Warning: Permanently added '[localhost]:11950' (ECDSA) to the list of known hosts.
2020/12/11 08:28:39 fuzzer started
2020/12/11 08:28:40 dialing manager at 10.0.2.10:39457
2020/12/11 08:28:40 syscalls: 3453
2020/12/11 08:28:40 code coverage: enabled
2020/12/11 08:28:40 comparison tracing: enabled
2020/12/11 08:28:40 extra coverage: enabled
2020/12/11 08:28:40 setuid sandbox: enabled
2020/12/11 08:28:40 namespace sandbox: enabled
2020/12/11 08:28:40 Android sandbox: /sys/fs/selinux/policy does not exist
2020/12/11 08:28:40 fault injection: enabled
2020/12/11 08:28:40 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2020/12/11 08:28:40 net packet injection: enabled
2020/12/11 08:28:40 net device setup: enabled
2020/12/11 08:28:40 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2020/12/11 08:28:40 devlink PCI setup: PCI device 0000:00:10.0 is not available
2020/12/11 08:28:40 USB emulation: enabled
2020/12/11 08:28:40 hci packet injection: enabled
2020/12/11 08:28:40 wifi device emulation: enabled
08:30:05 executing program 0:
fanotify_mark(0xffffffffffffffff, 0x1, 0x40000018, 0xffffffffffffffff, 0x0)

08:30:05 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETGEN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x10, 0xa, 0x5}, 0x14}}, 0x0)

08:30:05 executing program 2:
r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x1)
mmap$fb(&(0x7f0000800000/0x800000)=nil, 0x800000, 0xffffffffff7ff, 0x11, r0, 0x0)

08:30:06 executing program 3:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0)
mmap$fb(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x11, r0, 0x0)

syzkaller login: [  189.471321][ T9052] IPVS: ftp: loaded support on port[0] = 21
[  189.556111][ T9052] chnl_net:caif_netlink_parms(): no params data found
[  189.594589][ T9054] IPVS: ftp: loaded support on port[0] = 21
[  189.612827][ T9052] bridge0: port 1(bridge_slave_0) entered blocking state
[  189.622237][ T9052] bridge0: port 1(bridge_slave_0) entered disabled state
[  189.632193][ T9052] device bridge_slave_0 entered promiscuous mode
[  189.643907][ T9052] bridge0: port 2(bridge_slave_1) entered blocking state
[  189.652611][ T9052] bridge0: port 2(bridge_slave_1) entered disabled state
[  189.664972][ T9052] device bridge_slave_1 entered promiscuous mode
[  189.700132][ T9052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  189.715122][ T9052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  189.741415][ T9052] team0: Port device team_slave_0 added
[  189.751265][ T9052] team0: Port device team_slave_1 added
[  189.774852][ T9052] batman_adv: batadv0: Adding interface: batadv_slave_0
[  189.786859][ T9052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  189.841419][ T9052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  189.862153][ T9052] batman_adv: batadv0: Adding interface: batadv_slave_1
[  189.871674][ T9052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  189.903512][ T9052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  189.924747][ T9056] IPVS: ftp: loaded support on port[0] = 21
[  189.956619][ T9052] device hsr_slave_0 entered promiscuous mode
[  189.965435][ T9052] device hsr_slave_1 entered promiscuous mode
[  189.989494][ T9054] chnl_net:caif_netlink_parms(): no params data found
[  190.006992][ T9058] IPVS: ftp: loaded support on port[0] = 21
[  190.083924][ T9054] bridge0: port 1(bridge_slave_0) entered blocking state
[  190.100366][ T9054] bridge0: port 1(bridge_slave_0) entered disabled state
[  190.117125][ T9054] device bridge_slave_0 entered promiscuous mode
[  190.132420][ T9054] bridge0: port 2(bridge_slave_1) entered blocking state
[  190.147501][ T9054] bridge0: port 2(bridge_slave_1) entered disabled state
[  190.164928][ T9054] device bridge_slave_1 entered promiscuous mode
[  190.216787][ T9054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  190.232070][ T9054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  190.278320][ T9054] team0: Port device team_slave_0 added
[  190.304606][ T9054] team0: Port device team_slave_1 added
[  190.369175][ T9054] batman_adv: batadv0: Adding interface: batadv_slave_0
[  190.378319][ T9054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  190.411964][ T9054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  190.430514][ T9058] chnl_net:caif_netlink_parms(): no params data found
[  190.441181][ T9056] chnl_net:caif_netlink_parms(): no params data found
[  190.452660][ T9054] batman_adv: batadv0: Adding interface: batadv_slave_1
[  190.464016][ T9054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  190.507761][ T9054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  190.579101][ T9052] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  190.603215][ T9054] device hsr_slave_0 entered promiscuous mode
[  190.611908][ T9054] device hsr_slave_1 entered promiscuous mode
[  190.620045][ T9054] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  190.629859][ T9054] Cannot create hsr debugfs directory
[  190.637664][ T9052] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  190.666481][ T9052] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  190.677021][ T9052] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  190.691494][ T9058] bridge0: port 1(bridge_slave_0) entered blocking state
[  190.700016][ T9058] bridge0: port 1(bridge_slave_0) entered disabled state
[  190.709783][ T9058] device bridge_slave_0 entered promiscuous mode
[  190.722718][ T9058] bridge0: port 2(bridge_slave_1) entered blocking state
[  190.731172][ T9058] bridge0: port 2(bridge_slave_1) entered disabled state
[  190.740053][ T9058] device bridge_slave_1 entered promiscuous mode
[  190.782540][ T9058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  190.800063][ T9058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  190.815378][ T9056] bridge0: port 1(bridge_slave_0) entered blocking state
[  190.826609][ T9056] bridge0: port 1(bridge_slave_0) entered disabled state
[  190.840103][ T9056] device bridge_slave_0 entered promiscuous mode
[  190.875841][ T9056] bridge0: port 2(bridge_slave_1) entered blocking state
[  190.895955][ T9056] bridge0: port 2(bridge_slave_1) entered disabled state
[  190.912032][ T9056] device bridge_slave_1 entered promiscuous mode
[  190.943026][ T9056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  190.962973][ T9058] team0: Port device team_slave_0 added
[  190.971914][ T9056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  190.993436][ T9058] team0: Port device team_slave_1 added
[  191.021411][ T9056] team0: Port device team_slave_0 added
[  191.032624][ T9056] team0: Port device team_slave_1 added
[  191.057481][ T9058] batman_adv: batadv0: Adding interface: batadv_slave_0
[  191.065668][ T9058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  191.108853][ T9058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  191.125613][ T9056] batman_adv: batadv0: Adding interface: batadv_slave_0
[  191.150207][ T9056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  191.198987][ T9056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  191.214015][ T9058] batman_adv: batadv0: Adding interface: batadv_slave_1
[  191.225472][ T9058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  191.262523][ T9058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  191.295370][ T9056] batman_adv: batadv0: Adding interface: batadv_slave_1
[  191.304561][ T9056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  191.336429][ T9056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  191.353164][ T9058] device hsr_slave_0 entered promiscuous mode
[  191.364523][ T9058] device hsr_slave_1 entered promiscuous mode
[  191.373589][ T9058] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  191.382961][ T9058] Cannot create hsr debugfs directory
[  191.431609][ T9056] device hsr_slave_0 entered promiscuous mode
[  191.439697][ T9056] device hsr_slave_1 entered promiscuous mode
[  191.450706][ T9056] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  191.464765][ T9056] Cannot create hsr debugfs directory
[  191.485308][ T9070] Bluetooth: hci0: command 0x0409 tx timeout
[  191.500138][ T9054] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  191.527409][ T9054] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  191.552373][ T9054] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  191.573391][ T9054] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  191.645938][ T3340] Bluetooth: hci1: command 0x0409 tx timeout
[  191.700451][ T9052] 8021q: adding VLAN 0 to HW filter on device bond0
[  191.710665][ T9058] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  191.730618][ T9058] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  191.746872][ T9058] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  191.758423][ T9058] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  191.775540][   T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  191.785428][   T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  191.812225][ T9056] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  191.823789][ T9056] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  191.837109][ T9056] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  191.854970][ T9052] 8021q: adding VLAN 0 to HW filter on device team0
[  191.866315][ T9056] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  191.888047][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  191.901503][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  191.914844][ T3077] bridge0: port 1(bridge_slave_0) entered blocking state
[  191.928419][ T3077] bridge0: port 1(bridge_slave_0) entered forwarding state
[  191.953110][ T3077] Bluetooth: hci2: command 0x0409 tx timeout
[  191.965914][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  191.980969][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  191.995549][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  192.008153][ T3077] bridge0: port 2(bridge_slave_1) entered blocking state
[  192.017410][ T3077] bridge0: port 2(bridge_slave_1) entered forwarding state
[  192.033619][ T3340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  192.054456][ T9084] Bluetooth: hci3: command 0x0409 tx timeout
[  192.077987][   T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  192.093465][   T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  192.107669][   T28] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  192.120590][   T28] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  192.138240][ T9054] 8021q: adding VLAN 0 to HW filter on device bond0
[  192.161028][ T3981] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  192.173721][ T3981] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  192.190602][   T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  192.200683][   T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  192.210255][   T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  192.219975][   T28] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  192.236768][ T9054] 8021q: adding VLAN 0 to HW filter on device team0
[  192.248151][   T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  192.259373][   T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  192.275759][ T9052] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  192.301458][   T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  192.312109][   T54] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  192.325079][   T54] bridge0: port 1(bridge_slave_0) entered blocking state
[  192.336543][   T54] bridge0: port 1(bridge_slave_0) entered forwarding state
[  192.348242][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  192.378939][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  192.390780][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  192.403053][ T3077] bridge0: port 2(bridge_slave_1) entered blocking state
[  192.413111][ T3077] bridge0: port 2(bridge_slave_1) entered forwarding state
[  192.428572][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  192.438425][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  192.449557][ T9058] 8021q: adding VLAN 0 to HW filter on device bond0
[  192.462583][   T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  192.481281][ T9052] 8021q: adding VLAN 0 to HW filter on device batadv0
[  192.497938][   T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  192.508455][   T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  192.518977][   T28] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  192.537130][ T9056] 8021q: adding VLAN 0 to HW filter on device bond0
[  192.546265][   T28] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  192.556503][   T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  192.566809][   T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  192.576964][   T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  192.588077][   T28] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  192.606234][ T9054] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  192.620928][ T9054] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  192.638186][ T9058] 8021q: adding VLAN 0 to HW filter on device team0
[  192.648265][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  192.659361][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  192.669559][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  192.680224][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  192.693823][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  192.723954][   T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  192.739263][   T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  192.750808][   T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  192.770039][   T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  192.791691][ T9054] 8021q: adding VLAN 0 to HW filter on device batadv0
[  192.807674][   T54] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  192.825607][   T54] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  192.844979][   T54] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  192.860018][   T54] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  192.873134][   T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  192.887040][   T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  192.896993][   T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  192.908142][   T54] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  192.935560][   T54] bridge0: port 1(bridge_slave_0) entered blocking state
[  192.968439][   T54] bridge0: port 1(bridge_slave_0) entered forwarding state
[  193.005215][   T54] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  193.034983][ T9056] 8021q: adding VLAN 0 to HW filter on device team0
[  193.050783][ T9052] device veth0_vlan entered promiscuous mode
[  193.071498][   T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  193.081791][   T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  193.092377][   T18] bridge0: port 1(bridge_slave_0) entered blocking state
[  193.107003][   T18] bridge0: port 1(bridge_slave_0) entered forwarding state
[  193.121405][   T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  193.132097][   T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  193.143944][   T18] bridge0: port 2(bridge_slave_1) entered blocking state
[  193.152661][   T18] bridge0: port 2(bridge_slave_1) entered forwarding state
[  193.162250][   T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  193.174069][   T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  193.184561][   T18] bridge0: port 2(bridge_slave_1) entered blocking state
[  193.192763][   T18] bridge0: port 2(bridge_slave_1) entered forwarding state
[  193.202306][   T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  193.229203][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  193.240026][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  193.261212][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  193.276338][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  193.304548][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  193.318163][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  193.329046][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  193.340688][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  193.351680][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  193.374029][ T9052] device veth1_vlan entered promiscuous mode
[  193.388063][ T9058] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  193.406061][ T9058] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  193.416492][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  193.437701][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  193.448630][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  193.461645][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  193.471551][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  193.484925][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  193.495842][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  193.527801][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  193.553032][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  193.563434][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  193.573577][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  193.584801][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  193.594809][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  193.610171][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  193.625613][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  193.636684][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  193.646859][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  193.657689][ T9056] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  193.668724][    T7] Bluetooth: hci0: command 0x041b tx timeout
[  193.680754][ T9054] device veth0_vlan entered promiscuous mode
[  193.697534][ T9052] device veth0_macvtap entered promiscuous mode
[  193.709617][ T9052] device veth1_macvtap entered promiscuous mode
[  193.718324][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  193.724565][ T9084] Bluetooth: hci1: command 0x041b tx timeout
[  193.728093][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  193.746491][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  193.759835][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  193.769763][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  193.780398][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  193.800781][ T9054] device veth1_vlan entered promiscuous mode
[  193.827289][   T54] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  193.837918][   T54] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  193.847677][   T54] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  193.857662][   T54] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  193.872169][   T28] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  193.881002][   T28] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  193.894571][ T9058] 8021q: adding VLAN 0 to HW filter on device batadv0
[  193.910518][ T9052] batman_adv: batadv0: Interface activated: batadv_slave_0
[  193.924701][ T9052] batman_adv: batadv0: Interface activated: batadv_slave_1
[  193.933256][ T9070] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  193.945151][ T9070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  193.973189][ T9070] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  193.996801][ T9070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  194.013881][ T9056] 8021q: adding VLAN 0 to HW filter on device batadv0
[  194.038132][ T9052] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  194.050523][ T9052] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  194.054672][ T9084] Bluetooth: hci2: command 0x041b tx timeout
[  194.064557][ T9052] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  194.087726][ T9052] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  194.108147][   T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  194.123775][   T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  194.134344][ T9084] Bluetooth: hci3: command 0x041b tx timeout
[  194.150312][ T9054] device veth0_macvtap entered promiscuous mode
[  194.165781][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  194.175811][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  194.187487][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  194.197994][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  194.215858][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  194.246233][ T9054] device veth1_macvtap entered promiscuous mode
[  194.280227][ T3981] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  194.292125][ T3981] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  194.305413][ T3981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  194.316954][ T3981] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  194.326721][ T3981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  194.337573][ T3981] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  194.348560][ T3981] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  194.358802][ T3981] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  194.369186][ T3981] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  194.383642][ T9058] device veth0_vlan entered promiscuous mode
[  194.405169][ T9056] device veth0_vlan entered promiscuous mode
[  194.417880][ T9054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  194.431419][ T9054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.445126][ T9054] batman_adv: batadv0: Interface activated: batadv_slave_0
[  194.465714][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  194.482129][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  194.498925][ T9056] device veth1_vlan entered promiscuous mode
[  194.526780][ T9058] device veth1_vlan entered promiscuous mode
[  194.553269][ T9086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  194.566451][ T9086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  194.567421][ T9054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  194.592299][ T9054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.609400][ T9054] batman_adv: batadv0: Interface activated: batadv_slave_1
[  194.626300][ T9054] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  194.638705][ T9054] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  194.649418][ T9054] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  194.664002][ T9054] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  194.680924][ T3981] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  194.697045][ T3981] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  194.706691][ T3981] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  194.717041][ T3981] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  194.726731][ T3981] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  194.736211][ T3981] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  194.746402][ T3981] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  194.771712][ T9056] device veth0_macvtap entered promiscuous mode
[  194.798489][ T9081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  194.807979][ T9081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  194.828010][ T9081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  194.847051][ T9081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  194.865481][ T9081] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  194.879813][ T9056] device veth1_macvtap entered promiscuous mode
[  194.891449][ T9058] device veth0_macvtap entered promiscuous mode
[  194.911094][ T2983] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  194.916497][ T9058] device veth1_macvtap entered promiscuous mode
[  194.924506][ T2983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  194.950420][ T9081] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  194.972561][ T9056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  194.988131][ T9056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.021389][ T9056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  195.038715][ T9056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.053174][ T9056] batman_adv: batadv0: Interface activated: batadv_slave_0
[  195.067465][ T9058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  195.086647][ T9058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.105364][ T9058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  195.122390][ T9058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.145998][ T9058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  195.165952][ T9058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.182502][ T9058] batman_adv: batadv0: Interface activated: batadv_slave_0
[  195.198107][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  195.208876][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  195.220434][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  195.231754][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  195.246012][ T9052] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation
[  195.246766][ T9056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  195.274398][ T9056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
08:30:12 executing program 0:
bpf$MAP_CREATE(0xf, &(0x7f0000000080), 0x40)

