluetooth: hci1: command tx timeout
[  101.995392][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.031540][ T7580] batman_adv: batadv0: Adding interface: batadv_slave_0
[  102.034842][ T7580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  102.053872][ T7580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  102.085477][ T7580] batman_adv: batadv0: Adding interface: batadv_slave_1
[  102.088010][ T7580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  102.101370][ T7580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  102.126918][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.179835][ T7691] chnl_net:caif_netlink_parms(): no params data found
[  102.208378][ T8006] overlayfs: failed to resolve './file0': -2
[  102.209093][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.229515][ T7580] hsr_slave_0: entered promiscuous mode
[  102.233771][ T7580] hsr_slave_1: entered promiscuous mode
[  102.236777][ T7580] debugfs: 'hsr0' already exists in 'hsr'
[  102.239209][ T7580] Cannot create hsr debugfs directory
[  102.459875][ T7691] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.463371][ T7691] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.466358][ T7691] bridge_slave_0: entered allmulticast mode
[  102.471567][ T7691] bridge_slave_0: entered promiscuous mode
[  102.477482][ T7691] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.480458][ T7691] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.483436][ T7691] bridge_slave_1: entered allmulticast mode
[  102.487608][ T7691] bridge_slave_1: entered promiscuous mode
[  102.609924][ T7691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  102.646350][ T7691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  102.756838][ T7691] team0: Port device team_slave_0 added
[  102.777184][   T12] bridge_slave_1: left allmulticast mode
[  102.779460][   T12] bridge_slave_1: left promiscuous mode
[  102.781759][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.804109][   T12] bridge_slave_0: left allmulticast mode
[  102.806466][   T12] bridge_slave_0: left promiscuous mode
[  102.813531][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.855997][ T5849] Bluetooth: hci2: command tx timeout
[  102.951680][   T12] erspan0 (unregistering): left promiscuous mode
[  102.967856][   T12] gretap0 (unregistering): left promiscuous mode
[  102.971359][ T8215] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  102.979438][ T8215] netlink: 4 bytes leftover after parsing attributes in process `syz.1.390'.
[  103.129848][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  103.134529][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  103.137950][   T12] bond0 (unregistering): Released all slaves
[  103.146924][ T7691] team0: Port device team_slave_1 added
[  103.165158][ T8215] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  103.201769][ T8215] batman_adv: batadv0: Removing interface: batadv_slave_1
[  103.271878][ T7691] batman_adv: batadv0: Adding interface: batadv_slave_0
[  103.278817][ T7691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  103.289834][ T7691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  103.338508][ T7691] batman_adv: batadv0: Adding interface: batadv_slave_1
[  103.341230][ T7691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  103.354568][ T7691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  103.473691][ T7691] hsr_slave_0: entered promiscuous mode
[  103.475987][ T7691] hsr_slave_1: entered promiscuous mode
[  103.478074][ T7691] debugfs: 'hsr0' already exists in 'hsr'
[  103.479961][ T7691] Cannot create hsr debugfs directory
[  103.600677][   T12] hsr_slave_0: left promiscuous mode
[  103.607400][   T12] hsr_slave_1: left promiscuous mode
[  103.609909][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  103.616859][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  103.620299][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  103.624365][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  103.640582][   T12] veth1_macvtap: left promiscuous mode
[  103.643605][   T12] veth0_macvtap: left promiscuous mode
[  103.646381][   T12] veth1_vlan: left promiscuous mode
[  103.648401][   T12] veth0_vlan: left promiscuous mode
[  103.972885][ T5849] Bluetooth: hci1: command tx timeout
[  104.060849][   T12] team0 (unregistering): Port device team_slave_1 removed
[  104.071586][ T8330] netlink: 52 bytes leftover after parsing attributes in process `syz.1.396'.
