last executing test programs: 40.142568716s ago: executing program 3 (id=95): mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x7, 0x11, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) pidfd_getfd(0xffffffffffffffff, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x70, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000)=0x200, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000180)={'nat\x00', 0x7003, [0x80000000]}, &(0x7f0000000040)=0x54) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)) r7 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x18, 0x0, &(0x7f0000000300)=[@acquire, @request_death], 0x0, 0x0, 0x0}) dup3(r7, r6, 0x0) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) lseek(r8, 0x851, 0x0) r9 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x0, 0x0) r10 = openat$dlm_control(0xffffff9c, &(0x7f0000000000), 0x204080, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r10, 0x13, &(0x7f0000000200)=[0x7, 0x4], 0x2) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r9, 0xc008551c, &(0x7f00000001c0)) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) 33.017413732s ago: executing program 3 (id=95): mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x7, 0x11, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) pidfd_getfd(0xffffffffffffffff, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x70, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000)=0x200, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000180)={'nat\x00', 0x7003, [0x80000000]}, &(0x7f0000000040)=0x54) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)) r7 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x18, 0x0, &(0x7f0000000300)=[@acquire, @request_death], 0x0, 0x0, 0x0}) dup3(r7, r6, 0x0) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) lseek(r8, 0x851, 0x0) r9 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x0, 0x0) r10 = openat$dlm_control(0xffffff9c, &(0x7f0000000000), 0x204080, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r10, 0x13, &(0x7f0000000200)=[0x7, 0x4], 0x2) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r9, 0xc008551c, &(0x7f00000001c0)) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) 25.67687515s ago: executing program 3 (id=95): mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x7, 0x11, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) pidfd_getfd(0xffffffffffffffff, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x70, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000)=0x200, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000180)={'nat\x00', 0x7003, [0x80000000]}, &(0x7f0000000040)=0x54) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)) r7 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x18, 0x0, &(0x7f0000000300)=[@acquire, @request_death], 0x0, 0x0, 0x0}) dup3(r7, r6, 0x0) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) lseek(r8, 0x851, 0x0) r9 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x0, 0x0) r10 = openat$dlm_control(0xffffff9c, &(0x7f0000000000), 0x204080, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r10, 0x13, &(0x7f0000000200)=[0x7, 0x4], 0x2) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r9, 0xc008551c, &(0x7f00000001c0)) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) 18.559792374s ago: executing program 3 (id=95): mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x7, 0x11, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) pidfd_getfd(0xffffffffffffffff, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x70, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000)=0x200, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000180)={'nat\x00', 0x7003, [0x80000000]}, &(0x7f0000000040)=0x54) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)) r7 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x18, 0x0, &(0x7f0000000300)=[@acquire, @request_death], 0x0, 0x0, 0x0}) dup3(r7, r6, 0x0) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) lseek(r8, 0x851, 0x0) r9 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x0, 0x0) r10 = openat$dlm_control(0xffffff9c, &(0x7f0000000000), 0x204080, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r10, 0x13, &(0x7f0000000200)=[0x7, 0x4], 0x2) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r9, 0xc008551c, &(0x7f00000001c0)) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) 10.986449961s ago: executing program 3 (id=95): mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x7, 0x11, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) pidfd_getfd(0xffffffffffffffff, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x70, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000)=0x200, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000180)={'nat\x00', 0x7003, [0x80000000]}, &(0x7f0000000040)=0x54) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)) r7 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x18, 0x0, &(0x7f0000000300)=[@acquire, @request_death], 0x0, 0x0, 0x0}) dup3(r7, r6, 0x0) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) lseek(r8, 0x851, 0x0) r9 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x0, 0x0) r10 = openat$dlm_control(0xffffff9c, &(0x7f0000000000), 0x204080, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r10, 0x13, &(0x7f0000000200)=[0x7, 0x4], 0x2) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r9, 0xc008551c, &(0x7f00000001c0)) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) 6.885948279s ago: executing program 2 (id=239): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001bc0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}]}, 0x1c}}, 0x0) 5.883126802s ago: executing program 2 (id=241): r0 = openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x82c80, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000007bc0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000240)="88711e58b53b36d6f498", 0xa}], 0x1}}], 0x1, 0x4000) ioctl$SNDCTL_TMR_SELECT(r0, 0x40045408) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x2, 0xb, [{}, {}, {}, {0xfffffffd}, {}, {0x0, 0x1000000}]}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb0100180000ad3b8be49600000000001800000018485229af000000080000000104000f00000000fcff00000000000000000000000000000006079e656a46162d93ad8dee62a33f505be6187a61c9542a94fd947c1cc007dab1c25ecda48bfa6c21aab5336994052080c1fce870ca7f816d06d4aa16ce44dbc78046d01af1471bc2b7d8e75cdd847cb2052a92b671e9ceea3070b275f9d33cce8802ce18be10274e1fe977dfd8d129f7eccba608d49c3656c0d48d5707230aa77386800c5da43818d390a19a6da91eac39cc57b90d1f7535e97e0e27019846cac717ae845a0b25759b6c924b3eb6e253c6fa8907ff68c0898796b77df8224f440085a2b5da771e91bd9c9ff932796e6b880535b2b588155e4468604d8cdaa26bdb5026a883a564c874d2b57a2218f1af548b7933ff29d478af2b82fb0577"], 0x0, 0x3a, 0x0, 0x6, 0x0, 0x0, @void, @value}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x13) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800005f08006f506d7294a236a4bb8cb4fa0e37d7bdb5c952169330e17271091d4ecc9a2c6e5742a4a65d9945128d236f3d9a6b7f8293a0b87789ff950caaaf690c8d1ec19a0fe62b59298152c6ac04a81f446ebaab8c0ae48bb6dcc59c03f29f4f1037163674139af9"], 0x28}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095", @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000680)=ANY=[@ANYRESOCT=r7, @ANYRESHEX=r3, @ANYBLOB="1ceeca78cef6d0d7136bba4fe32df6f636ef250753407e559554220fa4ad74e9ddb33b8145854a0f0a27005d5d547d3406388972791b492853dca3b0a39805e69b74946e784b88ddaed31580c0df8402e7cd99e82a9cca4b5fd12627da63c8c69fb11c4d23d51c", @ANYRES8=r1, @ANYRES32=r0, @ANYRESDEC=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0xf, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f00000020c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x3f0, 0x1f0, 0x94, 0x284, 0x284, 0x144, 0x35c, 0x35c, 0x35c, 0x35c, 0x35c, 0x6, 0x0, {[{{@ip={@rand_addr, @multicast1, 0x0, 0x0, 'vlan0\x00', 'veth1\x00'}, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x4}}}, {{@ip={@rand_addr, @empty, 0x0, 0x0, 'dummy0\x00', 'ipvlan1\x00'}, 0x0, 0x70, 0xac}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private2}}}, {{@uncond, 0x0, 0x70, 0x94}, @TTL={0x24}}, {{@ip={@empty, @multicast1, 0x0, 0x0, 'caif0\x00', 'rose0\x00'}, 0x0, 0xb4, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}, @inet=@rpfilter={{0x24}}]}, @TTL={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x44c) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000001180)={0x18, 0x1, 0x0, {0xfffffffffffffffb}}, 0x18) r10 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r10, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r10, &(0x7f0000005240), 0x4000095, 0x0) 4.757878753s ago: executing program 2 (id=245): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x42, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11641e7a, 0x20000000, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x20, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x647b}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x9a2b, 0x5}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000380)={r1, 0x1000, 0x99, 0x5ed}, &(0x7f00000003c0)=0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000280)={0x1e, 0x2}) r4 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmmsg(r8, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f00000032c0)=[{&(0x7f0000003300)="037d9a25c5c30b0bae87f80c66044e0c2abaa1b322580f52cfad013b667623b88063f8", 0x23}, {&(0x7f00000031c0)="1d279e75894f0b06f1a5adc6f3", 0xd}], 0x2}}], 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) io_uring_enter(r4, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 4.407692063s ago: executing program 0 (id=246): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x42, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11641e7a, 0x20000000, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x20, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x647b}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x9a2b, 0x5}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000380)={r1, 0x1000, 0x99, 0x5ed}, &(0x7f00000003c0)=0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000280)={0x1e, 0x2}) r4 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmmsg(r8, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f00000032c0)=[{&(0x7f0000003300)="037d9a25c5c30b0bae87f80c66044e0c2abaa1b322580f52cfad013b667623b88063f8", 0x23}, {&(0x7f00000031c0)="1d279e75894f0b06f1a5adc6f3", 0xd}], 0x2}}], 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) io_uring_enter(r4, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 3.807429252s ago: executing program 2 (id=248): r0 = openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x82c80, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000007bc0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000240)="88711e58b53b36d6f498", 0xa}], 0x1}}], 0x1, 0x4000) ioctl$SNDCTL_TMR_SELECT(r0, 0x40045408) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x2, 0xb, [{}, {}, {}, {0xfffffffd}, {}, {0x0, 0x1000000}]}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb0100180000ad3b8be49600000000001800000018485229af000000080000000104000f00000000fcff00000000000000000000000000000006079e656a46162d93ad8dee62a33f505be6187a61c9542a94fd947c1cc007dab1c25ecda48bfa6c21aab5336994052080c1fce870ca7f816d06d4aa16ce44dbc78046d01af1471bc2b7d8e75cdd847cb2052a92b671e9ceea3070b275f9d33cce8802ce18be10274e1fe977dfd8d129f7eccba608d49c3656c0d48d5707230aa77386800c5da43818d390a19a6da91eac39cc57b90d1f7535e97e0e27019846cac717ae845a0b25759b6c924b3eb6e253c6fa8907ff68c0898796b77df8224f440085a2b5da771e91bd9c9ff932796e6b880535b2b588155e4468604d8cdaa26bdb5026a883a564c874d2b57a2218f1af548b7933ff29d478af2b82fb0577"], 0x0, 0x3a, 0x0, 0x6, 0x0, 0x0, @void, @value}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x13) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800005f08006f506d7294a236a4bb8cb4fa0e37d7bdb5c952169330e17271091d4ecc9a2c6e5742a4a65d9945128d236f3d9a6b7f8293a0b87789ff950caaaf690c8d1ec19a0fe62b59298152c6ac04a81f446ebaab8c0ae48bb6dcc59c03f29f4f1037163674139af9"], 0x28}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095", @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000680)=ANY=[@ANYRESOCT=r7, @ANYRESHEX=r3, @ANYBLOB="1ceeca78cef6d0d7136bba4fe32df6f636ef250753407e559554220fa4ad74e9ddb33b8145854a0f0a27005d5d547d3406388972791b492853dca3b0a39805e69b74946e784b88ddaed31580c0df8402e7cd99e82a9cca4b5fd12627da63c8c69fb11c4d23d51c", @ANYRES8=r1, @ANYRES32=r0, @ANYRESDEC=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0xf, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f00000020c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x3f0, 0x1f0, 0x94, 0x284, 0x284, 0x144, 0x35c, 0x35c, 0x35c, 0x35c, 0x35c, 0x6, 0x0, {[{{@ip={@rand_addr, @multicast1, 0x0, 0x0, 'vlan0\x00', 'veth1\x00'}, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x4}}}, {{@ip={@rand_addr, @empty, 0x0, 0x0, 'dummy0\x00', 'ipvlan1\x00'}, 0x0, 0x70, 0xac}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private2}}}, {{@uncond, 0x0, 0x70, 0x94}, @TTL={0x24}}, {{@ip={@empty, @multicast1, 0x0, 0x0, 'caif0\x00', 'rose0\x00'}, 0x0, 0xb4, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}, @inet=@rpfilter={{0x24}}]}, @TTL={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x44c) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000001180)={0x18, 0x1, 0x0, {0xfffffffffffffffb}}, 0x18) r10 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r10, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r10, &(0x7f0000005240), 0x4000095, 0x0) 3.382171862s ago: executing program 0 (id=249): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x8000000000000002) openat$cdrom(0xffffff9c, &(0x7f0000000080), 0x200001, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8b0b, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, 0x0, 0xc0) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000), 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4048aecb, &(0x7f0000000480)) 2.869558672s ago: executing program 2 (id=250): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000ffff"]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000a40)=""/4096}, &(0x7f0000000000)="123583000000", 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r4) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, r6, 0x10, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2140}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x1109}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x6}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x81}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x24000005) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/mcfilter\x00') preadv(r7, &(0x7f00000000c0), 0x0, 0x3ffffe, 0x1) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a3000000000000000000000000700000308000a40000000001d00020073797a70000000000900010073797a3000000000080005400000000d380100636f6e6e6c696d69740000000c0002800800014000000008140001800a00010072616e6765000000040002800800034000000120140000001000010000000000000000000084000a000000000000000000"], 0xc4}}, 0x20050800) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r10, &(0x7f0000000000), 0xfffffecc) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000007c0)=@newtaction={0x6c, 0x30, 0x36eac49ec043b62f, 0x0, 0x25dfdbbf, {}, [{0x58, 0x1, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x1, 0x3, 0x7ff, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x20, 0x2016, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x8000) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_GET_VCPU_EVENTS(r9, 0x4048aecb, &(0x7f0000000380)) 2.43718678s ago: executing program 0 (id=253): r0 = openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x82c80, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000007bc0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000240)="88711e58b53b36d6f498", 0xa}], 0x1}}], 0x1, 0x4000) ioctl$SNDCTL_TMR_SELECT(r0, 0x40045408) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x2, 0xb, [{}, {}, {}, {0xfffffffd}, {}, {0x0, 0x1000000}]}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0, 0x3a, 0x0, 0x6, 0x0, 0x0, @void, @value}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x13) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800005f08006f506d7294a236a4bb8cb4fa0e37d7bdb5c952169330e17271091d4ecc9a2c6e5742a4a65d9945128d236f3d9a6b7f8293a0b87789ff950caaaf690c8d1ec19a0fe62b59298152c6ac04a81f446ebaab8c0ae48bb6dcc59c03f29f4f1037163674139af9"], 0x28}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095", @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000680)=ANY=[@ANYRESOCT=r7, @ANYRESHEX=r3, @ANYBLOB="1ceeca78cef6d0d7136bba4fe32df6f636ef250753407e559554220fa4ad74e9ddb33b8145854a0f0a27005d5d547d3406388972791b492853dca3b0a39805e69b74946e784b88ddaed31580c0df8402e7cd99e82a9cca4b5fd12627da63c8c69fb11c4d23d51c", @ANYRES8=r1, @ANYRES32=r0, @ANYRESDEC=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0xf, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f00000020c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x3f0, 0x1f0, 0x94, 0x284, 0x284, 0x144, 0x35c, 0x35c, 0x35c, 0x35c, 0x35c, 0x6, 0x0, {[{{@ip={@rand_addr, @multicast1, 0x0, 0x0, 'vlan0\x00', 'veth1\x00'}, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x4}}}, {{@ip={@rand_addr, @empty, 0x0, 0x0, 'dummy0\x00', 'ipvlan1\x00'}, 0x0, 0x70, 0xac}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private2}}}, {{@uncond, 0x0, 0x70, 0x94}, @TTL={0x24}}, {{@ip={@empty, @multicast1, 0x0, 0x0, 'caif0\x00', 'rose0\x00'}, 0x0, 0xb4, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}, @inet=@rpfilter={{0x24}}]}, @TTL={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x44c) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000001180)={0x18, 0x1, 0x0, {0xfffffffffffffffb}}, 0x18) r10 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r10, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmsg$netlink(r10, 