[  195.291268][ T9056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  195.306656][ T9056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.325105][ T9056] batman_adv: batadv0: Interface activated: batadv_slave_1
08:30:12 executing program 0:
r0 = getpgid(0x0)
ioprio_get$pid(0x3, r0)

[  195.337795][ T9058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  195.364498][ T9058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
08:30:12 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000001c0)={@dev}, 0x14)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000001c0)={@dev}, 0x14)

[  195.383134][ T9058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  195.400468][ T9058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.423684][ T9058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  195.466047][ T9058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.491072][ T9058] batman_adv: batadv0: Interface activated: batadv_slave_1
[  195.519684][ T9088] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  195.547360][ T9088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  195.566077][ T9088] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  195.587697][ T9088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  195.603578][ T9056] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  195.614795][ T9056] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  195.626482][ T9056] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  195.639208][ T9056] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  195.665810][ T9068] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  195.667164][ T9058] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  195.677390][ T9068] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  195.688836][ T9058] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  195.725089][ T9084] Bluetooth: hci0: command 0x040f tx timeout
[  195.747444][ T9058] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  195.766874][ T9058] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
08:30:13 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00')
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0)
ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000080)=0x10001)
ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000340))
sendfile(r3, r2, 0x0, 0x1bff)

[  195.801365][ T9081] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  195.807780][   T28] Bluetooth: hci1: command 0x040f tx timeout
08:30:13 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00')
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0)
ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000080)=0x10001)
ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000340))
sendfile(r3, r2, 0x0, 0x1bff)

[  195.894586][ T9068] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  195.919530][ T9068] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  195.946755][ T9081] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  195.962126][ T2983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  195.975381][ T2983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  195.983767][ T9068] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  196.000493][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  196.000935][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  196.000960][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
08:30:13 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00')
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0)
ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000080)=0x10001)
ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000340))
sendfile(r3, r2, 0x0, 0x1bff)

[  196.002912][ T9068] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  196.011592][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  196.060002][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  196.078661][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  196.089833][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  196.101032][   T54] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  196.126997][ T9084] Bluetooth: hci2: command 0x040f tx timeout
[  196.204866][ T9084] Bluetooth: hci3: command 0x040f tx timeout
qemu-system-x86_64: warning: guest updated active QH
08:30:13 executing program 2:
bpf$MAP_CREATE(0x14, &(0x7f0000000080), 0x40)

08:30:13 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r1, 0x5}}, 0x10)

08:30:13 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00')
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0)
ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000080)=0x10001)
ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000340))
sendfile(r3, r2, 0x0, 0x1bff)

08:30:13 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioprio_set$uid(0x3, 0x0, 0x0)

08:30:13 executing program 1:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0x2}}}}]}, 0x78}}, 0x0)

08:30:13 executing program 3:
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f00000001c0)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
sendto$unix(r2, &(0x7f0000000140), 0x14ded905162a6a4b, 0x0, 0x0, 0x429)

08:30:13 executing program 2:
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f00000003c0)={[{@logbufs={'logbufs', 0x3d, 0x5}}]})

08:30:13 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000008c0)="b98d14894b996f2b", 0x8)

08:30:13 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0})

