last executing test programs: 2m9.561924695s ago: executing program 3 (id=44): syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$rtc(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) getpeername$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100001041fea19cd198925533597d8eb", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x20000000, 0x0, 0x0, 0xffff5b31}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002500)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}]}]}}]}, 0x40}}, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000440)={@private2, 0x0}, &(0x7f0000000480)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000002ac0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002a80)={&(0x7f0000000540)={0x2518, r3, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_FEATURES_WANTED={0x1090, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x75, 0x4, "09bcf70eec2e6215756394fca1b0adf4674e49ccfd209beaa30cc55b935762664904092b97db142ba6a4de2983418cd8001587d0b14bf8ffccba1e34df0e86f58f2f6e5d837a19adad51fe9c7bc7ba394dfae2de5ad840e90023cb43872e9269355347f6392e9d47596f1dc906c2c32417"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x81}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}]}, @ETHTOOL_A_FEATURES_HEADER={0xac, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}, @ETHTOOL_A_FEATURES_WANTED={0x130c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x184, 0x3, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ')$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, '/dev/cpu/#/msr\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'fd/3\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'fd/3\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\xd2:\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '%\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf959}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffff80}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/rtc0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ',\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '*}{-^\xe1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'fd/3\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, ')&).\']\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '#}*\'[\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/snd/seq\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "4f6d2b73bee1b4e45813932d7c394d9a357670291f228128987bc8672b521d8b49ccdc27fbe28ecb77cbc23344469e17cec2aa9dabc54127aae97b2248ce1c1462c97ca27b4982b41e8c5403e838b650269e4ab8ae459ba2b87142a7331be834ab92958b7cf584f0ca6f5fc4114a1b183d33d0fcd27991ac8a8a31386972a0af5efd3e17150321676f3021ae63894a4e92f7869d4d28fd1ff563fb375d858b454846e91f3d7e73c4d2ccd352d6932134aecabf433a551610f87bae2f23d1dcd851e6b67682ce58417fa93dcaec88c10548657edfb788bab37219bc07455de6bdf0f44ee6cfd7dff4cb14f85f404d00a2a69df4ab48f3043ece5e4de460b458e4905ab8f957a0ee88a634c901a027f0e55d1265671be103ab74b94280555ba4b3b5ee49a45fe1b118516eb013db5472daec3d4a3138d9e406ff39dac238107b731c1ec07d56fe7f46700bc58bdde6979347c4441a3dfc4022273a73bd67134391ffaefc572aeb345cf9e65496d7cbee6ed27625ece6c9dd6ea7cb3f5858341c728a9d10285a326be995060f76290ff0304d4ca463b6515b556235cab3c78c38e424cc00ea720d22be2a2fa02b18fc1c6bb1e6c5be95a71c114514d69d8472e963f7d05cf7d4f0e8624d24d5513fad9a62929ca1e71ea05337e03d6bc41bd2b0f9652d8fb3306d64b0d9c702bd2eaf0e3d101b84e3155e18a07acdfb8509d4d6cf5aa0d48a9c5af45cd4777fd2e4db7c2ecfc6dc75880b4c20552bee10e0e3d75fdbed92ee4359d758d9cba3ee0a0f604e6fbe972e402afd4e2c779b0930c455dc21c176617b187b4e2bc5c88acbf98cbe84d9646930c57273ffa06ca3abe439e700733802fcf1e19935ba67eff6b5ad790870d81b79ab13cdd7c14d7fe9f456373aae9d21ce759454396aff839ef74beb35353bbced9b5a15d311295745462453f9c9ee1fad39057ae2b639b3ec7edc5e826f85ae2f0db0db306dd6d3460031c7fd477242b41997e780a5d8e7e89f8a2797c7cc2f70669d72ed7f5c3ec4df5df860d0b3b7ea4007c26801ebce4e662042f1eccadddc2d8d5913d4fe6042baf55784fa3bc2618822ea6d4e20d2182a09859a19e40fe0b26becd882a7a2a3c1b3ce15853c5f43e14dccca93f5da99a1e920c45acd4977fd0c497295d2e84bf1cd5042bea46706201fc96224d7dc573067fc7a166cbf55805749ac78aa283f24de1d183dd2bb091e4e19a7c9a20ccb9bca96fa66db53e3ff9d5553783bbc4a9a686367511437fd2ac4653b88d529d45bce437585e0d5fab27c948e142d37941a6a680af5b392ba6de1ca21999d063eddda6b183de42b1ced5c2db45573a0c62f10db0d7ec6af9a6469a9c28403ad9e356f043d2333590b92873fb2c0fd311c051215c5a8ef2661dc4f3378fcf6864eb40faa4404346a0946966af832b4b35a864a450ff1d73ceaffecb789b300175d5e25a63e49b9d0697e9968ff43eba444018e0155f611b9ffc815b811add4e6503e24456ab76c5bff96182d09355711ac499b4f4e530efdb7dcade61174530198592ede6cc7a1b9c51fc19a965ea9e0b12effc19c4ea009194add2bc02c4b8f04bb53ade3f5b35bc6563fa44596da82f0a3fba5848c551eadbb587621f66645ccabe9d821ff7f5562fa79f0ddd79206ee2938f004ece75bee7500a75a569ef83121d8ef416e5fe3572de0e16b8d3c48eb77c5dbdf503fe01dfd8792e81c456a5674a8184ce69a3f5bad31416b1003eca2f56da9b2db4501cea0e7c1aab2439b2867f0474a0064ddc1bbf22344a2543bcd720808733323e1a30fc1782131e6a03236e5cdb494a0074a9bdb1c245f8647188f2623eeb08b6eea01651a0dd72bd444cf2925c92126811f9d3a03386eec98c6ad3684161e6f579b0759802ff503a678cd8c8d3b1830ea2b4436c1ba10d596bb8db0b2d8a8890342e80a2ee8b631c10bbab399db815d80bc8437b5ad68ceee50b78968321f54f63c132209373a717324d9c3bfff51d6cd1cba05ca0cf4dfb13799fb2c96c666867682c3db14b4b4e9365525b20770ab3cdb45bead20047fdd1c0f3ef12d142a6902a64788ab0d9a08e4b50ebf41baa423e0ba53da0a23d99005bed71069601e976a20136dc9403ad7487138e32e92b13fb34a3476d5d7e9d8b692cffb3dfe921f4ba38613bce1a89319a7de2046585e40ceff3d76ce95d1acd04212f24c7b443a6bb3449da0280d257c8793634721099701724018da0b0847d956e4eeceb948875e6fd0b3002ef43b4dd6577b894a89799e317251b3e3a85e2cc2129c7f13551be917fcbf75bb2833f5e134eefc9278f381dc510972d35b76c399bc0990ec3a5d49d23d4863824e1f2d74fdf4209f7a548d54412b3e8f4c1dbcc02811120d4f8daacaa0163f5ff5770a657868f337802ca5371c593abe9565173617c201a77ac487b8717fd96b9383996fbc21e7e06ff1bf414a8c1e85908aabdf5a924c97d951de383174d17069a63bee96f90fe9b68091e310f0455c46290180613ccf15ee9fb4b4f28ecd74d01af98e82116a9de2ea4d2b85f1a1f929930ade82be7085387c3e5592259314ff2720785a5ed8e6baa0e89df5afaea414af1aea31453f8c22d837e833ebca1ea731afca9e2eef32960943509214555569c1ae55decbaead2b2d8860aa93829984db95118fc730201a9fb6c433211ffc0240c21b05239f870163f4e6f75fe19da89f45edbf852bb76e59fa83d575b6501a14cd63f913138ff7165ce6d570204235c4eb494e642a43f87ad1e08b5b2715f5b105bb1750107d3ac215af6604106b80a020cbd0f2445e283649be6e1fe7a85ae43b23d8ef413bd7ac05e14b81c78ff8b5646f9e5ae42265f50ce4033d68b021a040371a2dbf756f2c0255bf25a5fa467d7e273369ad7a52cae5736212934c51ec293780af259406e49094b430fe3c010e48189ec47814a9193691309c496ca404e6f888c3bff67d25c0fc0bbff0e87c5c2153cd5fd8f0cbd6236c5e09c3b3f75dc47fc5dc2d8152e2adc9644ff6fee883688d7525240dedfa2cc5d678285445541da704dc42745a8653fb62d4492d217fc8567f4c44a81e02d535ffd26aeae481f629db8d3e733eccc9ca36d6a3ab8b67ea25de825d9c089648ce388854c9a16286fde5cd77805ee191cda000164f48ea933aaa14e38970bc9f66b9d8d86be24439dcd561df7ebb72098607d2a136c887583817f88ebc8f6501460c891113adb5768c81b16733af0fbfadfa439c5e282c06b8a00e643fa114641faefae33a5f5eb496ea3410283fda8256f33b7d27d0eb5ce65967909585c526db20d3b68ec6adeda3abea5c516688526706010cb313e0f37df198ad75770f09d0ec511b36117edd82909d75c690808a15fa2b7d93cef0ec46902f79106c9f0d32bb06492091f361ea4be5aa5c892b50bfeb6a8c277c66cd7706dcc2fd15432348aa10785ddc3c69f99cbed8678056ea0920c9f1121b934c9558cac0d57d821d5bdf8c2b0d6c39bcc9f08c3089c990f6f261bb22d8a4367316c516ee911f15a6c5eebffc19900a05995d4a9be4ec64a296c59a76800a2731f96101184dd8b5f5defbbe22bb4a95ea524b2a8786d2eb4cd6b62dcc46d899ffc4f0abf55fad80f04a08225892102ee71e09b08b9f02b6c4ca23bf6663da802984892e92395f8899f176dae4d70b0b0e34d59aa367428aa7715ce762af442a1c8bfd8f0cc147726c55a46fb22d5453180eaab10d1ca27a64c9f6914b61b490a510ec3e18c89076f4ed278e78cf7ff8286df6b6c380f5fd33c263b9424b2eda0b00afc3fa5376bfbd805b34d7312c635f563bc5d34022d53f2f079bf9f5bafe8f375974afa43da4c24912e37de870df131171854c12b72b4c81abd58a1490d5c632ee14991d83f656cd6b8a0f682dc1dd77f2078b48177310089a37ec1e98596185e5a1f2bae7c299a26930845a0200500c86a075571aa1802cb59e69ae2335bac9d5a9c78f1c1bba845f0bf66da85f96e592682b54413f4e914b1f72a07ca4689232ec3afc5ba21d7da2fb2a48a7145cffe668ad4eab680ea0c31710ad5f6444262d645632cc43d1b4fb6efb1064bab79e3d65c2bcd1061f679841ceda595a0bb81c0ff1af31069913c3d9ccabbf68278f45fd6657a313cce728a5b548badcde81d4874c49451bd854951a4809f81b7eb7ea0b1560dcc827c48267e8ea1220e051eee93b4b502ca62c8022d10b73988120d5cf3b3f25c8b9bd758f774cd85d26a341eb96b8b2c55d0787f4f61c07f2bf121899712349d3b54137f8b28ccefa39e354b504a08c3bbbbb191295c95a0252fd43be097311d2ccba6b5a42a0ee4e96a9d74675f3da37fd5fb9e1abd5e8e0feab5605329020120e1c3f82e39ba31c755cfb80f94b69e7053d50483802ab823dc5dcced12760fe39e217187c356fd80dbe01ffb68504a1460a5ee5d35b4249b68f51b4ea291e191a88e1c7b4d3a9647ea84932c5703dc2512889f0d3df0841781468a8aff466f5d0bdd3293da62be9edb0bdd736c5e03c0443c20d7dc054c811b31b77ef8ed4ed8d353bf8c98c3315a77c46f7cd5cd3481dcc3434943c3d2a2e8b02fc05dec6b5f59cbdcb84869b18a96d5eed98ccb519b5e14bed5ef74401ca1d5a056b8bb6e587c1c1c93f24f713f26fd512ede7e3065410760e2adeef2e5175a928f52776cb6ac356120850c8ea3aac71f3634617d31bde9ee942b280015f072f23592d1e26b8a83543f53caaaf12edc0ef23b68677e07aa64fea115c8194686386c911bf7af09f753d66d15c0c072267cf89b9e9faa0a2129c737e36c0e5945f7656d02784cefca8c794f690fd138c3918440645d99d7a93d8355d3240491110758606af8b539c48fb91508371d3aa01a2a40b96847373b8fd71e4bb88e9d4186b26e22defdcc85ad2bbdc2598ef3e1772aabbd1a5a188a336082e46ebb3e5e109b49e62f3afb60e020fed9649e24b9af4ac37e460c8b876897643efc3a8ee6ac5453be08201de86003619d323829fa4a64eb1a68e3a1cdb09d2374075cadc7aeb73c9b00acbd7775ef83cffcf7f3f5ee57445531cf8eae6281d7be8490a0f7bad32890fd190906e15351b0fa6a5a0f3c5dc0bf27c2e409c2b5ffc2e6ac12a8731136c8a3cb9187258dbb90c9665e91e6827554d7b350ab20a07c1d4ae094be171429a8bb5b50cfc553c62cccc69bcdbd469300724e487dd549d7cd68fa869926ca8651953f5dcfc7673d97aa89c44910ac1f0eeb4c9a4e581fe3cd3c037b079d3c90509cf668b8c3433e1bdc947ead3cef02a8474f93bae2d2efd26dc2840f2029cc9d5eb2d8350580ab292c593fd17a779f160b41b38a7e1e1182f0f5e4af34ae8122db51d9be1b330a12ddc7366c6a18a2577e5c5c3ec03c18be2e4d79e179335239e33c47614a596064de7f210d447474611ced7ff0c0c9a36662d5b813b64c33afa48b9b5b56aaeb99492b669fd1479e8a3c5b2dc7ecd0c791cd9c3ffa65e5092f17a3def09dc50570f20d9973d7419f673de4c30279c37cae75d0c0e12138f9d21b73e8b1cba5bcfac0e5b7b3e45b85a6ea79453f63f07bc642cd398e034028757c0cc1acad290482be97d6859b5222fdcf9cd9b2ce688d05a0e1000cb5b1b806adf533ee24c525a49dbe39f7f028cb300aa71792700b369a1a25da660299e17af5271a2034224befb396862583708e1a37265c05b86b53cf3dcd6a3739ead297db45064343832648902ba5fed98557e96a028d6995397ec2a16b08bd1ec"}, @ETHTOOL_A_BITSET_BITS={0x98, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '}{.#\xac\\(\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/rtc0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'fd/3\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '9\x80\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '+$^\x18\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x11}, @ETHTOOL_A_BITSET_BIT_INDEX={0x1, 0x1, 0x8}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xff}, @ETHTOOL_A_BITSET_BITS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/snd/seq\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '@/\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0x63, 0x5, "2fe4902068ad348e9cdd465835e532750525c1b33333b79e5f4efd2bb50bcc3455b57100835ac216072d0e8f5b4dc4a506c34d1115f1ad8b24f2f6c20cbfb7d066a285fde47b9379475e55f92cc7e3342940dd936c405efbc85cb85fe2e370"}, @ETHTOOL_A_BITSET_MASK={0x4a, 0x5, "c1b968c73f3067903c9f40c8c4743d90fbdb17ae2ae5a2abbe90e36178bfead19ccaf75097d83ec1cf2a563e64f5e8d8cfb6c1542b73cf588f63f4cbd6cf201aeba259718ddd"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_FEATURES_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x2518}, 0x1, 0x0, 0x0, 0x40}, 0x4000010) r14 = syz_io_uring_setup(0x117, &(0x7f0000000100), &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r15, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r15, r16, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) io_uring_enter(r14, 0x47f6, 0x0, 0x0, 0x0, 0x0) 2m9.421791564s ago: executing program 3 (id=46): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(0xffffffffffffffff, 0x7ac, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x8000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x6, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000000101050a000000000000000000000000080008400000000008001540a2000000"], 0x24}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') mkdir(0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00', @ANYRES16, @ANYBLOB="01000000000000000000050000020073797a5f74756e00000000000200d000"/40], 0x34}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mknodat$loop(0xffffffffffffffff, 0x0, 0x0, 0x0) rename(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000280)='./file0\x00') syz_open_procfs(0x0, &(0x7f00000001c0)='net/softnet_stat\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000080)={'#! ', './file0'}, 0xfffffffffffffcf3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) socket(0x26, 0x3, 0x3) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 2m9.033925778s ago: executing program 3 (id=50): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000019300)='coda\x00', 0x0, &(0x7f0000000400)) syz_io_uring_setup(0x7540, &(0x7f00000005c0)={0x0, 0x0, 0x10100, 0x0, 0xa6, 0x0, r0}, &(0x7f0000000180), &(0x7f0000000200)=0x0) syz_io_uring_setup(0x20034f2, &(0x7f0000000400)={0x0, 0xd678, 0x200, 0x0, 0x239}, &(0x7f00000003c0), 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_ethernet(0x2e, &(0x7f00000193c0)=ANY=[@ANYBLOB="aaaaaaaaaa090000000000000800460000200000000100029078ac1414bb640101000000000000803b7800000000", @ANYRES8=r1, @ANYBLOB="2ec691b1a0b4282ef2e791ff337f3a3cdb6a5690bcf7a04e32ac89641b", @ANYRESHEX=0x0], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000019380)=@newtaction={0x14, 0x30, 0x2, 0x70bd28}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x800}, &(0x7f0000000000), &(0x7f00000001c0)) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x19) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000019340), 0x0, 0x0) read$msr(r5, &(0x7f0000000300)=""/102400, 0x19000) socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x141a42, 0x0) 2m6.139091927s ago: executing program 3 (id=70): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffcb8}]}) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3}, 0x10) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f00000003c0)='./file0/../file0/../file0/../file0\x00') 2m6.13883834s ago: executing program 3 (id=71): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) syz_pidfd_open(r0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0xc, @dev={0xfe, 0x80, '\x00', 0x32}}, r3, 0xfffffffc}}, 0x48) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00') r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001300)={0x34, r7, 0x1, 0x0, 0x2, {0x2, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_0\x00'}]}, 0x34}, 0x1, 0x40030000000000}, 0x40080) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0xc4c03d12, 0x0) syz_io_uring_setup(0x71d3, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000045c0)={0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000004640)={0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000080)) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000b, 0x8012, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4, {0xe1}}, './file0\x00'}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) r8 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r8, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, 0x0, 0x1, {}, 0x2}, 0x18, &(0x7f00000000c0)={&(0x7f00000003c0)="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", 0x1000}, 0x1, 0x0, 0x0, 0x40004}, 0x4004001) 2m5.811794792s ago: executing program 3 (id=73): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x324) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x11) sendmsg$802154_dgram(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xffff}}, 0x14, &(0x7f0000000080)={0x0}}, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f00000007c0)) r5 = socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r6, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000004200)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x207601a}}, 0x50) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r8) sendmsg$IEEE802154_LLSEC_GETPARAMS(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x20, r9, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4) syz_fuse_handle_req(r6, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r6, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="50010000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000109000000c2de6cd3ffd739f951556a4d3ba8b1d489caf518c439a98c3ec423441651d4ef8962300b755b00f76bd1f4fd6414e85ad456abc06c0b664ab2af7becd6b14b307e1a9c90f0adadf6d1274a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00200000000000000000000000000000000000000000000000000000080000000000000067726f75705f6964030000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000feffffffffffffff080000000000000067726f75705f6964"], 0x0, 0x0, &(0x7f0000000000)={0x130}}) r10 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r10, 0x0, 0x0) r11 = dup(r0) r12 = fcntl$dupfd(r4, 0x0, r5) ioctl$VHOST_NET_SET_BACKEND(r12, 0x4008af30, &(0x7f0000000080)={0x0, r11}) 2m5.747992117s ago: executing program 32 (id=73): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x324) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x11) sendmsg$802154_dgram(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xffff}}, 0x14, &(0x7f0000000080)={0x0}}, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f00000007c0)) r5 = socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r6, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000004200)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x207601a}}, 0x50) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r8) sendmsg$IEEE802154_LLSEC_GETPARAMS(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x20, r9, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4) syz_fuse_handle_req(r6, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r6, &(0x7f0000002140)="4627563e95d073e9c44031e486c6c3c887234dab29bb5d4444d206b6ed7b2b3001b6ed59a692ab0f0251ebf104d3747ab90777b96df4449e5275f86a62902df16f5fba75e202cbdf6fe7cc018a76b412f6485398037d6cb464f1dcf7fda3c76e43cdf64a53f6182a0b7e6476035e8bce74d0582b1ccf32dc8b0cc3b610b143afb4d3c163308a66f2dedd0d45f392d7899f5c4d2ded35c1602f7338dea29e0dff356a32c9e921eeebf8b9845ec2a40b68a8bdcb88009c910e110de23a02648667d740186ee2a3f4a59672477230c4a3a62a1417659b1978cf2b671f836d49fd361ad0af9157916d29cb4fcc1e873a336660b639383485a5322faca6694c74f58fa428582950bd136778dff61da52778dade8b2c3331b31a89259469b0900ab4173202f6256b2d23d3feb8517556292de52662192eca03da5744515c4a92cd3f0f296209bacb28a0267776c9797a784cfd95a52f9de496a5ed70459d55041b663a70d7d471da4f86cd187fd53e667422a0fdfe5eb34e2f2b8c133f2271fe5b1e71533b698169ac8107187533e37765fbd69c327ec608249c44018e3496b2f66fb8bb942f4bd26ed687ee1f7d2a53d7233fbde91cd03f4b4db0c23ed56ff9a61e0d5a1bf6ed50c308e8af0c32b2e0b15df009046ed88d60b772e0cdbfb3d765251aae01b01660df364dce51971ea2034b316a0b0071cb1d28bb86279de377ccb5a18ce981241b5d566e248866f280d71c6775e14fad44342945663bd56ad056f79e49f8071153391f8de78b05496a5f174e812ee0b102e0421c632e4a9f8ffd87ea68df1d7e85af4b30024b2a3cf0e1106871b3427eedfe857f3bc2a021d42fc09224ece3c56e57806a2da229231cc8e3ed5dbd82fd2d3894cba01e36c2ba91a42456eb570446fa3e2eddfe30264572d5d778cbf5d676ad4bd37d11e09573a5566b3656a760c9d3030b2bcd90be0d670866010e2d33c93f223a79ca167bce1a46670db33470c75776582f26b5d9ce847493ddb34612bc829f93f473c24263246011c4ca689f62f4539550ee13b246aeeec477fb2e9e4b223f66c006303abdb003809b9cd4e993b90821750b86608882355e5f587182c1ac6c677b07c26956073ff3a78d4f325139d9c0b8aead052e73fd21b3615ea22acc084bf5060f72936796311e31c038426f0a0e6c304cd2d9c363e7a1a21752032be17adca8b476b0e571b591c9dd923b0066fd5e32e045494c0a9e1e511f147988e0a5fe9652b92ed0e015ef54e3ed2a510b9383f1938dece777ca866f1a21082052827f3a48c2f38482fe3a8286c0ff17d4c24a468a5a0ec0a2eb1165f48cf76fc07450c82294d973a1793dd58008834f0d3aba4e097ceff0ba44656c67839ff3e489975297b334ecf6c7ce4634afbe3d8ab70827563aa75ffafc43429170c3fe3854238485c5a9b567a959a746010c22a92e863e318312e0efc06ab86d1435e06aca5f4b7b7f06a78f90795545c145c9941b74adb9a31ab4f749f81665dd9308acba8d7861856b548eab226377be82611ad79c8d25b176de98003c1ea28b556a2b90360913c39f8f64f0d122c732af5a990603429b354ecd4de797e17722c66546cc38349cb09c40ea54972562734e9816c83103e0bd19451e6144d005e6ce6d6d6fc1ce90238b73d1e0aaa4ee9fd0545054cea97639a404edf3b27c0073be84961084ea685e8ace53c7d7f52b62e378d9ee167aec3e5cbd60ff36c0d3ad40181bad59f111c30e9414112fbc71ad7ede21c288c878dd2509c36f93c31dab5d091107c8e8bdcadffdcb3053eba35b44c70a6421b343922cb11c69b886db0f412e5c23f89dbaff9e5847fd749e28356cab3999f1142449047a3a6c43bf670244e55d888f36ef1dc87bc5bb1460b6c8d1e69efca9a02ba834591906a65102c3e1c1c7dbdeccc7e261795f349d110836445d8ba19cbc699c46d4edc34942a488de1cc1140dc6acf23c8ec1f475e613c85ba025ff7ae639cb2499629eb5f5c88c4057e30bcf41767424af763c9204084856d87cd99f0da06ae6ee5b7382c1f6f2cbb2cf2dfd8320271f16ba7ebd8f0e3c742482f5426530b1ab946c7118f70aa4eac41dd78569341a0f3dd250531aaefdff4cab9e9eed7efdaa865f9b804ade79ced061a1fcd18a6c61a708fdf119841dc232cc5c4e5343cb8a82e9dd9647779bca053b5a2c43481c06ce2a593e388f5f5f4e681771021aaaf0589dac69db22c7285035d1eb89c75935fa4208b3786f2640ce9d65b0e671967dc27808fea5d17ac70a3ac2802f65d45d9c0372aeed530ee58bf04e190f50dac25139caec0b253d17af28eaed173c7043d66567188f04ea51733835c1c66ac7a634d7b90bdac4a6d1075bb277dc6ca420b24485012db44aed5a2e8099f4f3ed53bdb0b35b35905db28169b3e3b3d13ff94bdf2c9549f4a54c64b8d27098b86ff46cfd515f35b1d5a1bbf1bb29df16cdf296e804977a6b583d018c4fdb66264d5f2d9e162059017d6b6cbc6d6c2f1009717c67093f6feaafce1f242f4b730a2e714e9bba79f18c42a158425147b7b2cd9add4ac1d2c1a95b13a4f352d51982a5d967cd611911e6d0777afbc10883c6293f056acc69da89a0a64913be996466ed63f969d5ccd124cd3052d6654e6db0519449f3cbf3a2011541d26e5b76c3c192857905bcf989fd943d42aee9ebd40fee33094eae69154092e9514819ff126040ea7d43a927809149cfaffcc76cb1e332426bf0eb1ac1a3968c70030453a284a0fe39b9ebd704f0950cb5350d4c60d65566b3f24ec4636cd5bb3e23066f4d4f1814e60f286f3ad2d3c10e79c5991c8bf5fdb561723873fe0c75c7bb6ba262aa3a6655349df95f07abb0200d5b9152da4bfdd66a311b29a15755e8465b7b0d99f7f8ccefe9cb3561b5619d4c21b36c9b29442ccd5949882d0167244d84b677685d62074f63b8dc66941f317c78bb093491e2acb7207cc80fe51c22199aae878170af9fa1eb164854587007eb108f23d1c7946bf75aee50eee6fffdae24b992393bd37d268a136b3dcb1b7d2c9b9fbfe0c860b0d344f488e85de2a65a20eb057f0047d0b6b8898bdd68e21f2234a2c66b963a2d86f62297a7d1176c14acaddd4861f5bb74ee91eb3b6ba0c7328433b977e23c02ab67d82a12d620fc034f1c9c3a99a6a07ddf59eaa18384e429101dacbd93ee794e27b774242446fa433a8c03e4312ad56f6c4dfd1ad014d07932480e07caedabda36caaeaaf405dfa1a650843f2e09ae89c666ab8754d9bf9b290f4c4c9242d8f98533bfdbae191a6fbcba6bdb9096427d2d8efb5dcfbd58df7763cc445bf44a0be6de2335a395ab8157dee25794be81c3d87a7d457b52d88f86cabf91f2ec16a8e05a00f72277943737839a5242163025704c7b938f3f424ef5db6b60d3181e3ef94cbdc6516f0ecf01b52164b92f2e12ed55db595fd8de6862a3b12ebe06b19d1f93132b83b2f5ddbc9808b3ce8fa40352c84664d824edd2631a5e2fddaae887689092007d3d0f22a948f54bfd5c42bea5f0d6bf5018cee5ef232c8b6ea3f54ee6f4997c8ad5ccfd28227eeca811312375a849bdf4d343c1b0ec7035279d1bc0892ef193a74018d5ccd5ccaf0503a697b23abb44b7aa3beced0626daa5e1fbfc4d29d2804292fcc60b775f656179510168bf05929dbc92e009d94561d946f7b4b5a18c08d29678c482d90e07abb029e80546e5cee6c4a30712a9b92d556a29b2de021bd49b6398340a9363b689bedc007416bcb659c0c4b6eaa31ec4976ee4896ff87a7dfab48dc7046d44c9c2db6881f7d6b252e582eb878b0be9b24666e74e8eb565c07582f17817ea2422de5da79cb367e76b9b8a9d056de06ad0483986fef2a3b62d64d5d2128cf55499025ad0739ad3ce5e1bfa6aaac16828bdacad2f86b32ed933a2f672efd1f4a32dd23e59aed872d1015eaaf701a0ef8e1427d59728450c4f1bd561e7ef6f8e34d12ae2120a51746a5c346e739c09854caeec07af0d70dd4d9164b3ae8a098a41c081465fdb5537cb560426bc0de4b735f253dbc779b9dce429d99700cd6c0cbd778caeb56401b2bb5c1ca310ab0c91e1d9f4578b5fb3b4f0dad4c565495797e8e83603f3ef188a896fad5bfec24457e0f6f962b8613434f16acf74308171567eae5ad9ec11186a56493a5394042bd1b29fbe0ce64e5f1b0b56e8910343666d627d71c729c0c90bfae0134e117842d67b160ff50688f7b45f0ae330c2d4890732ace7795ff74b6e36466da623c8eef75528b22199c9bf589a1fcd2aca6c5fe3cce2eddabf1ddc8e87380b815ed5928222613383db7941eb9d55b45487b399a9a35ca4cbd9eaf08c71273fc3334b0acdbd117b13697a9ae475e79a44911ce4fed1490a2ec654fe469c9ea933999dae3616b063769446cfefb4562bd124e42f62a3dd0385fe3d21029ad8fd1c58b0badd42e415a76e3e92f246629d3579dd80d940e6dd9bee3d9a6ef8a7840fb253507e718eca32ff4119eb0bcc02aa210939a3bc41704a63202139c68e276254395ab6b858f4528ea2b3a57328e0b31816de3ad85e50e7f4ec9445eaf21a8b9916ed209bb7e79a7a08c2e4e09644ab831c0ba68d05d5ebf57a9eb36bb9caa8e7ac78a8ccca1bcb03cef0c5eb31fafa6e283632c117031aa3919f72aa80a2b9b2557749951348d5294ed2414ffcbafdf976bfb7a401bedb208fe1285738df515af493047aec962bcacb8ea7bad5fc12d5bf415e66c06c4c87044e694291e104ef53850cbc7ef73ab57982d77a3f941c226a915163e8eebd256cb8a1f0130023d2c5d3be77cab39bae4449711d6f39e50cc83eefaf6cc727