0x0, 0x40800) 2.036427006s ago: executing program 3 (id=95): mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x7, 0x11, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) pidfd_getfd(0xffffffffffffffff, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x70, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000)=0x200, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000180)={'nat\x00', 0x7003, [0x80000000]}, &(0x7f0000000040)=0x54) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)) r7 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x18, 0x0, &(0x7f0000000300)=[@acquire, @request_death], 0x0, 0x0, 0x0}) dup3(r7, r6, 0x0) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) lseek(r8, 0x851, 0x0) r9 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x0, 0x0) r10 = openat$dlm_control(0xffffff9c, &(0x7f0000000000), 0x204080, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r10, 0x13, &(0x7f0000000200)=[0x7, 0x4], 0x2) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r9, 0xc008551c, &(0x7f00000001c0)) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) 1.235534642s ago: executing program 0 (id=254): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x28}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x6c, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.231866345s ago: executing program 1 (id=255): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r0) write$P9_RLERRORu(r1, &(0x7f0000000300)=ANY=[], 0x67) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) keyctl$get_keyring_id(0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000006000000000000000000008500000041000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) bind$inet6(r5, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000002c0)="9e", 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f00000000c0), 0x8) (async) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f00000000c0), 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x8, 0x0, 0x0, 0x0, 0x0, 0xffc5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x8, 0x0, 0x0, 0x0, 0x0, 0xffc5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r3}, 0x8) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r3}, 0x8) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004980)=[{{&(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20004000) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x30}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0xfffffd97, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'virt_wifi0\x00'}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x0) 1.231106598s ago: executing program 2 (id=256): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000080)=0x2) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, 0x0) ioctl$SNDCTL_DSP_STEREO(r2, 0xc0045003, &(0x7f0000000100)=0x1) write$dsp(r2, &(0x7f0000000000)="81", 0x1) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r2, 0x0) close(r2) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r3 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r4 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000300)={{{@in=@multicast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@initdev}}, &(0x7f0000000180)=0xe4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, r6, &(0x7f00000001c0)={0x4, 0xffffffffffff8001, 0xe42e, 0x2, 0x8, 0x0, 0x0, 0x7, 0x101}) getresuid(&(0x7f0000000180)=0x0, &(0x7f00000001c0), &(0x7f0000000200)=0x0) quotactl$Q_GETFMT(0xffffffff80000402, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, r7, &(0x7f0000000240)) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x900040, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose}, {@cachetag={'cachetag', 0x3d, ')$/{^'}}, {@debug={'debug', 0x3d, 0xffffffffffffffff}}, {@version_L}], [{@dont_measure}, {@fowner_eq={'fowner', 0x3d, r2}}, {@obj_type={'obj_type', 0x3d, 'rfdno'}}, {@uid_gt={'uid>', r8}}, {@fowner_gt={'fowner>', r2}}]}}) creat(&(0x7f0000000200)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r10, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r11 = dup(r10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[], [], 0x6b}}) r12 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r12, 0x4020aed2, &(0x7f0000000440)={0x33220000, 0x115000, 0x8}) 1.117433088s ago: executing program 1 (id=259): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)) r1 = openat$sw_sync(0xffffff9c, &(0x7f0000000ac0), 0x90000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000b00)={0x1, "0fc0c8f9ec31e9ba185ac511948cb866791a14623e42530043a57a536ade6daa"}) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_linger(r2, 0x1, 0x3d, &(0x7f0000000100)={0x1}, 0x8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680)) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0xa08, 0x0, 0xb, 0x148, 0x0, 0x148, 0x974, 0x240, 0x240, 0x974, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x87c, 0x8e4, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x2c}}, @common=@unspec=@u32={{0x7e0}, {[{}, {}, {}, {}, {}, {[], [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}]}, {}, {}, {[{0x3}]}, {[], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}]}]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'dummy0\x00', 'netpci0\x00'}, 0xec010000, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0xa64) 999.886145ms ago: executing program 1 (id=260): r0 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) io_uring_enter(r0, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 917.415319ms ago: executing program 1 (id=261): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000ffff"]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000a40)=""/4096}, &(0x7f0000000000)="123583000000", 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r4) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, r6, 0x10, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2140}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x1109}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x6}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x81}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x24000005) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/mcfilter\x00') preadv(r7, &(0x7f00000000c0), 0x0, 0x3ffffe, 0x1) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a3000000000000000000000000700000308000a40000000001d00020073797a70000000000900010073797a3000000000080005400000000d380100636f6e6e6c696d69740000000c0002800800014000000008140001800a00010072616e6765000000040002800800034000000120140000001000010000000000000000000084000a000000000000000000"], 0xc4}}, 0x20050800) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r10, &(0x7f0000000000), 0xfffffecc) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000007c0)=@newtaction={0x6c, 0x30, 0x36eac49ec043b62f, 0x0, 0x25dfdbbf, {}, [{0x58, 0x1, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x1, 0x3, 0x7ff, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x20, 0x2016, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x8000) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_GET_VCPU_EVENTS(r9, 0x4048aecb, &(0x7f0000000380)) 262.848332ms ago: executing program 0 (id=262): socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000940)={0x2, @win={{0x4, 0x9, 0x41a99bbc, 0x25}, 0x9, 0xc, &(0x7f00000008c0)={{0xdb, 0x3, 0x7f}, &(0x7f0000000400)={{0x9, 0x7fffffff, 0x240000, 0xd9c1}, &(0x7f0000000200)={{0x1c0, 0x1, 0x3, 0x20003}}}}, 0x7f, &(0x7f0000000900)="f2a83e12e01edabdfa07a179a9cd3b2b2799a4be0398c0f3c068567766717f2d2c2f", 0x2c}}) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_io_uring_setup(0x110, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, 0x0) r2 = openat$nullb(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioprio_set$pid(0x3, 0x0, 0x4007) (async) ioctl$BLKTRACESETUP(r2, 0xc0401273, &(0x7f0000000280)={'\x00', 0x6, 0x2, 0x7f, 0x8, 0x1}) (async) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCFLSH(r3, 0x40204706, 0x20000000) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000480)={0x0, 0x9, 0x1, [0x6, 0x1000000000003, 0xfffffffffffffffd, 0x6, 0x1ff], [0x8000, 0xf, 0x2, 0x8, 0x3, 0x72, 0xfffffffffffffff4, 0xe7f, 0xfffffffffffffffb, 0x6, 0x8, 0x4, 0x9, 0x4, 0x2, 0x4, 0x1, 0x8, 0x0, 0x7, 0x3, 0x1000, 0x20000000a, 0x1, 0x6, 0x3, 0x5, 0x3, 0x2, 0x5, 0x1, 0x2, 0x4b4e, 0x5, 0x4, 0x7, 0x8, 0x6, 0x6, 0x3, 0x400, 0x80, 0x3, 0x9, 0x101, 0x8, 0x1, 0x0, 0xdab, 0xe, 0xdb68, 0x7, 0xd, 0x7fffffff, 0x9, 0x9, 0x5, 0xfffffffffffffff9, 0x7ff, 0x4, 0x1, 0x3, 0x6, 0xffffffffffffffff, 0x3, 0xffff, 0x8, 0x7fffffffffffffff, 0x5, 0xffffffffffffff00, 0x9, 0x9, 0x6, 0x595, 0x800, 0x7, 0x1, 0x0, 0x6, 0x7, 0x3, 0x7, 0x61, 0x9, 0x8, 0x7, 0x8, 0x3b, 0x2, 0x7, 0x40, 0x6, 0xfffffffffffffff6, 0x6, 0x3, 0x0, 0x9, 0x9, 0x8, 0x1d66, 0xb, 0x7, 0x1, 0x8, 0x1, 0x7, 0x1d2, 0xffffffff, 0x4, 0x9, 0x6, 0x2, 0x10001, 0x6, 0x3, 0x0, 0x0, 0x1, 0x2, 0xce7a, 0x685c]}) (async) r4 = socket(0x1d, 0x80000, 0x3) (async) r5 = syz_io_uring_setup(0x5c2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x3, 0x1e0}, &(0x7f0000000040)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) syz_io_uring_submit(r6, r7, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x38, 0x3, r5, 0x0, 0x0, 0x0, 0x1, 0x1, {0x3}}) io_uring_enter(r5, 0x6e2, 0x3900, 0x1, 0x0, 0x0) (async) getsockopt$inet_tcp_int(r4, 0x6, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) 0s ago: executing program 1 (id=263): r0 = openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x82c80, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000007bc0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000240)="88711e58b53b36d6f498", 0xa}], 0x1}}], 0x1, 0x4000) ioctl$SNDCTL_TMR_SELECT(r0, 0x40045408) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x2, 0xb, [{}, {}, {}, {0xfffffffd}, {}, {0x0, 0x1000000}]}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0, 0x3a, 0x0, 0x6, 0x0, 0x0, @void, @value}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x13) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800005f08006f506d7294a236a4bb8cb4fa0e37d7bdb5c952169330e17271091d4ecc9a2c6e5742a4a65d9945128d236f3d9a6b7f8293a0b87789ff950caaaf690c8d1ec19a0fe62b59298152c6ac04a81f446ebaab8c0ae48bb6dcc59c03f29f4f1037163674139af9"], 0x28}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095", @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000680)=ANY=[@ANYRESOCT=r7, @ANYRESHEX=r3, @ANYBLOB="1ceeca78cef6d0d7136bba4fe32df6f636ef250753407e559554220fa4ad74e9ddb33b8145854a0f0a27005d5d547d3406388972791b492853dca3b0a39805e69b74946e784b88ddaed31580c0df8402e7cd99e82a9cca4b5fd12627da63c8c69fb11c4d23d51c", @ANYRES8=r1, @ANYRES32=r0, @ANYRESDEC=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0xf, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f00000020c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x3f0, 0x1f0, 0x94, 0x284, 0x284, 0x144, 0x35c, 0x35c, 0x35c, 0x35c, 0x35c, 0x6, 0x0, {[{{@ip={@rand_addr, @multicast1, 0x0, 0x0, 'vlan0\x00', 'veth1\x00'}, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x4}}}, {{@ip={@rand_addr, @empty, 0x0, 0x0, 'dummy0\x00', 'ipvlan1\x00'}, 0x0, 0x70, 0xac}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private2}}}, {{@uncond, 0x0, 0x70, 0x94}, @TTL={0x24}}, {{@ip={@empty, @multicast1, 0x0, 0x0, 'caif0\x00', 'rose0\x00'}, 0x0, 0xb4, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}, @inet=@rpfilter={{0x24}}]}, @TTL={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x44c) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000001180)={0x18, 0x1, 0x0, {0xfffffffffffffffb}}, 0x18) r10 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r10, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmsg$netlink(r10, 0x0, 0x40800) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:31871' (ED25519) to the list of known hosts. [ 41.848593][ T5930] cgroup: Unknown subsys name 'net' [ 42.015426][ T5930] cgroup: Unknown subsys name 'cpuset' [ 42.019873][ T5930] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 42.831487][ T5930] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.621240][ T5944] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 45.626064][ T5947] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 45.632077][ T5947] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 45.646456][ T5949] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 45.647291][ T5952] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 45.648832][ T5953] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 45.649983][ T5956] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 45.650608][ T5956] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 45.651068][ T5956] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 45.651499][ T5956] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 45.651744][ T5956] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 45.653656][ T5952] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 45.654548][ T5953] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 45.654725][ T5949] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 45.655708][ T5957] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 45.656073][ T5957] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 45.658341][ T5952] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 45.660200][ T5957] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 45.660429][ T5956] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 45.660640][ T5956] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 45.660852][ T5956] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 45.664697][ T5952] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 45.668414][ T5949] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 45.671280][ T5957] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 45.848555][ T5946] chnl_net:caif_netlink_parms(): no params data found [ 45.858278][ T5942] chnl_net:caif_netlink_parms(): no params data found [ 45.878570][ T5954] chnl_net:caif_netlink_parms(): no params data found [ 46.019363][ T5946] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.021993][ T5946] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.024487][ T5946] bridge_slave_0: entered allmulticast mode [ 46.026958][ T5946] bridge_slave_0: entered promiscuous mode [ 46.097396][ T5946] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.099461][ T5946] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.101590][ T5946] bridge_slave_1: entered allmulticast mode [ 46.103914][ T5946] bridge_slave_1: entered promiscuous mode [ 46.115171][ T5942] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.117288][ T5942] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.119317][ T5942] bridge_slave_0: entered allmulticast mode [ 46.121462][ T5942] bridge_slave_0: entered promiscuous mode [ 46.124820][ T5954] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.126955][ T5954] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.129035][ T5954] bridge_slave_0: entered allmulticast mode [ 46.131113][ T5954] bridge_slave_0: entered promiscuous mode [ 46.152149][ T5946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.155158][ T5942] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.157299][ T5942] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.159392][ T5942] bridge_slave_1: entered allmulticast mode [ 46.161508][ T5942] bridge_slave_1: entered promiscuous mode [ 46.177906][ T5954] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.180770][ T5954] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.183917][ T5954] bridge_slave_1: entered allmulticast mode [ 46.187082][ T5954] bridge_slave_1: entered promiscuous mode [ 46.190077][ T5950] chnl_net:caif_netlink_parms(): no params data found [ 46.194860][ T5946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.216481][ T5942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.241261][ T5942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.254949][ T5954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.269353][ T5946] team0: Port device team_slave_0 added [ 46.287271][ T5954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.296020][ T5946] team0: Port device team_slave_1 added [ 46.300220][ T5942] team0: Port device team_slave_0 added [ 46.351750][ T5942] team0: Port device team_slave_1 added [ 46.363260][ T5954] team0: Port device team_slave_0 added [ 46.365102][ T5950] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.367155][ T5950] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.369202][ T5950] bridge_slave_0: entered allmulticast mode [ 46.371344][ T5950] bridge_slave_0: entered promiscuous mode [ 46.376064][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.378092][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.385518][ T5946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.398091][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.400112][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.407449][ T5942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.411575][ T5954] team0: Port device team_slave_1 added [ 46.420549][ T5950] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.422785][ T5950] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.424845][ T5950] bridge_slave_1: entered allmulticast mode [ 46.426971][ T5950] bridge_slave_1: entered promiscuous mode [ 46.436486][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.438469][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.447102][ T5946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.450651][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.452869][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.463190][ T5942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.525874][ T5954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.528582][ T5954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.538562][ T5954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.545789][ T5950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.551961][ T5950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.558473][ T5946] hsr_slave_0: entered promiscuous mode [ 46.561402][ T5946] hsr_slave_1: entered promiscuous mode [ 46.565276][ T5954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.567346][ T5954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.575716][ T5954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.623319][ T5950] team0: Port device team_slave_0 added [ 46.641492][ T5942] hsr_slave_0: entered promiscuous mode [ 46.645457][ T5942] hsr_slave_1: entered promiscuous mode [ 46.648163][ T5942] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.651225][ T5942] Cannot create hsr debugfs directory [ 46.669416][ T5950] team0: Port device team_slave_1 added [ 46.747185][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.749239][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.756605][ T5950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.769383][ T5954] hsr_slave_0: entered promiscuous mode [ 46.771444][ T5954] hsr_slave_1: entered promiscuous mode [ 46.773525][ T5954] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.775689][ T5954] Cannot create hsr debugfs directory [ 46.779582][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.781578][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.788875][ T5950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.923704][ T5950] hsr_slave_0: entered promiscuous mode [ 46.926610][ T5950] hsr_slave_1: entered promiscuous mode [ 46.929419][ T5950] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.932258][ T5950] Cannot create hsr debugfs directory [ 46.983892][ T5946] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 46.989795][ T5946] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 46.995762][ T5946] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 46.999811][ T5946] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.034006][ T5942] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.038312][ T5942] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.041718][ T5942] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.045824][ T5942] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.069012][ T5954] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.074156][ T5954] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.077566][ T5954] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.080749][ T5954] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.105426][ T5950] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.114202][ T5950] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.117851][ T5950] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.123539][ T5950] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.164821][ T5946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.172465][ T5942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.189861][ T5946] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.200260][ T5942] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.207498][ T102] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.209657][ T102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.213891][ T102] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.215967][ T102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.223071][ T1132] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.225141][ T1132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.230190][ T1132] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.232497][ T1132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.240750][ T5954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.265988][ T5954] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.274603][ T5950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.283410][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.285630][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.291444][ T5942] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.299879][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.302113][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.308619][ T5950] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.324608][ T5954] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 47.327682][ T5954] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.333056][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.335776][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.339361][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.341459][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.358721][ T5950] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 47.361785][ T5950] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.389226][ T5946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.406610][ T5942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.437922][ T5946] veth0_vlan: entered promiscuous mode [ 47.442833][ T5954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.446960][ T5950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.454327][ T5946] veth1_vlan: entered promiscuous mode [ 47.467806][ T5942] veth0_vlan: entered promiscuous mode [ 47.479260][ T5942] veth1_vlan: entered promiscuous mode [ 47.489850][ T5946] veth0_macvtap: entered promiscuous mode [ 47.500014][ T5946] veth1_macvtap: entered promiscuous mode [ 47.508278][ T5954] veth0_vlan: entered promiscuous mode [ 47.516190][ T5954] veth1_vlan: entered promiscuous mode [ 47.520040][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.528941][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.532345][ T5950] veth0_vlan: entered promiscuous mode [ 47.536165][ T5946] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.538760][ T5946] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.541263][ T5946] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.545058][ T5946] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.548583][ T5942] veth0_macvtap: entered promiscuous mode [ 47.555363][ T5942] veth1_macvtap: entered promiscuous mode [ 47.560510][ T5950] veth1_vlan: entered promiscuous mode [ 47.574608][ T5954] veth0_macvtap: entered promiscuous mode [ 47.579153][ T5954] veth1_macvtap: entered promiscuous mode [ 47.588823][ T5950] veth0_macvtap: entered promiscuous mode [ 47.593400][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.596861][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.600592][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.614466][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.617421][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.620533][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.624510][ T5950] veth1_macvtap: entered promiscuous mode [ 47.627503][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.629632][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.634670][ T5942] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.636962][ T5942] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.639190][ T5942] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.641452][ T5942] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.651828][ T5954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.654656][ T5954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.657158][ T5954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.659844][ T5954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.663078][ T5954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.678729][ T5954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.681445][ T5954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.684234][ T5954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.686945][ T5954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.689942][ T5954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.695190][ T5954] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.697470][ T5954] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.699808][ T5954] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.702465][ T5954] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.708374][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.711545][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.714896][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.718102][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.720960][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.724214][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.727000][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.729998][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.733972][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.742679][ T5957] Bluetooth: hci1: command tx timeout [ 47.742726][ T5949] Bluetooth: hci3: command tx timeout [ 47.744578][ T5957] Bluetooth: hci0: command tx timeout [ 47.747121][ T5944] Bluetooth: hci2: command tx timeout [ 47.750346][ T1132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.753518][ T1132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.754345][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.759350][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.762375][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.765344][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.768148][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.771110][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.775320][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.784359][ T5950] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.786874][ T5950] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.789371][ T5950] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.792167][ T5950] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.801385][ T5946] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 47.810848][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.814447][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.861512][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.866138][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.879326][ T1132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.880239][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.881670][ T1132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.885025][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.897899][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.900933][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.004901][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 48.312135][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 48.352100][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 48.354497][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 48.357110][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 48.359480][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 48.432037][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 48.516774][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 48.519166][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 48.842359][ T6014] delete_channel: no stack [ 49.151587][ T6034] warning: `syz.2.5' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 49.821955][ T5944] Bluetooth: hci0: command tx timeout [ 49.822009][ T5957] Bluetooth: hci2: command tx timeout [ 49.822064][ T5947] Bluetooth: hci3: command tx timeout [ 49.822092][ T5947] Bluetooth: hci1: command tx timeout [ 50.342008][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 51.137753][ T6059] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 51.143049][ T6059] xt_TPROXY: Can be used only with -p tcp or -p udp [ 51.911954][ T5957] Bluetooth: hci2: command tx timeout [ 51.911991][ T5949] Bluetooth: hci3: command tx timeout [ 51.915630][ T5947] Bluetooth: hci0: command tx timeout [ 51.917342][ T5944] Bluetooth: hci1: command tx timeout [ 53.398854][ T6106] overlayfs: maximum fs stacking depth exceeded [ 53.405042][ T6106] netlink: 20 bytes leftover after parsing attributes in process `syz.3.21'. [ 53.982432][ T5957] Bluetooth: hci3: command tx timeout [ 53.982456][ T5949] Bluetooth: hci1: command tx timeout [ 53.984061][ T5957] Bluetooth: hci0: command tx timeout [ 53.991986][ T5957] Bluetooth: hci2: command tx timeout [ 54.171316][ T6125] syz.3.25: attempt to access beyond end of device [ 54.171316][ T6125] nbd3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 54.175777][ T6125] syz.3.25: attempt to access beyond end of device [ 54.175777][ T6125] nbd3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 54.179828][ T6125] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 54.184877][ T6125] syz.3.25: attempt to access beyond end of device [ 54.184877][ T6125] nbd3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 54.188378][ T6125] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 54.192779][ T6125] syz.3.25: attempt to access beyond end of device [ 54.192779][ T6125] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 54.196606][ T6125] syz.3.25: attempt to access beyond end of device [ 54.196606][ T6125] nbd3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 54.200781][ T6125] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 54.210642][ T6125] syz.3.25: attempt to access beyond end of device [ 54.210642][ T6125] nbd3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 54.219008][ T6122] block nbd3: shutting down sockets [ 54.227478][ T6125] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 54.235956][ T6125] syz.3.25: attempt to access beyond end of device [ 54.235956][ T6125] nbd3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 54.239857][ T6125] syz.3.25: attempt to access beyond end of device [ 54.239857][ T6125] nbd3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 54.248442][ T6125] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 54.253508][ T6125] syz.3.25: attempt to access beyond end of device [ 54.253508][ T6125] nbd3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 54.263854][ T6125] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 54.272456][ T6125] syz.3.25: attempt to access beyond end of device [ 54.272456][ T6125] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 54.277597][ T6125] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 54.284336][ T6125] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 54.288057][ T6125] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 54.595162][ T6135] Bluetooth: MGMT ver 1.23 [ 55.626065][ T6151] random: crng reseeded on system resumption [ 56.083650][ T6149] syz.3.32 (6149) used greatest stack depth: 20704 bytes left [ 57.146397][ T6175] Zero length message leads to an empty skb [ 57.168233][ T6177] tipc: Enabling of bearer rejected, media not registered [ 58.011986][ T30] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 58.182100][ T30] usb 5-1: Using ep0 maxpacket: 8 [ 58.187928][ T30] usb 5-1: config 0 has no interfaces? [ 58.189710][ T30] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 58.196310][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.206577][ T30] usb 5-1: config 0 descriptor?? [ 59.275293][ T6208] netlink: 28 bytes leftover after parsing attributes in process `syz.2.43'. [ 60.195450][ T5984] usb 5-1: USB disconnect, device number 2 [ 60.329127][ T30] libceph: connect (1)[c::]:6789 error -101 [ 60.331630][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 60.593073][ T5984] libceph: connect (1)[c::]:6789 error -101 [ 60.595043][ T5984] libceph: mon0 (1)[c::]:6789 connect error [ 60.916056][ T6223] ceph: No mds server is up or the cluster is laggy [ 61.020534][ T6235] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 61.257822][ T5984] libceph: connect (1)[c::]:6789 error -101 [ 61.260160][ T5984] libceph: mon0 (1)[c::]:6789 connect error [ 61.534882][ T5984] libceph: connect (1)[c::]:6789 error -101 [ 61.536758][ T5984] libceph: mon0 (1)[c::]:6789 connect error [ 61.859632][ T6241] ceph: No mds server is up or the cluster is laggy [ 62.224326][ T5984] IPVS: starting estimator thread 0... [ 62.303877][ T5944] Bluetooth: hci0: command 0x0406 tx timeout [ 62.362050][ T6251] IPVS: using max 37 ests per chain, 88800 per kthread [ 65.270901][ T6288] af_packet: tpacket_rcv: packet too big, clamped from 57 to 4294967272. macoff=96 [ 65.274726][ T6288] openvswitch: netlink: IP tunnel dst address not specified [ 66.556755][ T39] audit: type=1804 audit(1737404126.614:2): pid=6305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.67" name="/newroot/13/file0/bus" dev="ramfs" ino=7948 res=1 errno=0 [ 67.762013][ T5944] Bluetooth: hci3: command 0x0405 tx timeout [ 69.132978][ T6331] netlink: 20 bytes leftover after parsing attributes in process `syz.2.74'. [ 69.412809][ T6336] netlink: 4 bytes leftover after parsing attributes in process `syz.1.76'. [ 69.671164][ T6343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.78'. [ 70.787393][ T1411] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.790395][ T1411] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.617536][ T6420] ntfs3(nbd2): try to read out of volume at offset 0x0 [ 73.628125][ T6420] syz.2.92: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 73.634685][ T6420] CPU: 0 UID: 0 PID: 6420 Comm: syz.2.92 Not tainted 6.13.0-syzkaller #0 [ 73.637814][ T6420] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 73.641843][ T6420] Call Trace: [ 73.643090][ T6420] [ 73.644270][ T6420] dump_stack_lvl+0x16c/0x1f0 [ 73.646052][ T6420] warn_alloc+0x24d/0x3a0 [ 73.647697][ T6420] ? __pfx_warn_alloc+0x10/0x10 [ 73.649484][ T6420] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 73.651694][ T6420] ? kasan_save_stack+0x42/0x60 [ 73.653545][ T6420] ? kasan_save_stack+0x33/0x60 [ 73.655364][ T6420] ? kasan_save_track+0x14/0x30 [ 73.657219][ T6420] ? __kasan_kmalloc+0xaa/0xb0 [ 73.659041][ T6420] ? xskq_create+0x52/0x1d0 [ 73.660792][ T6420] ? do_sock_setsockopt+0x222/0x480 [ 73.662751][ T6420] ? __sys_setsockopt+0x1a0/0x230 [ 73.664510][ T6420] ? __ia32_sys_setsockopt+0xbc/0x160 [ 73.666059][ T6420] __vmalloc_node_range_noprof+0x10df/0x1530 [ 73.667806][ T6420] ? xskq_create+0xfb/0x1d0 [ 73.669141][ T6420] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 73.671003][ T6420] ? xskq_create+0xfb/0x1d0 [ 73.672337][ T6420] vmalloc_user_noprof+0x6b/0x90 [ 73.673784][ T6420] ? xskq_create+0xfb/0x1d0 [ 73.675104][ T6420] xskq_create+0xfb/0x1d0 [ 73.676378][ T6420] xsk_setsockopt+0x8b0/0xac0 [ 73.677756][ T6420] ? __pfx_xsk_setsockopt+0x10/0x10 [ 73.679278][ T6420] ? find_held_lock+0x2d/0x110 [ 73.680665][ T6420] ? __pfx_xsk_setsockopt+0x10/0x10 [ 73.682142][ T6420] do_sock_setsockopt+0x222/0x480 [ 73.683554][ T6420] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 73.685125][ T6420] ? lock_acquire+0x2f/0xb0 [ 73.686434][ T6420] __sys_setsockopt+0x1a0/0x230 [ 73.687801][ T6420] __ia32_sys_setsockopt+0xbc/0x160 [ 73.689267][ T6420] ? lockdep_hardirqs_on+0x7c/0x110 [ 73.690735][ T6420] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 73.692558][ T6420] __do_fast_syscall_32+0x73/0x120 [ 73.694000][ T6420] do_fast_syscall_32+0x32/0x80 [ 73.695407][ T6420] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 73.697236][ T6420] RIP: 0023:0xf70fe579 [ 73.698402][ T6420] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 73.703785][ T6420] RSP: 002b:00000000f50f055c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 73.706098][ T6420] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 000000000000011b [ 73.708316][ T6420] RDX: 0000000000000002 RSI: 0000000020000080 RDI: 0000000000000020 [ 73.710521][ T6420] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 73.712765][ T6420] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 73.715008][ T6420] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 73.717201][ T6420] [ 73.718121][ C0] vkms_vblank_simulate: vblank timer overrun [ 73.720162][ T6420] Mem-Info: [ 73.721098][ T6420] active_anon:5456 inactive_anon:523 isolated_anon:0 [ 73.721098][ T6420] active_file:625 inactive_file:47907 isolated_file:0 [ 73.721098][ T6420] unevictable:1768 dirty:184 writeback:0 [ 73.721098][ T6420] slab_reclaimable:8006 slab_unreclaimable:54574 [ 73.721098][ T6420] mapped:24700 shmem:2469 pagetables:663 [ 73.721098][ T6420] sec_pagetables:300 bounce:0 [ 73.721098][ T6420] kernel_misc_reclaimable:0 [ 73.721098][ T6420] free:60502 free_pcp:3222 free_cma:0 [ 73.734755][ T6420] Node 0 active_anon:3100kB inactive_anon:2092kB active_file:132kB inactive_file:10848kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:5356kB dirty:88kB writeback:0kB shmem:5160kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9568kB pagetables:728kB sec_pagetables:1152kB all_unreclaimable? yes [ 73.747639][ T6420] Node 1 active_anon:18744kB inactive_anon:0kB active_file:2368kB inactive_file:180780kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:93504kB dirty:648kB writeback:0kB shmem:4720kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:2616kB pagetables:1948kB sec_pagetables:48kB all_unreclaimable? no [ 73.760301][ T6420] Node 0 DMA free:2968kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB active_anon:124kB inactive_anon:12kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:140kB local_pcp:0kB free_cma:0kB [ 73.771476][ T6420] lowmem_reserve[]: 0 299 0 0 0 [ 73.773647][ T6420] Node 0 DMA32 free:18744kB boost:0kB min:13904kB low:17380kB high:20856kB reserved_highatomic:4096KB active_anon:2976kB inactive_anon:2080kB active_file:132kB inactive_file:10848kB unevictable:3536kB writepending:112kB present:1032196kB managed:306284kB mlocked:0kB bounce:0kB free_pcp:1776kB local_pcp:872kB free_cma:0kB [ 73.787320][ T6420] lowmem_reserve[]: 0 0 0 0 0 [ 73.789190][ T6420] Node 1 DMA32 free:220532kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB active_anon:18640kB inactive_anon:0kB active_file:2368kB inactive_file:180780kB unevictable:3536kB writepending:720kB present:1048432kB managed:948252kB mlocked:0kB bounce:0kB free_pcp:11208kB local_pcp:8676kB free_cma:0kB [ 73.798095][ T6420] lowmem_reserve[]: 0 0 0 0 0 [ 73.799417][ T6420] Node 0 DMA: 22*4kB (U) 102*8kB (UM) 43*16kB (UM) 39*32kB (UM) 2*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2968kB [ 73.803456][ T6420] Node 0 DMA32: 150*4kB (UEH) 46*8kB (UEH) 15*16kB (UMEH) 87*32kB (UMEH) 65*64kB (UMEH) 31*128kB (UEH) 8*256kB (U) 3*512kB (UM) 3*1024kB (UM) 0*2048kB 0*4096kB = 18776kB [ 73.808213][ T6420] Node 1 DMA32: 4*4kB (UME) 66*8kB (UME) 129*16kB (UME) 175*32kB (UME) 92*64kB (UME) 74*128kB (UME) 70*256kB (UME) 39*512kB (UME) 29*1024kB (UME) 23*2048kB (UME) 20*4096kB (UM) = 220176kB [ 73.813969][ T6420] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 73.816707][ T6420] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 73.819270][ T6420] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 73.822101][ T6420] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 73.824689][ T6420] 50994 total pagecache pages [ 73.826035][ T6420] 0 pages in swap cache [ 73.827205][ T6420] Free swap = 124996kB [ 73.828386][ T6420] Total swap = 124996kB [ 73.829553][ T6420] 524155 pages RAM [ 73.830658][ T6420] 0 pages HighMem/MovableOnly [ 73.832119][ T6420] 206681 pages reserved [ 73.833390][ T6420] 0 pages cma reserved [ 73.891938][ T35] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 74.042075][ T35] usb 7-1: Using ep0 maxpacket: 8 [ 74.047332][ T35] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 74.049769][ T35] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 74.052982][ T35] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 74.056014][ T35] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 74.058897][ T35] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 74.062911][ T35] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 74.066554][ T35] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.067000][ T45] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.134728][ T45] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.236757][ T5944] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.237449][ T45] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.239472][ T5944] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.245899][ T5944] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.250486][ T5944] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.253177][ T5944] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 74.255605][ T5944] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.291752][ T35] usb 7-1: GET_CAPABILITIES returned 0 [ 74.305902][ T35] usbtmc 7-1:16.0: can't read capabilities [ 74.309387][ T45] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.316902][ T6426] chnl_net:caif_netlink_parms(): no params data found [ 74.436994][ T6426] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.441998][ T6426] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.444316][ T6426] bridge_slave_0: entered allmulticast mode [ 74.446561][ T6426] bridge_slave_0: entered promiscuous mode [ 74.449302][ T45] bridge_slave_1: left allmulticast mode [ 74.452906][ T45] bridge_slave_1: left promiscuous mode [ 74.455741][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.467491][ T45] bridge_slave_0: left allmulticast mode [ 74.469802][ T45] bridge_slave_0: left promiscuous mode [ 74.471834][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.506535][ C3] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 74.510173][ T6420] usbtmc 7-1:16.0: Unable to send data, error -71 [ 74.517467][ T70] usb 7-1: USB disconnect, device number 2 [ 74.743216][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 74.747836][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 74.751382][ T45] bond0 (unregistering): Released all slaves [ 74.755749][ T6426] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.758463][ T6426] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.760936][ T6426] bridge_slave_1: entered allmulticast mode [ 74.763256][ T6426] bridge_slave_1: entered promiscuous mode [ 74.788349][ T6426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.793858][ T6426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.832631][ T6426] team0: Port device team_slave_0 added [ 74.837382][ T6426] team0: Port device team_slave_1 added [ 74.879988][ T6426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.882510][ T6426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.889789][ T6426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.894462][ T6426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.896608][ T6426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.905012][ T6426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.949181][ T6426] hsr_slave_0: entered promiscuous mode [ 74.952472][ T6426] hsr_slave_1: entered promiscuous mode [ 74.955169][ T6426] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.958044][ T6426] Cannot create hsr debugfs directory [ 75.038504][ T45] hsr_slave_0: left promiscuous mode [ 75.040928][ T45] hsr_slave_1: left promiscuous mode [ 75.045885][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.048704][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.052685][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.055483][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.073612][ T45] veth1_macvtap: left promiscuous mode [ 75.075340][ T45] veth0_macvtap: left promiscuous mode [ 75.076914][ T45] veth1_vlan: left promiscuous mode [ 75.078446][ T45] veth0_vlan: left promiscuous mode [ 75.687146][ T6456] hfs: can't find a HFS filesystem on dev sr0 [ 75.950962][ T45] team0 (unregistering): Port device team_slave_1 removed [ 76.046055][ T45] team0 (unregistering): Port device team_slave_0 removed [ 76.302056][ T5957] Bluetooth: hci0: command tx timeout [ 76.331378][ T39] audit: type=1800 audit(1737404136.394:3): pid=6451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.98" name="cpuset.effective_cpus" dev="9p" ino=40501304 res=0 errno=0 [ 77.400872][ T6426] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.415430][ T6426] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.420843][ T6426] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.428379][ T6426] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.476554][ T6426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.483753][ T6426] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.487756][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.489722][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.494353][ T102] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.496437][ T102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.607076][ T6426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.646071][ T6426] veth0_vlan: entered promiscuous mode [ 77.657963][ T6426] veth1_vlan: entered promiscuous mode [ 77.665328][ T6506] tun0: tun_chr_ioctl cmd 1074025675 [ 77.666908][ T6506] tun0: persist enabled [ 77.668544][ T6506] tun0: tun_chr_ioctl cmd 1074025675 [ 77.670569][ T6506] tun0: persist enabled [ 77.681610][ T6426] veth0_macvtap: entered promiscuous mode [ 77.687141][ T6426] veth1_macvtap: entered promiscuous mode [ 77.698291][ T6426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.701354][ T6426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.704426][ T6426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.707710][ T6426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.710647][ T6426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.713654][ T6426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.716953][ T6426] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.722216][ T6426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.725257][ T6426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.727946][ T6426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.731607][ T6426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.734634][ T6426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.737492][ T6426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.742285][ T6426] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.747235][ T6426] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.750629][ T6426] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.754296][ T6426] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.757600][ T6426] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.789889][ T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.792819][ T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.801123][ T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.803730][ T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.101369][ T6527] capability: warning: `syz.2.109' uses 32-bit capabilities (legacy support in use) [ 80.239813][ T102] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.348730][ T5944] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.352326][ T5944] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.355317][ T5944] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.358608][ T5944] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.361231][ T5944] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 80.364554][ T5944] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.478305][ T6544] chnl_net:caif_netlink_parms(): no params data found [ 80.565812][ T6544] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.568312][ T6544] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.570390][ T6544] bridge_slave_0: entered allmulticast mode [ 80.575660][ T6544] bridge_slave_0: entered promiscuous mode [ 80.578228][ T6544] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.580279][ T6544] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.582439][ T6544] bridge_slave_1: entered allmulticast mode [ 80.584613][ T6544] bridge_slave_1: entered promiscuous mode [ 80.606887][ T6544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.611015][ T6544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.639189][ T6544] team0: Port device team_slave_0 added [ 80.647647][ T6544] team0: Port device team_slave_1 added [ 80.665942][ T6544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.667939][ T6544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.676158][ T6544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.679967][ T6544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.684851][ T6544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.692696][ T6544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.717638][ T6544] hsr_slave_0: entered promiscuous mode [ 80.720587][ T6544] hsr_slave_1: entered promiscuous mode [ 80.724925][ T6544] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.727009][ T6544] Cannot create hsr debugfs directory [ 81.025091][ T63] cfg80211: failed to load regulatory.db [ 81.270403][ T6556] netlink: 1080 bytes leftover after parsing attributes in process `syz.2.114'. [ 81.414076][ T6562] overlay: Unknown parameter '/' [ 82.091780][ T102] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.200009][ T102] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.291464][ T102] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.391966][ T5957] Bluetooth: hci0: command tx timeout [ 82.444369][ T102] bridge_slave_1: left allmulticast mode [ 82.446005][ T102] bridge_slave_1: left promiscuous mode [ 82.447667][ T102] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.451222][ T102] bridge_slave_0: left allmulticast mode [ 82.453930][ T102] bridge_slave_0: left promiscuous mode [ 82.456151][ T102] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.768757][ T102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.785139][ T102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.835492][ T102] bond0 (unregistering): Released all slaves [ 83.278692][ T102] hsr_slave_0: left promiscuous mode [ 83.281075][ T102] hsr_slave_1: left promiscuous mode [ 83.285180][ T102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.287346][ T102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.292748][ T102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.294890][ T102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.317931][ T102] veth1_macvtap: left promiscuous mode [ 83.319953][ T102] veth0_macvtap: left promiscuous mode [ 83.321756][ T102] veth1_vlan: left promiscuous mode [ 83.325827][ T102] veth0_vlan: left promiscuous mode [ 83.917422][ T102] team0 (unregistering): Port device team_slave_1 removed [ 83.993407][ T102] team0 (unregistering): Port device team_slave_0 removed [ 84.325491][ T6601] bio_check_eod: 2 callbacks suppressed [ 84.325505][ T6601] syz.2.121: attempt to access beyond end of device [ 84.325505][ T6601] nbd2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 84.325643][ T6601] syz.2.121: attempt to access beyond end of device [ 84.325643][ T6601] nbd2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 84.325682][ T6601] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 84.325808][ T6601] syz.2.121: attempt to access beyond end of device [ 84.325808][ T6601] nbd2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 84.325840][ T6601] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 84.326339][ T6601] syz.2.121: attempt to access beyond end of device [ 84.326339][ T6601] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 84.326537][ T6601] syz.2.121: attempt to access beyond end of device [ 84.326537][ T6601] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 84.326582][ T6601] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 84.326674][ T6601] syz.2.121: attempt to access beyond end of device [ 84.326674][ T6601] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 