[  196.455424][ T9145] XFS (loop2): Invalid superblock magic number
08:30:13 executing program 0:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ee5000/0x1000)=nil, 0x1000, 0x5, 0x2aeb4800bb21a972, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000ee5000)={{0xa, 0x0, 0x0, @mcast1}, {0xa, 0x0, 0x0, @private2}}, 0x5c)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000001a80)={{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, 0x6}, 0x5c)
setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000ee5000)={{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev}}, 0x11d)

08:30:13 executing program 1:
openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x0, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
dup(r0)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x0)

08:30:13 executing program 3:
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f00000001c0)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
sendto$unix(r2, &(0x7f0000000140), 0x14ded905162a6a4b, 0x0, 0x0, 0x429)

08:30:13 executing program 2:
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f00000001c0)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
sendto$unix(r2, &(0x7f0000000140), 0x14ded905162a6a4b, 0x0, 0x0, 0x429)

08:30:13 executing program 0:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ee5000/0x1000)=nil, 0x1000, 0x5, 0x2aeb4800bb21a972, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000ee5000)={{0xa, 0x0, 0x0, @mcast1}, {0xa, 0x0, 0x0, @private2}}, 0x5c)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000001a80)={{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, 0x6}, 0x5c)
setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000ee5000)={{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev}}, 0x11d)

08:30:13 executing program 0:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ee5000/0x1000)=nil, 0x1000, 0x5, 0x2aeb4800bb21a972, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000ee5000)={{0xa, 0x0, 0x0, @mcast1}, {0xa, 0x0, 0x0, @private2}}, 0x5c)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000001a80)={{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, 0x6}, 0x5c)
setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000ee5000)={{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev}}, 0x11d)

08:30:13 executing program 2:
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f00000001c0)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
sendto$unix(r2, &(0x7f0000000140), 0x14ded905162a6a4b, 0x0, 0x0, 0x429)

08:30:14 executing program 0:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ee5000/0x1000)=nil, 0x1000, 0x5, 0x2aeb4800bb21a972, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000ee5000)={{0xa, 0x0, 0x0, @mcast1}, {0xa, 0x0, 0x0, @private2}}, 0x5c)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000001a80)={{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, 0x6}, 0x5c)
setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000ee5000)={{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev}}, 0x11d)

08:30:14 executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x12, 0x0, 0x0, 0x1}, 0x40)

08:30:14 executing program 1:
syz_mount_image$nilfs2(&(0x7f0000000000)='nilfs2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000001340)=ANY=[])
syz_mount_image$nilfs2(&(0x7f0000000080)='nilfs2\x00', 0x0, 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f00000001c0)}], 0x0, &(0x7f0000001480)={[], [{@uid_eq={'uid'}}]})
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)

08:30:14 executing program 3:
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f00000001c0)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
sendto$unix(r2, &(0x7f0000000140), 0x14ded905162a6a4b, 0x0, 0x0, 0x429)

08:30:14 executing program 2:
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f00000001c0)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
sendto$unix(r2, &(0x7f0000000140), 0x14ded905162a6a4b, 0x0, 0x0, 0x429)

08:30:14 executing program 0:
move_pages(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000000000/0x4000)=nil], 0x0, &(0x7f00000000c0), 0x0)

08:30:14 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_udp_int(r0, 0x11, 0x67, 0x0, &(0x7f00000000c0))

[  197.468311][    C2] blk_update_request: I/O error, dev loop1, sector 36028797018963960 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
08:30:14 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0)
mmap$fb(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x11, r0, 0x0)
munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000)

[  197.490163][ T9208] NILFS (loop1): unable to read secondary superblock (blocksize = 1024)
[  197.512212][ T9208] NILFS (loop1): couldn't find nilfs on the device
08:30:14 executing program 2:
syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(&(0x7f0000000040)=ANY=[@ANYBLOB='.'], &(0x7f0000000780)='./file0\x00', 0x0, 0x10bc1f, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x3896c72, &(0x7f0000000100)={[{@delalloc='delalloc'}]})

08:30:14 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0)
mmap$fb(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x11, r0, 0x0)
munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000)

[  197.682341][ T9226] EXT4-fs (sda1): re-mounted. Opts: delalloc,,errors=continue
[  197.741185][ T9228] EXT4-fs (sda1): re-mounted. Opts: delalloc,,errors=continue
[  197.750014][    C3] blk_update_request: I/O error, dev loop1, sector 36028797018963960 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  197.805773][ T9208] NILFS (loop1): unable to read secondary superblock (blocksize = 1024)
[  197.806810][ T9084] Bluetooth: hci0: command 0x0419 tx timeout
[  197.824350][ T9208] NILFS (loop1): couldn't find nilfs on the device
08:30:15 executing program 3:
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f00000001c0)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
sendto$unix(r2, &(0x7f0000000140), 0x14ded905162a6a4b, 0x0, 0x0, 0x429)

08:30:15 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0)
mmap$fb(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x11, r0, 0x0)
munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000)

08:30:15 executing program 1:
syz_mount_image$nilfs2(&(0x7f0000000000)='nilfs2\x00', 0x0, 0x0, 0x0, 0x0, 0xc0ed0000, &(0x7f0000000180)=ANY=[])

08:30:15 executing program 2:
syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(&(0x7f0000000040)=ANY=[@ANYBLOB='.'], &(0x7f0000000780)='./file0\x00', 0x0, 0x10bc1f, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x3896c72, &(0x7f0000000100)={[{@delalloc='delalloc'}]})

[  197.895162][ T9084] Bluetooth: hci1: command 0x0419 tx timeout
08:30:15 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0)
mmap$fb(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x11, r0, 0x0)
munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000)

[  197.960453][ T9240] EXT4-fs (sda1): re-mounted. Opts: delalloc,,errors=continue
08:30:15 executing program 3:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x3c}}, 0x0)
open(0x0, 0x0, 0x0)

08:30:15 executing program 1:
creat(&(0x7f0000000000)='./bus\x00', 0x0)

08:30:15 executing program 2:
syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(&(0x7f0000000040)=ANY=[@ANYBLOB='.'], &(0x7f0000000780)='./file0\x00', 0x0, 0x10bc1f, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x3896c72, &(0x7f0000000100)={[{@delalloc='delalloc'}]})

08:30:15 executing program 0:
syz_mount_image$nilfs2(&(0x7f0000000000)='nilfs2\x00', 0x0, 0x0, 0x0, 0x0, 0x4c00000000000000, &(0x7f0000000180)=ANY=[])

08:30:15 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000001c0)={@dev}, 0x14)
dup3(r0, r1, 0x0)

08:30:15 executing program 1:
perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$usbfs(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x0)

[  198.121464][ T9257] EXT4-fs (sda1): re-mounted. Opts: delalloc,,errors=continue
08:30:15 executing program 0:
r0 = fanotify_init(0x0, 0x0)
fanotify_mark(r0, 0x1, 0x8, 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00')

08:30:15 executing program 1:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x204)
msgget$private(0x0, 0x0)
msgrcv(0x0, 0x0, 0x0, 0x0, 0x0)

08:30:15 executing program 2:
syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(&(0x7f0000000040)=ANY=[@ANYBLOB='.'], &(0x7f0000000780)='./file0\x00', 0x0, 0x10bc1f, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x3896c72, &(0x7f0000000100)={[{@delalloc='delalloc'}]})

[  198.215364][ T9084] Bluetooth: hci2: command 0x0419 tx timeout
08:30:15 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000700)={0x7}, 0x40)

08:30:15 executing program 0:
openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x0, 0x0)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x0, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
dup(r0)
syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0)

[  198.298862][ T9084] Bluetooth: hci3: command 0x0419 tx timeout
[  198.328583][ T9278] EXT4-fs (sda1): re-mounted. Opts: delalloc,,errors=continue
08:30:15 executing program 3:
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000840)={'ip6tnl0\x00', 0x0})

08:30:15 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x1, 0x0, 0x5, 0x8, 0x79, 0xef05bae, &(0x7f0000000200)="b936cb5363524990e3f806dbcc82f4b96ce5905d937d601c9d6fb45a804e1caaccbc7a3317737c2e4c0548f975c5606827e25e96287fef943902a01ed326166d5395c6130e04d5cefb2fee81fe27299cadc9503c519edafbee1c5395b175418bc20f741e8b8454f393592a5586d4a54c212aedf68a84a5a3fd"})
socket(0x21, 0x5, 0x0)
socket$kcm(0x2, 0x3, 0x2)
r0 = socket$kcm(0x2, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f00000007c0)={'geneve1\x00', @link_local})

08:30:15 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0)
write$vhost_msg_v2(r0, &(0x7f00000003c0)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48)

08:30:15 executing program 3:
munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd)

08:30:16 executing program 1:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x204)
msgget$private(0x0, 0x0)
msgrcv(0x0, 0x0, 0x0, 0x0, 0x0)

08:30:16 executing program 2:
r0 = socket(0x11, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000280)={'ip6gre0\x00', 0x0})

08:30:16 executing program 0:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SOUND_MIXER_READ_DEVMASK(r0, 0x80044dfe, &(0x7f0000000080))

08:30:16 executing program 3:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x80044d07, &(0x7f00000000c0))

08:30:16 executing program 3:
syz_mount_image$nilfs2(&(0x7f0000000000)='nilfs2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xd004, &(0x7f00000000c0)=ANY=[])

08:30:16 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000080))

08:30:16 executing program 0:
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d0700000000", 0x4d, 0x10000}], 0x0, &(0x7f0000000500)=ANY=[])

08:30:16 executing program 3:
keyctl$join(0x1, &(0x7f0000000880)={'syz', 0x0})

[  199.027294][ T9324] BTRFS: device fsid f90cac8b-044b-4fa8-8bee-4b8d3da88dc2 devid 0 transid 7 /dev/loop0 scanned by syz-executor.0 (9324)
08:30:16 executing program 3:
keyctl$join(0x1, &(0x7f0000000880)={'syz', 0x0})

08:30:16 executing program 1:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x204)
msgget$private(0x0, 0x0)
msgrcv(0x0, 0x0, 0x0, 0x0, 0x0)