[  104.096425][   T12] team0 (unregistering): Port device team_slave_0 removed
[  104.779562][ T7580] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  104.820215][ T7580] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  104.840624][ T7580] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  104.866424][ T7580] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  104.933030][ T5849] Bluetooth: hci2: command tx timeout
[  105.103467][   T12] ------------[ cut here ]------------
[  105.105311][   T12] WARNING: CPU: 1 PID: 12 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0x81/0x100
[  105.108265][   T12] Modules linked in:
[  105.109490][   T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  105.114503][   T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  105.118422][   T12] Workqueue: netns cleanup_net
[  105.120100][   T12] RIP: 0010:xfrm6_tunnel_net_exit+0x81/0x100
[  105.121874][   T12] Code: 25 90 df f7 4b 83 3c 2c 00 75 19 e8 c9 26 7c f7 49 81 fd f8 07 00 00 74 1d e8 bb 26 7c f7 49 83 c5 08 eb c9 e8 b0 26 7c f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6
[  105.128198][   T12] RSP: 0018:ffffc900000f78b0 EFLAGS: 00010293
[  105.131139][   T12] RAX: ffffffff8a4384e0 RBX: ffff888107160000 RCX: ffff88801c2f5640
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  105.134108][   T12] RDX: 0000000000000000 RSI: ffffffff8d9b6e07 RDI: ffff888107160000
[  105.137017][   T12] RBP: ffffc900000f79b0 R08: ffffffff8fa37e37 R09: 1ffffffff1f46fc6
[  105.140103][   T12] R10: dffffc0000000000 R11: fffffbfff1f46fc7 R12: ffff888107160000
[  105.142831][   T12] R13: 0000000000000000 R14: ffff888110724880 R15: dffffc0000000000
[  105.145861][   T12] FS:  0000000000000000(0000) GS:ffff8881a3c1c000(0000) knlGS:0000000000000000
[  105.149046][   T12] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  105.151506][   T12] CR2: 00005628d17ac950 CR3: 000000010f34a000 CR4: 00000000000006f0
[  105.153993][   T12] Call Trace:
[  105.155057][   T12]  <TASK>
[  105.155996][   T12]  ops_undo_list+0x49a/0x990
[  105.157433][   T12]  ? __pfx_ops_undo_list+0x10/0x10
[  105.159065][   T12]  ? do_raw_spin_unlock+0x4d/0x240
[  105.160661][   T12]  cleanup_net+0x4c5/0x800
[  105.162060][   T12]  ? __pfx_cleanup_net+0x10/0x10
[  105.163782][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  105.165418][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  105.167231][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  105.169468][   T12]  process_scheduled_works+0xae1/0x17b0
[  105.171334][   T12]  ? __pfx_process_scheduled_works+0x10/0x10
[  105.173908][   T12]  worker_thread+0x8a0/0xda0
[  105.175398][   T12]  kthread+0x711/0x8a0
[  105.176686][   T12]  ? __pfx_worker_thread+0x10/0x10
[  105.178316][   T12]  ? __pfx_kthread+0x10/0x10
[  105.180353][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  105.181984][   T12]  ? lockdep_hardirqs_on+0x9c/0x150
[  105.183730][   T12]  ? __pfx_kthread+0x10/0x10
[  105.185486][   T12]  ret_from_fork+0x3fc/0x770
[  105.187028][   T12]  ? __pfx_ret_from_fork+0x10/0x10
[  105.188643][   T12]  ? __switch_to_asm+0x39/0x70
[  105.190157][   T12]  ? __switch_to_asm+0x33/0x70
[  105.191691][   T12]  ? __pfx_kthread+0x10/0x10
[  105.193358][   T12]  ret_from_fork_asm+0x1a/0x30
[  105.195159][   T12]  </TASK>
[  105.196484][   T12] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  105.199398][   T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  105.203979][   T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  105.207597][   T12] Workqueue: netns cleanup_net
[  105.209207][   T12] Call Trace:
[  105.210321][   T12]  <TASK>
[  105.211291][   T12]  dump_stack_lvl+0x99/0x250
[  105.212744][   T12]  ? __asan_memcpy+0x40/0x70
[  105.214534][   T12]  ? __pfx_dump_stack_lvl+0x10/0x10
[  105.216366][   T12]  ? __pfx__printk+0x10/0x10
[  105.217900][   T12]  vpanic+0x281/0x750
[  105.219291][   T12]  ? __pfx__printk+0x10/0x10
[  105.220650][   T12]  ? __pfx_vpanic+0x10/0x10
[  105.222012][   T12]  ? is_bpf_text_address+0x292/0x2b0
[  105.223807][   T12]  panic+0xb9/0xc0
[  105.225112][   T12]  ? __pfx_panic+0x10/0x10