84.326710][ T6601] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 84.327021][ T6601] syz.2.121: attempt to access beyond end of device [ 84.327021][ T6601] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 84.327128][ T6601] syz.2.121: attempt to access beyond end of device [ 84.327128][ T6601] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 84.327168][ T6601] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 84.327243][ T6601] syz.2.121: attempt to access beyond end of device [ 84.327243][ T6601] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 84.327279][ T6601] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 84.327550][ T6601] syz.2.121: attempt to access beyond end of device [ 84.327550][ T6601] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 84.328798][ T6601] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 84.333907][ T6601] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 84.333930][ T6601] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 84.472348][ T5957] Bluetooth: hci0: command tx timeout [ 84.617599][ T6606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.123'. [ 84.726443][ T6544] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.728541][ T6544] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.729890][ T6544] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.731350][ T6544] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.758383][ T6544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.767988][ T6544] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.769787][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.769829][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.777250][ T1132] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.777278][ T1132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.891539][ T6544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.904952][ T6544] veth0_vlan: entered promiscuous mode [ 84.914828][ T6544] veth1_vlan: entered promiscuous mode [ 84.936160][ T6544] veth0_macvtap: entered promiscuous mode [ 84.938784][ T6544] veth1_macvtap: entered promiscuous mode [ 84.942886][ T6544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.942897][ T6544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.942902][ T6544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.942909][ T6544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.942914][ T6544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.942920][ T6544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.943320][ T6544] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.947452][ T6544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.947462][ T6544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.947467][ T6544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.947473][ T6544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.947478][ T6544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.947485][ T6544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.947969][ T6544] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.951161][ T6544] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.951191][ T6544] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.951206][ T6544] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.951228][ T6544] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.012464][ T1132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.012479][ T1132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.012583][ T1132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.012591][ T1132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.636881][ T6625] netlink: 'syz.1.125': attribute type 5 has an invalid length. [ 86.635212][ T6637] veth0_vlan: left promiscuous mode [ 86.636815][ T6637] veth0_vlan: entered promiscuous mode [ 87.446691][ T5944] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.450331][ T5944] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.453542][ T5944] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.457056][ T5944] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.459857][ T5944] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.462167][ T5944] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.545526][ T6657] chnl_net:caif_netlink_parms(): no params data found [ 87.661444][ T102] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.672028][ T6657] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.674884][ T6657] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.677640][ T6657] bridge_slave_0: entered allmulticast mode [ 87.680421][ T6657] bridge_slave_0: entered promiscuous mode [ 87.684506][ T6657] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.687206][ T6657] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.689812][ T6657] bridge_slave_1: entered allmulticast mode [ 87.693668][ T6657] bridge_slave_1: entered promiscuous mode [ 87.723558][ T6657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.727348][ T6657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.776730][ T6657] team0: Port device team_slave_0 added [ 87.781514][ T6657] team0: Port device team_slave_1 added [ 87.790319][ T6670] kvm: apic: phys broadcast and lowest prio [ 87.837195][ T6657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.840765][ T6657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.853422][ T6657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.859416][ T6657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.862476][ T6657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.872445][ T6657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.912580][ T6657] hsr_slave_0: entered promiscuous mode [ 87.914902][ T6657] hsr_slave_1: entered promiscuous mode [ 87.917657][ T6657] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.920629][ T6657] Cannot create hsr debugfs directory [ 89.473968][ T102] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.503041][ T5944] Bluetooth: hci0: command tx timeout [ 89.552114][ T102] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.666609][ T102] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.697660][ T6691] netlink: 24 bytes leftover after parsing attributes in process `syz.1.141'. [ 89.701981][ T6691] netlink: 16 bytes leftover after parsing attributes in process `syz.1.141'. [ 89.739518][ T6693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.142'. [ 89.742469][ T6693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.142'. [ 89.781790][ T102] bridge_slave_1: left allmulticast mode [ 89.784253][ T102] bridge_slave_1: left promiscuous mode [ 89.786409][ T102] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.790240][ T102] bridge_slave_0: left allmulticast mode [ 89.792120][ T102] bridge_slave_0: left promiscuous mode [ 89.793850][ T102] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.057836][ T102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 90.064768][ T102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 90.070214][ T102] bond0 (unregistering): Released all slaves [ 90.250286][ T6710] xt_TPROXY: Can be used only with -p tcp or -p udp [ 90.458004][ T102] hsr_slave_0: left promiscuous mode [ 90.461524][ T102] hsr_slave_1: left promiscuous mode [ 90.466592][ T102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.468941][ T102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.476005][ T102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.478454][ T102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.520616][ T102] veth1_macvtap: left promiscuous mode [ 90.523178][ T102] veth0_macvtap: left promiscuous mode [ 90.525801][ T102] veth1_vlan: left promiscuous mode [ 90.528232][ T102] veth0_vlan: left promiscuous mode [ 91.372457][ T102] team0 (unregistering): Port device team_slave_1 removed [ 91.455246][ T102] team0 (unregistering): Port device team_slave_0 removed [ 91.531490][ T6746] FAULT_INJECTION: forcing a failure. [ 91.531490][ T6746] name failslab, interval 1, probability 0, space 0, times 0 [ 91.540304][ T6746] CPU: 2 UID: 0 PID: 6746 Comm: syz.1.150 Not tainted 6.13.0-syzkaller #0 [ 91.542907][ T6746] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 91.545884][ T6746] Call Trace: [ 91.546858][ T6746] [ 91.547717][ T6746] dump_stack_lvl+0x16c/0x1f0 [ 91.549090][ T6746] should_fail_ex+0x497/0x5b0 [ 91.550432][ T6746] ? fs_reclaim_acquire+0xae/0x150 [ 91.551959][ T6746] should_failslab+0xc2/0x120 [ 91.553312][ T6746] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 91.554925][ T6746] ? __alloc_skb+0x2b3/0x380 [ 91.556248][ T6746] __alloc_skb+0x2b3/0x380 [ 91.557488][ T6746] ? __pfx___alloc_skb+0x10/0x10 [ 91.558870][ T6746] ? lock_acquire+0x2f/0xb0 [ 91.560226][ T6746] netlink_alloc_large_skb+0x69/0x130 [ 91.561690][ T6746] netlink_sendmsg+0x689/0xd70 [ 91.562988][ T6746] ? __pfx_netlink_sendmsg+0x10/0x10 [ 91.564518][ T6746] ____sys_sendmsg+0x9ae/0xb40 [ 91.565890][ T6746] ? __pfx_____sys_sendmsg+0x10/0x10 [ 91.567407][ T6746] ? get_compat_msghdr+0x11b/0x170 [ 91.568876][ T6746] ___sys_sendmsg+0x135/0x1e0 [ 91.570277][ T6746] ? __pfx____sys_sendmsg+0x10/0x10 [ 91.571860][ T6746] ? __pfx_lock_release+0x10/0x10 [ 91.573753][ T6746] ? trace_lock_acquire+0x14e/0x1f0 [ 91.575807][ T6746] ? __fget_files+0x206/0x3a0 [ 91.577615][ T6746] __sys_sendmsg+0x16e/0x220 [ 91.579390][ T6746] ? __pfx___sys_sendmsg+0x10/0x10 [ 91.581511][ T6746] __do_fast_syscall_32+0x73/0x120 [ 91.583443][ T6746] do_fast_syscall_32+0x32/0x80 [ 91.585353][ T6746] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 91.587415][ T6746] RIP: 0023:0xf707e579 [ 91.588607][ T6746] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 91.592601][ T5944] Bluetooth: hci0: command tx timeout [ 91.594299][ T6746] RSP: 002b:00000000f504f55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 91.594315][ T6746] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020000200 [ 91.594322][ T6746] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 0000000000000000 [ 91.594328][ T6746] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 91.594334][ T6746] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 91.594340][ T6746] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 91.594353][ T6746] [ 91.611718][ C2] hpet: Lost 3 RTC interrupts [ 91.988331][ T6657] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.996433][ T6657] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.000904][ T6657] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.008300][ T6657] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.065376][ T6657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.076523][ T6657] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.081065][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.084100][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.090367][ T1225] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.092578][ T1225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.209573][ T6657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.226525][ T6657] veth0_vlan: entered promiscuous mode [ 92.230421][ T6657] veth1_vlan: entered promiscuous mode [ 92.243037][ T6657] veth0_macvtap: entered promiscuous mode [ 92.247334][ T6657] veth1_macvtap: entered promiscuous mode [ 92.254099][ T6770] netlink: 14 bytes leftover after parsing attributes in process `syz.1.154'. [ 92.254326][ T6657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.259683][ T6657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.263007][ T6657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.266181][ T6657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.268979][ T6657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.272030][ T6657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.278932][ T6657] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.286413][ T6657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.289421][ T6657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.292993][ T6657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.295983][ T6657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.298811][ T6657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.302113][ T6657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.312223][ T6657] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.325553][ T6657] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.328109][ T6657] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.330627][ T6657] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.342045][ T6657] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.409308][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.418792][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.425491][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.428946][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.275050][ T6795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.155'. [ 94.627293][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.295131][ T5957] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.299311][ T5957] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.302508][ T5957] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.304969][ T5957] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.307897][ T5957] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 95.310157][ T5957] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.393024][ T6821] chnl_net:caif_netlink_parms(): no params data found [ 95.446487][ T6821] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.448813][ T6821] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.451129][ T6821] bridge_slave_0: entered allmulticast mode [ 95.454324][ T6821] bridge_slave_0: entered promiscuous mode [ 95.458728][ T6821] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.461045][ T6821] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.463500][ T6821] bridge_slave_1: entered allmulticast mode [ 95.465872][ T6821] bridge_slave_1: entered promiscuous mode [ 95.499364][ T6821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.504284][ T6821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.530171][ T6821] team0: Port device team_slave_0 added [ 95.534085][ T6821] team0: Port device team_slave_1 added [ 95.545725][ T39] audit: type=1326 audit(1737404155.614:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6830 comm="syz.1.162" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 95.550974][ T6831] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 95.553309][ T39] audit: type=1326 audit(1737404155.614:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6830 comm="syz.1.162" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 95.562543][ T39] audit: type=1326 audit(1737404155.614:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6830 comm="syz.1.162" exe="/syz-executor" sig=0 arch=40000003 syscall=236 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 95.563791][ T6821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.570092][ T39] audit: type=1326 audit(1737404155.614:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6830 comm="syz.1.162" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 95.571986][ T6821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.572000][ T6821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.573265][ T6821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.578748][ T39] audit: type=1326 audit(1737404155.614:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6830 comm="syz.1.162" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 95.586629][ T6821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.586646][ T6821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.616536][ T39] audit: type=1326 audit(1737404155.614:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6830 comm="syz.1.162" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 95.630687][ T39] audit: type=1326 audit(1737404155.614:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6830 comm="syz.1.162" exe="/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 95.640105][ T39] audit: type=1326 audit(1737404155.614:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6830 comm="syz.1.162" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 95.647305][ T39] audit: type=1326 audit(1737404155.614:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6830 comm="syz.1.162" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 95.674998][ T6821] hsr_slave_0: entered promiscuous mode [ 95.677382][ T6821] hsr_slave_1: entered promiscuous mode [ 95.679578][ T6821] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.682606][ T6821] Cannot create hsr debugfs directory [ 96.135318][ T6847] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.148281][ T6847] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.206220][ T6850] Bluetooth: MGMT ver 1.23 [ 96.488375][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.573141][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.653050][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.746736][ T12] bridge_slave_1: left allmulticast mode [ 96.748851][ T12] bridge_slave_1: left promiscuous mode [ 96.750567][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.755017][ T12] bridge_slave_0: left allmulticast mode [ 96.756746][ T12] bridge_slave_0: left promiscuous mode [ 96.758430][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.991404][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.996142][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.001563][ T12] bond0 (unregistering): Released all slaves [ 97.179319][ T6861] netlink: 12 bytes leftover after parsing attributes in process `syz.2.171'. [ 97.247259][ T6870] FAULT_INJECTION: forcing a failure. [ 97.247259][ T6870] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 97.250990][ T6870] CPU: 1 UID: 0 PID: 6870 