08:30:16 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000080))

08:30:16 executing program 0:
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d0700000000", 0x4d, 0x10000}], 0x0, &(0x7f0000000500)=ANY=[])

08:30:16 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000008c0)="b98d14894b996f2b00000000000004d1", 0x10)
r3 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)

08:30:16 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000080))

08:30:16 executing program 3:
mmap(&(0x7f0000ee5000/0x1000)=nil, 0x1000, 0x5, 0x2aeb4800bb21a972, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000ee5000)={{0xa, 0x0, 0x0, @mcast1}, {0xa, 0x0, 0x0, @private2}}, 0x5c)

08:30:16 executing program 0:
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d0700000000", 0x4d, 0x10000}], 0x0, &(0x7f0000000500)=ANY=[])

08:30:17 executing program 3:
bpf$MAP_CREATE(0x9, &(0x7f0000000080), 0x40)

08:30:17 executing program 1:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x204)
msgget$private(0x0, 0x0)
msgrcv(0x0, 0x0, 0x0, 0x0, 0x0)

08:30:17 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000080))

08:30:17 executing program 3:
syz_mount_image$nilfs2(&(0x7f0000000080)='nilfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x6, 0xaaaaaaaaaaaabe8, &(0x7f0000000340)=[{&(0x7f00000001c0)="3e8ba8779da9353da43bc0b8ba1a8dd07e6dc6a720a808356a1045fee5bbc04137a582e2055444a48c56867bc0968ac8f6000cd856c8ab01c75c9aa6e72b618a78566dbbfa8a097f7e1fd492f6b61b0b114e906f358d3bc16fd8ee2d1f3a1e1ee0c44444a8ffb313cc32fa3c2f5ab32af9c6b005410c4f169f31262a8f5bb7454a94f854ad9bb80435c5ac4a8d7ce1ede1bd061d3149cc834022a39903042cb13557f7191f7b5856f277a74dc3c82ecdd40eb6", 0xb3, 0x5}, {&(0x7f0000000100)="8724553507440d7c91a93343fe7c036b69f9", 0x12, 0x323574a0}, {&(0x7f0000000280)="88f30b801f76728e5feff9e642bd0c14b638980af3fc36c438486249b155fab3c504a917e9f48a3d3b9ba987ee517f569d7c2608f86e690fdc3a9b870676d08dd0b8e0637130f26964331ec15c82de458355ef4f1d61d671212ea0f362735b070ea217a268ced648575455dcfe884d3d405fe1eecd2ffbc623006b4546b0da120843", 0x82, 0x1}], 0x2000000, &(0x7f00000003c0)={[{@norecovery='norecovery'}, {@snapshot={'snapshot'}}, {@nodiscard='nodiscard'}, {@nobarrier='nobarrier'}, {@norecovery='norecovery'}, {@order_strict='order=strict'}, {@nobarrier='nobarrier'}, {@order_relaxed='order=relaxed'}, {@snapshot={'snapshot'}}, {@discard='discard'}], [{@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}]})

08:30:17 executing program 0:
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d0700000000", 0x4d, 0x10000}], 0x0, &(0x7f0000000500)=ANY=[])

08:30:17 executing program 2:
syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(&(0x7f0000000040)=ANY=[@ANYBLOB='.'], &(0x7f0000000780)='./file0\x00', 0x0, 0x10bc1f, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x3896c32, &(0x7f00000000c0)={[{@dax='dax'}]})

[  200.254551][ T9403] EXT4-fs (sda1): can't change dax mount option while remounting
08:30:17 executing program 0:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x200802047fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = getpid()
pause()
ptrace(0x10, r0)
ptrace$getsig(0x2, r0, 0xfffffffffffffffd, 0x0)

[  200.281583][ T9405] EXT4-fs (sda1): can't change dax mount option while remounting
08:30:17 executing program 2:
syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(&(0x7f0000000040)=ANY=[@ANYBLOB='.'], &(0x7f0000000780)='./file0\x00', 0x0, 0x10bc1f, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x3896c32, &(0x7f00000000c0)={[{@dax='dax'}]})

[  200.386778][ T9413] EXT4-fs (sda1): can't change dax mount option while remounting
08:30:17 executing program 2:
syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(&(0x7f0000000040)=ANY=[@ANYBLOB='.'], &(0x7f0000000780)='./file0\x00', 0x0, 0x10bc1f, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x3896c32, &(0x7f00000000c0)={[{@dax='dax'}]})

[  200.491623][ T9416] EXT4-fs (sda1): can't change dax mount option while remounting
08:30:18 executing program 2:
syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(&(0x7f0000000040)=ANY=[@ANYBLOB='.'], &(0x7f0000000780)='./file0\x00', 0x0, 0x10bc1f, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x3896c32, &(0x7f00000000c0)={[{@dax='dax'}]})

08:30:18 executing program 1:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0)

[  200.734999][ T9419] EXT4-fs (sda1): can't change dax mount option while remounting
08:30:18 executing program 3:
syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000010c00)="d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xa6, 0x400000}, {&(0x7f0000010d00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x400fe0}, {&(0x7f0000000280)="0000000000000000000000000000000000000000000000000000000100000000d73cd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f", 0xc6, 0x404fe0}, {&(0x7f0000011a00)="00000000000000000000000000000000000000000000000000000000ae8bfed7", 0x20, 0x405fe0}], 0x0, &(0x7f0000000040))

08:30:18 executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000000)='nilfs2\x00', 0x0, 0x0, 0x0, 0x0, 0x800000000000000, &(0x7f0000000180)=ANY=[])

08:30:18 executing program 1:
shmget(0x0, 0x2000, 0xabbc2484ee391a4f, &(0x7f0000b3a000/0x2000)=nil)

08:30:18 executing program 0:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x200802047fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = getpid()
pause()
ptrace(0x10, r0)
ptrace$getsig(0x2, r0, 0xfffffffffffffffd, 0x0)

08:30:18 executing program 2:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x204)
msgrcv(0x0, 0x0, 0x0, 0x0, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)

08:30:18 executing program 1:
syz_mount_image$nilfs2(&(0x7f0000000080)='nilfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f00000001c0)="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", 0xffb, 0x5}], 0x0, &(0x7f0000001480)={[{@order_relaxed='order=relaxed'}], [{@smackfsdef={'smackfsdef', 0x3d, 'nilfs2\x00'}}]})

[  201.143005][ T9435] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  201.173367][ T9435] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  201.188223][ T9449] NILFS (loop1): couldn't find nilfs on the device
[  201.192713][ T9435] F2FS-fs (loop3): invalid crc_offset: 0
[  201.222710][ T9435] F2FS-fs (loop3): SIT is corrupted node# 0 vs 7
[  201.231235][ T9435] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117)
[  201.345555][ T9435] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  201.361576][ T9435] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  201.384604][ T9449] NILFS (loop1): couldn't find nilfs on the device
[  201.398029][ T9435] F2FS-fs (loop3): invalid crc_offset: 0
[  201.410814][ T9435] F2FS-fs (loop3): SIT is corrupted node# 0 vs 7
08:30:18 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x7, 0x43}, 0xd8)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, 0x0, 0x0, 0xf, 0x0, "44b14246b0797906914106c49e5552170c73b3859523686349eaa1dafbc5c664f8c9683cdaa67558b864a3aae0cea3032e73dd2ce800b104f68d16655752ae368fd80f8cfafbe7f84898c3e529b7ac39"}, 0xd8)

[  201.420981][ T9435] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117)
08:30:18 executing program 3:
syz_mount_image$nilfs2(&(0x7f0000000040)='nilfs2\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000400), 0x1, &(0x7f00000004c0))

08:30:18 executing program 1:
bpf$MAP_CREATE(0x13, &(0x7f0000000080), 0x40)

08:30:19 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0})

08:30:19 executing program 1:
mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2800006)

[  201.728757][    C1] blk_update_request: I/O error, dev loop3, sector 36028797018963960 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  201.759794][ T9474] NILFS (loop3): unable to read secondary superblock (blocksize = 1024)
[  201.782086][ T9474] NILFS (loop3): couldn't find nilfs on the device
[  201.869739][    C3] blk_update_request: I/O error, dev loop3, sector 36028797018963960 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  201.885245][ T9474] NILFS (loop3): unable to read secondary superblock (blocksize = 1024)
[  201.897055][ T9474] NILFS (loop3): couldn't find nilfs on the device
08:30:19 executing program 0:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x200802047fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = getpid()
pause()
ptrace(0x10, r0)
ptrace$getsig(0x2, r0, 0xfffffffffffffffd, 0x0)

08:30:19 executing program 1:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x204)
msgrcv(0x0, 0x0, 0x0, 0x0, 0x0)

08:30:19 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0})

08:30:19 executing program 3:
syz_mount_image$nilfs2(&(0x7f0000000040)='nilfs2\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000400), 0x1, &(0x7f00000004c0))

08:30:19 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0})

[  202.045356][    C0] blk_update_request: I/O error, dev loop3, sector 36028797018963960 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  202.061910][ T9502] NILFS (loop3): unable to read secondary superblock (blocksize = 1024)
[  202.073081][ T9502] NILFS (loop3): couldn't find nilfs on the device
08:30:19 executing program 3:
syz_mount_image$nilfs2(&(0x7f0000000040)='nilfs2\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000400), 0x1, &(0x7f00000004c0))

[  202.226390][    C3] blk_update_request: I/O error, dev loop3, sector 36028797018963960 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  202.246928][ T9512] NILFS (loop3): unable to read secondary superblock (blocksize = 1024)
[  202.265195][ T9512] NILFS (loop3): couldn't find nilfs on the device
08:30:19 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28081)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0})

08:30:19 executing program 3:
syz_mount_image$nilfs2(&(0x7f0000000040)='nilfs2\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000400), 0x1, &(0x7f00000004c0))