[  105.226473][   T12]  __warn+0x31b/0x4b0
[  105.227846][   T12]  ? xfrm6_tunnel_net_exit+0x81/0x100
[  105.229709][   T12]  ? xfrm6_tunnel_net_exit+0x81/0x100
[  105.231685][   T12]  report_bug+0x2be/0x4f0
[  105.233361][   T12]  ? xfrm6_tunnel_net_exit+0x81/0x100
[  105.235391][   T12]  ? xfrm6_tunnel_net_exit+0x81/0x100
[  105.237577][   T12]  ? xfrm6_tunnel_net_exit+0x83/0x100
[  105.239228][   T12]  handle_bug+0x84/0x160
[  105.240847][   T12]  exc_invalid_op+0x1a/0x50
[  105.242345][   T12]  asm_exc_invalid_op+0x1a/0x20
[  105.243997][   T12] RIP: 0010:xfrm6_tunnel_net_exit+0x81/0x100
[  105.246052][   T12] Code: 25 90 df f7 4b 83 3c 2c 00 75 19 e8 c9 26 7c f7 49 81 fd f8 07 00 00 74 1d e8 bb 26 7c f7 49 83 c5 08 eb c9 e8 b0 26 7c f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6
[  105.251981][   T12] RSP: 0018:ffffc900000f78b0 EFLAGS: 00010293
[  105.254009][   T12] RAX: ffffffff8a4384e0 RBX: ffff888107160000 RCX: ffff88801c2f5640
[  105.256466][   T12] RDX: 0000000000000000 RSI: ffffffff8d9b6e07 RDI: ffff888107160000
[  105.258906][   T12] RBP: ffffc900000f79b0 R08: ffffffff8fa37e37 R09: 1ffffffff1f46fc6
[  105.261373][   T12] R10: dffffc0000000000 R11: fffffbfff1f46fc7 R12: ffff888107160000
[  105.263844][   T12] R13: 0000000000000000 R14: ffff888110724880 R15: dffffc0000000000
[  105.266204][   T12]  ? xfrm6_tunnel_net_exit+0x80/0x100
[  105.268157][   T12]  ops_undo_list+0x49a/0x990
[  105.270021][   T12]  ? __pfx_ops_undo_list+0x10/0x10
[  105.272091][   T12]  ? do_raw_spin_unlock+0x4d/0x240
[  105.274146][   T12]  cleanup_net+0x4c5/0x800
[  105.275916][   T12]  ? __pfx_cleanup_net+0x10/0x10
[  105.277905][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  105.280000][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  105.282294][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  105.284504][   T12]  process_scheduled_works+0xae1/0x17b0
[  105.286693][   T12]  ? __pfx_process_scheduled_works+0x10/0x10
[  105.289084][   T12]  worker_thread+0x8a0/0xda0
[  105.290886][   T12]  kthread+0x711/0x8a0
[  105.292490][   T12]  ? __pfx_worker_thread+0x10/0x10
[  105.294522][   T12]  ? __pfx_kthread+0x10/0x10
[  105.296371][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  105.298441][   T12]  ? lockdep_hardirqs_on+0x9c/0x150
[  105.300525][   T12]  ? __pfx_kthread+0x10/0x10
[  105.302336][   T12]  ret_from_fork+0x3fc/0x770
[  105.304151][   T12]  ? __pfx_ret_from_fork+0x10/0x10
[  105.306166][   T12]  ? __switch_to_asm+0x39/0x70
[  105.308046][   T12]  ? __switch_to_asm+0x33/0x70
[  105.309940][   T12]  ? __pfx_kthread+0x10/0x10
[  105.311768][   T12]  ret_from_fork_asm+0x1a/0x30
[  105.313709][   T12]  </TASK>
[  105.315608][   T12] Kernel Offset: disabled
[  105.317381][   T12] Rebooting in 86400 seconds..

VM DIAGNOSIS:
09:20:00  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000101 RBX=ffffffff99d01388 RCX=ffffffff99ab9303 RDX=0000000000000000
RSI=ffffffff8be333e0 RDI=0000000000000001 RBP=ffffc90000007b60 RSP=ffffc90000007ac0
R8 =ffffffff8fa37e37 R9 =1ffffffff1f46fc6 R10=dffffc0000000000 R11=fffffbfff1f46fc7
R12=dffffc0000000000 R13=ffffffff81a7f827 R14=0000000000000a06 R15=dffffc0000000000
RIP=ffffffff818ffbc7 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f2f54de23b0 CR3=0000000038eaa000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffff0000000000
XMM02=ffff000000000000 ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000072 RBX=0000000000000072 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900000f7090
R8 =ffff888107a78237 R9 =1ffff11020f4f046 R10=dffffc0000000000 R11=ffffffff854efeb0
R12=dffffc0000000000 R13=ffffffff99af98f2 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854eff2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005628d17ac950 CR3=000000010f34a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000ffffffffffff ffffffffffff0000 XMM01=0000010101010101 010101010100ffff
XMM02=00005628d17bddc8 665f65676e006d72 XMM03=0000000000000000 0000000000000000
XMM04=ffff000000000000 0000000000ff0000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