Comm: syz.1.169 Not tainted 6.13.0-syzkaller #0 [ 97.253444][ T6870] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 97.256482][ T6870] Call Trace: [ 97.257451][ T6870] [ 97.258314][ T6870] dump_stack_lvl+0x16c/0x1f0 [ 97.259685][ T6870] should_fail_ex+0x497/0x5b0 [ 97.261055][ T6870] _copy_from_user+0x2e/0xd0 [ 97.262398][ T6870] v4l2_compat_get_user+0x192/0x11b0 [ 97.263917][ T6870] ? find_held_lock+0x2d/0x110 [ 97.265294][ T6870] ? __pfx_v4l2_compat_get_user+0x10/0x10 [ 97.266927][ T6870] ? __pfx_lock_release+0x10/0x10 [ 97.268381][ T6870] ? tomoyo_path_number_perm+0x46d/0x5b0 [ 97.270007][ T6870] ? tomoyo_path_number_perm+0x190/0x5b0 [ 97.271614][ T6870] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 97.273317][ T6870] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 97.274984][ T6870] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 97.276669][ T6870] video_usercopy+0xc21/0x1520 [ 97.278031][ T6870] ? __pfx___video_do_ioctl+0x10/0x10 [ 97.279550][ T6870] ? __pfx_video_usercopy+0x10/0x10 [ 97.281036][ T6870] v4l2_ioctl+0x1ba/0x250 [ 97.282263][ T6870] ? __fget_files+0x161/0x3a0 [ 97.283622][ T6870] v4l2_compat_ioctl32+0x214/0x2c0 [ 97.285091][ T6870] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 97.286730][ T6870] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 97.288259][ T6870] __do_fast_syscall_32+0x73/0x120 [ 97.289731][ T6870] do_fast_syscall_32+0x32/0x80 [ 97.291112][ T6870] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 97.292906][ T6870] RIP: 0023:0xf707e579 [ 97.294077][ T6870] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 97.299486][ T6870] RSP: 002b:00000000f502e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 97.301911][ T6870] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c0185647 [ 97.304150][ T6870] RDX: 0000000020000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 97.306402][ T6870] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 97.308638][ T6870] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 97.310897][ T6870] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 97.313141][ T6870] [ 97.341979][ T5957] Bluetooth: hci0: command tx timeout [ 97.436101][ T6877] veth0_to_bridge: entered promiscuous mode [ 97.438572][ T6877] capability: warning: `syz.0.174' uses deprecated v2 capabilities in a way that may be insecure [ 97.443112][ T6876] veth0_to_bridge: left promiscuous mode [ 97.503435][ T12] hsr_slave_0: left promiscuous mode [ 97.506629][ T12] hsr_slave_1: left promiscuous mode [ 97.509753][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.514515][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.518143][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.521228][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.554635][ T12] veth1_macvtap: left promiscuous mode [ 97.556929][ T12] veth0_macvtap: left promiscuous mode [ 97.559189][ T12] veth1_vlan: left promiscuous mode [ 97.561280][ T12] veth0_vlan: left promiscuous mode [ 98.237798][ T12] team0 (unregistering): Port device team_slave_1 removed [ 98.302323][ T12] team0 (unregistering): Port device team_slave_0 removed [ 98.551512][ T6904] xt_TPROXY: Can be used only with -p tcp or -p udp [ 99.063140][ T6821] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 99.067026][ T6821] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 99.076069][ T6821] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 99.080025][ T6821] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 99.126917][ T6821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.134981][ T6821] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.141459][ T1225] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.144306][ T1225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.151692][ T1132] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.153908][ T1132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.427092][ T6821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.445497][ T6821] veth0_vlan: entered promiscuous mode [ 99.453086][ T6821] veth1_vlan: entered promiscuous mode [ 99.467547][ T6821] veth0_macvtap: entered promiscuous mode [ 99.470906][ T6821] veth1_macvtap: entered promiscuous mode [ 99.472329][ T5957] Bluetooth: hci0: command tx timeout [ 99.485299][ T6821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.489813][ T6821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.496040][ T6821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.505310][ T6821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.509966][ T6821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.514917][ T6821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.520137][ T6821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.531643][ T6821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.536594][ T6821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.540738][ T6821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.547597][ T6821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.551829][ T6821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.556604][ T6821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.561519][ T6821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.572284][ T6821] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.575694][ T6821] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.578283][ T6821] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.580936][ T6821] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.748984][ T1132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.751734][ T1132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.772996][ T1225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.776015][ T1225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.365253][ T6950] overlayfs: failed to resolve './file0': -2 [ 101.749952][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.336774][ T6968] process 'syz.0.193' launched './file1' with NULL argv: empty string added [ 102.432854][ T5944] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 102.443144][ T5944] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 102.444536][ T5944] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 102.446007][ T5944] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 102.450532][ T5944] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 102.450979][ T5944] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 102.523376][ T6974] chnl_net:caif_netlink_parms(): no params data found [ 102.614061][ T6985] netfs: Couldn't get user pages (rc=-14) [ 102.715219][ T6974] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.715313][ T6974] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.715409][ T6974] bridge_slave_0: entered allmulticast mode [ 102.715847][ T6974] bridge_slave_0: entered promiscuous mode [ 102.717000][ T6974] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.717049][ T6974] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.717118][ T6974] bridge_slave_1: entered allmulticast mode [ 102.717522][ T6974] bridge_slave_1: entered promiscuous mode [ 102.724349][ T70] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 102.737388][ T6974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.738351][ T6974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.764722][ T6974] team0: Port device team_slave_0 added [ 102.766493][ T6974] team0: Port device team_slave_1 added [ 102.788417][ T6974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.788429][ T6974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.788440][ T6974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.789843][ T6974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.789851][ T6974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.789862][ T6974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.830140][ T6974] hsr_slave_0: entered promiscuous mode [ 102.885559][ T70] usb 5-1: device descriptor read/64, error -71 [ 102.888029][ T6974] hsr_slave_1: entered promiscuous mode [ 102.888502][ T6974] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.888532][ T6974] Cannot create hsr debugfs directory [ 103.122086][ T70] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 103.262017][ T70] usb 5-1: device descriptor read/64, error -71 [ 103.382984][ T70] usb usb5-port1: attempt power cycle [ 103.723172][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.731937][ T70] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 103.735624][ T6986] netfs: Couldn't get user pages (rc=-4) [ 103.752508][ T70] usb 5-1: device descriptor read/8, error -71 [ 103.798057][ T7005] FAULT_INJECTION: forcing a failure. [ 103.798057][ T7005] name failslab, interval 1, probability 0, space 0, times 0 [ 103.804127][ T7005] CPU: 3 UID: 0 PID: 7005 Comm: syz.2.201 Not tainted 6.13.0-syzkaller #0 [ 103.807285][ T7005] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 103.811294][ T7005] Call Trace: [ 103.812563][ T7005] [ 103.813670][ T7005] dump_stack_lvl+0x16c/0x1f0 [ 103.815420][ T7005] should_fail_ex+0x497/0x5b0 [ 103.817228][ T7005] ? fs_reclaim_acquire+0xae/0x150 [ 103.819052][ T7005] should_failslab+0xc2/0x120 [ 103.820494][ T7005] __kmalloc_noprof+0xce/0x4f0 [ 103.821891][ T7005] ? rcu_is_watching+0x12/0xc0 [ 103.823275][ T7005] ? p9_fcall_init+0x97/0x260 [ 103.824677][ T7005] p9_fcall_init+0x97/0x260 [ 103.826011][ T7005] p9_tag_alloc+0x17a/0x870 [ 103.827348][ T7005] ? __pfx_p9_tag_alloc+0x10/0x10 [ 103.828839][ T7005] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 103.830472][ T7005] p9_client_prepare_req+0x19f/0x4d0 [ 103.832118][ T7005] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 103.833822][ T7005] ? lock_acquire+0x2f/0xb0 [ 103.835126][ T7005] p9_client_rpc+0x1c3/0xc10 [ 103.836462][ T7005] ? __pfx_p9_client_rpc+0x10/0x10 [ 103.837977][ T7005] ? pipe_poll+0x206/0x850 [ 103.839300][ T7005] ? __pfx_p9_pollwait+0x10/0x10 [ 103.840748][ T7005] ? __pfx_pipe_poll+0x10/0x10 [ 103.842145][ T7005] ? p9_fd_poll+0x1db/0x2c0 [ 103.843487][ T7005] ? p9_fd_create+0x328/0x490 [ 103.844861][ T7005] ? __pfx_p9_fd_create+0x10/0x10 [ 103.846327][ T7005] ? p9_client_create+0x776/0x11a0 [ 103.847858][ T7005] p9_client_create+0xbac/0x11a0 [ 103.849294][ T7005] ? __pfx_p9_client_create+0x10/0x10 [ 103.850865][ T7005] ? rcu_is_watching+0x12/0xc0 [ 103.852261][ T7005] ? __raw_spin_lock_init+0x3a/0x110 [ 103.853779][ T7005] v9fs_session_init+0x1f8/0x1a80 [ 103.855229][ T7005] ? __pfx_v9fs_session_init+0x10/0x10 [ 103.856821][ T7005] ? kasan_save_track+0x14/0x30 [ 103.858232][ T7005] v9fs_mount+0xc6/0xa30 [ 103.859465][ T7005] ? __pfx_v9fs_mount+0x10/0x10 [ 103.860891][ T7005] ? __pfx_v9fs_mount+0x10/0x10 [ 103.862334][ T7005] legacy_get_tree+0x109/0x220 [ 103.863818][ T7005] vfs_get_tree+0x8f/0x380 [ 103.865113][ T7005] path_mount+0x6e1/0x1f00 [ 103.866416][ T7005] ? kmem_cache_free+0x152/0x4c0 [ 103.867864][ T7005] ? __pfx_path_mount+0x10/0x10 [ 103.869361][ T7005] ? putname+0x13c/0x180 [ 103.870588][ T7005] __ia32_sys_mount+0x292/0x310 [ 103.872003][ T7005] ? __pfx___ia32_sys_mount+0x10/0x10 [ 103.873543][ T7005] __do_fast_syscall_32+0x73/0x120 [ 103.875012][ T7005] do_fast_syscall_32+0x32/0x80 [ 103.876421][ T7005] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 103.878288][ T7005] RIP: 0023:0xf70fe579 [ 103.879466][ T7005] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 103.885017][ T7005] RSP: 002b:00000000f50f055c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 103.887424][ T7005] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000020000000 [ 103.889695][ T7005] RDX: 0000000020000040 RSI: 0000000000000000 RDI: 00000000200005c0 [ 103.891984][ T7005] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 103.894292][ T7005] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 103.896497][ T7005] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 103.898731][ T7005] [ 103.923133][ T7014] Bluetooth: MGMT ver 1.23 [ 103.925122][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.003803][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.031945][ T70] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 104.052340][ T70] usb 5-1: device descriptor read/8, error -71 [ 104.130571][ T12] bridge_slave_1: left allmulticast mode [ 104.130595][ T12] bridge_slave_1: left promiscuous mode [ 104.130678][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.134029][ T12] bridge_slave_0: left allmulticast mode [ 104.134043][ T12] bridge_slave_0: left promiscuous mode [ 104.134132][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.162594][ T70] usb usb5-port1: unable to enumerate USB device [ 104.381916][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.386004][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.389413][ T12] bond0 (unregistering): Released all slaves [ 104.463295][ T5957] Bluetooth: hci0: command tx timeout [ 104.766800][ T12] hsr_slave_0: left promiscuous mode [ 104.775613][ T12] hsr_slave_1: left promiscuous mode [ 104.793934][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.796012][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.798663][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.800849][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.827332][ T12] veth1_macvtap: left promiscuous mode [ 104.829079][ T12] veth0_macvtap: left promiscuous mode [ 104.830865][ T12] veth1_vlan: left promiscuous mode [ 104.832917][ T12] veth0_vlan: left promiscuous mode [ 104.897809][ T7049] xt_TPROXY: Can be used only with -p tcp or -p udp [ 105.755927][ T12] team0 (unregistering): Port device team_slave_1 removed [ 105.844069][ T12] team0 (unregistering): Port device team_slave_0 removed [ 106.028087][ T7065] overlayfs: failed to resolve './file0': -2 [ 106.409037][ T6974] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 106.413601][ T6974] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 106.416890][ T6974] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 106.420228][ T6974] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 106.458127][ T6974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.472907][ T6974] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.479961][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.482358][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.489926][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.492041][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.509459][ T6974] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 106.515607][ T6974] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 106.552022][ T5957] Bluetooth: hci0: command tx timeout [ 106.608643][ T6974] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.634775][ T6974] veth0_vlan: entered promiscuous mode [ 106.638733][ T6974] veth1_vlan: entered promiscuous mode [ 106.651255][ T6974] veth0_macvtap: entered promiscuous mode [ 106.657624][ T6974] veth1_macvtap: entered promiscuous mode [ 106.664567][ T6974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.668103][ T6974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.671471][ T6974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.676682][ T6974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.679506][ T6974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.682767][ T6974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.686225][ T6974] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.690947][ T6974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.696390][ T6974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.699189][ T6974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.702486][ T6974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.705360][ T6974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.708493][ T6974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.712036][ T6974] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.714800][ T7087] netlink: 'syz.1.211': attribute type 21 has an invalid length. [ 106.717444][ T7087] netlink: 'syz.1.211': attribute type 1 has an invalid length. [ 106.719725][ T7087] netlink: 100 bytes leftover after parsing attributes in process `syz.1.211'. [ 106.725797][ T6974] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.728463][ T6974] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.731035][ T6974] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.734325][ T6974] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.761646][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.786622][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.795334][ T1132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.797739][ T1132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.641769][ T7127] syz.0.215 uses obsolete (PF_INET,SOCK_PACKET) [ 108.872206][ T7146] nbd1: detected capacity change from 0 to 67108884 [ 108.876703][ T5959] block nbd1: Send control failed (result -89) [ 108.880291][ T5959] block nbd1: Request send failed, requeueing [ 108.885914][ T5957] block nbd1: Receive control failed (result -32) [ 108.892087][ T1193] block nbd1: Dead connection, failed to find a fallback [ 108.895392][ T1193] block nbd1: shutting down sockets [ 108.897585][ T1193] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.901258][ T1193] Buffer I/O error on dev nbd1, logical block 0, async page read [ 108.904888][ T5959] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.908400][ T5959] Buffer I/O error on dev nbd1, logical block 0, async page read [ 108.912156][ T5959] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.916334][ T5959] Buffer I/O error on dev nbd1, logical block 0, async page read [ 108.919316][ T5959] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.922786][ T5959] Buffer I/O error on dev nbd1, logical block 0, async page read [ 108.926234][ T5959] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.929670][ T5959] Buffer I/O error on dev nbd1, logical block 0, async page read [ 108.933183][ T5959] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.936572][ T5959] Buffer I/O error on dev nbd1, logical block 0, async page read [ 108.939557][ T5959] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.943747][ T5959] Buffer I/O error on dev nbd1, logical block 0, async page read [ 108.946637][ T5959] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.949360][ T5959] Buffer I/O error on dev nbd1, logical block 0, async page read [ 108.951616][ T5959] ldm_validate_partition_table(): Disk read failed. [ 108.953620][ T5959] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.956465][ T5959] Buffer I/O error on dev nbd1, logical block 0, async page read [ 108.958705][ T5959] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.961260][ T5959] Buffer I/O error on dev nbd1, logical block 0, async page read [ 108.965445][ T5959] Dev nbd1: unable to read RDB block 0 [ 108.967264][ T5959] nbd1: unable to read partition table [ 108.980412][ T7146] ldm_validate_partition_table(): Disk read failed. [ 108.984760][ T7146] Dev nbd1: unable to read RDB block 0 [ 108.988834][ T7146] nbd1: unable to read partition table [ 109.006441][ T7146] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 109.012750][ T7146] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554441, location=33554441 [ 109.013131][ T5959] ldm_validate_partition_table(): Disk read failed. [ 109.018554][ T7146] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554185, location=33554185 [ 109.019966][ T5959] Dev nbd1: unable to read RDB block 0 [ 109.026371][ T5959] nbd1: unable to read partition table [ 109.026670][ T7146] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554440, location=33554440 [ 109.033985][ T7146] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554184, location=33554184 [ 109.040242][ T7146] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554439, location=33554439 [ 109.052409][ T7146] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554183, location=33554183 [ 109.058593][ T7146] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554291, location=33554291 [ 109.065910][ T7146] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554035, location=33554035 [ 109.070053][ T7148] nvme_fabrics: missing parameter 'transport=%s' [ 109.070076][ T7148] nvme_fabrics: missing parameter 'nqn=%s' [ 109.076819][ T7146] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554289, location=33554289 [ 109.081283][ T7146] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=33554033, location=33554033 [ 109.085407][ T7146] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 109.091103][ T7146] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 109.094484][ T7146] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16777220, location=16777220 [ 109.097883][ T7146] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16776964, location=16776964 [ 109.101402][ T7146] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16777219, location=16777219 [ 109.106265][ T7146] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16776963, location=16776963 [ 109.110399][ T7146] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16777218, location=16777218 [ 109.114068][ T7146] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16776962, location=16776962 [ 109.117590][ T7146] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16777070, location=16777070 [ 109.121160][ T7146] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16776814, location=16776814 [ 109.124838][ T7146] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16777068, location=16777068 [ 109.128151][ T7146] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16776812, location=16776812 [ 109.132133][ T7146] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 109.136984][ T7146] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 109.140940][ T7146] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388609, location=8388609 [ 109.144480][ T7146] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388353, location=8388353 [ 109.147654][ T7146] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388608, location=8388608 [ 109.151178][ T7146] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388352, location=8388352 [ 109.154548][ T7146] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388607, location=8388607 [ 109.155882][ T7153] FAULT_INJECTION: forcing a failure. [ 109.155882][ T7153] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.157992][ T7146] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388351, location=8388351 [ 109.161473][ T7153] CPU: 3 UID: 0 PID: 7153 Comm: syz.0.221 Not tainted 6.13.0-syzkaller #0 [ 109.164881][ T7146] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388459, location=8388459 [ 109.166767][ T7153] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 109.166776][ T7153] Call Trace: [ 109.166780][ T7153] [ 109.166785][ T7153] dump_stack_lvl+0x16c/0x1f0 [ 109.166803][ T7153] should_fail_ex+0x497/0x5b0 [ 109.170124][ T7146] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388203, location=8388203 [ 109.173117][ T7153] _copy_from_user+0x2e/0xd0 [ 109.173137][ T7153] v4l2_compat_get_user+0x192/0x11b0 [ 109.173155][ T7153] ? find_held_lock+0x2d/0x110 [ 109.173169][ T7153] ? __pfx_v4l2_compat_get_user+0x10/0x10 [ 109.173185][ T7153] ? __pfx_lock_release+0x10/0x10 [ 109.173196][ T7153] ? tomoyo_path_number_perm+0x46d/0x5b0 [ 109.173215][ T7153] ? tomoyo_path_number_perm+0x190/0x5b0 [ 109.173231][ T7153] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 109.174590][ T7146] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388457, location=8388457 [ 109.175081][ T7153] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 109.175095][ T7153] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 109.175108][ T7153] video_usercopy+0xc21/0x1520 [ 109.175122][ T7153] ? __pfx___video_do_ioctl+0x10/0x10 [ 109.176822][ T7146] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388201, location=8388201 [ 109.177825][ T7153] ? __pfx_video_usercopy+0x10/0x10 [ 109.177847][ T7153] v4l2_ioctl+0x1ba/0x250 [ 109.177858][ T7153] ? __fget_files+0x161/0x3a0 [ 109.177871][ T7153] v4l2_compat_ioctl32+0x214/0x2c0 [ 109.181141][ T7146] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 109.182517][ T7153] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 109.182553][ T7153] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 109.182574][ T7153] __do_fast_syscall_32+0x73/0x120 [ 109.182601][ T7153] do_fast_syscall_32+0x32/0x80 [ 109.182625][ T7153] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 109.182654][ T7153] RIP: 0023:0xf70fe579 [ 109.182670][ T7153] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 109.182686][ T7153] RSP: 002b:00000000f50f055c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 109.182705][ T7153] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0185647 [ 109.182718][ T7153] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 109.182729][ T7153] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 109.182740][ T7153] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 109.182751][ T7153] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 109.182775][ T7153] [ 109.245382][ T7146] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 109.603155][ T45] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.137848][ T5944] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 110.140617][ T5944] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 110.143331][ T5944] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 110.146602][ T5944] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 110.149683][ T5944] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 110.151701][ T5944] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 110.230956][ T7163] chnl_net:caif_netlink_parms(): no params data found [ 110.260672][ T7176] 9pnet_fd: Insufficient options for proto=fd [ 110.263680][ T7176] netlink: 'syz.2.226': attribute type 1 has an invalid length. [ 110.276499][ T7176] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.298689][ T7176] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.300790][ T7176] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 110.306623][ T7176] bond1: (slave vcan1): Error -95 calling set_mac_address [ 110.313764][ T7163] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.315976][ T7163] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.318030][ T7163] bridge_slave_0: entered allmulticast mode [ 110.320181][ T7163] bridge_slave_0: entered promiscuous mode [ 110.324884][ T7163] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.327015][ T7163] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.329092][ T7163] bridge_slave_1: entered allmulticast mode [ 110.331381][ T7163] bridge_slave_1: entered promiscuous mode [ 110.350207][ T7163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.353953][ T7163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.377226][ T7163] team0: Port device team_slave_0 added [ 110.380697][ T7163] team0: Port device team_slave_1 added [ 110.412000][ T7163] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.414092][ T7163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.421783][ T7163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.426648][ T7163] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.428777][ T7163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.436066][ T7163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.465161][ T7163] hsr_slave_0: entered promiscuous mode [ 110.472838][ T7163] hsr_slave_1: entered promiscuous mode [ 110.475106][ T7163] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.479770][ T7163] Cannot create hsr debugfs directory [ 111.386570][ T45] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.492399][ T45] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.499663][ T7195] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 111.625256][ T45] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.801834][ T45] bridge_slave_1: left allmulticast mode [ 111.804969][ T45] bridge_slave_1: left promiscuous mode [ 111.807372][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.812879][ T45] bridge_slave_0: left allmulticast mode [ 111.815192][ T45] bridge_slave_0: left promiscuous mode [ 111.817928][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.225755][ T5944] Bluetooth: hci0: command tx timeout [ 112.425345][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.427946][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.435560][ T45] bond0 (unregistering): Released all slaves [ 112.847537][ T7163] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 112.878608][ T7163] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 112.890118][ T7163] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 112.907014][ T7163] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 112.921191][ T45] hsr_slave_0: left promiscuous mode [ 112.924844][ T45] hsr_slave_1: left promiscuous mode [ 112.927761][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.929832][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.934668][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.936769][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.003823][ T45] veth1_macvtap: left promiscuous mode [ 113.005729][ T45] veth0_macvtap: left promiscuous mode [ 113.007731][ T45] veth1_vlan: left promiscuous mode [ 113.009211][ T45] veth0_vlan: left promiscuous mode [ 113.513479][ T7243] random: crng reseeded on system resumption [ 113.724976][ T45] team0 (unregistering): Port device team_slave_1 removed [ 113.794681][ T45] team0 (unregistering): Port device team_slave_0 removed [ 114.315833][ T5944] Bluetooth: hci0: command tx timeout [ 114.464312][ T7255] xt_TPROXY: Can be used only with -p tcp or -p udp [ 114.599376][ T7163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.618008][ T7163] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.737347][ T1225] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.739588][ T1225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.834360][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.836463][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.847276][ T7163] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 114.852023][ T7163] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 114.989491][ T7163] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.041245][ T7163] veth0_vlan: entered promiscuous mode [ 115.090950][ T7163] veth1_vlan: entered promiscuous mode [ 115.230997][ T7163] veth0_macvtap: entered promiscuous mode [ 115.249180][ T7163] veth1_macvtap: entered promiscuous mode [ 115.290110][ T7163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.297433][ T7163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.304258][ T7163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.307311][ T7163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.310142][ T7163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.313417][ T7163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.319777][ T7163] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.349452][ T7163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.352732][ T7163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.355605][ T7163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.358798][ T7163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.362987][ T7163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.366105][ T7163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.371690][ T7163] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.386410][ T7163] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.389035][ T7163] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.391680][ T7163] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.394414][ T7163] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.553823][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.556081][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.570810][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.577901][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.794695][ T7334] xt_TPROXY: Can be used only with -p tcp or -p udp [ 117.897376][ T7354] xt_TPROXY: Can be used only with -p tcp or -p udp [ 118.294851][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.073032][ T7361] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 119.078614][ T7361] team0: Port device virt_wifi0 added [ 119.163132][ T7370] No such timeout policy "syz1" [ 119.548018][ T5957] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 119.552223][ T5957] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 119.661968][ T5957] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 119.669417][ T5957] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 119.674196][ T5957] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 119.678610][ T5957] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 119.855598][ T7379] chnl_net:caif_netlink_parms(): no params data found [ 119.988514][ T7379] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.992145][ T7379] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.995918][ T7379] bridge_slave_0: entered allmulticast mode [ 119.998486][ T7379] bridge_slave_0: entered promiscuous mode [ 120.003459][ T7379] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.012007][ T7379] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.014167][ T7379] bridge_slave_1: entered allmulticast mode [ 120.016485][ T7379] bridge_slave_1: entered promiscuous mode [ 120.050452][ T7379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.058574][ T7379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.089212][ T7379] team0: Port device team_slave_0 added [ 120.096164][ T7379] team0: Port device team_slave_1 added [ 120.129557][ T7379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.133096][ T7379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.146200][ T7379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.150397][ T7379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.152800][ T7379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.160415][ T7379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.197183][ T7379] hsr_slave_0: entered promiscuous mode [ 120.202093][ T7379] hsr_slave_1: entered promiscuous mode [ 120.204239][ T7379] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 120.206674][ T7379] Cannot create hsr debugfs directory [ 120.243658][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.292183][ T5987] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 120.304458][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.363267][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.464131][ T5987] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 120.464885][ T7394] xt_TPROXY: Can be used only with -p tcp or -p udp [ 120.468220][ T5987] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 120.482020][ T12] bridge_slave_1: left allmulticast mode [ 120.484167][ T12] bridge_slave_1: left promiscuous mode [ 120.486318][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.489713][ T5987] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 120.493981][ T5987] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 120.498017][ T5987] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 120.502219][ T12] bridge_slave_0: left allmulticast mode [ 120.504942][ T12] bridge_slave_0: left promiscuous mode [ 120.506479][ T5987] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 120.507270][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.510553][ T5987] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 120.520148][ T5987] usb 5-1: Product: syz [ 120.521815][ T5987] usb 5-1: Manufacturer: syz [ 120.528612][ T5987] cdc_wdm 5-1:1.0: skipping garbage [ 120.530617][ T5987] cdc_wdm 5-1:1.0: skipping garbage [ 120.536089][ T5987] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 120.538337][ T5987] cdc_wdm 5-1:1.0: Unknown control protocol [ 120.731644][ T7395] [ 120.732370][ T7395] ====================================================== [ 120.734399][ T7395] WARNING: possible circular locking dependency detected [ 120.736458][ T7395] 6.13.0-syzkaller #0 Not tainted [ 120.738203][ T7395] ------------------------------------------------------ SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 120.741990][ T7395] syz.0.262/7395 is trying to acquire lock: [ 120.744071][ T7395] ffff88804bb88ba0 (&mm->mmap_lock){++++}-{4:4}, at: __might_fault+0xe3/0x190 [ 120.747615][ T7395] [ 120.747615][ T7395] but task is already holding lock: [ 120.749864][ T7395] ffff888023da3038 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_ioctl+0xc9/0x290 [ 120.752650][ T7395] [ 120.752650][ T7395] which lock already depends on the new lock. [ 120.752650][ T7395] [ 120.755740][ T7395] [ 120.755740][ T7395] the existing dependency chain (in reverse order) is: [ 120.758346][ T7395] [ 120.758346][ T7395] -> #5 (&q->debugfs_mutex){+.