[  202.432309][    C1] blk_update_request: I/O error, dev loop3, sector 36028797018963960 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  202.448615][ T9522] NILFS (loop3): unable to read secondary superblock (blocksize = 1024)
[  202.460403][ T9522] NILFS (loop3): couldn't find nilfs on the device
08:30:20 executing program 0:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x200802047fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = getpid()
pause()
ptrace(0x10, r0)
ptrace$getsig(0x2, r0, 0xfffffffffffffffd, 0x0)

08:30:20 executing program 2:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x12e)
r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
dup2(r1, r0)
renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)

08:30:20 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x1, 0x0, 0x5, 0x8, 0x79, 0xef05bae, &(0x7f0000000200)="b936cb5363524990e3f806dbcc82f4b96ce5905d937d601c9d6fb45a804e1caaccbc7a3317737c2e4c0548f975c5606827e25e96287fef943902a01ed326166d5395c6130e04d5cefb2fee81fe27299cadc9503c519edafbee1c5395b175418bc20f741e8b8454f393592a5586d4a54c212aedf68a84a5a3fd"})
r0 = socket(0x11, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0})

08:30:20 executing program 3:
fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0)
poll(0x0, 0x0, 0x0)
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d000000000000006000000000000000100000000000000001000000010000000100000001000006100000004000000000000000000000000000000000000000000000045030000000000000000", 0xc6, 0x10000}], 0x0, &(0x7f0000000500)=ANY=[])

[  202.920161][ T3077] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  202.934079][ T3077] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  202.954406][ T3077] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  202.972327][ T3077] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  202.985594][ T3077] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  202.996736][ T3077] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  203.009358][ T3077] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  203.019903][ T3077] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  203.030253][ T3077] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  203.040767][ T3077] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  203.058619][ T3077] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  203.077197][ T3077] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  203.093744][ T3077] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
08:30:20 executing program 1:
syz_mount_image$nilfs2(&(0x7f0000000080)='nilfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x6, 0xaaaaaaaaaaaabe8, &(0x7f0000000340)=[{&(0x7f00000001c0)="3e8ba8779da9353da43bc0b8ba1a8dd07e6dc6a720a808356a1045fee5bbc04137a582e2055444a48c56867bc0968ac8f6000cd856c8ab01c75c9aa6e72b618a78566dbbfa8a097f7e1fd492f6b61b0b114e906f358d3bc16fd8ee2d1f3a1e1ee0c44444a8ffb313cc32fa3c2f5ab32af9c6b005410c4f169f31262a8f5bb7454a94f854ad9bb80435c5ac4a8d7ce1ede1bd061d3149cc834022a39903042cb13557f7191f7b5856f277a74dc3c82ecdd40eb6", 0xb3, 0x5}, {&(0x7f0000000100)="8724553507440d7c91a93343fe7c036b69f9", 0x12, 0x323574a0}, {&(0x7f0000000280)="88f30b801f76728e5feff9e642bd0c14b638980af3fc36c438486249b155fab3c504a917e9f48a3d3b9ba987ee517f569d7c2608f86e690fdc3a9b870676d08dd0b8e0637130f26964331ec15c82de458355ef4f1d61d671212ea0f362735b070ea217a268ced648575455dcfe884d3d405fe1eecd2ffbc623006b4546b0da120843", 0x82, 0x1}], 0x2000000, &(0x7f00000003c0)={[{@norecovery='norecovery'}, {@snapshot={'snapshot'}}, {@nodiscard='nodiscard'}, {@nobarrier='nobarrier'}, {@norecovery='norecovery'}, {@order_strict='order=strict'}, {@nobarrier='nobarrier'}, {@order_relaxed='order=relaxed'}, {@snapshot={'snapshot'}}, {@discard='discard'}], [{@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}]})
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000580)={0xb, 0x10, 0xfa00, {0x0}}, 0x18)

[  203.115615][ T3077] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  203.129846][ T3077] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  203.145747][ T3077] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  203.161735][ T3077] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  203.184370][ T3077] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  203.193579][ T3077] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  203.224338][ T3077] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  203.233468][ T3077] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  203.243214][ T3077] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  203.260651][ T3077] hid-generic 0000:0000:0000.0002: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on %�z5
08:30:20 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
pipe2(&(0x7f0000000040), 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = dup2(r0, r1)
ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000000))

08:30:20 executing program 2:
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

08:30:20 executing program 3:
fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0)
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="90e42e8500000000000000000000000000000000000000000000000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, &(0x7f0000000500)=ANY=[])

08:30:21 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x11, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000280)={'ip6gre0\x00', 0x0})

08:30:21 executing program 3:
bpf$MAP_CREATE(0x10, &(0x7f0000000080), 0x40)

08:30:21 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0)
write$vhost_msg_v2(r0, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f0000000800)=""/4084, 0x1000, &(0x7f0000000280)=""/211, 0x2}}, 0xfffffef6)

08:30:21 executing program 3:
r0 = open(&(0x7f0000000240)='./file0\x00', 0x102e0, 0x0)
fcntl$setsig(r0, 0xa, 0x11)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b, 0x0, @perf_config_ext={0x80000001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f00000001c0)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffc000/0x1000)=nil)
truncate(&(0x7f0000000100)='./file0\x00', 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, "9845bce033212a2241a1e3b252a77f163e991a", 0x2})
r2 = dup(0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CHANNEL(r2, &(0x7f0000000480)={&(0x7f00000000c0), 0xc, 0x0}, 0x4008810)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0)
open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)

08:30:21 executing program 1:
syz_mount_image$nilfs2(&(0x7f0000000080)='nilfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x6, 0xaaaaaaaaaaaabe8, &(0x7f0000000340)=[{&(0x7f00000001c0)="3e8ba8779da9353da43bc0b8ba1a8dd07e6dc6a720a808356a1045fee5bbc04137a582e2055444a48c56867bc0968ac8f6000cd856c8ab01c75c9aa6e72b618a78566dbbfa8a097f7e1fd492f6b61b0b114e906f358d3bc16fd8ee2d1f3a1e1ee0c44444a8ffb313cc32fa3c2f5ab32af9c6b005410c4f169f31262a8f5bb7454a94f854ad9bb80435c5ac4a8d7ce1ede1bd061d3149cc834022a39903042cb13557f7191f7b5856f277a74dc3c82ecdd40eb6", 0xb3, 0x5}, {&(0x7f0000000100)="8724553507440d7c91a93343fe7c036b69f9", 0x12, 0x323574a0}, {&(0x7f0000000280)="88f30b801f76728e5feff9e642bd0c14b638980af3fc36c438486249b155fab3c504a917e9f48a3d3b9ba987ee517f569d7c2608f86e690fdc3a9b870676d08dd0b8e0637130f26964331ec15c82de458355ef4f1d61d671212ea0f362735b070ea217a268ced648575455dcfe884d3d405fe1eecd2ffbc623006b4546b0da120843", 0x82, 0x1}], 0x2000000, &(0x7f00000003c0)={[{@norecovery='norecovery'}, {@snapshot={'snapshot'}}, {@nodiscard='nodiscard'}, {@nobarrier='nobarrier'}, {@norecovery='norecovery'}, {@order_strict='order=strict'}, {@nobarrier='nobarrier'}, {@order_relaxed='order=relaxed'}, {@snapshot={'snapshot'}}, {@discard='discard'}], [{@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}]})
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000580)={0xb, 0x10, 0xfa00, {0x0}}, 0x18)

[  204.624251][    C3] hrtimer: interrupt took 41679 ns
08:30:22 executing program 1:
syz_mount_image$nilfs2(&(0x7f0000000080)='nilfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x6, 0xaaaaaaaaaaaabe8, &(0x7f0000000340)=[{&(0x7f00000001c0)="3e8ba8779da9353da43bc0b8ba1a8dd07e6dc6a720a808356a1045fee5bbc04137a582e2055444a48c56867bc0968ac8f6000cd856c8ab01c75c9aa6e72b618a78566dbbfa8a097f7e1fd492f6b61b0b114e906f358d3bc16fd8ee2d1f3a1e1ee0c44444a8ffb313cc32fa3c2f5ab32af9c6b005410c4f169f31262a8f5bb7454a94f854ad9bb80435c5ac4a8d7ce1ede1bd061d3149cc834022a39903042cb13557f7191f7b5856f277a74dc3c82ecdd40eb6", 0xb3, 0x5}, {&(0x7f0000000100)="8724553507440d7c91a93343fe7c036b69f9", 0x12, 0x323574a0}, {&(0x7f0000000280)="88f30b801f76728e5feff9e642bd0c14b638980af3fc36c438486249b155fab3c504a917e9f48a3d3b9ba987ee517f569d7c2608f86e690fdc3a9b870676d08dd0b8e0637130f26964331ec15c82de458355ef4f1d61d671212ea0f362735b070ea217a268ced648575455dcfe884d3d405fe1eecd2ffbc623006b4546b0da120843", 0x82, 0x1}], 0x2000000, &(0x7f00000003c0)={[{@norecovery='norecovery'}, {@snapshot={'snapshot'}}, {@nodiscard='nodiscard'}, {@nobarrier='nobarrier'}, {@norecovery='norecovery'}, {@order_strict='order=strict'}, {@nobarrier='nobarrier'}, {@order_relaxed='order=relaxed'}, {@snapshot={'snapshot'}}, {@discard='discard'}], [{@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}]})
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000580)={0xb, 0x10, 0xfa00, {0x0}}, 0x18)