b1c0b3fc4f7bd110d18262cd872cee8ca95f1be8005d5b339abbde923ef2d4290d5579e4420ff2beb705c16e96101c38c31cfd05639f252730c145182e4406aab68f556e0290ccf05e25a7bf13cdb5db47a8a0841fbeb880d4f0add608d1badb8992924b548ef1426ec774ec9d86678d4c2aae8f1e3b2dfb295802f75727a308dd1b39460f26858eff99fae8d27f24ea6902adabc89311a5fd18c3d9c606db7295f25acd22624bcc753c4c3acdb3f6c563174441333b69a126e4fcc6b06165f6221539c5ed277c20dac4b7978619e10616475de88810bbac714f3651efaa59b75791080a1086c0f3f1b5edb4b3976cc936665855f6a56788d76c6e771b1c968c859fd1ba995d336d301695fc012b8031a14ca529e3e9bf622db6813417925bb4e1a7a5b786aa90f4d048f1f442a2696970dd442d3a6ee117a3e768644c99951b75e51e98de61bc7ed8eb9e87fd43ec75e948829bd19fc545cddefee7a6f068a419e216982ca4ce6ad3256f1e64d203ba1da27e9e175738124ca86a312d0dd0caae6d64751d459d8134830ebb4f4c7931aa90c1ad6fefd99ea4ded3d246236719d6fd48979ee31eaabbea385e91aea0557a58d73a63660ecee981e3da40a39fec3f01caaffafee3504e9f8dc990cc2d69c513db25f6e722ea4811f778af8a338498b6b908682aca6e02e898cb65377f820529d35707cb83ba69b16c92b571728c58188fb08ed6f6c27d6b70e963b147605714468b90966f082d7175fcbc6e770835efb6e7bac5eeaeb5b2c23eb30ecc102e647f1ff71bc6b35f629a55dd305f8ed5287e35403a91b4dc77a6df2fff354460bf563c071846c84617da4df4c46a9e359c45d217a2b096c830ac8614947d110334ca17f587d86825b2b7ae1039fc11109687c1ad0a16f0180d1700414a4694e7ab73c715436dce437a9b3dff55f62fc1ffffc33d3be037c34c9ee7a0fcfeaec1778268565663f39b69c141304c892ae80da42cc854a87c955e6d8060a731eb16ee91e8ea27f90da85196e4f034d40b85ff59eb4b7c76218342f9c9f8d3749c874562829b7ad0c786c5c25ed240aa14755ff7f5ba5298f9f6b6ec3a46ac36d6a39c59c2ecf7781da77931214ac9a8697691d933b20cb64acde409fc159d748e4f92d83ff7767260fdec04b2e80cc524a2366e8fa5b70eb8684d164dec49fa95f42e7e75daa8c268204beec1fbc58cbbe3317af0993a8676dfdb13db7875f50cebdbc629bcd605dd4c4a65c31870495fb9a9ec51c1867ca8b117a6f9507aa26cee54c4c12f8f22b9d88072639ad765bb7906435128d1c146b9e2029880eccbdf78449bd0630381ad16c13444d709a11890d80fae0d24c037180a8726143306a7cd67abbc830167f524008f9a8e3172df597a63af2e87a92e90b70ce53069657f9b46acc9da241a1b00571540ec5fed4a9acfdd0066ba248cb2bf24540d7296256d4c9a5a5bc821817ada912cdde59876d86d4c53c1d047c6bc3442c2ee78326d7c51b6d01bd4f7ff5bc45db88649220d44099b406ac2e4744996b869ea688ecb4e758e755b29717869d5dfccbf5fd553ad83de0c4cd16b3fd4913451734226e4cf29bc0a860943b3e854d8cf49f07d2bfba1c280efaa85bb8f0f8818d1e58178c338c9e46c873adc0a4b6c832aaf0878956d8a04fcc043ff307f60a263cf1bc57ad0434b6a6f99075d932ff75deb8b017cbd16b272139a4addc24749d9551ba44d5bef0536e58de5e9d0b8985f1044163d542859c699f27f033b01d1e5d4c5598bcc4279f29c56eca82cf40c3b2799277e9b0aea04ba5cdd679e3eb63ceb0eafc21c373356caadc0f5730054a0979d7e32117962af0444b7e0e75bf1d30fd1af656956367bbbddf018531833f6c383b76cd63d014c91f67b41548e558cfae6a953a78c36ba3a896b3a0bf48aaa947d042a456a48c8f323682f560f2679f53578f00746cb04c4ef12b905b37f1b1bac9c75a85d6f173d531198f150ee6dbe7fcdbed4e0baf7610b82a793c17124970924ae32c86f9b7b40a229219958cd2445fca613e264adbf29644b1f405c68ef8afff7f4c1dc86f0e578e3716fa86c53f776dc42e7d28978f1e694428560b923b5d44e3aacb18cb38d3efd90ca0812027d336b011557e9e953cbff769e9ba84b903f5fcf1e6b4ab3e210ceaac574f80607116b196b6ded8668729f9be216bfdd049e88d1cb45581701c6ca7c991488a73e6ae5decdfc6416fa69b76f82e92246ee2b29c91885be24e96ea72438499c5c421ffd199f172667adf7d257947bb47945817930a7f2f0dfc73c2a5f6002fd40b9ea51c4a0c610e9759d43c082ed0c126c0de63c5a079b4c8bac46fcc8a1f74d8929ee2b7878430e3caed5f5aad7378fcbc4d659144a7cdbd654185ffdabd9b36257993ca823990df4aa7809ee58b7a278f38085202f3618fefef67f71b39f8ed35a28b3ff47e6caa3cecdbb41b899ea7ef3179ec3d67d0e3380f61d5a57453b9b790d171e1838c68f988a6914f4b81a7a12a0f50612182de8844a5f18026bc4110a10a31a88dae4bb40a3fea22360830784cf82ccde8187d04635e7e5bc6cda8252fa77d7022ae5fdeb978315f925cdbe7cbe0e3894965795fda4b94068bee89f79f86c420b211411929b9b3074703583c0ba0703a4d282441495110dd167c228079db163febc9ea0bcb02ab400999abfecfbca274fca55a055859eb256fcddc1d1773d72d5c3793ca3ff5f2fbe647b04f5ff2b2dc50a3a897e03634a36d21e391e6b6290cf85064711600de9a74057b78d9c04857017bc762300872f674eed1b68fac65025f3252bb803a9ff8ccf4b2b49028622168439db3bc01ea9ae7618b73dc7f858ba388891da14b88f7fee4f5f49abd687ba947969b8b923c2e119fe172126835ab4d1429133a38bbb80f1f6c308ffd180a179c05d9fb112a70e7658f9e3c7b6545556726e6589ba479edf21afd08da62963b5b724fa7b618c27fba201297dd465217de92395734355e9b34e27ff4916d78dbe0424df3d6110297a7847efda2675f12a3bf5e4b07827cdae6c61b0d969f6bb15be656b394a3f3ca8d705a4cac9c78c66c4be58c40888d49ceb08eb9a90c230faace7e4c837a8cb1aa69b020f9f43532cb7315cd698dfffb0179fb24e135480af4c437170c010e6e8f94108523dca95598c59b9e483753b79bafb02a455ceec727fd271b4cb4af7d958751a747afe6625c1e8b0316af5e13e42dc8d97dc42d5960edcaa391164693250a6f98653fa20c78823e1c1a77b798491f197a647b291cdd04087b3143e5b0fc550ecbbff19666b1c8e2a5bf2cb40f9f54c11828a8dd16489f36583e3128cda7a9abde8abbf61294450af638f56444176b5a11f84e67e4e666d6df58c45c0adc45938a2639fb1717a44c8dedf8471ac82fc1771a704f778fb812acb953493a831be5b28b16b20a112aafcee4e44640a6653c4b3035d5de4fcc16312057046bc3c650057dd9be4450b3e837ff8ac19019e67550a124416d671ccc76de36946c2d91f3d63b212111f4f09f39c24c1a981a7e63dd37a8d94ebfae1df5796d971193a8c723f172a9266af23d1d0e48aae73de4e7545a13f09a1ae3feb147ba1c700776148f027abc7dbdd1f3cb823b9a4c0e9dd43fd0bc411dc3eac2369f10fc9669ffaec5ef76da6b7f8884430b3a00da63a0e5272de159ea047584f4804a14159b1321309db45c55af563081d126300dc3ac446936f6653db92fc09d225716f425997dc247939b8c1e09a11f8b10c36b671cc590922051871ce19f6db85eefac9a666c3cec6fd5a69e7610ae5123413b458024b02521420d8c50c265d7b763f070b8fd1981824da47079135a667ee2395e43cae172e6a5ae96aeb7ce490212792498e427b80036f52cc557d3f94b118b2248af9a75a6d27d084ba423edc616981864cb0069a06f359a953a6e7df6b765d222626030248253e4e93eb0979b0a5550ee15d1489f56cc1d30b1584f37b51dfa029af5b45a85b141f4f8ffdc809a19e01f22f80c8a11e9d35f790a6de2d898462a19f412de4df26896a3d107baa7a661b5482cd71453b5f88f889b93ee6df84363ecaf04cb0dcd4369f9d1a827b955182334a998e8f2edbfe74beb14e9ff50134f03d24d70b068801684e25370c1cfc065d88582389713500f974e8a6c6e7f015b8e84e5b9861e45d4ce4eef79f0e8d4f15eaf7c1b33e64287470b5b3c0b8b6bdadae567f977341b57486c1eb279be8ee1cdf11b6e0dbd42d32c95b6801cea98e6000ea80777c6ad3f62012732859497080b3aa127a0f3a7b80a99182406ccfd54affb463f8eaf01b0c65ab582628b3c2237d039ee68d307dd113e4b593b243bd64eb6f58a0ccdd8e9a78f9ed393e2affde8d616d57c7aa1d12ebb4be718b49843ec6a90d5d8c197f154f27805046c410d4e1b66cbf4a8e495a3a229a2a1d58b4909a240d7ae6ea9e740c055b06e756e57e2ff19c148cbaf37357c0d3273b7f2ec631565e9f6c6c8722ddb0c1180695fb204f35917dc2fe11469801c545b2560a59d0666ec129b88e4f427989e820982329c2c39321f25648666af651f87b495195a95a5d158fd161324796272303114d99d22890385853dbc66d37ce22de0db447260217cf51aaed240e4f4963ca7510522fc6e7dbe164ccdedc334787ddb24bbc8205bf3353d447a1de2407c248775fa7e318d83e3ff18150b3cd9a7cbb0df0703aab6ef8d0f71bf9b5a305dc25fbd200e06b73c7f298320bd90dab05ec62b5f885e7cf95274c656051c71628f31196354460b001b6366c26fd2e92f6ad68ea37d7e3fe91fe98223563b4d23f802b3911a5241a793cb9f5b4f80081ace5877f95da7499f728ab09837120ca75c63d725e46f9f77c3da16318c9bcdd4a9d68379b627c1a71a34b684e5614ab3fabceab8d2741aca921b1b018098060686c56d7ed190e7470f529f6e680ed72e749fe7c9c2f37ea8cf08d4520e496361d2437018bbda93396c05abb2aeba443ea1ee56a3da04a8b880452a3610cb4163154e02df8a08a5e48c03fb0b0cdd4d355142cc736b344b9fd987b49b85791e5bf7805250dfe63b04c7ff56608129ef43664aa2acf82f18b49cdfd2ae5551ea4d486b35cd2ea60e3f032c58f531d4d36054f5ce268a29862ded0a3cc0ff1d30882f7c85b95e9a8599bf1d143d2d25555bbaa6f8b673b76ca8cc17b693519194784833d902581fec4e656ca546eade53abfd7e4650df648cb61a146bef5382f9255bf4a7c380854568495bdb7b33f490d240ead3d1851ce3b6400eda5a370f13ec998605f46b234bc9293c026bd1d648647bf52d506deb522012ae89c4ea75414ae6677c4aef28dd756f877af23d1a5ae3cb2205850c14f27f595d1a1542bb1eaf641293e3ba40e0bb54193a1e5db969d37c97709efbc34ab509f08a51ba71ecc4f9f66c27190115948cffaae914e7eb4e8d0c59ef7368e9b08a05bbbd340e1c1d34319f150d299c0ddf3bb2138359e826f4997068b99d13cc454fea46b8664d413b79b19656d62cbb5b31744aa33f99651fa56703eaec2e6998c7321f69f6cd110c89ae0c612a96f9a84dd751fd81ff66c80563e7091f5c5b67f89d52e7c58eb26218cddeaf5c6def3ad07a610bd4e5785675580c199b8550cbb02e3b4e1d240bb8df8e514fb505f39fd222209584331bef5d271056accaef84c88741ebd9f116cce3fe7b07b78ac4bad346c0d6e71c9daecd8d60aa8ea0914f85c9078dfaff04ba5e9bbbacddbc0cb40fe20f869d7f196c5edb6657c50b82c67f1abab663bff0a8da16422fe31a4a17995ee25081a06154d1c03f1a87a9d4ad5141a9227849bd920d2515ca16a245b635c85a77884cce0b8ae56929b5e22c52f971c2eed4ccfd64f7790a616f719fc0305af71405abae9407ed1cdaa26606331fdcf9b3c19b90e561f646ea15e0e668ef37b349594a335baf26962b89ef33c98aec3ca3e7df47c20dc2928d074e5f87c0edcf37cb25d3b8304f57f8257a5ae96791697e3c6d04f4ec2eb6a69f25346defed5b509368dea2b1960218bc6dd21b567583c229fc7b5fc85f7f2032eb304c3a1f72204f75ee950344cdef846d94e916b29a43d00c789256810de5fff6f9fd1af0fcfc2edd3fff9e2010d88083fc0b9e6a291e9a7a08af62433689a39e34bed8dafc90fec82be5c63a843d82132ce8916e395791dc86c8d11caf57f7fd096c28537ec38d6c14df9782312abc85fba2d04b0b159637b0e09f7e9faa1a6136359d17cf7c58b83994d58674ddbc248b804a82156900ca95a5002ef62de046e2f5ddf8e1e19f00189d4f5169bfc3c67afc149c6bc155767e64eac433cfb787be7f7bae7f869c0ec3d142668c2f90d383af7207a635850c515d69c6a62e24e0d58c5da244a917a17caa6be01992c4f8be0b9fff57522db4756840bdf72cafa6061ff2b86305c180c470b3af589e7c9e5328d98cf737bf01d80762e1e41a4d63a8655387be7f295862fdea629aa97b40c2ba1b563f1a103a860f7dff7fd5ee8423ce3dbf0fad41b66965c67299e35483130d461ac6c68215850fd441323bb856cdf03f624520743f7b445641c72e08994c8f252fe179b29226637b533f0ed6c94a0b84efc1a884af940fbc05c654b59d37a54047de233c496103bb27b657e7f63c24ef3ce29709622f67653f398dc7c4e44", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="50010000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000109000000c2de6cd3ffd739f951556a4d3ba8b1d489caf518c439a98c3ec423441651d4ef8962300b755b00f76bd1f4fd6414e85ad456abc06c0b664ab2af7becd6b14b307e1a9c90f0adadf6d1274a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00200000000000000000000000000000000000000000000000000000080000000000000067726f75705f6964030000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000feffffffffffffff080000000000000067726f75705f6964"], 0x0, 0x0, &(0x7f0000000000)={0x130}}) r10 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r10, 0x0, 0x0) r11 = dup(r0) r12 = fcntl$dupfd(r4, 0x0, r5) ioctl$VHOST_NET_SET_BACKEND(r12, 0x4008af30, &(0x7f0000000080)={0x0, r11}) 1m7.511074832s ago: executing program 4 (id=508): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000004000000020000000000001104000000000000e4ff0000000000000400000000020000000000000402000000020000000000000e0300000000000000000061"], 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) (fail_nth: 5) 1m7.12957977s ago: executing program 4 (id=510): socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48) r0 = io_uring_setup(0x7932, &(0x7f0000000580)={0x0, 0x1009a15, 0x0, 0x0, 0x173}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x71, &(0x7f0000000080)={r2}, &(0x7f00000000c0)=0x18) r3 = syz_io_uring_setup(0x4672, &(0x7f0000000480)={0x0, 0x0, 0x6, 0x1, 0x2c5, 0x0, r0}, &(0x7f0000000500), &(0x7f0000000140)) io_uring_enter(r3, 0x567, 0x0, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x20000000000001a1, &(0x7f0000000040)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x4000005, 0x2, 0x13, 0x2}, {0x5, 0x5, 0x5, 0xa}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000280), 0x0, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r4, 0x80685600, &(0x7f0000000380)) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0185647, &(0x7f0000000480)={0xa10000, 0x401, 0x5, 0xffffffffffffffff, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) timer_create(0x3, &(0x7f0000000040)={0x0, 0x27, 0x1, @tid=r5}, &(0x7f00000000c0)) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000018000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) 1m1.077222312s ago: executing program 4 (id=510): socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48) r0 = io_uring_setup(0x7932, &(0x7f0000000580)={0x0, 0x1009a15, 0x0, 0x0, 0x173}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x71, &(0x7f0000000080)={r2}, &(0x7f00000000c0)=0x18) r3 = syz_io_uring_setup(0x4672, &(0x7f0000000480)={0x0, 0x0, 0x6, 0x1, 0x2c5, 0x0, r0}, &(0x7f0000000500), &(0x7f0000000140)) io_uring_enter(r3, 0x567, 0x0, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x20000000000001a1, &(0x7f0000000040)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x4000005, 0x2, 0x13, 0x2}, {0x5, 0x5, 0x5, 0xa}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000280), 0x0, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r4, 0x80685600, &(0x7f0000000380)) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0185647, &(0x7f0000000480)={0xa10000, 0x401, 0x5, 0xffffffffffffffff, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) timer_create(0x3, &(0x7f0000000040)={0x0, 0x27, 0x1, @tid=r5}, &(0x7f00000000c0)) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000018000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) 53.700451036s ago: executing program 4 (id=510): socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48) r0 = io_uring_setup(0x7932, &(0x7f0000000580)={0x0, 0x1009a15, 0x0, 0x0, 0x173}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x71, &(0x7f0000000080)={r2}, &(0x7f00000000c0)=0x18) r3 = syz_io_uring_setup(0x4672, &(0x7f0000000480)={0x0, 0x0, 0x6, 0x1, 0x2c5, 0x0, r0}, &(0x7f0000000500), &(0x7f0000000140)) io_uring_enter(r3, 0x567, 0x0, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x20000000000001a1, &(0x7f0000000040)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x4000005, 0x2, 0x13, 0x2}, {0x5, 0x5, 0x5, 0xa}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000280), 0x0, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r4, 0x80685600, &(0x7f0000000380)) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0185647, &(0x7f0000000480)={0xa10000, 0x401, 0x5, 0xffffffffffffffff, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) timer_create(0x3, &(0x7f0000000040)={0x0, 0x27, 0x1, @tid=r5}, &(0x7f00000000c0)) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000018000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000003516c16bf212a77093fb6a44cdea8b9f99d90ba3acffddf219247c26319bc213d1c5b3bcdc5d2dca30cd2b3acc21cffe3a81db35bccf5aa55bb73fcc8c349435c6063bb119a530a3d4b8ef0a7e00aaaec3759a9c976521e6c260449d39248984b4eca10814ea1d825f8622bb69044333ae1ff333d04bf8d8727900f1c8474aaa7d905abb358721e607fb1bfc1d80e181d9133cde1cf584a1da20d72dd41501bd28b960a77aec73ae6250f40a8bd814a846a588334a4b92c775d6180f22da0965a4c72bc013f5f9b1f48425f89bf280060c00c1ba8a12b5845366ea9227937d25c860181321bc78c0fcd7c76e68"], 0x50) 50.749051451s ago: executing program 1 (id=604): bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001c00) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) r4 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r4, 0xab0a, 0x1000001000104) ioctl$NBD_SET_SOCK(r4, 0xab00, r3) ioctl$NBD_DO_IT(r2, 0xab03) close_range(r1, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 50.214084296s ago: executing program 1 (id=605): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=ANY=[@ANYBLOB="38010000100001000000000000000000ac1e0101000000000000000000000000fe8000000000000000000000000000aa00000000200000000000000020000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb000000146c00000000000014000000000000000000000000000000000000000000000000000000000000000000000000fffffffff7ffffff0000000000000000000000000000000000000000000000100000000000000000000000000000000004000000000000000000000000000000000000003800000000000000000000000000000000000000000000000200010600000000480003006465666c61746500"], 0x138}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) 50.141309602s ago: executing program 1 (id=606): mkdirat(0xffffffffffffffff, 0x0, 0x100) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r0 = fsopen(&(0x7f0000000080)='v7\x00', 0x1) fsmount(r0, 0x1, 0x89) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) io_setup(0x10000, &(0x7f0000000480)) io_setup(0x3ff, &(0x7f0000000500)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000ac0)={0x3, &(0x7f0000000a80)=[{0x48}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x16}]}, 0x8) sendmmsg(r4, &(0x7f0000003180)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000c00)="26f2", 0x2}], 0x1}}], 0x1, 0x0) setsockopt$inet_int(r3, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) listen(r3, 0x0) setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @link_local}, 0x4a, {}, 'lo\x00'}) ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @broadcast}, {0x0, @dev}, 0x8, {0x2, 0x0, @empty}, 'lo\x00'}) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000180000000000", 0x39}], 0x1) connect$inet(r2, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$PPPIOCGFLAGS1(r10, 0x541b, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x3, 0x4c276491]}, 0x8) 49.169398883s ago: executing program 1 (id=611): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0xfffffffffffffffd, &(0x7f0000000340), 0x13f, 0x9}}, 0x20) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000007bc0)=[{{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001900)="a9cff3", 0x3}, {&(0x7f0000001980)="5fb3450effde69bf04e3e44a973930e0b6f397ee7a964d6dbf627acb2d9426f6a9b00bee1bf4eb68838680", 0x2b}, {&(0x7f00000019c0)="48c2c8557113f61ff1aafba9c7e66173164c8ca0c15cbff5683fb4ddb6394595afbcbaaa377a4a5f830744e047edf851d62a66716dd1b4267d5ed18eb9f5c4f88793e82590b71922e22ef06265309b871cba49e7299e2c090c02bd10630588bdc3466f4f5bb8578a26c37021bbb564f50e373543dbd71abbcbe8e6e7bb3b26a9dd2f5ed56323a0055e2e30ed595dea33087b6392a8cabc9e5a07b064e79c7528a81ab8d7ee7aa5ff27ab7c51", 0xac}, {&(0x7f0000001a80)='Tq', 0x2}, {&(0x7f0000001b00)="696c6a7b5ea3afd7819ee415dbdde5557921387803db572c10968b2e1fcb5d68baa44bba", 0x24}, {&(0x7f0000001c00)="5ca5b1dabcc26ad25d615b05179a9fd11e6653791ad22b90c11d51d82c5339db07573325f2a50b1f39be84a4ded40063e6538f23fbbb6e35546898cd11f3aed21d065dae1ca8fe6f98feeab1efe708ae36e99ef9540324c582f7f497944e4d88c571328536fa3082092fe0866359247a8cc4fa868e328224411de12869db981383d403e97e958db40152d168b100a3220ec4a243377a0dc1be323e588ac346ed86498d1878e5c8dcc063812c", 0x7fffef00}, {&(0x7f0000001d00)="40a39684f731a649fe952deb2eff7fae7af9f2e92ddb69833700fafb1c2de6f1b92ec4a5299ce1da382c", 0x2a}], 0x7}}], 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000100)=[{0x0, 0x0, [0x4, 0x886, 0x0, 0xffffffff, 0x6, 0x2, 0x6, 0x1, 0x3, 0x8000, 0xa, 0x8, 0x6, 0x81, 0x80, 0x3]}, {0x70, 0x0, [0x78, 0x1, 0x9, 0x8, 0x9a, 0xffffff00, 0x4d3d, 0x6, 0xfffffffb, 0x6, 0x9, 0x8, 0x40, 0x0, 0x7, 0x9]}, {0x5, 0x0, [0x5062b237, 0x9, 0x6, 0x760c, 0x4, 0x7fffffff, 0x4000000, 0x2, 0xfffffffd, 0x0, 0x6, 0x1, 0xfffffffc, 0xe0000, 0xd7, 0x4]}, {0x5, 0x0, [0x3, 0x1, 0xfffffff8, 0x71d, 0x3, 0x2, 0x51c, 0x80, 0xfffffffa, 0x4, 0x7fffffff, 0x9b, 0x3, 0x8750, 0x4, 0x794f]}, {0x1, 0x0, [0x8, 0xae7, 0x2, 0xc7, 0x0, 0x78, 0x82, 0x7fff, 0x401, 0x34, 0x4, 0x66db9485, 0x8, 0xba2, 0x2, 0xff]}, {0x10, 0x0, [0x4, 0x8, 0x0, 0x0, 0x7, 0x1, 0x1, 0x4ad, 0x6, 0x9, 0x9, 0x8, 0x7, 0x0, 0x6, 0xe5df]}], r3, 0x1, 0x1, 0x1b0}}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'macvtap0\x00', 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x25840, 0x0) mount$bind(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x20000, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@ipv4_newroute={0x24, 0x18, 0x113, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xf, 0xff}, [@RTA_NH_ID={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r6, &(0x7f00000000c0)='./file0/file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r8, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights], 0xfffffdc8}, 0x0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x8914, 0x20000000) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r10}, 0x10) close(r5) 49.035428336s ago: executing program 1 (id=612): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mknodat$null(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2000, 0x103) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0x58}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) (async) chdir(&(0x7f0000000240)='./file0\x00') (async) mknodat$null(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2000, 0x103) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0x58}}, 0x0) (async) 48.501503062s ago: executing program 1 (id=614): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="ec4039e0aeb22892ea3ff7846c24f5e1aca57f9f6f1b99daa23ece57888270b2d79833c1952ff00f573a90f6643581db85563fa572bde468a20ea88b72edcf564ad8cb1b7cd01203ace643152f5a4c61706e5632d06428623b03b1f9021a4fddefb57c5faa38f339badd9da0496383d2a319881581db25cf75c4cc25a679c1531de947244f2c3256b7eb205ee8f3c3fa1ce0e110e2d5f56cd28717d30d223b04d9592de4e5a8", 0xa6) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001ac0)=@raw={'raw\x00', 0x3c1, 0x3, 0x58c, 0x3b4, 0x9403, 0x0, 0x3b4, 0x2c0, 0x4c4, 0x3d8, 0x3d8, 0x4c4, 0x3d8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @mcast1, [0x0, 0x0, 0xffffff00, 0xff000000], [0xff000000, 0x0, 0x0, 0xff], 'veth1_to_bridge\x00', 'syzkaller0\x00', {}, {}, 0x2f, 0x0, 0x4}, 0x0, 0x28c, 0x3b4, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf4}, {0x0, 0x5fc, 0x1, 0x0, 'syz0\x00'}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xffffffff, 'system_u:object_r:devicekit_exec_t:s0\x00'}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @private0, [0xff000000, 0x0, 0xffffffff, 0xff], [0xffffff00, 0x0, 0xff000000, 0xffffffff], 'ip_vti0\x00', 'erspan0\x00', {0xff}, {}, 0x6, 0xc, 0x7, 0x40}, 0x0, 0xc8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', {0x1000000}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5e8) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="ec4039e0aeb22892ea3ff7846c24f5e1aca57f9f6f1b99daa23ece57888270b2d79833c1952ff00f573a90f6643581db85563fa572bde468a20ea88b72edcf564ad8cb1b7cd01203ace643152f5a4c61706e5632d06428623b03b1f9021a4fddefb57c5faa38f339badd9da0496383d2a319881581db25cf75c4cc25a679c1531de947244f2c3256b7eb205ee8f3c3fa1ce0e110e2d5f56cd28717d30d223b04d9592de4e5a8", 0xa6) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001ac0)=@raw={'raw\x00', 0x3c1, 0x3, 0x58c, 0x3b4, 0x9403, 0x0, 0x3b4, 0x2c0, 0x4c4, 0x3d8, 0x3d8, 0x4c4, 0x3d8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @mcast1, [0x0, 0x0, 0xffffff00, 0xff000000], [0xff000000, 0x0, 0x0, 0xff], 'veth1_to_bridge\x00', 'syzkaller0\x00', {}, {}, 0x2f, 0x0, 0x4}, 0x0, 0x28c, 0x3b4, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf4}, {0x0, 0x5fc, 0x1, 0x0, 'syz0\x00'}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xffffffff, 'system_u:object_r:devicekit_exec_t:s0\x00'}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @private0, [0xff000000, 0x0, 0xffffffff, 0xff], [0xffffff00, 0x0, 0xff000000, 0xffffffff], 'ip_vti0\x00', 'erspan0\x00', {0xff}, {}, 0x6, 0xc, 0x7, 0x40}, 0x0, 0xc8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', {0x1000000}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5e8) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) 48.453667407s ago: executing program 33 (id=614): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="ec4039e0aeb22892ea3ff7846c24f5e1aca57f9f6f1b99daa23ece57888270b2d79833c1952ff00f573a90f6643581db85563fa572bde468a20ea88b72edcf564ad8cb1b7cd01203ace643152f5a4c61706e5632d06428623b03b1f9021a4fddefb57c5faa38f339badd9da0496383d2a319881581db25cf75c4cc25a679c1531de947244f2c3256b7eb205ee8f3c3fa1ce0e110e2d5f56cd28717d30d223b04d9592de4e5a8", 0xa6) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001ac0)=@raw={'raw\x00', 0x3c1, 0x3, 0x58c, 0x3b4, 0x9403, 0x0, 0x3b4, 0x2c0, 0x4c4, 0x3d8, 0x3d8, 0x4c4, 0x3d8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @mcast1, [0x0, 0x0, 0xffffff00, 0xff000000], [0xff000000, 0x0, 0x0, 0xff], 'veth1_to_bridge\x00', 'syzkaller0\x00', {}, {}, 0x2f, 0x0, 0x4}, 0x0, 0x28c, 0x3b4, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf4}, {0x0, 0x5fc, 0x1, 0x0, 'syz0\x00'}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xffffffff, 'system_u:object_r:devicekit_exec_t:s0\x00'}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @private0, [0xff000000, 0x0, 0xffffffff, 0xff], [0xffffff00, 0x0, 0xff000000, 0xffffffff], 'ip_vti0\x00', 'erspan0\x00', {0xff}, {}, 0x6, 0xc, 0x7, 0x40}, 0x0, 0xc8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', {0x1000000}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5e8) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="ec4039e0aeb22892ea3ff7846c24f5e1aca57f9f6f1b99daa23ece57888270b2d79833c1952ff00f573a90f6643581db85563fa572bde468a20ea88b72edcf564ad8cb1b7cd01203ace643152f5a4c61706e5632d06428623b03b1f9021a4fddefb57c5faa38f339badd9da0496383d2a319881581db25cf75c4cc25a679c1531de947244f2c3256b7eb205ee8f3c3fa1ce0e110e2d5f56cd28717d30d223b04d9592de4e5a8", 0xa6) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001ac0)=@raw={'raw\x00', 0x3c1, 0x3, 0x58c, 0x3b4, 0x9403, 0x0, 0x3b4, 0x2c0, 0x4c4, 0x3d8, 0x3d8, 0x4c4, 0x3d8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @mcast1, [0x0, 0x0, 0xffffff00, 0xff000000], [0xff000000, 0x0, 0x0, 0xff], 'veth1_to_bridge\x00', 'syzkaller0\x00', {}, {}, 0x2f, 0x0, 0x4}, 0x0, 0x28c, 