+.}-{4:4}: [ 120.760708][ T7395] __mutex_lock+0x19b/0xa60 [ 120.762196][ T7395] blk_mq_init_sched+0x42b/0x640 [ 120.764069][ T7395] elevator_init_mq+0x2cd/0x420 [ 120.765809][ T7395] add_disk_fwnode+0x113/0x1300 [ 120.767457][ T7395] sd_probe+0xa66/0xfa0 [ 120.768966][ T7395] really_probe+0x23e/0xa90 [ 120.770496][ T7395] __driver_probe_device+0x1de/0x440 [ 120.772299][ T7395] driver_probe_device+0x4c/0x1b0 [ 120.773942][ T7395] __device_attach_driver+0x1df/0x310 [ 120.775786][ T7395] bus_for_each_drv+0x157/0x1e0 [ 120.777388][ T7395] __device_attach_async_helper+0x1d3/0x290 [ 120.779334][ T7395] async_run_entry_fn+0x9c/0x530 [ 120.781102][ T7395] process_one_work+0x958/0x1b30 [ 120.782744][ T7395] worker_thread+0x6c8/0xf00 [ 120.784498][ T7395] kthread+0x2c1/0x3a0 [ 120.785888][ T7395] ret_from_fork+0x45/0x80 [ 120.787343][ T7395] ret_from_fork_asm+0x1a/0x30 [ 120.789005][ T7395] [ 120.789005][ T7395] -> #4 (&q->q_usage_counter(queue)#51){++++}-{0:0}: [ 120.791628][ T7395] blk_queue_enter+0x50f/0x640 [ 120.793376][ T7395] blk_mq_alloc_request+0x59b/0x950 [ 120.795093][ T7395] scsi_execute_cmd+0x20a/0xf30 [ 120.796786][ T7395] read_capacity_16+0x21a/0xe20 [ 120.798400][ T7395] sd_revalidate_disk.isra.0+0x1a06/0xa8d0 [ 120.800333][ T7395] sd_probe+0x8ee/0xfa0 [ 120.801699][ T7395] really_probe+0x23e/0xa90 [ 120.803240][ T7395] __driver_probe_device+0x1de/0x440 [ 120.804969][ T7395] driver_probe_device+0x4c/0x1b0 [ 120.806664][ T7395] __device_attach_driver+0x1df/0x310 [ 120.808498][ T7395] bus_for_each_drv+0x157/0x1e0 [ 120.810157][ T7395] __device_attach_async_helper+0x1d3/0x290 [ 120.812026][ T7395] async_run_entry_fn+0x9c/0x530 [ 120.813665][ T7395] process_one_work+0x958/0x1b30 [ 120.815337][ T7395] worker_thread+0x6c8/0xf00 [ 120.816890][ T7395] kthread+0x2c1/0x3a0 [ 120.818238][ T7395] ret_from_fork+0x45/0x80 [ 120.819730][ T7395] ret_from_fork_asm+0x1a/0x30 [ 120.821354][ T7395] [ 120.821354][ T7395] -> #3 (&q->limits_lock){+.+.}-{4:4}: [ 120.823673][ T7395] __mutex_lock+0x19b/0xa60 [ 120.825297][ T7395] __nbd_set_size+0x2c0/0x730 [ 120.826844][ T7395] nbd_start_device+0x8fd/0xd70 [ 120.828410][ T7395] nbd_ioctl+0x21a/0xfd0 [ 120.829816][ T7395] compat_blkdev_ioctl+0x2f7/0x750 [ 120.831516][ T7395] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 120.833214][ T7395] __do_fast_syscall_32+0x73/0x120 [ 120.835451][ T7395] do_fast_syscall_32+0x32/0x80 [ 120.837482][ T7395] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 120.839423][ T7395] [ 120.839423][ T7395] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 120.841831][ T7395] blk_mq_submit_bio+0x1fb6/0x24c0 [ 120.843445][ T7395] __submit_bio+0x384/0x540 [ 120.844923][ T7395] submit_bio_noacct_nocheck+0x698/0xd70 [ 120.846690][ T7395] submit_bio_noacct+0x93a/0x1e20 [ 120.848274][ T7395] mpage_readahead+0x41d/0x590 [ 120.849762][ T7395] read_pages+0x1a8/0xdc0 [ 120.851152][ T7395] page_cache_ra_unbounded+0x3dc/0x750 [ 120.852856][ T7395] force_page_cache_ra+0x24b/0x340 [ 120.854776][ T7395] page_cache_sync_ra+0x110/0x9c0 [ 120.856327][ T7395] filemap_get_pages+0xd7b/0x1be0 [ 120.857899][ T7395] filemap_read+0x3ca/0xd70 [ 120.859340][ T7395] blkdev_read_iter+0x187/0x480 [ 120.860897][ T7395] vfs_read+0x87f/0xbe0 [ 120.862260][ T7395] ksys_read+0x12b/0x250 [ 120.863654][ T7395] do_syscall_64+0xcd/0x250 [ 120.865139][ T7395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.866964][ T7395] [ 120.866964][ T7395] -> #1 (mapping.invalidate_lock#2){++++}-{4:4}: [ 120.869377][ T7395] down_read+0x9a/0x330 [ 120.870727][ T7395] page_cache_ra_unbounded+0x173/0x750 [ 120.872437][ T7395] page_cache_ra_order+0x8f2/0xc80 [ 120.874096][ T7395] filemap_fault+0x14a5/0x2820 [ 120.875734][ T7395] __do_fault+0x10a/0x490 [ 120.877166][ T7395] do_pte_missing+0x1a8/0x3e00 [ 120.878692][ T7395] __handle_mm_fault+0x103c/0x2a40 [ 120.880381][ T7395] handle_mm_fault+0x3fa/0xaa0 [ 120.881944][ T7395] __get_user_pages+0x8d9/0x3b50 [ 120.883654][ T7395] get_user_pages_unlocked+0x1c2/0x780 [ 120.885455][ T7395] hva_to_pfn+0x8be/0xc20 [ 120.886892][ T7395] kvm_follow_pfn+0x29f/0x3f0 [ 120.888448][ T7395] __kvm_faultin_pfn+0x11c/0x1a0 [ 120.890013][ T7395] kvm_mmu_faultin_pfn+0x469/0x1f30 [ 120.891706][ T7395] kvm_tdp_page_fault+0x182/0x3d0 [ 120.893348][ T7395] kvm_mmu_do_page_fault+0x58d/0x690 [ 120.895157][ T7395] kvm_mmu_page_fault+0x20f/0x1bb0 [ 120.896807][ T7395] handle_ept_violation+0x25a/0x640 [ 120.898498][ T7395] vmx_handle_exit+0x733/0x1f70 [ 120.900065][ T7395] vcpu_run+0x2aaf/0x4c00 [ 120.901490][ T7395] kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 120.903290][ T7395] kvm_vcpu_ioctl+0x6ce/0x1520 [ 120.905345][ T7395] kvm_vcpu_compat_ioctl+0x210/0x3f0 [ 120.907553][ T7395] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 120.909848][ T7395] __do_fast_syscall_32+0x73/0x120 [ 120.912046][ T7395] do_fast_syscall_32+0x32/0x80 [ 120.914113][ T7395] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 120.916769][ T7395] [ 120.916769][ T7395] -> #0 (&mm->mmap_lock){++++}-{4:4}: [ 120.919748][ T7395] __lock_acquire+0x249e/0x3c40 [ 120.921820][ T7395] lock_acquire.part.0+0x11b/0x380 [ 120.924022][ T7395] __might_fault+0x11b/0x190 [ 120.925941][ T7395] _copy_from_user+0x29/0xd0 [ 120.927998][ T7395] compat_blk_trace_setup+0xc9/0x200 [ 120.930292][ T7395] blk_trace_ioctl+0x24a/0x290 [ 120.932383][ T7395] compat_blkdev_ioctl+0x13c/0x750 [ 120.934567][ T7395] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 120.936850][ T7395] __do_fast_syscall_32+0x73/0x120 [ 120.939043][ T7395] do_fast_syscall_32+0x32/0x80 [ 120.941170][ T7395] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 120.943820][ T7395] [ 120.943820][ T7395] other info that might help us debug this: [ 120.943820][ T7395] [ 120.947742][ T7395] Chain exists of: [ 120.947742][ T7395] &mm->mmap_lock --> &q->q_usage_counter(queue)#51 --> &q->debugfs_mutex [ 120.947742][ T7395] [ 120.953145][ T7395] Possible unsafe locking scenario: [ 120.953145][ T7395] [ 120.956073][ T7395] CPU0 CPU1 [ 120.958172][ T7395] ---- ---- [ 120.960284][ T7395] lock(&q->debugfs_mutex); [ 120.962089][ T7395] lock(&q->q_usage_counter(queue)#51); [ 120.965199][ T7395] lock(&q->debugfs_mutex); [ 120.967958][ T7395] rlock(&mm->mmap_lock); [ 120.969706][ T7395] [ 120.969706][ T7395] *** DEADLOCK *** [ 120.969706][ T7395] [ 120.972954][ T7395] 1 lock held by syz.0.262/7395: [ 120.974842][ T7395] #0: ffff888023da3038 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_ioctl+0xc9/0x290 [ 120.978419][ T7395] [ 120.978419][ T7395] stack backtrace: [ 120.980167][ T7395] CPU: 3 UID: 0 PID: 7395 Comm: syz.0.262 Not tainted 6.13.0-syzkaller #0 [ 120.982487][ T7395] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 120.985559][ T7395] Call Trace: [ 120.986581][ T7395] [ 120.987457][ T7395] dump_stack_lvl+0x116/0x1f0 [ 120.989069][ T7395] print_circular_bug+0x41c/0x610 [ 120.990965][ T7395] check_noncircular+0x31a/0x400 [ 120.992901][ T7395] ? __pfx_check_noncircular+0x10/0x10 [ 120.994982][ T7395] ? lockdep_lock+0xc6/0x200 [ 120.996784][ T7395] ? __pfx_lockdep_lock+0x10/0x10 [ 120.998782][ T7395] __lock_acquire+0x249e/0x3c40 [ 121.000603][ T7395] ? __pfx___lock_acquire+0x10/0x10 [ 121.002623][ T7395] ? bdev_name.constprop.0+0x298/0x490 [ 121.004716][ T7395] lock_acquire.part.0+0x11b/0x380 [ 121.006250][ T7395] ? __might_fault+0xe3/0x190 [ 121.007607][ T7395] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 121.009214][ T7395] ? rcu_is_watching+0x12/0xc0 [ 121.010578][ T7395] ? trace_lock_acquire+0x14e/0x1f0 [ 121.012125][ T7395] ? __might_fault+0xe3/0x190 [ 121.013547][ T7395] ? lock_acquire+0x2f/0xb0 [ 121.014905][ T7395] ? __might_fault+0xe3/0x190 [ 121.016249][ T7395] ? __might_fault+0xe3/0x190 [ 121.017633][ T7395] __might_fault+0x11b/0x190 [ 121.018977][ T7395] ? __might_fault+0xe3/0x190 [ 121.020352][ T7395] _copy_from_user+0x29/0xd0 [ 121.021995][ T7395] compat_blk_trace_setup+0xc9/0x200 [ 121.024014][ T7395] ? __pfx_compat_blk_trace_setup+0x10/0x10 [ 121.026254][ T7395] ? blk_trace_ioctl+0xc9/0x290 [ 121.028151][ T7395] ? snprintf+0xc8/0x100 [ 121.029804][ T7395] ? __pfx_snprintf+0x10/0x10 [ 121.031638][ T7395] ? sigprocmask+0x230/0x330 [ 121.033341][ T7395] blk_trace_ioctl+0x24a/0x290 [ 121.035279][ T7395] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 121.037358][ T7395] ? __pfx_lock_release+0x10/0x10 [ 121.039284][ T7395] ? trace_lock_acquire+0x14e/0x1f0 [ 121.041333][ T7395] compat_blkdev_ioctl+0x13c/0x750 [ 121.043283][ T7395] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 121.045444][ T7395] ? __fget_files+0x206/0x3a0 [ 121.047187][ T7395] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 121.049181][ T7395] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 121.051305][ T7395] __do_fast_syscall_32+0x73/0x120 [ 121.053380][ T7395] do_fast_syscall_32+0x32/0x80 [ 121.055558][ T7395] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 121.058053][ T7395] RIP: 0023:0xf70fe579 [ 121.059647][ T7395] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 121.065486][ T7395] RSP: 002b:00000000f50ae55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 121.068774][ T7395] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000c0401273 [ 121.071832][ T7395] RDX: 0000000020000280 RSI: 0000000000000000 RDI: 0000000000000000 [ 121.074327][ T7395] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 121.076567][ T7395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.078793][ T7395] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 121.081060][ T7395] [ 121.263690][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.267287][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.270844][ T12] bond0 (unregistering): Released all slaves [ 121.638206][ T12] hsr_slave_0: left promiscuous mode [ 121.640111][ T12] hsr_slave_1: left promiscuous mode [ 121.642558][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.645241][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.647654][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.649776][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.653821][ T12] veth1_macvtap: left promiscuous mode [ 121.655421][ T12] veth0_macvtap: left promiscuous mode [ 121.657000][ T12] veth1_vlan: left promiscuous mode [ 121.658499][ T12] veth0_vlan: left promiscuous mode [ 121.742893][ T5985] usb 5-1: USB disconnect, device number 7 [ 121.814914][ T12] team0 (unregistering): Port device team_slave_1 removed [ 121.846261][ T12] team0 (unregistering): Port device team_slave_0 removed [ 122.406410][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.445063][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.545560][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.585718][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.660583][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.715120][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.786601][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.835159][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.898280][ T12] bridge_slave_1: left allmulticast mode [ 122.900576][ T12] bridge_slave_1: left promiscuous mode [ 122.902605][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.905579][ T12] bridge_slave_0: left allmulticast mode [ 122.907201][ T12] bridge_slave_0: left promiscuous mode [ 122.909244][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.912525][ T12] bridge_slave_1: left allmulticast mode [ 122.914193][ T12] bridge_slave_1: left promiscuous mode [ 122.915818][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.918837][ T12] bridge_slave_0: left allmulticast mode [ 122.920638][ T12] bridge_slave_0: left promiscuous mode [ 122.923332][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.926824][ T12] bridge_slave_1: left allmulticast mode [ 122.928571][ T12] bridge_slave_1: left promiscuous mode [ 122.930229][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.934523][ T12] bridge_slave_0: left allmulticast mode [ 122.936610][ T12] bridge_slave_0: left promiscuous mode [ 122.938474][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.213434][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.217314][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.221085][ T12] bond0 (unregistering): Released all slaves [ 123.226929][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.230785][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.234858][ T12] bond0 (unregistering): Released all slaves [ 123.240828][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.245151][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.248807][ T12] bond0 (unregistering): Released all slaves [ 123.673017][ T12] hsr_slave_0: left promiscuous mode [ 123.676455][ T12] hsr_slave_1: left promiscuous mode [ 123.682018][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.684266][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.687166][ T12] hsr_slave_0: left promiscuous mode [ 123.688936][ T12] hsr_slave_1: left promiscuous mode [ 123.691826][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.693998][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.696379][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.698479][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.702031][ T12] hsr_slave_0: left promiscuous mode [ 123.703859][ T12] hsr_slave_1: left promiscuous mode [ 123.705639][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.707805][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.710071][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.712969][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.716877][ T12] veth1_macvtap: left promiscuous mode [ 123.718482][ T12] veth0_macvtap: left promiscuous mode [ 123.720416][ T12] veth1_macvtap: left promiscuous mode [ 123.722099][ T12] veth0_macvtap: left promiscuous mode [ 123.723709][ T12] veth1_vlan: left promiscuous mode [ 123.725217][ T12] veth0_vlan: left promiscuous mode [ 123.853741][ T12] team0 (unregistering): Port device team_slave_1 removed [ 123.885996][ T12] team0 (unregistering): Port device team_slave_0 removed [ 124.120321][ T12] team0 (unregistering): Port device team_slave_1 removed [ 124.151740][ T12] team0 (unregistering): Port device team_slave_0 removed [ 124.297920][ T12] team0 (unregistering): Port device virt_wifi0 removed [ 124.465552][ T12] team0 (unregistering): Port device team_slave_1 removed [ 124.495210][ T12] team0 (unregistering): Port device team_slave_0 removed [ 125.451428][ T12] IPVS: stop unused estimator thread 0... VM DIAGNOSIS: 20:16:20 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=dffffc0000000000 RCX=ffff88802301a440 RDX=ffffffff8d827198 RSI=ffffffff8d8270b0 RDI=ffff888021dbcb28 RBP=ffffc900047c7b28 RSP=ffffc900047c7990 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=ffffffff8d8270b0 R13=ffff888021dbc880 R14=ffff88802b53ed00 R15=ffff88802b53f808 RIP=ffffffff8b1b6db1 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b400000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000006b9cc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000004abbedc214 RBX=ffff88802b528400 RCX=00000000000006e0 RDX=000000000000004a RSI=ffff88802b528400 RDI=000000000ff8cea3 RBP=000000000ff8cea3 RSP=ffffc9000047fc48 R8 =0000000000000005 R9 =000000000000003f R10=0000000000000019 R11=0000000000000001 R12=0000000000000001 R13=0000000000000019 R14=0000000000000001 R15=ffff88802b52ca80 RIP=ffffffff814660c5 RFL=00000003 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020025000 CR3=000000006b9cc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000c000000000 0000000300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff81872e13 RDX=ffff8880221e8000 RSI=0000000000000000 RDI=0000000000000000 RBP=00000000000059ca RSP=ffffc90000548df0 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=ffffc90000548ff8 R12=dffffc0000000000 R13=0000000000000000 R14=0000000000000001 R15=0000001c16b45000 RIP=ffffffff81994880 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f46e40 CR3=000000000db7e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f73e3ff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85145395 RDI=ffffffff9a66e200 RBP=ffffffff9a66e1c0 RSP=ffffc9000e33f320 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=000000000000002d R14=ffffffff85145330 R15=0000000000000000 RIP=ffffffff851453bf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b700000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f6cdd4bcb18 CR3=000000006b94e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000