08:30:23 executing program 1:
syz_mount_image$nilfs2(&(0x7f0000000080)='nilfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x6, 0xaaaaaaaaaaaabe8, &(0x7f0000000340)=[{&(0x7f00000001c0)="3e8ba8779da9353da43bc0b8ba1a8dd07e6dc6a720a808356a1045fee5bbc04137a582e2055444a48c56867bc0968ac8f6000cd856c8ab01c75c9aa6e72b618a78566dbbfa8a097f7e1fd492f6b61b0b114e906f358d3bc16fd8ee2d1f3a1e1ee0c44444a8ffb313cc32fa3c2f5ab32af9c6b005410c4f169f31262a8f5bb7454a94f854ad9bb80435c5ac4a8d7ce1ede1bd061d3149cc834022a39903042cb13557f7191f7b5856f277a74dc3c82ecdd40eb6", 0xb3, 0x5}, {&(0x7f0000000100)="8724553507440d7c91a93343fe7c036b69f9", 0x12, 0x323574a0}, {&(0x7f0000000280)="88f30b801f76728e5feff9e642bd0c14b638980af3fc36c438486249b155fab3c504a917e9f48a3d3b9ba987ee517f569d7c2608f86e690fdc3a9b870676d08dd0b8e0637130f26964331ec15c82de458355ef4f1d61d671212ea0f362735b070ea217a268ced648575455dcfe884d3d405fe1eecd2ffbc623006b4546b0da120843", 0x82, 0x1}], 0x2000000, &(0x7f00000003c0)={[{@norecovery='norecovery'}, {@snapshot={'snapshot'}}, {@nodiscard='nodiscard'}, {@nobarrier='nobarrier'}, {@norecovery='norecovery'}, {@order_strict='order=strict'}, {@nobarrier='nobarrier'}, {@order_relaxed='order=relaxed'}, {@snapshot={'snapshot'}}, {@discard='discard'}], [{@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}]})
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000580)={0xb, 0x10, 0xfa00, {0x0}}, 0x18)

08:30:23 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000024c0)='nl80211\x00')
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x38, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "3b1d9537a6"}]}, 0x38}}, 0x0)

08:30:44 executing program 1:
r0 = socket$packet(0x11, 0x2, 0x300)
getsockname(r0, 0x0, &(0x7f0000000040))

08:30:44 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$msdos(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(&(0x7f0000000040)=ANY=[@ANYBLOB='.'], &(0x7f0000000780)='./file0\x00', 0x0, 0x10bc1f, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x3896c32, &(0x7f00000001c0))