0x3b4, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf4}, {0x0, 0x5fc, 0x1, 0x0, 'syz0\x00'}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xffffffff, 'system_u:object_r:devicekit_exec_t:s0\x00'}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @private0, [0xff000000, 0x0, 0xffffffff, 0xff], [0xffffff00, 0x0, 0xff000000, 0xffffffff], 'ip_vti0\x00', 'erspan0\x00', {0xff}, {}, 0x6, 0xc, 0x7, 0x40}, 0x0, 0xc8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', {0x1000000}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5e8) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) 8.744452251s ago: executing program 4 (id=510): socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48) r0 = io_uring_setup(0x7932, &(0x7f0000000580)={0x0, 0x1009a15, 0x0, 0x0, 0x173}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x71, &(0x7f0000000080)={r2}, &(0x7f00000000c0)=0x18) r3 = syz_io_uring_setup(0x4672, &(0x7f0000000480)={0x0, 0x0, 0x6, 0x1, 0x2c5, 0x0, r0}, &(0x7f0000000500), &(0x7f0000000140)) io_uring_enter(r3, 0x567, 0x0, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x20000000000001a1, &(0x7f0000000040)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x4000005, 0x2, 0x13, 0x2}, {0x5, 0x5, 0x5, 0xa}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000280), 0x0, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r4, 0x80685600, &(0x7f0000000380)) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0185647, &(0x7f0000000480)={0xa10000, 0x401, 0x5, 0xffffffffffffffff, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) timer_create(0x3, &(0x7f0000000040)={0x0, 0x27, 0x1, @tid=r5}, &(0x7f00000000c0)) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000018000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) 3.447190037s ago: executing program 5 (id=847): prctl$PR_SCHED_CORE(0x3e, 0x810003, 0x0, 0x2, 0x0) (async) io_setup(0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYRESOCT=r0], &(0x7f0000000400)='syzkaller\x00', 0x11, 0x0, 0x0, 0x41000, 0x39, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x3}, 0x18) (async) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) (async) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) r3 = dup(r2) (async) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x4, 0xdea2, 0x0, 0x400, 0x0, 0xfffffffffffffffd, 0x10000}, 0x0, 0x0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xf6cb8d1f) (async) syz_emit_vhci(0x0, 0xd) (async) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) (async) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r5 = syz_io_uring_setup(0x7d5f, &(0x7f00000001c0)={0x0, 0xfffffffd, 0x0, 0x10000, 0x7}, 0x0, &(0x7f0000000140)=0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000000, 0x10, r4, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x0, &(0x7f0000000180)=0x7, 0x0, 0x4) (async) syz_io_uring_submit(0x0, r6, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x46, 0x0, 0x1, 0x1, &(0x7f0000000300), 0x80, 0x0, 0x1, {0x2}}) (async) io_uring_enter(r5, 0x3519, 0xffffffff, 0xf, 0x0, 0xfffffeed) (async) landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x10, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) landlock_restrict_self(0xffffffffffffffff, 0x0) (async) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x781083, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000040)=0x2) (async) socket$kcm(0x10, 0x3, 0x10) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r10, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x6, 0x1000, 0x3a, 0x2, 0x2930}, 0x1c) 3.370394003s ago: executing program 5 (id=848): mknod$loop(0x0, 0x0, 0x1) syz_usbip_server_init(0x4) ioctl(0xffffffffffffffff, 0x3, &(0x7f00000002c0)="4a176536142f059048484d621cc606a5123340984aa520c3f129524d5514a9052b30bc2e73ff9fadd08950aabbb986e87e9695f9469da4985d50834ba7483c89dceb3442d8a9df91f90b472c36df84") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket(0x25, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f00000000c0), 0x4) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) r2 = openat$autofs(0xffffff9c, &(0x7f0000000380), 0xe8980dfcf06574f6, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0xa00}}, [], {0x14}}, 0x28}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) syz_open_dev$evdev(&(0x7f0000000000), 0xc0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = getpid() mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB='trans=virtio,noextend,access=any,cache=fscache,version=9p2000.u']) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) getdents(r5, &(0x7f0000000180)=""/98, 0x62) getpgrp(r4) syz_io_uring_setup(0x0, &(0x7f0000000280), &(0x7f00000003c0), &(0x7f0000000440)) mount$afs(&(0x7f0000000100), &(0x7f0000000340)='./file0\x00', &(0x7f0000000400), 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="5fb5577a6b3d7374726963742c6f626a5f757365723d215d2c6673757569643d38666337313732302d615b38322d666237332d393435372d66383edd333138632c61707072616973655f747970653d696d617369672c00"]) 2.850473589s ago: executing program 2 (id=849): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) io_uring_setup(0x253c, &(0x7f0000000000)={0x0, 0x0, 0x1000, 0x3, 0x2}) r2 = socket(0x2b, 0x80801, 0x1) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000020000009511000000000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = syz_clone(0x800c000, &(0x7f0000001480)="627807434619734911420e123cb6f44fb54d82f86f3720b1d5ecd9651a9fcb2a1c358b9cd99a9da0b00953486764e0c7d13faa0d43ad3164e14aa9d4eafc2ae39ce2be18d63433b7dfc78608200e69639ab1530087488555d6d92591d54b3a4b2d398d9c826367e94ff87e48b5c84c384e4da2242cd7402f8ed7ca62f2bc83f74a833985f857aea120980634d28db59881240ddcdb80ae6800e45e612019d9a17a04", 0xa2, 0x0, 0x0, 0x0) kcmp(r3, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r4 = getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="19b200000400000016000000639e87aaffffff7f88bb2f7c73b834cc8a2bec601d8601c8c2462049460a7cc7c276dd3dbc723cc83ed7123aa7c95b4bb03ae7d274010d6742a5777ecf909c2a12046313dca95c77599e518d70d3fd0e7e46e0f11b30c152575625e4ad4f172057e44786a0a859ba4bba1b679faaf121ba3781aa3204323e04b2878fa61692b0c565b3352ee9e7a99bd2b8f9aa444ddd6c1deeb1f91e8dc138b576adeac6d455e04e181e2d7b", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x40}}, 0x0) sendmsg$key(r8, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300090a00000000000000000000000300060000000e0002000000e00000090000000000000000020001fffb0000000000000200000000030005000000000002000000e00000010000000000000000017f8c98dc0ddf9e9bfa93bb4fd8a47ec23ff0b06108246e1805611c3d4aa3f6f9dd6ba5768ef53b8e9d016606a686"], 0x50}}, 0x0) 1.981060105s ago: executing program 2 (id=852): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00', @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x6, 0x4, 0x3, 0x4}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4400000010000104000000000000000000200000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800040000000000050017"], 0x44}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) lchown(&(0x7f0000000340)='./bus\x00', 0x0, 0x0) syz_open_dev$usbmon(&(0x7f00000000c0), 0x80000, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) 1.758853914s ago: executing program 5 (id=853): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @private}, 0x5, 0x0, 0x0, 0x2}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6}]}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) close_range(r1, 0xffffffffffffffff, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_open_dev$sndpcmp(&(0x7f0000000180), 0x7, 0x20000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='xprtrdma_marshal_failed\x00', r2}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000280)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7aa, &(0x7f0000000180)={{@any, 0xffffffff}, @host}) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r3, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/kernel/rcu_normal', 0x88400, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffce6, 0x841, 0xffffffffffffffff) prctl$PR_SET_MM_MAP(0x21, 0xe, 0x0, 0xfffffffffffffc84) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000002060108000034e400000000030000000500050015000000050001000600000005000400000000000900020073797a31000000000900020073797a300000000015000300686173683a69702c706f72742c6e6574"], 0x5c}}, 0x2) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000100)={0x5, "fa02c809800000000000000000000000000000f8ffffff00"}) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r6, &(0x7f0000001ff0)={0x1d, r7}, 0x10) sendmsg$can_raw(r6, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x2, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x38}, 0xee}, 0x0) 1.250692999s ago: executing program 0 (id=855): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000104000000000101000000000000", @ANYRES32=0x0, @ANYBLOB="0900000020000200200012800e0001006970366772657461700000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x48}, 0x1, 0x0, 0xff00}, 0x0) 1.17080939s ago: executing program 0 (id=856): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000180)=0x67e, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, 0x0, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000140)=0x0, 0x0) syz_io_uring_submit(r3, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) process_vm_readv(0x0, &(0x7f0000000400), 0x0, &(0x7f00000006c0), 0x0, 0x0) bind$alg(r4, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)="14", 0x1}, {&(0x7f0000000280)="3b942cdf3dbb4d708446209c8a7a9893c711167b6aee1ac4a8cc59d92a394f460b20f21b9add9e84d2dba9e6df8034c449e64138a4aea2a8df6d35031bd3263f", 0x7fffefff}], 0x2}], 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3) r8 = syz_io_uring_setup(0x3853, &(0x7f00000000c0)={0x0, 0xf158, 0xa, 0x4, 0x5a}, &(0x7f0000000040), &(0x7f0000000200)) io_uring_enter(r8, 0x1017, 0xb9df, 0x2, &(0x7f0000000240)={[0x3, 0x4]}, 0x8) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)={[&(0x7f0000000100)='(\x00', &(0x7f0000000180)='\x00']}, &(0x7f00000002c0)={[&(0x7f0000000240)='\x00']}) syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="04ff0102ada6b68e8d1d6bd1247b632f333a7a8a7597b2180e98fb8bfbf5f4dde99936132fc0e4503c1febaf1da2ee6db9b58620643ced1efd652308"], 0x4) 1.037099726s ago: executing program 0 (id=857): syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$rtc(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = syz_io_uring_setup(0x117, &(0x7f0000000100), &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1.036723357s ago: executing program 2 (id=858): socket$netlink(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300100000008000240000002"], 0x7c}}, 0x0) r1 = add_key$user(&(0x7f0000000040), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000700)="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", 0x189, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000004c0), &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000200)="cc", 0x1, 0xffffffffffffffff) r3 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000500)="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", 0x101, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000400)={r2, r1, r3}, 0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={'wp384\x00'}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000021c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x5, 0x2, 0x13, 0x2}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = openat2(0xffffffffffffff9c, &(0x7f0000002100)='./file0\x00', &(0x7f0000002140)={0x40, 0x44, 0x10}, 0x18) ioctl$DRM_IOCTL_AGP_ALLOC(r5, 0xc0106434, &(0x7f00000002c0)={0xdd4, 0x0, 0x10000}) ioctl$DRM_IOCTL_SG_ALLOC(r5, 0xc0086438, &(0x7f0000000300)={0x80000001, r6}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f00000000c0)={@broadcast, @broadcast, 0x0, 0x4, [@empty, @empty, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}, 0x20) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000240)={0xffffff, 0x1, 0x0, 0xfffffffc}, 0x10) write(r9, 0x0, 0x0) 980.724701ms ago: executing program 0 (id=859): socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$swradio(&(0x7f0000000180), 0x0, 0x2) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) setfsuid(r1) syz_open_procfs(0x0, &(0x7f0000000240)='wchan\x00') openat$vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = syz_open_dev$media(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000040)=0xffffffffffffffff) pselect6(0x40, &(0x7f00000001c0)={0x2, 0xffffffffffffffff}, 0x0, &(0x7f0000000080)={0x3ff, 0x0, 0x7fffffffffffffff, 0x0, 0x3}, 0x0, 0x0) ioctl$MEDIA_REQUEST_IOC_REINIT(r3, 0x7c81, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = shmget(0x1, 0x3000, 0x10, &(0x7f00000b3000/0x3000)=nil) shmctl$IPC_INFO(r4, 0x3, &(0x7f0000000000)=""/92) flock(r3, 0x9) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddb357f7adf97affffffff7d1800"}) r5 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) dup3(0xffffffffffffffff, r5, 0x0) ioctl$TCSETA(r5, 0x5406, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x6, "0700f342368300"}) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000140), 0x440000, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x17, 0x20000028, 0x0) 887.54498ms ago: executing program 4 (id=510): socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48) r0 = io_uring_setup(0x7932, &(0x7f0000000580)={0x0, 0x1009a15, 0x0, 0x0, 0x173}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x71, &(0x7f0000000080)={r2}, &(0x7f00000000c0)=0x18) r3 = syz_io_uring_setup(0x4672, &(0x7f0000000480)={0x0, 0x0, 0x6, 0x1, 0x2c5, 0x0, r0}, &(0x7f0000000500), &(0x7f0000000140)) io_uring_enter(r3, 0x567, 0x0, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x20000000000001a1, &(0x7f0000000040)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x4000005, 0x2, 0x13, 0x2}, {0x5, 0x5, 0x5, 0xa}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000280), 0x0, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r4, 0x80685600, &(0x7f0000000380)) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0185647, &(0x7f0000000480)={0xa10000, 0x401, 0x5, 0xffffffffffffffff, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) timer_create(0x3, &(0x7f0000000040)={0x0, 0x27, 0x1, @tid=r5}, &(0x7f00000000c0)) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000018000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) 250.885515ms ago: executing program 0 (id=860): bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062c30bc068829afff36b31fa7e358e95cfa"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) (fail_nth: 42) 250.682206ms ago: executing program 5 (id=861): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r2, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x1000000, 0x0, 0x0, r1, &(0x7f0000000340), 0x41}]) sendmmsg$alg(r1, &(0x7f0000001600)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000003a80)="a9d632c7d826e6953651d2747bf4fd46", 0x10}], 0x1}], 0x1, 0x80) 250.546616ms ago: executing program 0 (id=862): r0 = memfd_create(&(0x7f0000000480)='\xff\x00l\x1e\xa00xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x9c000000, @dev={0xfe, 0x80, '\x00', 0x30}, 0x1df}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x10, 0x110, 0x1, "dc"}], 0x10}, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f00000003c0)={0x0, 0x469f, 0x0, 0x0, 0xfffffffc}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r6, 0x0, &(0x7f00000019c0)={0x0, 0x0, 0x0}, 0x0, 0x6040, 0x0, {0x1}}) io_uring_enter(r3, 0x47f9, 0x3f, 0x0, 0x0, 0x0) r7 = socket$inet(0xa, 0x801, 0x84) connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$sock_int(r7, 0x1, 0x25, &(0x7f00000003c0)=0xb4e, 0x4) listen(r7, 0x100000001) r8 = accept4(r7, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xe) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa, 0x4d091, r0, 0x0) 88.050981ms ago: executing program 2 (id=863): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x224, 0x0, 0xa, 0xd0e0000, 0x0, 0x100, 0x1c8, 0x1d8, 0x1d8, 0x1c8, 0x1d8, 0x3, 0x0, {[{{@ip={@broadcast, @multicast1, 0x0, 0x0, 'ip6tnl0\x00', 'veth1_macvtap\x00', {}, {}, 0x11}, 0x0, 0x9c, 0xfc, 0x0, {}, [@common=@inet=@l2tp={{0x2c}, {0x0, 0x4, 0x2, 0x1, 0xc}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x800}}}}, {{@uncond, 0x0, 0x70, 0x94}, @common=@unspec=@CONNSECMARK={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x280) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a9d2efe6d2000100"/19], 0x18}}, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x7}, 0x0, 0x0, 0x0, 0x0, 0x0}}) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r3, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0x81, 0x8a, 0x100000}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000ba42fede3f9be1db4d7f8800000000000000000000000000400000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x10}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x56010000}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {0x7, 0x0, 0x2}, {}, {}, {0x25}}], {{0x6}, {0x5}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000200)={'veth0_to_bond\x00', &(0x7f0000000600)=@ethtool_wolinfo={0xc, 0xb, 0x1, "9cc08c30a06c"}}) r6 = socket(0x9, 0x80000, 0x3) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) io_setup(0x1, &(0x7f0000000200)=0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000003c0)={'gre0\x00', &(0x7f0000000680)={'gre0\x00', 0x0, 0x8000, 0x7, 0x3, 0x7, {{0x1f, 0x4, 0x2, 0x7, 0x7c, 0x64, 0x0, 0x7, 0x29, 0x0, @multicast2, @loopback, {[@ra={0x94, 0x4, 0x1}, @end, @timestamp_prespec={0x44, 0xc, 0x9c, 0x3, 0xb, [{@private=0xa010101, 0x5}]}, @timestamp={0x44, 0x4, 0xcd, 0x0, 0x5}, @cipso={0x86, 0x38, 0x2, [{0x0, 0x10, "d816108b6cf3b37176675cb1df11"}, {0x5, 0x5, "0791b7"}, {0x1, 0xd, "cd3ad83a2d070a3d86848c"}, {0x0, 0xc, "664c7d81f25bc7c803e9"}, {0x7, 0x4, 'b~'}]}, @ssrr={0x89, 0x1b, 0xc1, [@rand_addr=0x64010102, @private=0xa010101, @remote, @multicast2, @dev={0xac, 0x14, 0x14, 0x41}, @private=0xa010102]}]}}}}}) sendto$packet(0xffffffffffffffff, &(0x7f0000000300)="5c59d303e58a2d3ffa344b07301f85a02e3488df829295cd065600931be8d28bb8196b4c4c9340601431db460a1ec36280e5f3c3b929215c59199704bb0ba6beb3564dd70aafb1f06f167fd3df12a6230facb12127196044de1a25dd63d017c4c4066e602b4171c5e8d8b9d2dd254569008ebc2bab86b5bfac9defac94c1e2fa6c5332db1d76ebdf5c14857e29adaab62c272bec96", 0x95, 0x4004, &(0x7f0000000500)={0x11, 0x6, r9, 0x1, 0x3e, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}, 0x14) io_submit(r8, 0x9f, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x6, 0x1, 0x0, r7, &(0x7f0000000000), 0x4000}]) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0001400200000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) getsockopt$nfc_llcp(r6, 0x3a, 0x1, 0x0, 0x20000000) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000280), &(0x7f00000002c0)=0x8) 87.834596ms ago: executing program 5 (id=864): r0 = open(&(0x7f0000000000)='./file1\x00', 0x109042, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="a21c0000005200010000000000040000000200873a8770a94004e185cc1df9bb05fc950ae97e15102518f921845fc4005a41258424336c7d0a8e1fe3a29113d0da4ad6629118974667f18b29fd9145cb31b4a2e830730b43f5a067915bcc7ef8f593a5419a15ebcc188a5a2b20e877553a12275502f3912cc26b033c3ffa93b5f677048e5d9c16a30538999922554a9ff2009c306a1f224bb569591d5b6361a638a8ca3c6bacf2280b1c1d2416e5b90bddffe76e04adb01a5f33ef22ed659a02b0c3c1cf17e12e67bdf9704eca51461ec8e5a9cb880edf4655adb2eb1a9b4a5bcb3b4e0f062c1136ad560c28640f374abcf82af7"], 0x1c}}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2400000026000100000000000000000008000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32], 0x24}], 0x1}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, 0x6, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x8094}, 0x80) link(&(0x7f0000000280)='./file1\x00', &(0x7f0000000300)='./bus\x00') 87.665447ms ago: executing program 5 (id=865): bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001c00) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) r3 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x1000001000104) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0xab03) close_range(r0, 0xffffffffffffffff, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 87.238749ms ago: executing program 2 (id=866): r0 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000740)={0x53, 0x0, 0xa, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="a1f8a81b133d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29}) 0s ago: executing program 2 (id=867): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x29, 0x803, 0x400008) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_HALT_POLL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0xdf, 0x0, 0x10000}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10}, {0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x7}, {0x2000, 0x5000, 0x4, 0x1, 0x7, 0x2, 0x0, 0x40, 0x0, 0x0, 0x7, 0xfc}, {0x3000, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, {0x0, 0x0, 0xc, 0xfe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0xfe, 0x0, 0x0, 0x10}, {0x1000}, {0x1000}, 0xddf8ffdb, 0x0, 0x0, 0x0, 0x0, 0x7801, 0x0, [0x0, 0xfffffffffffffffc, 0x1]}) ioctl$KVM_TRANSLATE(r7, 0xc018ae85, &(0x7f0000000080)={0x10000}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private0}, @IFLA_GRE_IKEY={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x5c}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r12 = accept4$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14, 0x80000) r13 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r13, 0x402, 0x8000003d) fcntl$setsig(r13, 0xa, 0x21) fremovexattr(r13, &(0x7f0000000040)=@known='system.posix_acl_default\x00') bind$packet(r12, &(0x7f0000000240)={0x11, 0xf7, r11, 0x1, 0x2, 0x6, @broadcast}, 0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r11, @ANYBLOB="01"], 0x20}}, 0x0) kernel console output (not intermixed with test programs): 72.491215][ T6950] ? trace_lock_acquire+0x14e/0x1f0 [ 72.492611][ T6950] ? __fget_files+0x206/0x3a0 [ 72.493875][ T6950] __sys_sendmsg+0x16e/0x220 [ 72.495101][ T6950] ? __pfx___sys_sendmsg+0x10/0x10 [ 72.496475][ T6950] __do_fast_syscall_32+0x73/0x120 [ 72.497834][ T6950] do_fast_syscall_32+0x32/0x80 [ 72.499110][ T6950] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 72.500757][ T6950] RIP: 0023:0xf7f8f579 [ 72.501834][ T6950] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 72.506720][ T6950] RSP: 002b:00000000f511657c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 72.508872][ T6950] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 000000002000c2c0 [ 72.510938][ T6950] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 72.512999][ T6950] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 72.515068][ T6950] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 72.517144][ T6950] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 72.519213][ T6950] [ 72.520157][ C2] vkms_vblank_simulate: vblank timer overrun [ 72.616682][ T6953] block nbd1: Device being setup by another task [ 72.619004][ T6950] block nbd1: shutting down sockets [ 72.678931][ T6953] block nbd1: NBD_DISCONNECT [ 72.680897][ T6953] block nbd1: Send disconnect failed -32 [ 72.712665][ T25] kernel write not supported for file /cpu/0/msr (pid: 25 comm: kworker/2:0) [ 72.845089][ T6968] netlink: 28 bytes leftover after parsing attributes in process `syz.1.214'. [ 73.324769][ T6975] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 73.649496][ T1319] kernel write not supported for file /cpu/0/msr (pid: 1319 comm: kworker/3:2) [ 73.754103][ T6989] netlink: 'syz.2.221': attribute type 10 has an invalid length. [ 73.764740][ T6989] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 73.803636][ T6996] overlay: Unknown parameter 'smackfsfloor' [ 73.921726][ T7000] syzkaller1: entered promiscuous mode [ 73.923287][ T7000] syzkaller1: entered allmulticast mode [ 74.504734][ T7005] netlink: 92 bytes leftover after parsing attributes in process `syz.0.226'. [ 74.541302][ T7007] overlay: Unknown parameter 'smackfsfloor' [ 75.055421][ T1319] kernel write not supported for file /cpu/0/msr (pid: 1319 comm: kworker/3:2) [ 75.356388][ T7022] FAULT_INJECTION: forcing a failure. [ 75.356388][ T7022] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.359796][ T7022] CPU: 1 UID: 0 PID: 7022 Comm: syz.4.232 Not tainted 6.12.0-syzkaller-11716-gd8b78066f4c9 #0 [ 75.362347][ T7022] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.365093][ T7022] Call Trace: [ 75.365972][ T7022] [ 75.366770][ T7022] dump_stack_lvl+0x16c/0x1f0 [ 75.368030][ T7022] should_fail_ex+0x497/0x5b0 [ 75.369269][ T7022] _copy_from_user+0x2e/0xd0 [ 75.370482][ T7022] memdup_user+0x71/0xd0 [ 75.371648][ T7022] strndup_user+0x78/0xe0 [ 75.372760][ T7022] __keyctl_dh_compute+0x285/0xf50 [ 75.374054][ T7022] ? get_pid_task+0xfc/0x250 [ 75.375225][ T7022] ? __pfx___lock_acquire+0x10/0x10 [ 75.376522][ T7022] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 75.377957][ T7022] ? __pfx_lock_release+0x10/0x10 [ 75.379206][ T7022] ? trace_lock_acquire+0x14e/0x1f0 [ 75.380524][ T7022] compat_keyctl_dh_compute+0x161/0x1d0 [ 75.381909][ T7022] ? __pfx_compat_keyctl_dh_compute+0x10/0x10 [ 75.383439][ T7022] ? ksys_write+0x1ba/0x250 [ 75.384594][ T7022] ? __pfx_ksys_write+0x10/0x10 [ 75.385831][ T7022] __do_compat_sys_keyctl+0x27b/0x440 [ 75.387185][ T7022] __do_fast_syscall_32+0x73/0x120 [ 75.388458][ T7022] do_fast_syscall_32+0x32/0x80 [ 75.389676][ T7022] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 75.391264][ T7022] RIP: 0023:0xf7fef579 [ 75.392301][ T7022] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 75.397045][ T7022] RSP: 002b:00000000f517657c EFLAGS: 00000292 ORIG_RAX: 0000000000000120 [ 75.399124][ T7022] RAX: ffffffffffffffda RBX: 0000000000000017 RCX: 0000000020000400 [ 75.401070][ T7022] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000480 [ 75.403061][ T7022] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 75.405025][ T7022] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 75.406999][ T7022] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 75.408972][ T7022] [ 75.791356][ T7039] xt_hashlimit: size too large, truncated to 1048576 [ 75.793391][ T7039] xt_hashlimit: overflow, try lower: 0/0 [ 75.836644][ T63] cfg80211: failed to load regulatory.db [ 75.895023][ T5981] kernel write not supported for file /cpu/0/msr (pid: 5981 comm: kworker/2:3) [ 75.939567][ T7053] input: syz0 as /devices/virtual/input/input5 [ 75.947332][ T7054] xt_CT: You must specify a L4 protocol and not use inversions on it [ 75.949571][ T7055] xt_CT: You must specify a L4 protocol and not use inversions on it [ 76.013973][ T39] kauditd_printk_skb: 147 callbacks suppressed [ 76.013983][ T39] audit: type=1326 audit(1733034317.110:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.4.240" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fef579 code=0x7ffc0000 [ 76.026985][ T39] audit: type=1326 audit(1733034317.120:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.4.240" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fef579 code=0x7ffc0000 [ 76.033579][ T39] audit: type=1326 audit(1733034317.120:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.4.240" exe="/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf7fef579 code=0x7ffc0000 [ 76.040861][ T39] audit: type=1326 audit(1733034317.120:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.4.240" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fef579 code=0x7ffc0000 [ 76.048572][ T39] audit: type=1326 audit(1733034317.120:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.4.240" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fef579 code=0x7ffc0000 [ 76.055021][ T39] audit: type=1326 audit(1733034317.120:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.4.240" exe="/syz-executor" sig=0 arch=40000003 syscall=219 compat=1 ip=0xf7fef579 code=0x7ffc0000 [ 76.061248][ T39] audit: type=1326 audit(1733034317.130:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.4.240" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fef579 code=0x7ffc0000 [ 76.067327][ T39] audit: type=1326 audit(1733034317.130:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.4.240" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fef579 code=0x7ffc0000 [ 76.073648][ T39] audit: type=1326 audit(1733034317.130:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.4.240" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fef579 code=0x7ffc0000 [ 76.079395][ T39] audit: type=1326 audit(1733034317.130:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7052 comm="syz.4.240" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fef579 code=0x7ffc0000 [ 76.926392][ T7067] xt_hashlimit: size too large, truncated to 1048576 [ 76.928423][ T7067] xt_hashlimit: overflow, try lower: 0/0 [ 77.046012][ T5953] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 77.492409][ T1319] kernel write not supported for file /cpu/0/msr (pid: 1319 comm: kworker/3:2) [ 77.897505][ T7103] netlink: 'syz.4.253': attribute type 1 has an invalid length. [ 77.899523][ T7103] netlink: 8 bytes leftover after parsing attributes in process `syz.4.253'. [ 77.930301][ T7105] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 77.989689][ T7109] netlink: 28 bytes leftover after parsing attributes in process `syz.4.257'. [ 78.072649][ T7091] veth0_to_batadv: entered promiscuous mode [ 78.144744][ T7119] xt_hashlimit: size too large, truncated to 1048576 [ 78.147200][ T7119] xt_hashlimit: overflow, try lower: 0/0 [ 78.594028][ T7090] veth0_to_batadv: left promiscuous mode [ 79.020990][ T7143] nbd: must specify at least one socket [ 80.067554][ T7173] FAULT_INJECTION: forcing a failure. [ 80.067554][ T7173] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.071067][ T7173] CPU: 1 UID: 0 PID: 7173 Comm: syz.2.273 Not tainted 6.12.0-syzkaller-11716-gd8b78066f4c9 #0 [ 80.073649][ T7173] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 80.076307][ T7173] Call Trace: [ 80.077168][ T7173] [ 80.077950][ T7173] dump_stack_lvl+0x16c/0x1f0 [ 80.079206][ T7173] should_fail_ex+0x497/0x5b0 [ 80.080439][ T7173] _copy_to_user+0x32/0xd0 [ 80.081618][ T7173] snd_pcm_oss_read2+0x292/0x3e0 [ 80.082914][ T7173] ? __pfx_snd_pcm_oss_read2+0x10/0x10 [ 80.084347][ T7173] ? snd_pcm_oss_read+0x38c/0x750 [ 80.085676][ T7173] snd_pcm_oss_read+0x5a3/0x750 [ 80.086957][ T7173] ? __pfx_snd_pcm_oss_read+0x10/0x10 [ 80.088357][ T7173] vfs_read+0x1df/0xbe0 [ 80.089386][ T7173] ? __fget_files+0x1fc/0x3a0 [ 80.090573][ T7173] ? __pfx_lock_release+0x10/0x10 [ 80.091860][ T7173] ? __pfx_vfs_read+0x10/0x10 [ 80.091880][ T7175] netlink: 92 bytes leftover after parsing attributes in process `syz.1.274'. [ 80.092996][ T7173] ? lock_acquire+0x2f/0xb0 [ 80.096374][ T7173] ? __fget_files+0x40/0x3a0 [ 80.097540][ T7173] ? __fget_files+0x206/0x3a0 [ 80.098725][ T7173] ksys_read+0x12b/0x250 [ 80.099792][ T7173] ? __pfx_ksys_read+0x10/0x10 [ 80.101003][ T7173] __do_fast_syscall_32+0x73/0x120 [ 80.102315][ T7173] do_fast_syscall_32+0x32/0x80 [ 80.103541][ T7173] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 80.105124][ T7173] RIP: 0023:0xf7f96579 [ 80.106170][ T7173] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 80.110940][ T7173] RSP: 002b:00000000f50f557c EFLAGS: 00000292 ORIG_RAX: 0000000000000003 [ 80.112950][ T7173] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200023c0 [ 80.114934][ T7173] RDX: 0000000000002020 RSI: 0000000000000000 RDI: 0000000000000000 [ 80.116966][ T7173] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 80.118945][ T7173] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 80.120927][ T7173] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 80.122906][ T7173] [ 81.730220][ T7205] FAULT_INJECTION: forcing a failure. [ 81.730220][ T7205] name failslab, interval 1, probability 0, space 0, times 0 [ 81.734482][ T7205] CPU: 2 UID: 0 PID: 7205 Comm: syz.4.281 Not tainted 6.12.0-syzkaller-11716-gd8b78066f4c9 #0 [ 81.737562][ T7205] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 81.740833][ T7205] Call Trace: [ 81.742039][ T7205] [ 81.743085][ T7205] dump_stack_lvl+0x16c/0x1f0 [ 81.744634][ T7205] should_fail_ex+0x497/0x5b0 [ 81.746284][ T7205] ? fs_reclaim_acquire+0xae/0x150 [ 81.748087][ T7205] should_failslab+0xc2/0x120 [ 81.749011][ T7207] cgroup: subsys name conflicts with all [ 81.749714][ T7205] __kmalloc_node_noprof+0xd1/0x520 [ 81.749742][ T7205] ? crypto_alloc_tfmmem.isra.0+0x38/0x110 [ 81.749768][ T7205] ? __pfx_crypto_alg_extsize+0x10/0x10 [ 81.757560][ T7205] crypto_alloc_tfmmem.isra.0+0x38/0x110 [ 81.759097][ T7205] crypto_create_tfm_node+0x83/0x320 [ 81.760616][ T7205] crypto_alloc_tfm_node+0x102/0x260 [ 81.762037][ T7205] __keyctl_dh_compute+0x2b5/0xf50 [ 81.763409][ T7205] ? get_pid_task+0xfc/0x250 [ 81.764619][ T7205] ? __pfx___lock_acquire+0x10/0x10 [ 81.766047][ T7205] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 81.767937][ T7205] ? __pfx_lock_release+0x10/0x10 [ 81.769622][ T7205] ? trace_lock_acquire+0x14e/0x1f0 [ 81.771160][ T7205] compat_keyctl_dh_compute+0x161/0x1d0 [ 81.772708][ T7205] ? __pfx_compat_keyctl_dh_compute+0x10/0x10 [ 81.774318][ T7205] ? ksys_write+0x1ba/0x250 [ 81.775519][ T7205] ? __pfx_ksys_write+0x10/0x10 [ 81.776866][ T7205] __do_compat_sys_keyctl+0x27b/0x440 [ 81.778260][ T7205] __do_fast_syscall_32+0x73/0x120 [ 81.779573][ T7205] do_fast_syscall_32+0x32/0x80 [ 81.780845][ T7205] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 81.782475][ T7205] RIP: 0023:0xf7fef579 [ 81.783536][ T7205] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 81.788449][ T7205] RSP: 002b:00000000f517657c EFLAGS: 00000292 ORIG_RAX: 0000000000000120 [ 81.790595][ T7205] RAX: ffffffffffffffda RBX: 0000000000000017 RCX: 0000000020000400 [ 81.792574][ T7205] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000480 [ 81.794591][ T7205] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 81.796633][ T7205] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 81.798638][ T7205] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 81.800645][ T7205] [ 81.804161][ T7205] could not allocate digest TFM handle wp384 [ 81.853238][ T7209] netlink: 'syz.2.282': attribute type 1 has an invalid length. [ 81.867183][ T7209] 8021q: adding VLAN 0 to HW filter on device bond1 [ 82.480789][ T5953] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 82.988102][ T5953] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 83.760555][ T7283] netlink: 'syz.0.302': attribute type 10 has an invalid length. [ 84.378790][ T7299] netlink: 32 bytes leftover after parsing attributes in process `syz.4.306'. [ 84.553709][ T7301] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 84.557519][ T7301] batman_adv: batadv0: Adding interface: ip6gretap1 [ 84.562637][ T7301] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.575729][ T7301] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 84.599642][ T7304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.308'. [ 84.626694][ T5953] Bluetooth: hci3: unexpected event 0x03 length: 16 > 11 [ 84.735682][ T7310] netlink: 12 bytes leftover after parsing attributes in process `syz.0.310'. [ 85.090852][ T7318] smc: net device bond0 applied user defined pnetid SYZ0 [ 85.256891][ T7330] Cannot find map_set index 0 as target [ 85.547850][ T7348] 9pnet_fd: Insufficient options for proto=fd [ 85.917488][ T39] kauditd_printk_skb: 32 callbacks suppressed [ 85.917499][ T39] audit: type=1326 audit(1733034327.020:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7361 comm="syz.4.324" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fef579 code=0x0 [ 86.019410][ T7363] netlink: 20 bytes leftover after parsing attributes in process `syz.4.324'. [ 86.048047][ T7378] 9pnet_fd: Insufficient options for proto=fd [ 86.710235][ T7393] netlink: 4 bytes leftover after parsing attributes in process `syz.4.331'. [ 86.712688][ T7393] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.714713][ T7393] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.717951][ T7393] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.720096][ T7393] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.722905][ T7393] batman_adv: batadv0: Removing interface: ip6gretap1 [ 86.767374][ T7395] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 86.796636][ T7397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.333'. [ 87.163157][ T7406] netlink: 4 bytes leftover after parsing attributes in process `syz.1.334'. [ 88.525954][ T6367] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 88.678612][ T6367] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x1 has invalid maxpacket 16 [ 88.681390][ T6367] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x82 has invalid maxpacket 32 [ 88.683969][ T6367] usb 5-1: config 1 interface 0 has no altsetting 0 [ 88.692311][ T6367] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 88.694775][ T6367] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.698280][ T6367] usb 5-1: Product: â ‰ [ 88.700143][ T6367] usb 5-1: SerialNumber: â°Š [ 88.763798][ T7423] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 88.767992][ T7423] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 89.189291][ T5941] kernel write not supported for file /sequencer2 (pid: 5941 comm: kworker/3:3) [ 89.222892][ T7432] input: syz0 as /devices/virtual/input/input6 [ 89.383372][ T6367] usb 5-1: USB disconnect, device number 4 [ 89.465439][ T7435] netlink: 56 bytes leftover after parsing attributes in process `syz.1.344'. [ 89.493658][ T7432] netlink: 52 bytes leftover after parsing attributes in process `syz.4.343'. [ 89.519713][ T39] audit: type=1326 audit(1733034330.620:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7434 comm="syz.1.344" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f8f579 code=0x0 [ 89.788641][ T7448] netlink: 12 bytes leftover after parsing attributes in process `syz.2.347'. [ 90.111592][ T7472] syzkaller1: entered promiscuous mode [ 90.113973][ T7472] syzkaller1: entered allmulticast mode [ 90.477457][ T7497] netlink: 'syz.1.356': attribute type 1 has an invalid length. [ 90.479805][ T7497] netlink: 244 bytes leftover after parsing attributes in process `syz.1.356'. [ 90.539989][ T7503] overlay: Unknown parameter 'smackfsfloor' [ 90.715326][ T7509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.360'. [ 91.032679][ T7528] netlink: 24 bytes leftover after parsing attributes in process `syz.4.365'. [ 91.439320][ T7543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.367'. [ 91.922125][ T7559] fuse: Unknown parameter 'groupv[˙' [ 91.965926][ T5953] Bluetooth: hci1: command 0x0c1a tx timeout [ 92.131204][ T7561] 9pnet_fd: Insufficient options for proto=fd [ 92.175540][ T7563] netlink: 92 bytes leftover after parsing attributes in process `syz.4.377'. [ 92.546427][ T7575] FAULT_INJECTION: forcing a failure. [ 92.546427][ T7575] name failslab, interval 1, probability 0, space 0, times 0 [ 92.549795][ T7575] CPU: 3 UID: 0 PID: 7575 Comm: syz.4.380 Not tainted 6.12.0-syzkaller-11716-gd8b78066f4c9 #0 [ 92.552306][ T7575] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 92.554958][ T7575] Call Trace: [ 92.555806][ T7575] [ 92.556587][ T7575] dump_stack_lvl+0x16c/0x1f0 [ 92.557912][ T7575] should_fail_ex+0x497/0x5b0 [ 92.559476][ T7575] ? fs_reclaim_acquire+0xae/0x150 [ 92.560897][ T7575] should_failslab+0xc2/0x120 [ 92.562500][ T7575] __kmalloc_cache_noprof+0x68/0x420 [ 92.563952][ T7575] nf_nat_register_fn+0x33c/0x5c0 [ 92.565262][ T7575] ? __pfx_nft_nat_inet_reg+0x10/0x10 [ 92.566648][ T7575] nf_nat_inet_register_fn+0x71/0x120 [ 92.567992][ T7575] nf_tables_register_hook.part.0+0x73/0x1c0 [ 92.569540][ T7575] nf_tables_addchain.constprop.0+0xb09/0x1ab0 [ 92.571084][ T7575] ? nft_chain_lookup+0x404/0x8e0 [ 92.572337][ T7575] ? __pfx_nf_tables_addchain.constprop.0+0x10/0x10 [ 92.574217][ T7575] ? nla_strcmp+0xff/0x130 [ 92.575719][ T7575] ? nft_table_lookup.part.0+0x1e3/0x230 [ 92.577454][ T7575] nf_tables_newchain+0x1cd4/0x2810 [ 92.578791][ T7575] ? __nla_validate_parse+0x605/0x2b10 [ 92.580428][ T7575] ? __pfx_nf_tables_newchain+0x10/0x10 [ 92.581850][ T7575] ? __pfx___nla_validate_parse+0x10/0x10 [ 92.583270][ T7575] ? net_generic+0xea/0x2a0 [ 92.584399][ T7575] ? __pfx_lock_release+0x10/0x10 [ 92.585630][ T7575] ? __nla_parse+0x40/0x60 [ 92.586718][ T7575] nfnetlink_rcv_batch+0x1a2a/0x24e0 [ 92.588041][ T7575] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 92.589433][ T7575] ? stack_depot_save_flags+0x28/0x900 [ 92.590820][ T7575] ? __pfx_mark_lock+0x10/0x10 [ 92.592040][ T7575] ? __lock_acquire+0xcc5/0x3c40 [ 92.593268][ T7575] ? __nla_parse+0x40/0x60 [ 92.594442][ T7575] nfnetlink_rcv+0x3c3/0x430 [ 92.595598][ T7575] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 92.596940][ T7575] netlink_unicast+0x53c/0x7f0 [ 92.598207][ T7575] ? __pfx_netlink_unicast+0x10/0x10 [ 92.599572][ T7575] ? __phys_addr_symbol+0x30/0x80 [ 92.600811][ T7575] ? __check_object_size+0x488/0x710 [ 92.602140][ T7575] netlink_sendmsg+0x8b8/0xd70 [ 92.603333][ T7575] ? __pfx_netlink_sendmsg+0x10/0x10 [ 92.604652][ T7575] ____sys_sendmsg+0x9ae/0xb40 [ 92.605880][ T7575] ? __pfx_____sys_sendmsg+0x10/0x10 [ 92.607190][ T7575] ? get_compat_msghdr+0x11b/0x170 [ 92.608472][ T7575] ___sys_sendmsg+0x135/0x1e0 [ 92.609618][ T7575] ? __pfx____sys_sendmsg+0x10/0x10 [ 92.610924][ T7575] ? __pfx_lock_release+0x10/0x10 [ 92.612150][ T7575] ? trace_lock_acquire+0x14e/0x1f0 [ 92.613457][ T7575] ? __fget_files+0x206/0x3a0 [ 92.614674][ T7575] __sys_sendmsg+0x16e/0x220 [ 92.615835][ T7575] ? __pfx___sys_sendmsg+0x10/0x10 [ 92.617143][ T7575] __do_fast_syscall_32+0x73/0x120 [ 92.618391][ T7575] do_fast_syscall_32+0x32/0x80 [ 92.619638][ T7575] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 92.621208][ T7575] RIP: 0023:0xf7fef579 [ 92.622268][ T7575] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 92.626996][ T7575] RSP: 002b:00000000f517657c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 92.629050][ T7575] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 000000002000c2c0 [ 92.631033][ T7575] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 92.633022][ T7575] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 92.635057][ T7575] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 92.637034][ T7575] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 92.638937][ T7575] [ 92.686016][ T7579] block nbd4: Device being setup by another task [ 92.687786][ T7575] block nbd4: shutting down sockets [ 92.770253][ T7594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.381'. [ 92.807267][ T7579] block nbd4: NBD_DISCONNECT [ 92.808717][ T7579] block nbd4: Send disconnect failed -32 [ 92.904937][ T7596] 9pnet_virtio: no channels available for device syz [ 93.230239][ T7612] binder_alloc: 7611: binder_install_single_page failed to insert page at offset 0 with -14 [ 93.681203][ T39] audit: type=1804 audit(1733034334.780:203): pid=7618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.391" name="/newroot/92/file0/bus" dev="9p" ino=38535355 res=1 errno=0 [ 93.732594][ T7625] 9pnet_virtio: no channels available for device syz [ 93.995900][ T7628] block nbd2: Device being setup by another task [ 94.002353][ T7627] block nbd2: shutting down sockets [ 94.069795][ T7628] block nbd2: NBD_DISCONNECT [ 94.071388][ T7628] block nbd2: Send disconnect failed -32 [ 94.093721][ T7631] 9pnet_virtio: no channels available for device syz [ 94.673619][ T5953] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 94.697024][ T7640] /dev/sr0: Can't open blockdev [ 95.128716][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 95.448951][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 95.452215][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 95.455624][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 95.460177][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 95.463357][ T25] kernel write not supported for file /cpu/0/msr (pid: 25 comm: kworker/2:0) [ 95.463734][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 95.470428][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 95.473669][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.521260][ T7690] netlink: 'syz.1.409': attribute type 1 has an invalid length. [ 95.524119][ T7690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.409'. [ 95.569808][ T7693] netlink: 'syz.1.411': attribute type 1 has an invalid length. [ 95.571943][ T7693] netlink: 244 bytes leftover after parsing attributes in process `syz.1.411'. [ 95.579104][ T7694] 8021q: VLANs not supported on ipvlan0 [ 95.582454][ T7694] netlink: 12 bytes leftover after parsing attributes in process `syz.4.410'. [ 95.677969][ T39] audit: type=1326 audit(1733034336.780:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7698 comm="syz.4.413" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fef579 code=0x7ffc0000 [ 95.683463][ T39] audit: type=1326 audit(1733034336.780:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7698 comm="syz.4.413" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fef579 code=0x7ffc0000 [ 95.689229][ T39] audit: type=1326 audit(1733034336.780:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7698 comm="syz.4.413" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fef579 code=0x7ffc0000 [ 95.690984][ T9] usb 5-1: usb_control_msg returned -32 [ 95.694726][ T39] audit: type=1326 audit(1733034336.780:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7698 comm="syz.4.413" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fef579 code=0x7ffc0000 [ 95.696941][ T7699] autofs4:pid:7699:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 95.697262][ T9] usbtmc 5-1:16.0: can't read capabilities [ 95.703121][ T39] audit: type=1326 audit(1733034336.780:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7698 comm="syz.4.413" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fef579 code=0x7ffc0000 [ 95.712052][ T39] audit: type=1326 audit(1733034336.780:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7698 comm="syz.4.413" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7fef579 code=0x7ffc0000 [ 95.723124][ T39] audit: type=1326 audit(1733034336.780:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7698 comm="syz.4.413" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fef579 code=0x7ffc0000 [ 95.729010][ T39] audit: type=1326 audit(1733034336.780:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7698 comm="syz.4.413" exe="/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf7fef579 code=0x7ffc0000 [ 95.734691][ T39] audit: type=1326 audit(1733034336.780:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7698 comm="syz.4.413" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fef579 code=0x7ffc0000 [ 95.760120][ T5953] Bluetooth: hci0: ACL packet for unknown connection handle 1064 [ 95.812737][ T7706] overlay: Unknown parameter 'smackfsfloor' [ 96.035376][ T7708] syz.2.414 (7708): drop_caches: 2 [ 96.828634][ T7716] 9pnet_fd: Insufficient options for proto=fd [ 97.550613][ T7726] pim6reg: entered allmulticast mode [ 97.553662][ T7726] pim6reg: left allmulticast mode [ 98.017183][ T5972] usb 5-1: USB disconnect, device number 5 [ 99.687523][ T7777] 9pnet_fd: Insufficient options for proto=fd [ 99.741577][ T7781] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 99.745631][ T7781] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 99.763580][ T7781] vhci_hcd vhci_hcd.0: Device attached [ 99.910799][ T7786] afs: Unknown parameter '_µWzk' [ 99.936194][ T9] vhci_hcd: vhci_device speed not set [ 99.983872][ T5953] block nbd2: Receive control failed (result -32) [ 99.990323][ T5953] block nbd2: Receive control failed (result -32) [ 99.995859][ T9] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 100.027111][ T7782] block nbd2: shutting down sockets [ 100.624147][ T5972] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 100.686706][ T7783] vhci_hcd: connection reset by peer [ 100.690370][ T1142] vhci_hcd: stop threads [ 100.692181][ T1142] vhci_hcd: release socket [ 100.694156][ T1142] vhci_hcd: disconnect device [ 100.798389][ T5972] usb 7-1: config index 0 descriptor too short (expected 45, got 36) [ 100.800576][ T5972] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 100.803561][ T5972] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 100.806677][ T5972] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 100.809783][ T5972] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 100.813074][ T5972] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 100.815404][ T5972] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.819414][ T5972] usb 7-1: config 0 descriptor?? [ 100.821340][ T7789] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 101.058850][ T7794] FAULT_INJECTION: forcing a failure. [ 101.058850][ T7794] name failslab, interval 1, probability 0, space 0, times 0 [ 101.062551][ T7794] CPU: 3 UID: 0 PID: 7794 Comm: syz.0.437 Not tainted 6.12.0-syzkaller-11716-gd8b78066f4c9 #0 [ 101.065582][ T7794] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 101.068774][ T7794] Call Trace: [ 101.069783][ T7794] [ 101.070689][ T7794] dump_stack_lvl+0x16c/0x1f0 [ 101.072089][ T7794] should_fail_ex+0x497/0x5b0 [ 101.073252][ T7794] ? fs_reclaim_acquire+0xae/0x150 [ 101.074467][ T7794] should_failslab+0xc2/0x120 [ 101.075759][ T7794] __kmalloc_node_track_caller_noprof+0xcf/0x520 [ 101.077676][ T7794] ? __pfx_down_read+0x10/0x10 [ 101.079121][ T7794] ? dh_data_from_key+0x17c/0x2d0 [ 101.080639][ T7794] kmemdup_noprof+0x29/0x60 [ 101.082025][ T7794] dh_data_from_key+0x17c/0x2d0 [ 101.083502][ T7794] __keyctl_dh_compute+0x3d0/0xf50 [ 101.084828][ T7794] ? get_pid_task+0xfc/0x250 [ 101.085927][ T7794] ? __pfx___lock_acquire+0x10/0x10 [ 101.087144][ T7794] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 101.088455][ T7794] ? __pfx_lock_release+0x10/0x10 [ 101.089639][ T7794] ? trace_lock_acquire+0x14e/0x1f0 [ 101.090869][ T7794] compat_keyctl_dh_compute+0x161/0x1d0 [ 101.092167][ T7794] ? __pfx_compat_keyctl_dh_compute+0x10/0x10 [ 101.093606][ T7794] ? ksys_write+0x1ba/0x250 [ 101.094669][ T7794] ? __pfx_ksys_write+0x10/0x10 [ 101.095824][ T7794] __do_compat_sys_keyctl+0x27b/0x440 [ 101.097083][ T7794] __do_fast_syscall_32+0x73/0x120 [ 101.098292][ T7794] do_fast_syscall_32+0x32/0x80 [ 101.099418][ T7794] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 101.100891][ T7794] RIP: 0023:0xf73ce579 [ 101.101847][ T7794] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 101.106237][ T7794] RSP: 002b:00000000f50b657c EFLAGS: 00000292 ORIG_RAX: 0000000000000120 [ 101.108148][ T7794] RAX: ffffffffffffffda RBX: 0000000000000017 RCX: 0000000020000400 [ 101.109972][ T7794] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000480 [ 101.111887][ T7794] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 101.113713][ T7794] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 101.115540][ T7794] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 101.117405][ T7794] [ 101.232234][ T5972] plantronics 0003:047F:FFFF.0002: unknown main item tag 0xd [ 101.236216][ T5972] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 101.243557][ T5972] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 101.515753][ T832] usb 7-1: USB disconnect, device number 3 [ 101.903531][ T7817] 9pnet_fd: Insufficient options for proto=fd [ 101.923009][ T7819] netlink: 'syz.0.443': attribute type 7 has an invalid length. [ 101.925066][ T7819] netlink: 'syz.0.443': attribute type 8 has an invalid length. [ 102.810263][ T7838] mmap: syz.0.448 (7838) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 102.890962][ T7845] netlink: 12 bytes leftover after parsing attributes in process `syz.4.450'. [ 102.970773][ T7850] 9pnet_fd: Insufficient options for proto=fd [ 103.129965][ T7855] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 103.131965][ T7855] overlayfs: failed to set xattr on upper [ 103.133450][ T7855] overlayfs: ...falling back to redirect_dir=nofollow. [ 103.135200][ T7855] overlayfs: ...falling back to index=off. [ 103.138308][ T7855] overlayfs: ...falling back to uuid=null. [ 103.141665][ T7855] evm: overlay not supported [ 103.177623][ T7855] Invalid option length (1025206) for dns_resolver key [ 103.579801][ T7866] netlink: 'syz.1.457': attribute type 1 has an invalid length. [ 103.581745][ T7866] netlink: 244 bytes leftover after parsing attributes in process `syz.1.457'. [ 103.643622][ T39] kauditd_printk_skb: 41 callbacks suppressed [ 103.643633][ T39] audit: type=1326 audit(1733034344.740:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7867 comm="syz.1.458" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f8f579 code=0x7ffc0000 [ 103.651040][ T39] audit: type=1326 audit(1733034344.740:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7867 comm="syz.1.458" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f8f579 code=0x7ffc0000 [ 103.656619][ T39] audit: type=1326 audit(1733034344.750:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7867 comm="syz.1.458" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f8f579 code=0x7ffc0000 [ 103.662025][ T39] audit: type=1326 audit(1733034344.750:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7867 comm="syz.1.458" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f8f579 code=0x7ffc0000 [ 103.667575][ T39] audit: type=1326 audit(1733034344.750:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7867 comm="syz.1.458" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f8f579 code=0x7ffc0000 [ 103.672986][ T39] audit: type=1326 audit(1733034344.750:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7867 comm="syz.1.458" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f8f579 code=0x7ffc0000 [ 103.675620][ T7868] autofs4:pid:7868:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 103.678778][ T39] audit: type=1326 audit(1733034344.750:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7867 comm="syz.1.458" exe="/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf7f8f579 code=0x7ffc0000 [ 103.687115][ T39] audit: type=1326 audit(1733034344.750:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7867 comm="syz.1.458" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f8f579 code=0x7ffc0000 [ 103.692782][ T39] audit: type=1326 audit(1733034344.750:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7867 comm="syz.1.458" exe="/syz-executor" sig=0 arch=40000003 syscall=232 compat=1 ip=0xf7f8f579 code=0x7ffc0000 [ 103.708122][ T39] audit: type=1326 audit(1733034344.750:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7867 comm="syz.1.458" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f8f579 code=0x7ffc0000 [ 103.937009][ T7890] netlink: 28 bytes leftover after parsing attributes in process `syz.4.466'. [ 104.422410][ T7905] cgroup: subsys name conflicts with all [ 104.513325][ T7908] netlink: 'syz.0.470': attribute type 1 has an invalid length. [ 104.523054][ T7908] 8021q: adding VLAN 0 to HW filter on device bond2 [ 104.718030][ T7912] overlay: Unknown parameter 'smackfsfloor' [ 105.085176][ T7915] overlayfs: failed to resolve './file0/file0': -2 [ 105.087057][ T9] vhci_hcd: vhci_device speed not set [ 105.730464][ T1319] kernel write not supported for file /cpu/0/msr (pid: 1319 comm: kworker/3:2) [ 106.343863][ T7956] netlink: 4 bytes leftover after parsing attributes in process `syz.2.486'. [ 106.584111][ T5953] block nbd4: Receive control failed (result -32) [ 106.584290][ T5308] block nbd4: Receive control failed (result -32) [ 106.586453][ T7936] block nbd4: shutting down sockets [ 106.638216][ T7962] netlink: 'syz.0.488': attribute type 4 has an invalid length. [ 106.991122][ T7981] netlink: 'syz.4.489': attribute type 10 has an invalid length. [ 107.001920][ T7974] FAULT_INJECTION: forcing a failure. [ 107.001920][ T7974] name failslab, interval 1, probability 0, space 0, times 0 [ 107.006127][ T7974] CPU: 3 UID: 0 PID: 7974 Comm: syz.0.491 Not tainted 6.12.0-syzkaller-11716-gd8b78066f4c9 #0 [ 107.009535][ T7974] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 107.013145][ T7974] Call Trace: [ 107.014282][ T7974] [ 107.015284][ T7974] dump_stack_lvl+0x16c/0x1f0 [ 107.016553][ T7974] should_fail_ex+0x497/0x5b0 [ 107.017813][ T7974] ? fs_reclaim_acquire+0xae/0x150 [ 107.019156][ T7974] should_failslab+0xc2/0x120 [ 107.020398][ T7974] __kmalloc_node_noprof+0xd1/0x520 [ 107.021764][ T7974] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 107.023227][ T7974] __kvmalloc_node_noprof+0xad/0x1a0 [ 107.024971][ T7974] nf_hook_entries_grow+0x282/0x810 [ 107.026756][ T7974] nf_hook_entries_insert_raw+0x3d/0x160 [ 107.028645][ T7974] nf_nat_register_fn+0x1fc/0x5c0 [ 107.030363][ T7974] ? __pfx_nft_nat_inet_reg+0x10/0x10 [ 107.032169][ T7974] nf_nat_inet_register_fn+0x71/0x120 [ 107.034004][ T7974] nf_tables_register_hook.part.0+0x73/0x1c0 [ 107.036059][ T7974] nf_tables_addchain.constprop.0+0xb09/0x1ab0 [ 107.038159][ T7974] ? nft_chain_lookup+0x404/0x8e0 [ 107.039865][ T7974] ? __pfx_nf_tables_addchain.constprop.0+0x10/0x10 [ 107.041798][ T7974] ? nla_strcmp+0xff/0x130 [ 107.043323][ T7974] ? nft_table_lookup.part.0+0x1e3/0x230 [ 107.045230][ T7974] nf_tables_newchain+0x1cd4/0x2810 [ 107.046994][ T7974] ? __nla_validate_parse+0x605/0x2b10 [ 107.048821][ T7974] ? __pfx_nf_tables_newchain+0x10/0x10 [ 107.050708][ T7974] ? __pfx___nla_validate_parse+0x10/0x10 [ 107.052635][ T7974] ? net_generic+0xea/0x2a0 [ 107.054222][ T7974] ? __pfx_lock_release+0x10/0x10 [ 107.055839][ T7974] ? __nla_parse+0x40/0x60 [ 107.057038][ T7974] nfnetlink_rcv_batch+0x1a2a/0x24e0 [ 107.058447][ T7974] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 107.059908][ T7974] ? preempt_schedule_common+0x44/0xc0 [ 107.061357][ T7974] ? __pfx___lock_acquire+0x10/0x10 [ 107.062731][ T7974] ? __nla_parse+0x40/0x60 [ 107.063911][ T7974] nfnetlink_rcv+0x3c3/0x430 [ 107.065126][ T7974] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 107.066577][ T7974] netlink_unicast+0x53c/0x7f0 [ 107.067845][ T7974] ? __pfx_netlink_unicast+0x10/0x10 [ 107.069191][ T7974] ? __phys_addr_symbol+0x30/0x80 [ 107.070514][ T7974] ? __check_object_size+0x488/0x710 [ 107.071899][ T7974] netlink_sendmsg+0x8b8/0xd70 [ 107.073150][ T7974] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.074543][ T7974] ____sys_sendmsg+0x9ae/0xb40 [ 107.075807][ T7974] ? __pfx_____sys_sendmsg+0x10/0x10 [ 107.077303][ T7974] ? get_compat_msghdr+0x11b/0x170 [ 107.078677][ T7974] ___sys_sendmsg+0x135/0x1e0 [ 107.079913][ T7974] ? __pfx____sys_sendmsg+0x10/0x10 [ 107.081279][ T7974] ? __pfx_lock_release+0x10/0x10 [ 107.082598][ T7974] ? trace_lock_acquire+0x14e/0x1f0 [ 107.083970][ T7974] ? __fget_files+0x206/0x3a0 [ 107.085452][ T7974] __sys_sendmsg+0x16e/0x220 [ 107.086694][ T7974] ? __pfx___sys_sendmsg+0x10/0x10 [ 107.088079][ T7974] __do_fast_syscall_32+0x73/0x120 [ 107.089450][ T7974] do_fast_syscall_32+0x32/0x80 [ 107.090731][ T7974] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 107.092382][ T7974] RIP: 0023:0xf73ce579 [ 107.093467][ T7974] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 107.098671][ T7974] RSP: 002b:00000000f509557c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 107.100830][ T7974] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 000000002000c2c0 [ 107.103432][ T7974] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 107.106071][ T7974] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 107.108724][ T7974] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 107.111134][ T7974] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 107.113248][ T7974] [ 107.256758][ T7974] block nbd0: Device being setup by another task [ 107.282458][ T7978] block nbd0: shutting down sockets [ 107.577608][ T7996] 9pnet_fd: Insufficient options for proto=fd [ 107.912547][ T8005] block nbd2: NBD_DISCONNECT [ 108.165951][ T8006] block nbd2: Device being setup by another task [ 108.168267][ T8006] block nbd2: Disconnected due to user request. [ 108.170698][ T8006] block nbd2: shutting down sockets [ 108.307814][ T8005] block nbd2: NBD_DISCONNECT [ 108.309069][ T8005] block nbd2: Send disconnect failed -32 [ 108.932508][ T8036] netlink: 4 bytes leftover after parsing attributes in process `syz.2.503'. [ 109.066785][ T8037] block nbd0: Device being setup by another task [ 109.070514][ T8039] block nbd0: shutting down sockets [ 109.139038][ T8035] block nbd0: NBD_DISCONNECT [ 109.140422][ T8035] block nbd0: Send disconnect failed -32 [ 109.470365][ T8048] VFS: could not find a valid V7 on nullb0. [ 109.840710][ T1142] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.907572][ T1142] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.930748][ T5953] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 109.934886][ T5953] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 109.938481][ T5953] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 109.941928][ T5953] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 109.944029][ T5953] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 109.946364][ T5953] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 109.976555][ T1142] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.047094][ T8054] chnl_net:caif_netlink_parms(): no params data found [ 110.064965][ T1142] bond0: (slave netdevsim0): Releasing backup interface [ 110.068566][ T1142] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.120220][ T8054] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.122310][ T8054] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.124353][ T8054] bridge_slave_0: entered allmulticast mode [ 110.126568][ T8054] bridge_slave_0: entered promiscuous mode [ 110.129101][ T8054] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.131550][ T8054] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.133561][ T8054] bridge_slave_1: entered allmulticast mode [ 110.135562][ T8054] bridge_slave_1: entered promiscuous mode [ 110.194695][ T8054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.203596][ T8054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.251299][ T1142] bridge_slave_1: left allmulticast mode [ 110.252761][ T1142] bridge_slave_1: left promiscuous mode [ 110.254625][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.268971][ T1142] bridge_slave_0: left allmulticast mode [ 110.271084][ T1142] bridge_slave_0: left promiscuous mode [ 110.272775][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.588384][ T1142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.596230][ T1142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.612001][ T1142] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 110.630900][ T1142] bond0 (unregistering): Released all slaves [ 110.658198][ T8054] team0: Port device team_slave_0 added [ 110.697050][ T8054] team0: Port device team_slave_1 added [ 110.781225][ T8054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.785185][ T8054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.802598][ T8054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.850109][ T8054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.853942][ T8054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.877228][ T8054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.982845][ T8054] hsr_slave_0: entered promiscuous mode [ 110.987627][ T8054] hsr_slave_1: entered promiscuous mode [ 110.996161][ T8054] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.002362][ T8054] Cannot create hsr debugfs directory [ 111.171583][ T8080] netlink: 4 bytes leftover after parsing attributes in process `syz.0.514'. [ 111.181154][ T8080] netlink: 12 bytes leftover after parsing attributes in process `syz.0.514'. [ 111.194770][ T1142] hsr_slave_0: left promiscuous mode [ 111.197840][ T1142] hsr_slave_1: left promiscuous mode [ 111.220385][ T1142] veth1_macvtap: left promiscuous mode [ 111.221965][ T1142] veth0_macvtap: left promiscuous mode [ 111.223427][ T1142] veth1_vlan: left promiscuous mode [ 111.224832][ T1142] veth0_vlan: left promiscuous mode [ 111.806564][ T1142] team0 (unregistering): Port device team_slave_1 removed [ 111.879689][ T1142] team0 (unregistering): Port device team_slave_0 removed [ 111.966169][ T5953] Bluetooth: hci3: command tx timeout [ 112.397840][ T8091] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 112.400168][ T8091] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 112.403273][ T8091] vhci_hcd vhci_hcd.0: Device attached [ 112.502088][ T8101] 9pnet_virtio: no channels available for device syz [ 112.525395][ T8101] overlayfs: overlapping lowerdir path [ 112.581705][ T8101] afs: Unknown parameter '_µWzk' [ 112.587217][ T832] vhci_hcd: vhci_device speed not set [ 113.098156][ T832] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 113.132950][ T8054] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 113.164414][ T8054] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 113.177082][ T8054] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 113.180721][ T8054] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 113.235311][ T8054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.259577][ T8054] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.272551][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.274510][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.289302][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.291223][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.438804][ T8054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.490937][ T8092] vhci_hcd: connection reset by peer [ 113.494827][ T69] vhci_hcd: stop threads [ 113.497619][ T69] vhci_hcd: release socket [ 113.499050][ T69] vhci_hcd: disconnect device [ 113.506784][ T8130] netlink: 'syz.1.519': attribute type 21 has an invalid length. [ 113.508876][ T8130] netlink: 132 bytes leftover after parsing attributes in process `syz.1.519'. [ 113.556567][ T8054] veth0_vlan: entered promiscuous mode [ 113.560224][ T8054] veth1_vlan: entered promiscuous mode [ 113.572187][ T8054] veth0_macvtap: entered promiscuous mode [ 113.575020][ T8054] veth1_macvtap: entered promiscuous mode [ 113.580159][ T8143] syz.0.520: attempt to access beyond end of device [ 113.580159][ T8143] nbd0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 113.582635][ T8054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.583527][ T8143] FAT-fs (nbd0): unable to read boot sector [ 113.586815][ T8054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.590409][ T8054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.593108][ T8054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.599692][ T8054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.602480][ T8054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.605651][ T8054] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.610171][ T8054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.612893][ T8054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.615449][ T8054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.619109][ T8054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.621610][ T8054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.624255][ T8054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.627469][ T8054] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.631018][ T8054] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.633271][ T8054] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.635538][ T8054] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.638498][ T8054] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.642611][ T8147] bridge0: port 3(netdevsim0) entered blocking state [ 113.644858][ T8147] bridge0: port 3(netdevsim0) entered disabled state [ 113.647512][ T8147] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 113.650625][ T8147] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 113.652854][ T8147] bridge0: port 3(netdevsim0) entered blocking state [ 113.654752][ T8147] bridge0: port 3(netdevsim0) entered forwarding state [ 113.688277][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.690361][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.700252][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.702298][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.833634][ T8167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.532'. [ 115.107310][ T8180] 9pnet_virtio: no channels available for device syz [ 115.216613][ T8185] 9pnet_fd: Insufficient options for proto=fd [ 115.939323][ T76] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.055285][ T5949] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 116.058980][ T5949] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 116.061590][ T5949] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 116.065616][ T5949] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 116.068611][ T5949] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 116.070673][ T5949] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 116.154748][ T8203] chnl_net:caif_netlink_parms(): no params data found [ 116.190745][ T8217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.539'. [ 116.246763][ T8203] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.248751][ T8203] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.250647][ T8203] bridge_slave_0: entered allmulticast mode [ 116.252594][ T8203] bridge_slave_0: entered promiscuous mode [ 116.255004][ T8203] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.257712][ T8203] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.259585][ T8203] bridge_slave_1: entered allmulticast mode [ 116.261511][ T8203] bridge_slave_1: entered promiscuous mode [ 116.301885][ T8203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.309410][ T8203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.428515][ T8203] team0: Port device team_slave_0 added [ 116.432780][ T8203] team0: Port device team_slave_1 added [ 116.489554][ T8203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.491483][ T8203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.511258][ T8203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.514980][ T8203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.519690][ T8203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.544824][ T8203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.624382][ T8203] hsr_slave_0: entered promiscuous mode [ 116.628260][ T8203] hsr_slave_1: entered promiscuous mode [ 116.925903][ T5949] Bluetooth: hci2: command 0x0c1a tx timeout [ 117.352450][ T8243] FAULT_INJECTION: forcing a failure. [ 117.352450][ T8243] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 117.355975][ T8243] CPU: 3 UID: 0 PID: 8243 Comm: syz.2.546 Not tainted 6.12.0-syzkaller-11716-gd8b78066f4c9 #0 [ 117.358625][ T8243] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 117.361397][ T8243] Call Trace: [ 117.362277][ T8243] [ 117.363059][ T8243] dump_stack_lvl+0x16c/0x1f0 [ 117.364312][ T8243] should_fail_ex+0x497/0x5b0 [ 117.365571][ T8243] _copy_to_user+0x32/0xd0 [ 117.366750][ T8243] snd_pcm_oss_read2+0x292/0x3e0 [ 117.368045][ T8243] ? __pfx_snd_pcm_oss_read2+0x10/0x10 [ 117.369431][ T8243] ? snd_pcm_kernel_ioctl+0x267/0x2e0 [ 117.370893][ T8243] snd_pcm_oss_read+0x5a3/0x750 [ 117.372518][ T8243] ? __pfx_snd_pcm_oss_read+0x10/0x10 [ 117.373943][ T8243] vfs_read+0x1df/0xbe0 [ 117.375039][ T8243] ? __fget_files+0x1fc/0x3a0 [ 117.376279][ T8243] ? __pfx_lock_release+0x10/0x10 [ 117.377600][ T8243] ? __pfx_vfs_read+0x10/0x10 [ 117.378826][ T8243] ? lock_acquire+0x2f/0xb0 [ 117.380014][ T8243] ? __fget_files+0x40/0x3a0 [ 117.381220][ T8243] ? __fget_files+0x206/0x3a0 [ 117.382452][ T8243] ksys_read+0x12b/0x250 [ 117.383482][ T8243] ? __pfx_ksys_read+0x10/0x10 [ 117.384733][ T8243] __do_fast_syscall_32+0x73/0x120 [ 117.386098][ T8243] do_fast_syscall_32+0x32/0x80 [ 117.387424][ T8243] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 117.389092][ T8243] RIP: 0023:0xf7f96579 [ 117.390182][ T8243] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 117.395192][ T8243] RSP: 002b:00000000f50f557c EFLAGS: 00000292 ORIG_RAX: 0000000000000003 [ 117.397379][ T8243] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200023c0 [ 117.399436][ T8243] RDX: 0000000000002020 RSI: 0000000000000000 RDI: 0000000000000000 [ 117.401523][ T8243] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 117.403576][ T8243] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 117.405628][ T8243] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 117.407685][ T8243] [ 117.558206][ T8253] overlay: Unknown parameter 'smackfsfloor' [ 118.127536][ T5953] Bluetooth: hci3: command tx timeout [ 118.131502][ T76] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.196866][ T8261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.551'. [ 118.206997][ T832] vhci_hcd: vhci_device speed not set [ 118.210599][ T76] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.266151][ T76] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.371630][ T76] bridge_slave_1: left allmulticast mode [ 118.375224][ T76] bridge_slave_1: left promiscuous mode [ 118.377687][ T76] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.392819][ T76] bridge_slave_0: left allmulticast mode [ 118.394636][ T76] bridge_slave_0: left promiscuous mode [ 118.396410][ T76] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.810907][ T76] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.815303][ T76] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.819413][ T76] bond0 (unregistering): Released all slaves [ 119.176647][ T76] hsr_slave_0: left promiscuous mode [ 119.178747][ T76] hsr_slave_1: left promiscuous mode [ 119.180702][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.182682][ T76] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.185391][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.187720][ T76] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.220054][ T76] veth1_macvtap: left promiscuous mode [ 119.221600][ T76] veth0_macvtap: left promiscuous mode [ 119.223756][ T76] veth1_vlan: left promiscuous mode [ 119.225135][ T76] veth0_vlan: left promiscuous mode [ 119.475139][ T5953] block nbd2: Receive control failed (result -32) [ 119.475852][ T5949] block nbd2: Receive control failed (result -32) [ 119.505858][ T5949] block nbd0: Receive control failed (result -32) [ 119.505976][ T5953] block nbd0: Receive control failed (result -32) [ 119.517040][ T8296] block nbd2: shutting down sockets [ 119.548862][ T8292] block nbd0: shutting down sockets [ 119.687487][ T8308] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 119.734410][ T8303] kvm: pic: level sensitive irq not supported [ 119.738785][ T8303] kvm: pic: non byte read [ 119.751358][ T8303] kvm: pic: level sensitive irq not supported [ 119.751617][ T8303] kvm: pic: non byte read [ 119.756116][ T8303] netlink: 4 bytes leftover after parsing attributes in process `syz.2.558'. [ 119.793802][ T8310] netlink: 'syz.0.560': attribute type 4 has an invalid length. [ 119.874617][ T8313] ISOFS: Unable to identify CD-ROM format. [ 120.026959][ T76] team0 (unregistering): Port device team_slave_1 removed [ 120.113405][ T832] IPVS: starting estimator thread 0... [ 120.144407][ T76] team0 (unregistering): Port device team_slave_0 removed [ 120.219939][ T5953] Bluetooth: hci3: command tx timeout [ 120.220151][ T8324] IPVS: using max 40 ests