[  277.886991][ T9303] syz-executor.1: page allocation failure: order:0, mode:0xa20(GFP_ATOMIC), nodemask=(null),cpuset=syz1,mems_allowed=0-1
[  277.894238][ T9303] CPU: 1 PID: 9303 Comm: syz-executor.1 Not tainted 5.10.0-rc7-syzkaller #0
[  277.894238][ T9303] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014
[  277.894238][ T9303] Call Trace:
[  277.894238][ T9303]  dump_stack+0x107/0x163
[  277.894238][ T9303]  warn_alloc.cold+0x87/0x17a
[  277.894238][ T9303]  ? zone_watermark_ok_safe+0x2a0/0x2a0
[  277.894238][ T9303]  ? wakeup_kswapd+0x15b/0x640
[  277.894238][ T9303]  ? __zone_watermark_ok+0x440/0x440
[  277.894238][ T9303]  ? wake_all_kswapds+0x143/0x2c0
[  277.894238][ T9303]  __alloc_pages_slowpath.constprop.0+0x2026/0x2510
[  277.894238][ T9303]  ? __lock_acquire+0x16b7/0x5500
[  277.894238][ T9303]  ? warn_alloc+0x120/0x120
[  277.894238][ T9303]  ? __lock_acquire+0x16b7/0x5500
[  277.894238][ T9303]  ? __zone_watermark_ok+0x440/0x440
[  277.894238][ T9303]  __alloc_pages_nodemask+0x5f0/0x730
[  277.894238][ T9303]  ? __alloc_pages_slowpath.constprop.0+0x2510/0x2510
[  277.894238][ T9303]  ? __slab_alloc.constprop.0+0x52/0xe0
[  277.894238][ T9303]  alloc_pages_current+0x191/0x2a0
[  277.894238][ T9303]  allocate_slab+0x2d9/0x4e0
[  277.894238][ T9303]  ___slab_alloc+0x476/0x790
[  277.894238][ T9303]  ? __sigqueue_alloc+0x236/0x550
[  277.894238][ T9303]  ? find_held_lock+0x2d/0x110
[  277.894238][ T9303]  ? __sigqueue_alloc+0x236/0x550
[  277.894238][ T9303]  ? __slab_alloc.constprop.0+0x52/0xe0
[  277.894238][ T9303]  __slab_alloc.constprop.0+0x52/0xe0
[  277.894238][ T9303]  ? __sigqueue_alloc+0x236/0x550
[  277.894238][ T9303]  kmem_cache_alloc+0x36e/0x440
[  277.894238][ T9303]  __sigqueue_alloc+0x236/0x550
[  277.894238][ T9303]  __send_signal+0x62d/0xf90
[  277.894238][ T9303]  force_sig_info_to_task+0x2a0/0x3a0
[  277.894238][ T9303]  force_sig_fault+0xb0/0xf0
[  277.894238][ T9303]  ? force_sig_fault_to_task+0xe0/0xe0
[  277.894238][ T9303]  ? pgtable_bad+0x90/0x90
[  277.894238][ T9303]  ? _down_write_nest_lock+0x150/0x150
[  277.894238][ T9303]  __bad_area_nosemaphore+0x2f3/0x400
[  277.894238][ T9303]  do_user_addr_fault+0x7d7/0xb40
[  277.894238][ T9303]  exc_page_fault+0x9e/0x180
[  277.894238][ T9303]  ? asm_exc_page_fault+0x8/0x30
[  277.894238][ T9303]  asm_exc_page_fault+0x1e/0x30
[  277.894238][ T9303] RIP: 0023:0x804d836
[  277.894238][ T9303] Code: e8 cf 5e 01 00 83 c4 10 85 c0 0f 84 7d 01 00 00 65 f0 83 2d e4 ff ff ff 01 8b 5c 24 08 e8 82 04 01 00 8b 00 8b 54 24 0c 85 c0 <89> 42 54 8b 72 50 0f 85 16 01 00 00 83 fe ff 0f 85 0d 01 00 00 8b
[  277.894238][ T9303] RSP: 002b:00000000f55e4100 EFLAGS: 00010202
[  277.894238][ T9303] RAX: 000000000000000e RBX: 0000000000000000 RCX: 00000000f55e40f0
[  277.894238][ T9303] RDX: 0000000000000000 RSI: 000000000818afa0 RDI: 000000000815e000
[  277.894238][ T9303] RBP: 0000000000000005 R08: 0000000000000000 R09: 0000000000000000
[  277.894238][ T9303] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  277.894238][ T9303] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  277.894238][ T9303] Mem-Info:
[  277.894238][ T9303] active_anon:3869 inactive_anon:110073 isolated_anon:0
[  277.894238][ T9303]  active_file:1311 inactive_file:977 isolated_file:32
[  277.894238][ T9303]  unevictable:0 dirty:93 writeback:23
[  277.894238][ T9303]  slab_reclaimable:12906 slab_unreclaimable:135333
[  277.894238][ T9303]  mapped:36723 shmem:602 pagetables:1125 bounce:0
[  277.894238][ T9303]  free:6667 free_pcp:1732 free_cma:0
[  277.894238][ T9303] Node 0 active_anon:15468kB inactive_anon:214260kB active_file:140kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:92kB dirty:96kB writeback:12kB shmem:1840kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 67584kB writeback_tmp:0kB kernel_stack:8800kB all_unreclaimable? yes
[  277.894238][ T9303] Node 1 active_anon:8kB inactive_anon:226032kB active_file:5104kB inactive_file:3852kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:146800kB dirty:276kB writeback:80kB shmem:568kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB kernel_stack:1344kB all_unreclaimable? no
[  277.894238][ T9303] Node 0 DMA free:2128kB min:732kB low:912kB high:1092kB reserved_highatomic:0KB active_anon:0kB inactive_anon:13060kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  277.894238][ T9303] lowmem_reserve[]: 0 468 468 468 468
[  277.894238][ T9303] Node 0 DMA32 free:8256kB min:24244kB low:29792kB high:35340kB reserved_highatomic:2048KB active_anon:15468kB inactive_anon:201200kB active_file:140kB inactive_file:56kB unevictable:0kB writepending:108kB present:1032192kB managed:486276kB mlocked:0kB pagetables:2396kB bounce:0kB free_pcp:2168kB local_pcp:556kB free_cma:0kB
[  277.894238][ T9303] lowmem_reserve[]: 0 0 0 0 0
[  277.894238][ T9303] Node 1 DMA32 free:16284kB min:67176kB low:78336kB high:89496kB reserved_highatomic:2048KB active_anon:8kB inactive_anon:226032kB active_file:5464kB inactive_file:3980kB unevictable:0kB writepending:356kB present:1048436kB managed:965508kB mlocked:0kB pagetables:2104kB bounce:0kB free_pcp:4760kB local_pcp:1552kB free_cma:0kB
[  277.894238][ T9303] lowmem_reserve[]: 0 0 0 0 0
[  277.894238][ T9303] Node 0 DMA: 2*4kB (UM) 1*8kB (M) 2*16kB (UM) 1*32kB (M) 2*64kB (UM) 1*128kB (M) 1*256kB (U) 1*512kB (U) 1*1024kB (M) 0*2048kB 0*4096kB = 2128kB
[  277.894238][ T9303] Node 0 DMA32: 174*4kB (ME) 155*8kB (MEH) 50*16kB (UMEH) 46*32kB (MEH) 18*64kB (UMEH) 5*128kB (MH) 3*256kB (UM) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 8304kB
[  277.894238][ T9303] Node 1 DMA32: 149*4kB (UMEH) 107*8kB (MEH) 67*16kB (UMH) 54*32kB (UMEH) 34*64kB (UME) 19*128kB (UMH) 18*256kB (M) 6*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 16540kB
[  277.894238][ T9303] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  277.894238][ T9303] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  277.894238][ T9303] 2932 total pagecache pages
[  277.894238][ T9303] 0 pages in swap cache
[  277.894238][ T9303] Swap cache stats: add 0, delete 0, find 0/0
[  277.894238][ T9303] Free swap  = 0kB
[  277.894238][ T9303] Total swap = 0kB
[  277.894238][ T9303] 524155 pages RAM
[  277.894238][ T9303] 0 pages HighMem/MovableOnly
[  277.894238][ T9303] 157232 pages reserved
[  277.894238][ T9303] 0 pages cma reserved
[  277.894238][ T9303] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC)
[  277.894238][ T9303]   cache: sigqueue, object size: 80, buffer size: 112, default order: 0, min order: 0
[  277.894238][ T9303]   node 0: slabs: 5331, objs: 191916, free: 0
[  277.894238][ T9303]   node 1: slabs: 62597, objs: 2253492, free: 116
[  279.050585][    C1] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC)
[  279.058555][    C1]   cache: skbuff_head_cache, object size: 224, buffer size: 320, default order: 1, min order: 0
[  279.058555][    C1]   node 0: slabs: 76, objs: 1900, free: 0
[  279.058555][    C1]   node 1: slabs: 648, objs: 16057, free: 113
[  279.100536][    C1] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC)
[  279.110442][    C1]   cache: skbuff_head_cache, object size: 224, buffer size: 320, default order: 1, min order: 0
[  279.110442][    C1]   node 0: slabs: 76, objs: 1900, free: 0
[  279.110442][    C1]   node 1: slabs: 648, objs: 16057, free: 113
[  279.147710][    C1] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC)
[  279.157610][    C1]   cache: skbuff_head_cache, object size: 224, buffer size: 320, default order: 1, min order: 0
[  279.157610][    C1]   node 0: slabs: 76, objs: 1900, free: 0
[  279.157610][    C1]   node 1: slabs: 648, objs: 16057, free: 113
[  279.196766][    C1] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC)
[  279.206540][    C1]   cache: skbuff_head_cache, object size: 224, buffer size: 320, default order: 1, min order: 0
[  279.206540][    C1]   node 0: slabs: 76, objs: 1900, free: 0
[  279.206540][    C1]   node 1: slabs: 648, objs: 16057, free: 113
[  279.252420][    C1] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC)
[  279.262339][    C1]   cache: skbuff_head_cache, object size: 224, buffer size: 320, default order: 1, min order: 0
[  279.262339][    C1]   node 0: slabs: 76, objs: 1900, free: 0
[  279.262339][    C1]   node 1: slabs: 648, objs: 16057, free: 113
[  279.297158][    C1] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC)
[  279.307073][    C1]   cache: skbuff_head_cache, object size: 224, buffer size: 320, default order: 1, min order: 0
[  279.307073][    C1]   node 0: slabs: 76, objs: 1900, free: 0
[  279.307073][    C1]   node 1: slabs: 648, objs: 16057, free: 113
[  279.342227][    C1] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC)
[  279.352155][    C1]   cache: skbuff_head_cache, object size: 224, buffer size: 320, default order: 1, min order: 0
[  279.352155][    C1]   node 0: slabs: 76, objs: 1900, free: 0
[  279.352155][    C1]   node 1: slabs: 648, objs: 16057, free: 113
[  279.386758][    C1] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC)
[  279.396648][    C1]   cache: skbuff_head_cache, object size: 224, buffer size: 320, default order: 1, min order: 0
[  279.396648][    C1]   node 0: slabs: 76, objs: 1900, free: 0
[  279.396648][    C1]   node 1: slabs: 648, objs: 16057, free: 113
[  279.433209][    C1] SLUB: Unable to allocate memory on node -1, gfp=0xa20(GFP_ATOMIC)
[  279.443117][    C1]   cache: skbuff_head_cache, object size: 224, buffer size: 320, default order: 1, min order: 0
[  279.443117][    C1]   node 0: slabs: 76, objs: 1900, free: 0
[  279.443117][    C1]   node 1: slabs: 648, objs: 16057, free: 113
[  281.084427][    C1] ------------[ cut here ]------------
[  281.094644][    C1] HSR: Could not send supervision frame
[  281.107186][    C1] WARNING: CPU: 1 PID: 9303 at net/hsr/hsr_device.c:299 send_hsr_supervision_frame+0x889/0xb40
[  281.128291][    C1] Modules linked in:
[  281.139303][    C1] CPU: 1 PID: 9303 Comm: syz-executor.1 Not tainted 5.10.0-rc7-syzkaller #0
[  281.154066][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014
[  281.176251][    C1] RIP: 0010:send_hsr_supervision_frame+0x889/0xb40
[  281.185982][    C1] Code: 04 31 ff 89 de e8 c7 83 cd f8 84 db 0f 85 8b fd ff ff e8 aa 8b cd f8 48 c7 c7 60 e9 6b 8a c6 05 01 2d 36 04 01 e8 53 fa 09 00 <0f> 0b e9 6c fd ff ff e8 8b 8b cd f8 41 be 42 00 00 00 ba 01 00 00
[  281.217532][    C1] RSP: 0000:ffffc900004c8c70 EFLAGS: 00010286
[  281.230430][    C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[  281.242521][    C1] RDX: ffff888010d24300 RSI: ffffffff8158c835 RDI: fffff52000099180
[  281.259163][    C1] RBP: 00000000000088fb R08: 0000000000000001 R09: ffffffff8ecc2747
[  281.272097][    C1] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88801572b200
[  281.284067][    C1] R13: 0000000000000000 R14: ffff88806722ece8 R15: 0000000000000000
[  281.299157][    C1] FS:  0000000000000000(0000) GS:ffff88802cd00000(0063) knlGS:00000000f55e4b40
[  281.314015][    C1] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[  281.324284][    C1] CR2: 0000000000000054 CR3: 0000000068082000 CR4: 0000000000350ee0
[  281.336857][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  281.356727][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  281.370358][    C1] Call Trace:
[  281.375613][    C1]  <IRQ>
[  281.382609][    C1]  ? send_hsr_supervision_frame+0xb40/0xb40
[  281.394421][    C1]  hsr_announce+0x122/0x320
[  281.401090][    C1]  ? send_hsr_supervision_frame+0xb40/0xb40
[  281.412029][    C1]  call_timer_fn+0x1a5/0x6b0
[  281.418924][    C1]  ? add_timer_on+0x4a0/0x4a0
[  281.426086][    C1]  ? lock_downgrade+0x6d0/0x6d0
[  281.434293][    C1]  ? _raw_spin_unlock_irq+0x1f/0x40
[  281.442567][    C1]  ? send_hsr_supervision_frame+0xb40/0xb40
[  281.458148][    C1]  __run_timers.part.0+0x67c/0xa50
[  281.466267][    C1]  ? call_timer_fn+0x6b0/0x6b0
[  281.474027][    C1]  ? sched_clock_cpu+0x17b/0x1f0
[  281.481943][    C1]  run_timer_softirq+0xb3/0x1d0
[  281.488811][    C1]  __do_softirq+0x2a0/0x9f6
[  281.495106][    C1]  asm_call_irq_on_stack+0xf/0x20
[  281.502533][    C1]  </IRQ>
[  281.507206][    C1]  do_softirq_own_stack+0xaa/0xd0
[  281.514569][    C1]  irq_exit_rcu+0x132/0x200
[  281.521256][    C1]  sysvec_apic_timer_interrupt+0x4d/0x100
[  281.532849][    C1]  asm_sysvec_apic_timer_interrupt+0x12/0x20
[  281.553758][    C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x25/0x50
[  281.571327][    C1] Code: f8 5d c3 66 90 55 48 89 fd 48 83 c7 18 53 48 89 f3 48 8b 74 24 10 e8 fa 38 6e f8 48 89 ef e8 82 ed 6e f8 f6 c7 02 75 1a 53 9d <bf> 01 00 00 00 e8 91 59 63 f8 65 8b 05 ba 03 1a 77 85 c0 74 0a 5b
[  281.603645][    C1] RSP: 0000:ffffc900073dfd18 EFLAGS: 00000246
[  281.612519][    C1] RAX: 000000000652143f RBX: 0000000000000246 RCX: 1ffffffff19d8ed9
[  281.624453][    C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  281.636951][    C1] RBP: ffff88801aeb5c80 R08: 0000000000000001 R09: 0000000000000001
[  281.649701][    C1] R10: 0000000000000000 R11: dffffc0000000000 R12: 0000000000000000
[  281.660537][    C1] R13: ffff888010d24a70 R14: ffff88801aeb5c80 R15: 000000000000000b
[  281.673696][    C1]  force_sig_info_to_task+0x2ce/0x3a0
[  281.682254][    C1]  force_sig_fault+0xb0/0xf0
[  281.689463][    C1]  ? force_sig_fault_to_task+0xe0/0xe0
[  281.697387][    C1]  ? pgtable_bad+0x90/0x90
[  281.703821][    C1]  ? _down_write_nest_lock+0x150/0x150
[  281.711826][    C1]  __bad_area_nosemaphore+0x2f3/0x400
[  281.722918][    C1]  do_user_addr_fault+0x7d7/0xb40
[  281.736348][    C1]  exc_page_fault+0x9e/0x180
[  281.745142][    C1]  ? asm_exc_page_fault+0x8/0x30
[  281.753138][    C1]  asm_exc_page_fault+0x1e/0x30
[  281.761134][    C1] RIP: 0023:0x804d836
[  281.766933][    C1] Code: e8 cf 5e 01 00 83 c4 10 85 c0 0f 84 7d 01 00 00 65 f0 83 2d e4 ff ff ff 01 8b 5c 24 08 e8 82 04 01 00 8b 00 8b 54 24 0c 85 c0 <89> 42 54 8b 72 50 0f 85 16 01 00 00 83 fe ff 0f 85 0d 01 00 00 8b
[  281.798817][    C1] RSP: 002b:00000000f55e4100 EFLAGS: 00010202
[  281.812642][    C1] RAX: 000000000000000e RBX: 0000000000000000 RCX: 00000000f55e40f0
[  281.824495][    C1] RDX: 0000000000000000 RSI: 000000000818afa0 RDI: 000000000815e000
[  281.842643][    C1] RBP: 0000000000000005 R08: 0000000000000000 R09: 0000000000000000
[  281.856514][    C1] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  281.871476][    C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  281.887893][    C1] Kernel panic - not syncing: panic_on_warn set ...
[  281.897794][    C1] CPU: 1 PID: 9303 Comm: syz-executor.1 Not tainted 5.10.0-rc7-syzkaller #0
[  281.897794][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014
[  281.897794][    C1] Call Trace:
[  281.897794][    C1]  <IRQ>
[  281.897794][    C1]  dump_stack+0x107/0x163
[  281.897794][    C1]  panic+0x306/0x73d
[  281.897794][    C1]  ? __warn_printk+0xf3/0xf3
[  281.897794][    C1]  ? __warn.cold+0x1a/0x44
[  281.897794][    C1]  ? __warn+0xf1/0x210
[  281.897794][    C1]  ? send_hsr_supervision_frame+0x889/0xb40
[  281.897794][    C1]  __warn.cold+0x35/0x44
[  281.897794][    C1]  ? send_hsr_supervision_frame+0x889/0xb40
[  281.897794][    C1]  report_bug+0x1bd/0x210
[  281.897794][    C1]  handle_bug+0x3c/0x60
[  281.897794][    C1]  exc_invalid_op+0x14/0x40
[  281.897794][    C1]  asm_exc_invalid_op+0x12/0x20
[  281.897794][    C1] RIP: 0010:send_hsr_supervision_frame+0x889/0xb40
[  281.897794][    C1] Code: 04 31 ff 89 de e8 c7 83 cd f8 84 db 0f 85 8b fd ff ff e8 aa 8b cd f8 48 c7 c7 60 e9 6b 8a c6 05 01 2d 36 04 01 e8 53 fa 09 00 <0f> 0b e9 6c fd ff ff e8 8b 8b cd f8 41 be 42 00 00 00 ba 01 00 00
[  281.897794][    C1] RSP: 0000:ffffc900004c8c70 EFLAGS: 00010286
[  281.897794][    C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[  281.897794][    C1] RDX: ffff888010d24300 RSI: ffffffff8158c835 RDI: fffff52000099180
[  281.897794][    C1] RBP: 00000000000088fb R08: 0000000000000001 R09: ffffffff8ecc2747
[  281.897794][    C1] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88801572b200
[  281.897794][    C1] R13: 0000000000000000 R14: ffff88806722ece8 R15: 0000000000000000
[  281.897794][    C1]  ? vprintk_func+0x95/0x1e0
[  281.897794][    C1]  ? send_hsr_supervision_frame+0xb40/0xb40
[  281.897794][    C1]  hsr_announce+0x122/0x320
[  281.897794][    C1]  ? send_hsr_supervision_frame+0xb40/0xb40
[  281.897794][    C1]  call_timer_fn+0x1a5/0x6b0
[  281.897794][    C1]  ? add_timer_on+0x4a0/0x4a0
[  281.897794][    C1]  ? lock_downgrade+0x6d0/0x6d0
[  281.897794][    C1]  ? _raw_spin_unlock_irq+0x1f/0x40
[  281.897794][    C1]  ? send_hsr_supervision_frame+0xb40/0xb40
[  281.897794][    C1]  __run_timers.part.0+0x67c/0xa50
[  281.897794][    C1]  ? call_timer_fn+0x6b0/0x6b0
[  281.897794][    C1]  ? sched_clock_cpu+0x17b/0x1f0
[  281.897794][    C1]  run_timer_softirq+0xb3/0x1d0
[  281.897794][    C1]  __do_softirq+0x2a0/0x9f6
[  281.897794][    C1]  asm_call_irq_on_stack+0xf/0x20
[  281.897794][    C1]  </IRQ>
[  281.897794][    C1]  do_softirq_own_stack+0xaa/0xd0
[  281.897794][    C1]  irq_exit_rcu+0x132/0x200
[  281.897794][    C1]  sysvec_apic_timer_interrupt+0x4d/0x100
[  281.897794][    C1]  asm_sysvec_apic_timer_interrupt+0x12/0x20
[  281.897794][    C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x25/0x50
[  281.897794][    C1] Code: f8 5d c3 66 90 55 48 89 fd 48 83 c7 18 53 48 89 f3 48 8b 74 24 10 e8 fa 38 6e f8 48 89 ef e8 82 ed 6e f8 f6 c7 02 75 1a 53 9d <bf> 01 00 00 00 e8 91 59 63 f8 65 8b 05 ba 03 1a 77 85 c0 74 0a 5b
[  281.897794][    C1] RSP: 0000:ffffc900073dfd18 EFLAGS: 00000246
[  281.897794][    C1] RAX: 000000000652143f RBX: 0000000000000246 RCX: 1ffffffff19d8ed9
[  281.897794][    C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  281.897794][    C1] RBP: ffff88801aeb5c80 R08: 0000000000000001 R09: 0000000000000001
[  281.897794][    C1] R10: 0000000000000000 R11: dffffc0000000000 R12: 0000000000000000
[  281.897794][    C1] R13: ffff888010d24a70 R14: ffff88801aeb5c80 R15: 000000000000000b
[  281.897794][    C1]  force_sig_info_to_task+0x2ce/0x3a0
[  281.897794][    C1]  force_sig_fault+0xb0/0xf0
[  281.897794][    C1]  ? force_sig_fault_to_task+0xe0/0xe0
[  281.897794][    C1]  ? pgtable_bad+0x90/0x90
[  281.897794][    C1]  ? _down_write_nest_lock+0x150/0x150
[  281.897794][    C1]  __bad_area_nosemaphore+0x2f3/0x400
[  281.897794][    C1]  do_user_addr_fault+0x7d7/0xb40
[  281.897794][    C1]  exc_page_fault+0x9e/0x180
[  281.897794][    C1]  ? asm_exc_page_fault+0x8/0x30
[  281.897794][    C1]  asm_exc_page_fault+0x1e/0x30
[  281.897794][    C1] RIP: 0023:0x804d836
[  281.897794][    C1] Code: e8 cf 5e 01 00 83 c4 10 85 c0 0f 84 7d 01 00 00 65 f0 83 2d e4 ff ff ff 01 8b 5c 24 08 e8 82 04 01 00 8b 00 8b 54 24 0c 85 c0 <89> 42 54 8b 72 50 0f 85 16 01 00 00 83 fe ff 0f 85 0d 01 00 00 8b
[  281.897794][    C1] RSP: 002b:00000000f55e4100 EFLAGS: 00010202
[  281.897794][    C1] RAX: 000000000000000e RBX: 0000000000000000 RCX: 00000000f55e40f0
[  281.897794][    C1] RDX: 0000000000000000 RSI: 000000000818afa0 RDI: 000000000815e000
[  281.897794][    C1] RBP: 0000000000000005 R08: 0000000000000000 R09: 0000000000000000
[  281.897794][    C1] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  281.897794][    C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  281.897794][    C1] Kernel Offset: disabled
[  281.897794][    C1] Rebooting in 86400 seconds..