per chain, 96000 per kthread [ 120.717796][ T8323] tipc: Started in network mode [ 120.719620][ T8323] tipc: Node identity ac1414aa, cluster identity 4711 [ 120.722998][ T8323] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 120.725755][ T8323] tipc: Enabled bearer , priority 10 [ 120.751375][ T8203] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 120.755464][ T8203] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 120.760197][ T8203] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 120.763117][ T8203] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 120.810980][ T8203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.820352][ T8203] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.840037][ T1133] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.842161][ T1133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.860708][ T1133] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.862769][ T1133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.866724][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 120.992774][ T8203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.005977][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 121.074056][ T5953] block nbd0: Receive control failed (result -32) [ 121.086024][ T5949] block nbd0: Receive control failed (result -32) [ 121.145903][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 121.192782][ T8349] block nbd0: shutting down sockets [ 121.285933][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 121.425852][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 121.441188][ T8203] veth0_vlan: entered promiscuous mode [ 121.468838][ T8203] veth1_vlan: entered promiscuous mode [ 121.494533][ T8203] veth0_macvtap: entered promiscuous mode [ 121.499738][ T8203] veth1_macvtap: entered promiscuous mode [ 121.506020][ T8203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.508909][ T8203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.511639][ T8203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.514454][ T8203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.517568][ T8203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.520436][ T8203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.523804][ T8203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.528900][ T8203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.532085][ T8203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.535518][ T8203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.539960][ T8203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.542986][ T8203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.545661][ T8203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.548830][ T8203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.553291][ T8203] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.555610][ T8203] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.558023][ T8203] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.560316][ T8203] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.576049][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 121.585498][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.588525][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.607978][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.610074][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.717411][ T9] tipc: Node number set to 2886997162 [ 121.865845][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 121.904893][ T5949] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 121.907955][ T8374] block nbd0: Device being setup by another task [ 121.911019][ T8373] block nbd0: shutting down sockets [ 122.135877][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 122.182158][ T8387] syz.2.574: attempt to access beyond end of device [ 122.182158][ T8387] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 122.185598][ T8387] FAT-fs (nbd2): unable to read boot sector [ 122.260122][ T8374] block nbd0: NBD_DISCONNECT [ 122.261498][ T8374] block nbd0: Send disconnect failed -32 [ 122.675840][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 122.679611][ T8401] netlink: 'syz.0.579': attribute type 1 has an invalid length. [ 122.682708][ T8401] netlink: 244 bytes leftover after parsing attributes in process `syz.0.579'. [ 123.290045][ T1133] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.415145][ T8415] netlink: 4 bytes leftover after parsing attributes in process `syz.2.582'. [ 123.492344][ T5953] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 123.496028][ T5953] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 123.498399][ T5953] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 123.502370][ T5953] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 123.516348][ T5953] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 123.518827][ T5953] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 123.655495][ T8422] chnl_net:caif_netlink_parms(): no params data found [ 123.665913][ T832] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 123.722468][ T8422] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.724769][ T8422] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.728280][ T8422] bridge_slave_0: entered allmulticast mode [ 123.731032][ T8422] bridge_slave_0: entered promiscuous mode [ 123.734556][ T8422] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.737493][ T8422] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.739916][ T8422] bridge_slave_1: entered allmulticast mode [ 123.742633][ T8422] bridge_slave_1: entered promiscuous mode [ 123.774483][ T8422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.778988][ T8422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.803481][ T8422] team0: Port device team_slave_0 added [ 123.807274][ T8422] team0: Port device team_slave_1 added [ 123.830370][ T8422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.832689][ T8422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.840858][ T8422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.845882][ T832] usb 7-1: Using ep0 maxpacket: 8 [ 123.848635][ T832] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 123.849635][ T8422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.851664][ T832] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 123.854113][ T8422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.857264][ T832] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 123.867472][ T8422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.872863][ T832] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 123.876549][ T832] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 123.879666][ T832] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.886015][ T25] libceph: connect (1)[c::]:6789 error -101 [ 123.887823][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 123.893312][ T25] libceph: connect (1)[c::]:6789 error -101 [ 123.895388][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 123.939192][ T8422] hsr_slave_0: entered promiscuous mode [ 123.941790][ T8422] hsr_slave_1: entered promiscuous mode [ 123.944105][ T8422] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 123.946587][ T8422] Cannot create hsr debugfs directory [ 124.050762][ T8440] ceph: No mds server is up or the cluster is laggy [ 124.095589][ T832] usb 7-1: usb_control_msg returned -71 [ 124.097922][ T832] usbtmc 7-1:16.0: can't read capabilities [ 124.106372][ T832] usb 7-1: USB disconnect, device number 4 [ 124.210854][ T8447] netlink: 'syz.0.585': attribute type 1 has an invalid length. [ 124.212845][ T8447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.585'. [ 124.611736][ T8452] syz_tun: entered promiscuous mode [ 124.614781][ T8452] batadv_slave_0: entered promiscuous mode [ 124.652039][ T8459] overlay: Unknown parameter 'smackfsfloor' [ 124.678106][ T8457] afs: Unknown parameter '_µWzk' [ 125.125548][ T1133] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.201070][ T1133] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.220180][ T8470] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 125.317292][ T1133] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.441218][ T1133] bridge_slave_1: left allmulticast mode [ 125.442719][ T1133] bridge_slave_1: left promiscuous mode [ 125.444222][ T1133] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.450105][ T1133] bridge_slave_0: left allmulticast mode [ 125.451621][ T1133] bridge_slave_0: left promiscuous mode [ 125.453111][ T1133] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.566954][ T5949] Bluetooth: hci3: command tx timeout [ 125.738336][ T1133] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.742009][ T1133] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.745093][ T1133] bond0 (unregistering): Released all slaves [ 125.808040][ C0] net_ratelimit: 2 callbacks suppressed [ 125.808054][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 125.965235][ T8501] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 126.017215][ T8508] netlink: 28 bytes leftover after parsing attributes in process `syz.0.600'. [ 126.042988][ T8509] afs: Unknown parameter '_µWzk' [ 126.071777][ T8512] netlink: 'syz.0.601': attribute type 10 has an invalid length. [ 126.094834][ T8512] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 126.100695][ T1133] hsr_slave_0: left promiscuous mode [ 126.102445][ T1133] hsr_slave_1: left promiscuous mode [ 126.104175][ T1133] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.106328][ T1133] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.116311][ T1133] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.118237][ T1133] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.142008][ T1133] veth1_macvtap: left promiscuous mode [ 126.143509][ T1133] veth0_macvtap: left promiscuous mode [ 126.144950][ T1133] veth1_vlan: left promiscuous mode [ 126.155234][ T1133] veth0_vlan: left promiscuous mode [ 126.641312][ T5949] block nbd1: Receive control failed (result -32) [ 126.651122][ T5949] block nbd1: Receive control failed (result -32) [ 126.688435][ T8535] block nbd1: shutting down sockets [ 126.739269][ T8537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.605'. [ 126.848594][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 126.936660][ T8541] netlink: 'syz.1.606': attribute type 4 has an invalid length. [ 126.941761][ T1133] team0 (unregistering): Port device team_slave_1 removed [ 127.022028][ T1133] team0 (unregistering): Port device team_slave_0 removed [ 127.605431][ T8422] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 127.609085][ T8422] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 127.616927][ T8422] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 127.620030][ T8422] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 127.647066][ T5949] Bluetooth: hci3: command tx timeout [ 127.662155][ T8422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.673532][ T8422] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.677985][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.680345][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.689058][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.691063][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.703679][ T8422] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 127.706418][ T8422] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 127.810974][ T8561] netlink: 'syz.0.609': attribute type 10 has an invalid length. [ 127.865484][ T8422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.885900][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 128.025546][ T8422] veth0_vlan: entered promiscuous mode [ 128.030250][ T8422] veth1_vlan: entered promiscuous mode [ 128.043254][ T8422] veth0_macvtap: entered promiscuous mode [ 128.049422][ T8422] veth1_macvtap: entered promiscuous mode [ 128.058532][ T8422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.061369][ T8422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.064001][ T8422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.069450][ T8422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.072165][ T8422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.075029][ T8422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.078454][ T8422] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.176917][ T8422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.180620][ T8422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.183897][ T8422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.187247][ T8422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.189772][ T8422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.192441][ T8422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.195491][ T8422] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.213451][ T6202] syz_tun (unregistering): left promiscuous mode [ 128.216787][ T8422] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.219036][ T8422] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.221238][ T8422] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.223487][ T8422] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.249353][ T165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.255508][ T165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.275358][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.278752][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.600587][ T5308] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 128.603669][ T5308] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 128.606898][ T5308] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 128.609689][ T5308] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 128.612407][ T5308] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 128.614888][ T5308] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 128.695424][ T8576] chnl_net:caif_netlink_parms(): no params data found [ 128.745568][ T8576] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.747616][ T8576] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.749540][ T8576] bridge_slave_0: entered allmulticast mode [ 128.751825][ T8576] bridge_slave_0: entered promiscuous mode [ 128.755266][ T8576] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.757520][ T8576] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.759425][ T8576] bridge_slave_1: entered allmulticast mode [ 128.761445][ T8576] bridge_slave_1: entered promiscuous mode [ 128.782402][ T8576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.785911][ T8576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.806227][ T8576] team0: Port device team_slave_0 added [ 128.808799][ T8576] team0: Port device team_slave_1 added [ 128.824840][ T8576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.826845][ T8576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.833650][ T8576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.837590][ T8576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.839464][ T8576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.846549][ T8576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.870580][ T8576] hsr_slave_0: entered promiscuous mode [ 128.872715][ T8576] hsr_slave_1: entered promiscuous mode [ 128.965727][ T8576] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 128.970690][ T8576] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 128.975303][ T8576] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 128.980860][ T8576] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 128.999235][ T8576] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.001969][ T8576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.004716][ T8576] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.007436][ T8576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.039294][ T8576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.053115][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.056816][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.069705][ T8576] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.076402][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.078356][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.084635][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.086592][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.122973][ T8589] netlink: 32 bytes leftover after parsing attributes in process `syz.2.619'. [ 129.191602][ T8576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.293286][ T8576] veth0_vlan: entered promiscuous mode [ 129.301611][ T8576] veth1_vlan: entered promiscuous mode [ 129.314981][ T8576] veth0_macvtap: entered promiscuous mode [ 129.318196][ T8576] veth1_macvtap: entered promiscuous mode [ 129.323852][ T8576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.328068][ T8576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.330532][ T8576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.333198][ T8576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.336279][ T8576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.340054][ T8576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.343389][ T8576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.346963][ T8576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.350538][ T8576] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.356806][ T8576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.359524][ T8576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.362054][ T8576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.364714][ T8576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.367410][ T8576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.370108][ T8576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.372612][ T8576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.375689][ T8576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.380345][ T8576] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.385627][ T8576] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.388118][ T8576] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.391011][ T8576] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.393958][ T8576] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.416292][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.418493][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.426892][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.428964][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.705943][ T8613] block nbd5: Device being setup by another task [ 129.725978][ T5953] Bluetooth: hci3: command tx timeout [ 130.301250][ T5953] block nbd5: Receive control failed (result -32) [ 130.306625][ T8615] block nbd5: shutting down sockets [ 130.384128][ T8622] netlink: 20 bytes leftover after parsing attributes in process `syz.0.624'. [ 130.387124][ T8624] 9pnet_virtio: no channels available for device syz [ 130.685926][ T5953] Bluetooth: hci2: command tx timeout [ 132.127229][ T1411] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.128898][ T1411] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.455887][ T1319] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 132.530140][ T5950] block nbd0: Receive control failed (result -32) [ 132.530243][ T5308] block nbd0: Receive control failed (result -32) [ 132.531132][ T8654] block nbd0: shutting down sockets [ 132.617198][ T1319] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.620983][ T1319] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 132.623975][ T1319] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 132.627274][ T1319] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 132.630733][ T1319] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.645489][ T8677] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 132.650107][ T1319] hub 7-1:1.0: bad descriptor, ignoring hub [ 132.652167][ T1319] hub 7-1:1.0: probe with driver hub failed with error -5 [ 132.656327][ T1319] cdc_wdm 7-1:1.0: skipping garbage [ 132.658138][ T1319] cdc_wdm 7-1:1.0: skipping garbage [ 132.661875][ T1319] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 132.663933][ T1319] cdc_wdm 7-1:1.0: Unknown control protocol [ 132.776095][ T5308] Bluetooth: hci2: command tx timeout [ 132.854293][ T8677] tipc: Enabling of bearer rejected, media not registered [ 133.415135][ T8677] usb 7-1: reset low-speed USB device number 5 using dummy_hcd [ 133.602039][ T8694] xt_hashlimit: size too large, truncated to 1048576 [ 133.603835][ T8694] xt_hashlimit: overflow, try lower: 0/0 [ 133.733631][ T8687] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 133.750658][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 133.753271][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 133.756547][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 133.758949][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 133.761484][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 133.763861][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 133.766382][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 133.768800][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 133.771198][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 133.773592][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 133.775973][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 133.778349][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 133.780709][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 133.783081][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 133.785452][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 133.787797][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 133.790176][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 133.792536][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 133.794895][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 133.797259][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 133.903332][ T8700] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 133.908241][ T8700] netlink: 16 bytes leftover after parsing attributes in process `syz.5.644'. [ 133.940191][ T8700] overlay: ./bus is not a directory [ 134.051778][ T8702] netlink: 92 bytes leftover after parsing attributes in process `syz.5.645'. [ 134.077675][ T63] usb 7-1: USB disconnect, device number 5 [ 134.772981][ T5308] Bluetooth: hci0: unexpected event 0x03 length: 16 > 11 [ 134.773045][ T5308] Bluetooth: hci0: unexpected event 0x03 length: 16 > 11 [ 134.786539][ T5308] Bluetooth: hci0: unexpected event for opcode 0x200a [ 134.845914][ T5308] Bluetooth: hci2: command 0x040f tx timeout [ 135.457906][ T8731] netlink: 4 bytes leftover after parsing attributes in process `syz.5.653'. [ 136.068917][ T8741] cgroup: subsys name conflicts with all [ 136.170296][ T8742] netlink: 'syz.2.655': attribute type 1 has an invalid length. [ 136.181217][ T8742] 8021q: adding VLAN 0 to HW filter on device bond2 [ 136.463781][ T8751] 9pnet_fd: Insufficient options for proto=fd [ 136.926458][ T5308] Bluetooth: hci2: command 0x040f tx timeout [ 137.020148][ T8759] netlink: 48 bytes leftover after parsing attributes in process `syz.2.660'. [ 137.546344][ T8769] netlink: 'syz.0.663': attribute type 4 has an invalid length. [ 137.746681][ T8778] netlink: 4 bytes leftover after parsing attributes in process `syz.0.666'. [ 137.750571][ T8778] netlink: 12 bytes leftover after parsing attributes in process `syz.0.666'. [ 137.997874][ T8785] netlink: 20 bytes leftover after parsing attributes in process `syz.5.669'. [ 138.067127][ T8788] netlink: 'syz.2.668': attribute type 1 has an invalid length. [ 138.069175][ T8788] netlink: 244 bytes leftover after parsing attributes in process `syz.2.668'. [ 139.005917][ T5308] Bluetooth: hci2: command 0x040f tx timeout [ 140.020142][ T8807] netlink: 4 bytes leftover after parsing attributes in process `syz.5.673'. [ 140.251784][ T8815] netlink: 12 bytes leftover after parsing attributes in process `syz.5.676'. [ 140.470850][ T8820] binder: 8816:8820 ioctl c0306201 20000680 returned -14 [ 141.223768][ T8830] 9pnet_fd: Insufficient options for proto=fd [ 142.053926][ T39] kauditd_printk_skb: 87 callbacks suppressed [ 142.053942][ T39] audit: type=1326 audit(1733034383.150:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8838 comm="syz.0.682" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 142.064152][ T39] audit: type=1326 audit(1733034383.150:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8838 comm="syz.0.682" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 142.071776][ T39] audit: type=1326 audit(1733034383.160:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8838 comm="syz.0.682" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 142.079790][ T39] audit: type=1326 audit(1733034383.160:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8838 comm="syz.0.682" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 142.087258][ T39] audit: type=1326 audit(1733034383.160:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8838 comm="syz.0.682" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 142.094893][ T39] audit: type=1326 audit(1733034383.170:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8838 comm="syz.0.682" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 142.102345][ T39] audit: type=1326 audit(1733034383.170:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8838 comm="syz.0.682" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 142.109769][ T39] audit: type=1326 audit(1733034383.170:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8838 comm="syz.0.682" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 142.115180][ T8842] overlay: Unknown parameter 'smackfsfloor' [ 142.121088][ T8839] autofs4:pid:8839:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 142.124739][ T39] audit: type=1326 audit(1733034383.170:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8838 comm="syz.0.682" exe="/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 142.135870][ T39] audit: type=1326 audit(1733034383.170:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8838 comm="syz.0.682" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ce579 code=0x7ffc0000 [ 142.264338][ T8849] syzkaller1: entered promiscuous mode [ 142.266442][ T8849] syzkaller1: entered allmulticast mode [ 142.835867][ T832] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 142.998746][ T832] usb 10-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 143.001515][ T832] usb 10-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 143.003844][ T832] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 143.007962][ T832] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.229285][ T832] usb 10-1: USB disconnect, device number 2 [ 143.344150][ T8857] xt_hashlimit: size too large, truncated to 1048576 [ 143.348168][ T8857] xt_hashlimit: overflow, try lower: 0/0 [ 143.366785][ T8848] /dev/sr0: Can't open blockdev [ 144.189702][ T5308] block nbd5: Receive control failed (result -32) [ 144.194833][ T8862] block nbd5: shutting down sockets [ 144.238693][ T8865] overlay: Unknown parameter 'smackfsfloor' [ 144.313091][ T8870] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 144.315462][ T8870] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 144.319626][ T8870] vhci_hcd vhci_hcd.0: Device attached [ 144.438795][ T5308] block nbd0: Receive control failed (result -32) [ 144.489896][ T8867] block nbd0: shutting down sockets [ 144.496065][ T62] vhci_hcd: vhci_device speed not set [ 144.556048][ T62] usb 41-1: new full-speed USB device number 3 using vhci_hcd [ 144.648396][ T8878] 9pnet_fd: Insufficient options for proto=fd [ 145.006326][ T8892] 9pnet_virtio: no channels available for device syz [ 145.150070][ T8871] vhci_hcd: connection reset by peer [ 145.152606][ T1172] vhci_hcd: stop threads [ 145.153751][ T1172] vhci_hcd: release socket [ 145.155939][ T1172] vhci_hcd: disconnect device [ 145.505908][ T8897] block nbd0: Device being setup by another task [ 145.510710][ T8897] block nbd0: shutting down sockets [ 145.685912][ T8896] nbd0: detected capacity change from 0 to 20 [ 145.687657][ T8897] block nbd0: NBD_DISCONNECT [ 145.689856][ T6156] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 145.692546][ T6156] Buffer I/O error on dev nbd0, logical block 0, async page read [ 145.694673][ T6156] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 145.695991][ T8897] block nbd0: Send disconnect failed -32 [ 145.697180][ T6156] Buffer I/O error on dev nbd0, logical block 0, async page read [ 145.700601][ T6156] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 145.703811][ T6156] Buffer I/O error on dev nbd0, logical block 0, async page read [ 145.706590][ T6156] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 145.709004][ T6156] Buffer I/O error on dev nbd0, logical block 0, async page read [ 145.711105][ T6156] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 145.713462][ T6156] Buffer I/O error on dev nbd0, logical block 0, async page read [ 145.715707][ T6156] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 145.718398][ T6156] Buffer I/O error on dev nbd0, logical block 0, async page read [ 145.720466][ T6156] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 145.722885][ T6156] Buffer I/O error on dev nbd0, logical block 0, async page read [ 145.724946][ T6156] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 145.728873][ T6156] Buffer I/O error on dev nbd0, logical block 0, async page read [ 145.730982][ T6156] ldm_validate_partition_table(): Disk read failed. [ 145.732718][ T6156] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 145.735048][ T6156] Buffer I/O error on dev nbd0, logical block 0, async page read [ 145.737762][ T6156] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 145.741205][ T6156] Buffer I/O error on dev nbd0, logical block 0, async page read [ 145.743354][ T6156] Dev nbd0: unable to read RDB block 0 [ 145.745127][ T6156] nbd0: unable to read partition table [ 145.746976][ T6156] nbd0: partition table beyond EOD, truncated [ 145.985329][ T6156] ldm_validate_partition_table(): Disk read failed. [ 145.990283][ T6156] Dev nbd0: unable to read RDB block 0 [ 145.992373][ T6156] nbd0: unable to read partition table [ 145.994099][ T6156] nbd0: partition table beyond EOD, truncated [ 146.520852][ T8918] 9pnet_fd: Insufficient options for proto=fd [ 146.624686][ T8923] netlink: 28 bytes leftover after parsing attributes in process `syz.5.706'. [ 146.625019][ T8924] netlink: 28 bytes leftover after parsing attributes in process `syz.5.706'. [ 146.632361][ T8923] netlink: 8 bytes leftover after parsing attributes in process `syz.5.706'. [ 146.696351][ T8926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.707'. [ 146.721616][ T8931] netlink: 20 bytes leftover after parsing attributes in process `syz.0.705'. [ 146.739555][ T8933] netlink: 4 bytes leftover after parsing attributes in process `syz.2.709'. [ 147.645055][ T8949] 9pnet_fd: Insufficient options for proto=fd [ 147.896037][ T8963] 9pnet_virtio: no channels available for device syz [ 148.110989][ T8966] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.117250][ T8966] netlink: 4 bytes leftover after parsing attributes in process `syz.0.717'. [ 148.167636][ T8966] bridge_slave_1 (unregistering): left allmulticast mode [ 148.169429][ T8966] bridge_slave_1 (unregistering): left promiscuous mode [ 148.171238][ T8966] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.344511][ T8973] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 148.346278][ T8973] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 148.348480][ T8973] vhci_hcd vhci_hcd.0: Device attached [ 148.459087][ T8977] afs: Unknown parameter '_µWzk' [ 148.525990][ T56] vhci_hcd: vhci_device speed not set [ 148.595972][ T56] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 148.631709][ T8980] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 148.633498][ T8980] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 148.636134][ T8980] vhci_hcd vhci_hcd.0: Device attached [ 148.652573][ T8971] block nbd2: shutting down sockets [ 148.656947][ T8971] block nbd2: server does not support multiple connections per device. [ 148.660361][ T8971] block nbd2: NBD_DISCONNECT [ 148.661989][ T8971] block nbd2: Send disconnect failed -32 [ 148.663848][ T8971] block nbd2: Send disconnect failed -32 [ 148.743737][ T8983] 9pnet_virtio: no channels available for device syz [ 148.760597][ T8983] overlayfs: overlapping lowerdir path [ 148.780561][ T8983] afs: Unknown parameter '_µWzk' [ 148.825923][ T5972] vhci_hcd: vhci_device speed not set [ 148.896007][ T5972] usb 47-1: new full-speed USB device number 2 using vhci_hcd [ 149.267692][ T8974] vhci_hcd: connection reset by peer [ 149.269671][ T45] vhci_hcd: stop threads [ 149.271071][ T45] vhci_hcd: release socket [ 149.272428][ T45] vhci_hcd: disconnect device [ 149.483763][ T8981] vhci_hcd: connection reset by peer [ 149.493643][ T45] vhci_hcd: stop threads [ 149.495240][ T45] vhci_hcd: release socket [ 149.500047][ T45] vhci_hcd: disconnect device [ 149.726355][ T62] vhci_hcd: vhci_device speed not set [ 150.289845][ T8995] netlink: 20 bytes leftover after parsing attributes in process `syz.2.725'. [ 150.730260][ T5308] block nbd5: Receive control failed (result -32) [ 150.798174][ T9015] block nbd5: shutting down sockets [ 151.037579][ T5308] block nbd5: Receive control failed (result -32) [ 151.041649][ T9017] block nbd5: shutting down sockets [ 151.119198][ T9025] netlink: 'syz.5.733': attribute type 4 has an invalid length. [ 152.430264][ T9055] netlink: 'syz.5.741': attribute type 10 has an invalid length. [ 153.289144][ T9069] 9pnet: Unknown protocol version 9p200 [ 153.291477][ T9069] lo speed is unknown, defaulting to 1000 [ 153.293695][ T9069] lo speed is unknown, defaulting to 1000 [ 153.296481][ T9069] lo speed is unknown, defaulting to 1000 [ 153.306896][ T9069] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 153.321126][ T9069] lo speed is unknown, defaulting to 1000 [ 153.324826][ T9069] lo speed is unknown, defaulting to 1000 [ 153.328686][ T9069] lo speed is unknown, defaulting to 1000 [ 153.331656][ T9069] lo speed is unknown, defaulting to 1000 [ 153.334719][ T9069] lo speed is unknown, defaulting to 1000 [ 153.338403][ T9069] lo speed is unknown, defaulting to 1000 [ 153.493109][ T9078] overlayfs: missing 'lowerdir' [ 153.495142][ T9077] overlayfs: missing 'lowerdir' [ 153.539129][ T9081] netlink: 20 bytes leftover after parsing attributes in process `syz.0.747'. [ 153.715948][ T56] vhci_hcd: vhci_device speed not set [ 154.049125][ T9085] FAULT_INJECTION: forcing a failure. [ 154.049125][ T9085] name failslab, interval 1, probability 0, space 0, times 0 [ 154.052570][ T9085] CPU: 3 UID: 0 PID: 9085 Comm: syz.2.748 Not tainted 6.12.0-syzkaller-11716-gd8b78066f4c9 #0 [ 154.055200][ T9085] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 154.057174][ T5972] vhci_hcd: vhci_device speed not set [ 154.058036][ T9085] Call Trace: [ 154.058042][ T9085] [ 154.061745][ T9085] dump_stack_lvl+0x16c/0x1f0 [ 154.062996][ T9085] should_fail_ex+0x497/0x5b0 [ 154.064231][ T9085] ? fs_reclaim_acquire+0xae/0x150 [ 154.065600][ T9085] should_failslab+0xc2/0x120 [ 154.066907][ T9085] __kmalloc_cache_noprof+0x68/0x420 [ 154.068320][ T9085] ? do_raw_spin_lock+0x12d/0x2c0 [ 154.069665][ T9085] p9_client_stat+0x98/0x250 [ 154.070885][ T9085] ? __pfx_p9_client_stat+0x10/0x10 [ 154.072238][ T9085] ? _raw_spin_unlock+0x28/0x50 [ 154.073563][ T9085] ? v9fs_fid_find+0x20f/0x360 [ 154.074835][ T9085] ? __pfx_v9fs_fid_find+0x10/0x10 [ 154.076274][ T9085] v9fs_refresh_inode+0xba/0x240 [ 154.077679][ T9085] ? __pfx_v9fs_refresh_inode+0x10/0x10 [ 154.079405][ T9085] ? v9fs_fid_lookup+0xe9/0xec0 [ 154.080707][ T9085] v9fs_lookup_revalidate+0x17e/0x2b0 [ 154.082143][ T9085] lookup_fast+0x43f/0x540 [ 154.083346][ T9085] path_openat+0x68f/0x2d60 [ 154.084552][ T9085] ? __pfx_path_openat+0x10/0x10 [ 154.085886][ T9085] ? __pfx___lock_acquire+0x10/0x10 [ 154.087288][ T9085] ? lock_acquire.part.0+0x11b/0x380 [ 154.088706][ T9085] ? find_held_lock+0x2d/0x110 [ 154.089997][ T9085] do_filp_open+0x20c/0x470 [ 154.091194][ T9085] ? __pfx_do_filp_open+0x10/0x10 [ 154.092512][ T9085] ? find_held_lock+0x2d/0x110 [ 154.093842][ T9085] ? alloc_fd+0x41f/0x760 [ 154.094967][ T9085] do_sys_openat2+0x17a/0x1e0 [ 154.096229][ T9085] ? __pfx_do_sys_openat2+0x10/0x10 [ 154.097657][ T9085] ? __fget_files+0x206/0x3a0 [ 154.098925][ T9085] __ia32_compat_sys_openat+0x16e/0x210 [ 154.100380][ T9085] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 154.101985][ T9085] ? ksys_write+0x1ba/0x250 [ 154.103208][ T9085] __do_fast_syscall_32+0x73/0x120 [ 154.104574][ T9085] do_fast_syscall_32+0x32/0x80 [ 154.105874][ T9085] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 154.107558][ T9085] RIP: 0023:0xf7f96579 [ 154.108647][ T9085] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 154.113622][ T9085] RSP: 002b:00000000f50f557c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 154.115704][ T9085] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000100 [ 154.117817][ T9085] RDX: 000000000000275a RSI: 0000000000000000 RDI: 0000000000000000 [ 154.119903][ T9085] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 154.121954][ T9085] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 154.124024][ T9085] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 154.126109][ T9085] [ 155.134434][ T9116] ubi0: attaching mtd0 [ 155.138793][ T9116] ubi0: scanning is finished [ 155.140606][ T9116] ubi0: empty MTD device detected [ 155.190980][ T39] kauditd_printk_skb: 38 callbacks suppressed [ 155.190998][ T39] audit: type=1326 audit(1733034396.280:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9113 comm="syz.5.758" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739e579 code=0x7ffc0000 [ 155.200934][ T39] audit: type=1326 audit(1733034396.280:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9113 comm="syz.5.758" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf739e579 code=0x7ffc0000 [ 155.208273][ T39] audit: type=1326 audit(1733034396.280:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9113 comm="syz.5.758" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739e579 code=0x7ffc0000 [ 155.210212][ T9114] autofs4:pid:9114:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 155.214826][ T39] audit: type=1326 audit(1733034396.280:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9113 comm="syz.5.758" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf739e579 code=0x7ffc0000 [ 155.224479][ T39] audit: type=1326 audit(1733034396.280:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9113 comm="syz.5.758" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739e579 code=0x7ffc0000 [ 155.231080][ T39] audit: type=1326 audit(1733034396.280:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9113 comm="syz.5.758" exe="/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf739e579 code=0x7ffc0000 [ 155.237506][ T39] audit: type=1326 audit(1733034396.280:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9113 comm="syz.5.758" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739e579 code=0x7ffc0000 [ 155.243877][ T39] audit: type=1326 audit(1733034396.280:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9113 comm="syz.5.758" exe="/syz-executor" sig=0 arch=40000003 syscall=232 compat=1 ip=0xf739e579 code=0x7ffc0000 [ 155.250342][ T39] audit: type=1326 audit(1733034396.280:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9113 comm="syz.5.758" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739e579 code=0x7ffc0000 [ 155.256864][ T39] audit: type=1326 audit(1733034396.280:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9113 comm="syz.5.758" exe="/syz-executor" sig=0 arch=40000003 syscall=146 compat=1 ip=0xf739e579 code=0x7ffc0000 [ 155.279462][ T9116] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 155.282297][ T9116] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 155.285076][ T9116] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 155.287745][ T9116] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 155.290512][ T9116] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 155.293063][ T9116] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 155.296099][ T9116] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3027168488 [ 155.299801][ T9116] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 155.304875][ T9119] ubi0: background thread "ubi_bgt0d" started, PID 9119 [ 155.400314][ T9121] netlink: 12 bytes leftover after parsing attributes in process `syz.5.759'. [ 155.529695][ T9132] 9pnet_fd: Insufficient options for proto=fd [ 156.228219][ T9156] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 156.229902][ T9156] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 156.231746][ T9156] vhci_hcd vhci_hcd.0: Device attached [ 156.310778][ T9159] afs: Unknown parameter '_µWzk' [ 156.414841][ T9] vhci_hcd: vhci_device speed not set [ 156.486106][ T9] usb 37-1: new full-speed USB device number 3 using vhci_hcd [ 156.933004][ T9166] 9pnet_fd: Insufficient options for proto=fd [ 156.986860][ T9157] vhci_hcd: connection reset by peer [ 156.988448][ T45] vhci_hcd: stop threads [ 156.989609][ T45] vhci_hcd: release socket [ 156.990967][ T45] vhci_hcd: disconnect device [ 157.157132][ T9174] lo speed is unknown, defaulting to 1000 [ 157.222507][ T9175] FAULT_INJECTION: forcing a failure. [ 157.222507][ T9175] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.226180][ T9175] CPU: 0 UID: 0 PID: 9175 Comm: syz.2.773 Not tainted 6.12.0-syzkaller-11716-gd8b78066f4c9 #0 [ 157.228868][ T9175] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 157.231688][ T9175] Call Trace: [ 157.232570][ T9175] [ 157.233330][ T9175] dump_stack_lvl+0x16c/0x1f0 [ 157.234533][ T9175] should_fail_ex+0x497/0x5b0 [ 157.235747][ T9175] _copy_to_user+0x32/0xd0 [ 157.236921][ T9175] simple_read_from_buffer+0xd0/0x160 [ 157.238276][ T9175] proc_fail_nth_read+0x198/0x270 [ 157.239596][ T9175] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 157.241055][ T9175] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 157.242496][ T9175] vfs_read+0x1df/0xbe0 [ 157.243594][ T9175] ? __fget_files+0x1fc/0x3a0 [ 157.244829][ T9175] ? __pfx___mutex_lock+0x10/0x10 [ 157.246160][ T9175] ? __pfx_vfs_read+0x10/0x10 [ 157.247398][ T9175] ? __fget_files+0x206/0x3a0 [ 157.248641][ T9175] ksys_read+0x12b/0x250 [ 157.249767][ T9175] ? __pfx_ksys_read+0x10/0x10 [ 157.251035][ T9175] __do_fast_syscall_32+0x73/0x120 [ 157.252378][ T9175] do_fast_syscall_32+0x32/0x80 [ 157.253667][ T9175] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 157.255320][ T9175] RIP: 0023:0xf7f96579 [ 157.256396][ T9175] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 157.261419][ T9175] RSP: 002b:00000000f50f55b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 157.263569][ T9175] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000f50f5620 [ 157.265653][ T9175] RDX: 000000000000000f RSI: 00000000f7420ff4 RDI: 0000000000000000 [ 157.267701][ T9175] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 157.269725][ T9175] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 157.271678][ T9175] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 157.273692][ T9175] [ 157.389376][ T9173] block nbd2: shutting down sockets [ 157.487172][ T9180] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 157.488915][ T9180] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 157.496278][ T9180] vhci_hcd vhci_hcd.0: Device attached [ 157.683787][ T9186] overlayfs: overlapping lowerdir path [ 157.756692][ T9183] afs: Unknown parameter '_µWzk' [ 157.776245][ T62] vhci_hcd: vhci_device speed not set [ 157.836237][ T62] usb 41-1: new full-speed USB device number 4 using vhci_hcd [ 157.849846][ T9191] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 157.851604][ T9191] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 157.854452][ T9191] vhci_hcd vhci_hcd.0: Device attached [ 157.937620][ T9191] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 158.036217][ T832] vhci_hcd: vhci_device speed not set [ 158.096838][ T832] usb 47-1: new full-speed USB device number 3 using vhci_hcd [ 158.388333][ T9181] vhci_hcd: connection reset by peer [ 158.390250][ T45] vhci_hcd: stop threads [ 158.392105][ T45] vhci_hcd: release socket [ 158.393416][ T45] vhci_hcd: disconnect device [ 158.619536][ T9195] netlink: 36 bytes leftover after parsing attributes in process `syz.0.778'. [ 158.621815][ T9195] netlink: 16 bytes leftover after parsing attributes in process `syz.0.778'. [ 158.624043][ T9195] netlink: 36 bytes leftover after parsing attributes in process `syz.0.778'. [ 158.626509][ T9195] netlink: 36 bytes leftover after parsing attributes in process `syz.0.778'. [ 158.632152][ T9192] vhci_hcd: connection reset by peer [ 158.637926][ T165] vhci_hcd: stop threads [ 158.639816][ T165] vhci_hcd: release socket [ 158.642538][ T165] vhci_hcd: disconnect device [ 158.690867][ T9201] overlay: Unknown parameter 'smackfsfloor' [ 159.522248][ T9217] overlay: Unknown parameter 'smackfsfloor' [ 159.772830][ T9222] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 159.975223][ T9224] lo speed is unknown, defaulting to 1000 [ 160.106080][ T9227] block nbd2: Device being setup by another task [ 160.116654][ T9224] block nbd2: shutting down sockets [ 161.526022][ T9248] syz.0.794 (9248): drop_caches: 2 [ 161.650906][ T9] vhci_hcd: vhci_device speed not set [ 161.955541][ T9259] netlink: 72 bytes leftover after parsing attributes in process `syz.0.797'. [ 161.983848][ T9259] netlink: 'syz.0.797': attribute type 5 has an invalid length. [ 162.017084][ T9262] netlink: 20 bytes leftover after parsing attributes in process `syz.0.798'. [ 162.325713][ T9269] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 162.327483][ T9269] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 162.331589][ T9269] vhci_hcd vhci_hcd.0: Device attached [ 162.453069][ T9272] afs: Unknown parameter '_µWzk' [ 163.113778][ T9270] vhci_hcd: connection reset by peer [ 163.117522][ T45] vhci_hcd: stop threads [ 163.119128][ T45] vhci_hcd: release socket [ 163.120646][ T45] vhci_hcd: disconnect device [ 163.185939][ T62] vhci_hcd: vhci_device speed not set [ 163.294823][ T9286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.802'. [ 163.436498][ T832] vhci_hcd: vhci_device speed not set [ 163.533469][ T9288] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 163.535705][ T9288] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 163.538374][ T9288] vhci_hcd vhci_hcd.0: Device attached [ 163.598304][ T9291] 9pnet_virtio: no channels available for device syz [ 163.602287][ T9291] overlayfs: overlapping lowerdir path [ 163.610549][ T9291] afs: Unknown parameter '_µWzk' [ 163.926015][ T832] vhci_hcd: vhci_device speed not set [ 164.139999][ T9307] netlink: 'syz.2.808': attribute type 5 has an invalid length. [ 164.199068][ T832] usb 47-1: device descriptor read/64, error -110 [ 164.220728][ T9309] netlink: 168 bytes leftover after parsing attributes in process `syz.0.806'. [ 164.242696][ T9289] vhci_hcd: connection closed [ 164.242960][ T1132] vhci_hcd: stop threads [ 164.245363][ T1132] vhci_hcd: release socket [ 164.251924][ T1132] vhci_hcd: disconnect device [ 164.396412][ T832] vhci_hcd: vhci_device speed not set [ 164.888985][ T9316] netlink: 'syz.0.810': attribute type 1 has an invalid length. [ 164.891070][ T9316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.810'. [ 165.113155][ T9326] overlay: Unknown parameter 'smackfsfloor' [ 165.320573][ T5308] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 165.496530][ T9333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.813532][ T9337] netlink: 32 bytes leftover after parsing attributes in process `syz.5.817'. [ 165.818834][ T9337] netlink: 32 bytes leftover after parsing attributes in process `syz.5.817'. [ 168.243394][ T1172] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.331406][ T1172] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.392743][ T1172] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.492481][ T1172] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.609548][ T1172] bridge_slave_1: left allmulticast mode [ 168.611396][ T1172] bridge_slave_1: left promiscuous mode [ 168.613324][ T1172] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.616360][ T1172] bridge_slave_0: left allmulticast mode [ 168.617856][ T1172] bridge_slave_0: left promiscuous mode [ 168.619303][ T1172] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.793172][ T9370] Driver unsupported XDP return value 0 on prog (id 134) dev N/A, expect packet loss! [ 168.829004][ T5308] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 168.833743][ T5308] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 168.841666][ T5308] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 168.845386][ T5308] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 168.848943][ T5308] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 168.851595][ T5308] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 169.196272][ T9375] block nbd5: Device being setup by another task [ 169.198320][ T9376] block nbd5: shutting down sockets [ 169.234512][ T1172] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.240628][ T1172] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.244084][ T1172] bond0 (unregistering): Released all slaves [ 169.251455][ T9370] lo speed is unknown, defaulting to 1000 [ 169.291500][ T9372] lo speed is unknown, defaulting to 1000 [ 169.300154][ T9375] block nbd5: NBD_DISCONNECT [ 169.301425][ T9375] block nbd5: Send disconnect failed -32 [ 169.411835][ T9372] chnl_net:caif_netlink_parms(): no params data found [ 169.561984][ T9372] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.566001][ T9372] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.568640][ T9372] bridge_slave_0: entered allmulticast mode [ 169.571588][ T9372] bridge_slave_0: entered promiscuous mode [ 169.575127][ T9372] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.583008][ T9372] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.585657][ T9372] bridge_slave_1: entered allmulticast mode [ 169.588948][ T9372] bridge_slave_1: entered promiscuous mode [ 169.656285][ T9372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.661179][ T9372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.685021][ T1172] hsr_slave_0: left promiscuous mode [ 169.693248][ T1172] hsr_slave_1: left promiscuous mode [ 169.695222][ T1172] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.697817][ T1172] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.700354][ T1172] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.702302][ T1172] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.722542][ T1172] veth1_macvtap: left promiscuous mode [ 169.724060][ T1172] veth0_macvtap: left promiscuous mode [ 169.725757][ T1172] veth1_vlan: left promiscuous mode [ 169.727862][ T1172] veth0_vlan: left promiscuous mode [ 169.747597][ T5949] block nbd0: Receive control failed (result -32) [ 169.747627][ T5308] block nbd0: Receive control failed (result -32) [ 169.790606][ T9403] block nbd0: shutting down sockets [ 169.990738][ T5308] block nbd0: Receive control failed (result -32) [ 169.990767][ T5949] block nbd0: Receive control failed (result -32) [ 170.016911][ T9409] block nbd0: shutting down sockets [ 170.739045][ T1172] team0 (unregistering): Port device team_slave_1 removed [ 170.835272][ T1172] team0 (unregistering): Port device team_slave_0 removed [ 170.930116][ T5949] Bluetooth: hci3: command tx timeout [ 171.473321][ T9372] team0: Port device team_slave_0 added [ 171.479438][ T9372] team0: Port device team_slave_1 added [ 171.548425][ T9372] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.550938][ T9372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.551081][ T9430] netlink: 20 bytes leftover after parsing attributes in process `syz.0.836'. [ 171.559864][ T9372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.567521][ T9372] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.575285][ T9372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.585505][ T9372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.649328][ T9372] hsr_slave_0: entered promiscuous mode [ 171.652027][ T9372] hsr_slave_1: entered promiscuous mode [ 171.654207][ T9372] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 171.656417][ T9372] Cannot create hsr debugfs directory [ 171.737949][ T9442] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 171.740262][ T9442] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 171.742892][ T9442] vhci_hcd vhci_hcd.0: Device attached [ 171.839386][ T9437] could not allocate digest TFM handle sha1-ce [ 171.857232][ T9449] afs: Unknown parameter '_µWzk' [ 171.925927][ T56] vhci_hcd: vhci_device speed not set [ 171.987312][ T56] usb 47-1: new full-speed USB device number 5 using vhci_hcd [ 172.564764][ T9459] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.633543][ T9443] vhci_hcd: connection reset by peer [ 172.635735][ T45] vhci_hcd: stop threads [ 172.639571][ T45] vhci_hcd: release socket [ 172.641713][ T45] vhci_hcd: disconnect device [ 172.725415][ T9372] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 172.730155][ T9372] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 172.733146][ T9372] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 172.737925][ T9372] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 172.782287][ T9372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.789526][ T9372] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.793630][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.796162][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.801988][ T165] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.803858][ T165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.911787][ T9372] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.015920][ T5949] Bluetooth: hci3: command tx timeout [ 173.020220][ T9372] veth0_vlan: entered promiscuous mode [ 173.026121][ T9372] veth1_vlan: entered promiscuous mode [ 173.037658][ T9372] veth0_macvtap: entered promiscuous mode [ 173.040610][ T9372] veth1_macvtap: entered promiscuous mode [ 173.047976][ T9372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.050749][ T9372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.053243][ T9372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.058056][ T9372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.060424][ T9372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.063144][ T9372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.065657][ T9372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.070208][ T9372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.073363][ T9372] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.077159][ T9372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.080003][ T9372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.082467][ T9372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.085298][ T9372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.092972][ T9372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.096395][ T9372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.098962][ T9372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.101639][ T9372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.104867][ T9372] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.110773][ T9372] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.113063][ T9372] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.116274][ T9372] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.118638][ T9372] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.143751][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.150264][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.158145][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.171317][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.567055][ T9524] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 173.569441][ T9524] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 173.573627][ T9524] vhci_hcd vhci_hcd.0: Device attached [ 173.845529][ T9524] afs: Unknown parameter '_µWzk' [ 174.334186][ T9534] netlink: 20 bytes leftover after parsing attributes in process `syz.0.850'. [ 174.340403][ T9534] netlink: 20 bytes leftover after parsing attributes in process `syz.0.850'. [ 174.640463][ T9525] vhci_hcd: connection closed [ 174.670809][ T1172] vhci_hcd: stop threads [ 174.673255][ T1172] vhci_hcd: release socket [ 174.674532][ T1172] vhci_hcd: disconnect device [ 175.258334][ T9546] warning: `syz.5.853' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 175.262884][ T39] kauditd_printk_skb: 31 callbacks suppressed [ 175.262894][ T39] audit: type=1326 audit(1733034416.360:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9545 comm="syz.5.853" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf739e579 code=0x0 [ 175.838179][ T5949] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 175.882557][ T9558] 9pnet_fd: Insufficient options for proto=fd [ 176.157397][ T1132] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.743491][ T5308] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 176.749397][ T5308] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 176.794437][ T5308] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 176.802679][ T5308] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 176.805438][ T5308] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 176.807668][ T5308] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 176.822710][ T9574] lo speed is unknown, defaulting to 1000 [ 176.823023][ T9578] netlink: 'syz.2.863': attribute type 4 has an invalid length. [ 176.826397][ T9578] netlink: 152 bytes leftover after parsing attributes in process `syz.2.863'. [ 176.918076][ T9589] netlink: 'syz.2.867': attribute type 1 has an invalid length. [ 176.952347][ T9574] chnl_net:caif_netlink_parms(): no params data found [ 177.017473][ T9584] [ 177.018162][ T9584] ====================================================== [ 177.019951][ T9584] WARNING: possible circular locking dependency detected [ 177.021750][ T9584] 6.12.0-syzkaller-11716-gd8b78066f4c9 #0 Not tainted [ 177.024205][ T9584] ------------------------------------------------------ [ 177.027024][ T9584] syz.5.865/9584 is trying to acquire lock: [ 177.028599][ T9584] ffff888022e6f0b8 (&eq->sysfs_lock){+.+.}-{4:4}, at: elevator_disable+0xb5/0x490 [ 177.030988][ T9584] [ 177.030988][ T9584] but task is already holding lock: [ 177.032900][ T9584] ffff8880244885d8 (&q->sysfs_lock){+.+.}-{4:4}, at: __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 177.035614][ T9584] [ 177.035614][ T9584] which lock already depends on the new lock. [ 177.035614][ T9584] [ 177.038363][ T9584] [ 177.038363][ T9584] the existing dependency chain (in reverse order) is: [ 177.040699][ T9584] [ 177.040699][ T9584] -> #5 (&q->sysfs_lock){+.+.}-{4:4}: [ 177.042692][ T9584] __mutex_lock+0x19b/0xa60 [ 177.044018][ T9584] __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 177.045725][ T9584] blk_mq_update_nr_hw_queues+0x2a/0x40 [ 177.047333][ T9584] nbd_start_device+0x15b/0xd70 [ 177.049042][ T9584] nbd_ioctl+0x21a/0xfd0 [ 177.050320][ T9584] compat_blkdev_ioctl+0x2f7/0x750 [ 177.051790][ T9584] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 177.053311][ T9584] __do_fast_syscall_32+0x73/0x120 [ 177.054773][ T9584] do_fast_syscall_32+0x32/0x80 [ 177.056191][ T9584] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 177.058134][ T9584] [ 177.058134][ T9584] -> #4 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 177.060368][ T9584] blk_mq_submit_bio+0x1fb6/0x24c0 [ 177.061837][ T9584] __submit_bio+0x384/0x540 [ 177.063143][ T9584] submit_bio_noacct_nocheck+0x698/0xd70 [ 177.064759][ T9584] submit_bio_noacct+0x93a/0x1e20 [ 177.066202][ T9584] block_read_full_folio+0x812/0xa50 [ 177.067766][ T9584] filemap_read_folio+0xc6/0x2a0 [ 177.069201][ T9584] filemap_get_pages+0x155f/0x1be0 [ 177.070662][ T9584] filemap_read+0x3ca/0xd70 [ 177.071977][ T9584] blkdev_read_iter+0x187/0x480 [ 177.073384][ T9584] vfs_read+0x87f/0xbe0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 177.074619][ T9584] ksys_read+0x12b/0x250 [ 177.076208][ T9584] do_syscall_64+0xcd/0x250 [ 177.077569][ T9584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.079242][ T9584] [ 177.079242][ T9584] -> #3 (mapping.invalidate_lock#2){++++}-{4:4}: [ 177.081460][ T9584] down_read+0x9a/0x330 [ 177.082697][ T9584] page_cache_ra_unbounded+0x173/0x750 [ 177.084257][ T9584] page_cache_ra_order+0x7d9/0xc90 [ 177.085731][ T9584] filemap_fault+0x14a5/0x2820 [ 177.086108][ T9336] caif:caif_disconnect_client(): nothing to disconnect [ 177.087107][ T9584] __do_fault+0x10a/0x490 [ 177.090544][ T9584] do_pte_missing+0x99f/0x3e00 [ 177.091931][ T9584] __handle_mm_fault+0x103c/0x2a40 [ 177.093410][ T9584] handle_mm_fault+0x3fa/0xaa0 [ 177.094791][ T9584] __get_user_pages+0x8d9/0x3b50 [ 177.096250][ T9584] __gup_longterm_locked+0x5ff/0x1870 [ 177.097883][ T9584] pin_user_pages+0x13f/0x160 [ 177.099244][ T9584] xdp_umem_create+0x73c/0x1270 [ 177.100642][ T9584] xsk_setsockopt+0x7e7/0xac0 [ 177.102019][ T9584] do_sock_setsockopt+0x222/0x480 [ 177.102031][ T9584] __sys_setsockopt+0x1a0/0x230 [ 177.102045][ T9584] __ia32_sys_setsockopt+0xbc/0x160 [ 177.102058][ T9584] __do_fast_syscall_32+0x73/0x120 [ 177.102071][ T9584] do_fast_syscall_32+0x32/0x80 [ 177.102084][ T9584] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 177.102100][ T9584] [ 177.102100][ T9584] -> #2 (&mm->mmap_lock){++++}-{4:4}: [ 177.102115][ T9584] __might_fault+0x11b/0x190 [ 177.102123][ T9584] _copy_from_user+0x29/0xd0 [ 177.102137][ T9584] __blk_trace_setup+0xa8/0x180 [ 177.102148][ T9584] blk_trace_setup+0x47/0x70 [ 177.102158][ T9584] sg_ioctl+0x7a3/0x26b0 [ 177.102172][ T9584] compat_ptr_ioctl+0x6b/0xa0 [ 177.102186][ T9584] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 177.102195][ T9584] __do_fast_syscall_32+0x73/0x120 [ 177.102206][ T9584] do_fast_syscall_32+0x32/0x80 [ 177.102216][ T9584] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 177.102229][ T9584] [ 177.102229][ T9584] -> #1 (&q->debugfs_mutex){+.+.}-{4:4}: [ 177.102242][ T9584] __mutex_lock+0x19b/0xa60 [ 177.102253][ T9584] blk_mq_exit_sched+0xd1/0x310 [ 177.102265][ T9584] elevator_disable+0xc0/0x490 [ 177.102274][ T9584] __blk_mq_update_nr_hw_queues+0x3bb/0x1460 [ 177.102284][ T9584] blk_mq_update_nr_hw_queues+0x2a/0x40 [ 177.102293][ T9584] nbd_start_device+0x15b/0xd70 [ 177.102305][ T9584] nbd_ioctl+0x21a/0xfd0 [ 177.102316][ T9584] compat_blkdev_ioctl+0x2f7/0x750 [ 177.102329][ T9584] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 177.102337][ T9584] __do_fast_syscall_32+0x73/0x120 [ 177.102348][ T9584] do_fast_syscall_32+0x32/0x80 [ 177.102359][ T9584] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 177.102373][ T9584] [ 177.102373][ T9584] -> #0 (&eq->sysfs_lock){+.+.}-{4:4}: [ 177.102385][ T9584] __lock_acquire+0x249e/0x3c40 [ 177.102394][ T9584] lock_acquire.part.0+0x11b/0x380 [ 177.102402][ T9584] __mutex_lock+0x19b/0xa60 [ 177.102412][ T9584] elevator_disable+0xb5/0x490 [ 177.102420][ T9584] __blk_mq_update_nr_hw_queues+0x3bb/0x1460 [ 177.102429][ T9584] blk_mq_update_nr_hw_queues+0x2a/0x40 [ 177.102438][ T9584] nbd_start_device+0x15b/0xd70 [ 177.102450][ T9584] nbd_ioctl+0x21a/0xfd0 [ 177.102465][ T9584] compat_blkdev_ioctl+0x2f7/0x750 [ 177.102478][ T9584] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 177.102487][ T9584] __do_fast_syscall_32+0x73/0x120 [ 177.102498][ T9584] do_fast_syscall_32+0x32/0x80 [ 177.102510][ T9584] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 177.102524][ T9584] [ 177.102524][ T9584] other info that might help us debug this: [ 177.102524][ T9584] [ 177.102528][ T9584] Chain exists of: [ 177.102528][ T9584] &eq->sysfs_lock --> &q->q_usage_counter(io)#49 --> &q->sysfs_lock [ 177.102528][ T9584] [ 177.102548][ T9584] Possible unsafe locking scenario: [ 177.102548][ T9584] [ 177.102550][ T9584] CPU0 CPU1 [ 177.102553][ T9584] ---- ---- [ 177.102556][ T9584] lock(&q->sysfs_lock); [ 177.102562][ T9584] lock(&q->q_usage_counter(io)#49); [ 177.102573][ T9584] lock(&q->sysfs_lock); [ 177.102580][ T9584] lock(&eq->sysfs_lock); [ 177.102586][ T9584] [ 177.102586][ T9584] *** DEADLOCK *** [ 177.102586][ T9584] [ 177.102589][ T9584] 5 locks held by syz.5.865/9584: [ 177.102594][ T9584] #0: ffff888024072198 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x151/0xfd0 [ 177.102619][ T9584] #1: ffff8880240720d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0x20/0x40 [ 177.102642][ T9584] #2: ffff8880244880a8 (&q->q_usage_counter(io)#54){+.+.}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x1fc/0x1460 [ 177.102667][ T9584] #3: ffff8880244880e0 (&q->q_usage_counter(queue)#38){+.+.}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x1fc/0x1460 [ 177.102692][ T9584] #4: ffff8880244885d8 (&q->sysfs_lock){+.+.}-{4:4}, at: __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 177.102714][ T9584] [ 177.102714][ T9584] stack backtrace: [ 177.102718][ T9584] CPU: 0 UID: 0 PID: 9584 Comm: syz.5.865 Not tainted 6.12.0-syzkaller-11716-gd8b78066f4c9 #0 [ 177.102729][ T9584] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 177.102735][ T9584] Call Trace: [ 177.102739][ T9584] [ 177.102743][ T9584] dump_stack_lvl+0x116/0x1f0 [ 177.102755][ T9584] print_circular_bug+0x41c/0x610 [ 177.102773][ T9584] check_noncircular+0x31a/0x400 [ 177.102788][ T9584] ? __pfx_check_noncircular+0x10/0x10 [ 177.102805][ T9584] ? lockdep_lock+0xc6/0x200 [ 177.102817][ T9584] ? __pfx_lockdep_lock+0x10/0x10 [ 177.102830][ T9584] ? __lock_acquire+0xcc5/0x3c40 [ 177.102841][ T9584] __lock_acquire+0x249e/0x3c40 [ 177.102853][ T9584] ? __pfx___lock_acquire+0x10/0x10 [ 177.102863][ T9584] ? find_held_lock+0x2d/0x110 [ 177.102876][ T9584] lock_acquire.part.0+0x11b/0x380 [ 177.102885][ T9584] ? elevator_disable+0xb5/0x490 [ 177.102894][ T9584] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 177.102903][ T9584] ? rcu_is_watching+0x12/0xc0 [ 177.102915][ T9584] ? trace_lock_acquire+0x14e/0x1f0 [ 177.102927][ T9584] ? elevator_disable+0xb5/0x490 [ 177.102936][ T9584] ? lock_acquire+0x2f/0xb0 [ 177.102944][ T9584] ? elevator_disable+0xb5/0x490 [ 177.102953][ T9584] __mutex_lock+0x19b/0xa60 [ 177.102964][ T9584] ? elevator_disable+0xb5/0x490 [ 177.102973][ T9584] ? elevator_disable+0xb5/0x490 [ 177.102982][ T9584] ? __pfx___mutex_lock+0x10/0x10 [ 177.102994][ T9584] ? __pfx_blk_mq_sched_free_rqs+0x10/0x10 [ 177.103008][ T9584] ? mark_held_locks+0x9f/0xe0 [ 177.103017][ T9584] ? elevator_disable+0xb5/0x490 [ 177.103025][ T9584] elevator_disable+0xb5/0x490 [ 177.103034][ T9584] __blk_mq_update_nr_hw_queues+0x3bb/0x1460 [ 177.103045][ T9584] ? lock_acquire.part.0+0x11b/0x380 [ 177.103055][ T9584] ? __mutex_trylock_common+0xea/0x250 [ 177.103066][ T9584] ? __pfx___mutex_trylock_common+0x10/0x10 [ 177.103075][ T9584] ? blk_mq_update_nr_hw_queues+0x20/0x40 [ 177.103086][ T9584] ? rcu_is_watching+0x12/0xc0 [ 177.103097][ T9584] ? __pfx___blk_mq_update_nr_hw_queues+0x10/0x10 [ 177.103108][ T9584] ? __pfx___mutex_trylock_common+0x10/0x10 [ 177.103118][ T9584] ? blk_mq_update_nr_hw_queues+0x20/0x40 [ 177.103128][ T9584] ? __pfx___mutex_lock+0x10/0x10 [ 177.103140][ T9584] ? trace_contention_end+0xee/0x140 [ 177.103150][ T9584] ? __mutex_lock+0x1cc/0xa60 [ 177.103161][ T9584] ? nbd_ioctl+0x151/0xfd0 [ 177.103173][ T9584] ? __pfx___mutex_lock+0x10/0x10 [ 177.103185][ T9584] blk_mq_update_nr_hw_queues+0x2a/0x40 [ 177.103196][ T9584] nbd_start_device+0x15b/0xd70 [ 177.103208][ T9584] ? bpf_lsm_capable+0x9/0x10 [ 177.103220][ T9584] nbd_ioctl+0x21a/0xfd0 [ 177.103232][ T9584] ? __pfx_nbd_ioctl+0x10/0x10 [ 177.103244][ T9584] ? __pfx_lock_release+0x10/0x10 [ 177.103253][ T9584] ? trace_lock_acquire+0x14e/0x1f0 [ 177.103266][ T9584] ? __pfx_nbd_ioctl+0x10/0x10 [ 177.103277][ T9584] compat_blkdev_ioctl+0x2f7/0x750 [ 177.103292][ T9584] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 177.103306][ T9584] ? __fget_files+0x206/0x3a0 [ 177.103319][ T9584] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 177.103335][ T9584] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 177.103346][ T9584] __do_fast_syscall_32+0x73/0x120 [ 177.103359][ T9584] do_fast_syscall_32+0x32/0x80 [ 177.103370][ T9584] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 177.103384][ T9584] RIP: 0023:0xf739e579 [ 177.103392][ T9584] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 177.103401][ T9584] RSP: 002b:00000000f508657c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 177.103411][ T9584] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000000ab03 [ 177.103417][ T9584] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 177.103423][ T9584] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 177.103428][ T9584] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 177.103434][ T9584] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 177.103442][ T9584] [ 177.108500][ T56] vhci_hcd: vhci_device speed not set [ 177.163062][ T9584] block nbd5: shutting down sockets [ 177.917614][ T1132] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.958233][ T1132] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.008026][ T1132] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.065088][ T1132] bridge_slave_1: left allmulticast mode [ 178.066665][ T1132] bridge_slave_1: left promiscuous mode [ 178.068157][ T1132] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.070659][ T1132] bridge_slave_0: left allmulticast mode [ 178.072455][ T1132] bridge_slave_0: left promiscuous mode [ 178.074205][ T1132] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.150143][ T1132] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.153225][ T1132] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.155992][ T1132] bond0 (unregistering): Released all slaves [ 178.430302][ T1132] hsr_slave_0: left promiscuous mode [ 178.432056][ T1132] hsr_slave_1: left promiscuous mode [ 178.433718][ T1132] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.435670][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.438101][ T1132] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.440264][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.443530][ T1132] veth1_macvtap: left promiscuous mode [ 178.444969][ T1132] veth0_macvtap: left promiscuous mode [ 178.446754][ T1132] veth1_vlan: left promiscuous mode [ 178.448147][ T1132] veth0_vlan: left promiscuous mode [ 178.621698][ T1132] team0 (unregistering): Port device team_slave_1 removed [ 178.658976][ T1132] team0 (unregistering): Port device team_slave_0 removed [ 179.160947][ T1132] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.218584][ T1132] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.299935][ T1132] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.385660][ T1132] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.468788][ T1132] bridge_slave_1: left allmulticast mode [ 179.470295][ T1132] bridge_slave_1: left promiscuous mode [ 179.471793][ T1132] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.474099][ T1132] bridge_slave_0: left allmulticast mode [ 179.475587][ T1132] bridge_slave_0: left promiscuous mode [ 179.477344][ T1132] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.698702][ T1132] bond0 (unregistering): Released all slaves [ 179.703876][ T1132] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.707080][ T1132] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.710677][ T1132] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 179.713843][ T1132] bond0 (unregistering): Released all slaves [ 179.796541][ T1132] bond1 (unregistering): Released all slaves [ 179.877067][ T1132] bond2 (unregistering): Released all slaves [ 179.881554][ T1132] bond3 (unregistering): Released all slaves [ 180.085513][ T1132] hsr_slave_0: left promiscuous mode [ 180.087426][ T1132] hsr_slave_1: left promiscuous mode [ 180.088987][ T1132] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.090978][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.092999][ T1132] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.094803][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.098709][ T1132] veth1_macvtap: left promiscuous mode [ 180.100067][ T1132] veth0_macvtap: left promiscuous mode [ 180.101406][ T1132] veth1_vlan: left promiscuous mode [ 180.102743][ T1132] veth0_vlan: left promiscuous mode [ 180.352698][ T1132] team0 (unregistering): Port device team_slave_1 removed [ 180.394179][ T1132] team0 (unregistering): Port device team_slave_0 removed [ 180.585270][ T56] lo speed is unknown, defaulting to 1000 VM DIAGNOSIS: 06:26:58 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000061 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8509d1e5 RDI=ffffffff9a66c280 RBP=ffffffff9a66c240 RSP=ffffc9000fc9efd0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=732d302e32312e36 R12=0000000000000000 R13=0000000000000061 R14=ffffffff8509d180 R15=0000000000000000 RIP=ffffffff8509d20f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b400000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f73c6188 CR3=000000006def4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000000 RBX=0000000000000001 RCX=ffffc90006fc0000 RDX=1ffff92000df7cf8 RSI=ffffc90006fbfdb0 RDI=ffffc90006fbe7c8 RBP=0000000000000003 RSP=ffffc90006fbe718 R8 =ffffc90006fbe7bc R9 =ffffffff913a801c R10=ffffc90006fbe788 R11=000000000007e930 R12=ffffc90006fbe7d8 R13=ffffc90006fbe788 R14=ffffc90006fbfde0 R15=ffffc90006fbfdd8 RIP=ffffffff813dbc5a RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b500000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c33c838 CR3=000000005c7a2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000e800000000 0000000300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=1ffff92000629efe RCX=ffffffff81fc672d RDX=ffff88801ff40000 RSI=0000000000000000 RDI=0000000000000005 RBP=0000000000051589 RSP=ffffc9000314f7e8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=000000000000506e R12=0000000080000001 R13=0000000000000008 R14=0000000000000001 R15=ffffc9000314fcb8 RIP=ffffffff818e0052 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f36e40 CR3=000000000db7e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 005858585858582e 7a7973d0000000e4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ff0f0e0d0c0b0a09 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000002000008fd RBX=ffff8880227d8000 RCX=0000000000000830 RDX=0000000000000002 RSI=00000000000000fd RDI=0000000000000002 RBP=0000000000000008 RSP=ffffc9002607f560 R8 =0000000000000000 R9 =fffffbfff203a2da R10=ffffffff901d16d7 R11=ffff88802b53f608 R12=0000000000000003 R13=1ffff92004c0fead R14=0000000000000001 R15=ffffc9002607f588 RIP=ffffffff813c6098 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b700000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f5065da4 CR3=000000004cb3a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000