VM DIAGNOSIS:
08:31:38  Registers:
info registers vcpu 0
RAX=dffffc0000000000 RBX=0000000000035740 RCX=ffffffff81562ca8 RDX=1ffffffff15c78d8
RSI=0000000000010303 RDI=ffffffff8ae3c6c0 RBP=0000000000000000 RSP=ffffc90000006f88
R8 =0000000000000000 R9 =ffffffff8cecb08f R10=fffffbfff19d9611 R11=0000000000000000
R12=0000000000000001 R13=ffffffff8b3378e0 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff815ca492 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff88802cc00000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000054 CR3=0000000069661000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000002
XMM02=000000f0000000000000000300000000 XMM03=00000000000000000000000000000000
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff840e8911 RDI=ffffffff8fad8ae0 RBP=ffffffff8fad8aa0 RSP=ffffc900004c8648
R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000000 R11=0000000000000001
R12=0000000000000031 R13=0000000000000031 R14=ffffffff8fad8aa0 R15=dffffc0000000000
RIP=ffffffff840e8968 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff88802cd00000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 00000000 00000000
TR =0040 fffffe000003e000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000003c000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000054 CR3=0000000068082000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=697475636578652034343a30333a3830 XMM01=30337830202c327830202c3131783028
XMM02=30303030663778302826202c30783020 XMM03=2c307228656d616e6b636f737465670a
XMM04=293030337830202c327830202c313178 XMM05=30337830202c327830202c3131783028
XMM06=7020676e697475636578652034343a30 XMM07=333a38300a0a29293034303030303030
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 2
RAX=00000086e0a1d306 RBX=0000000000000000 RCX=00000000000006e0 RDX=0000000000000086
RSI=ffff88802ce1fa00 RDI=00000000000000fa RBP=ffff88802ce1fa00 RSP=ffffc90000520b28
R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001
R12=00000000000000fa R13=0000000000000000 R14=0000000000000000 R15=ffff88802ce26900
RIP=ffffffff812daefb RFL=00000003 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802ce00000 ffffffff 00c00000
LDT=0000 0000000000000000 00000000 00000000
TR =0040 fffffe0000079000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000077000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=ffffffffff600400 CR3=000000006b45e000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000002
XMM02=000000a0000000000000000200000000 XMM03=00000000000000000000000000000000
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 3
RAX=000000000001b629 RBX=ffff888068d1b060 RCX=ffffffff8155a917 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=0000000000000246 RSP=ffffc90008ecf220
R8 =0000000000000001 R9 =ffffffff8ecc2677 R10=fffffbfff1d984ce R11=0000000000000000
R12=0000000000000003 R13=ffffed100d1a360c R14=0000000000000001 R15=ffff88802cf356c0
RIP=ffffffff812f710c RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88802cf00000 ffffffff 00c00000
LDT=0000 0000000000000000 00000000 00000000
TR =0040 fffffe00000b4000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000b2000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fa4e49f9dd3 CR3=000000001a22b000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=32323232323232323232323232323232
XMM02=ffffffffffffffffffffff00ffffffff XMM03=000000ff0000000000ff000000000000
XMM04=40404040404040404040404040404040 XMM05=5b5b5b5b5b5b5b5b5b5b5b5b5b5b5b5b
XMM06=20202020202020202020202020202020 XMM07=00200000000000000000000000000000
XMM08=ffffffff0000000000ff00000000ffff XMM09=00000000000000000000000000000000
XMM10=00ff0000000000000000ff00000000ff XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000