last executing test programs: 27.56954433s ago: executing program 3 (id=368): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = socket$inet6(0xa, 0xa, 0x400000) r1 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000000)=0x2, 0x4) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000080), 0x4) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0xfd9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) sendmmsg$inet6(r0, 0x0, 0x0, 0xc8000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_io_uring_setup(0x7fae, &(0x7f0000000440)={0x0, 0x911f, 0x1, 0x2, 0x115}, &(0x7f0000000080), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_FILES2(r3, 0xd, &(0x7f0000000380)={0x9, 0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000000280)=""/36, 0x24}, {&(0x7f00000003c0)=""/55, 0x37}, {&(0x7f0000000400)=""/11, 0xb}, {&(0x7f00000005c0)=""/159, 0x9f}, {&(0x7f0000000680)=""/88, 0x58}, {&(0x7f0000000700)=""/113, 0x71}, {&(0x7f0000000800)=""/105, 0x69}, {&(0x7f0000000880)=""/86, 0x56}], &(0x7f00000007c0)=[0x749]}, 0x20) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x2e}, 0x1, 0x0, 0x0, 0x20000000}, 0x24004080) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r4 = open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fa7b) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000500)={0xa0, 0x0, 0x0, {{0x80000000, 0x3, 0x9, 0xfffffffffeffff83, 0x3, 0x1, {0xffffffffffffffff, 0x3ff, 0x20ff, 0x7ff, 0xf7c, 0x800000000000d615, 0x3fb, 0x7ffffffb, 0x6, 0x1000, 0x8, 0x0, 0x0, 0x3ff, 0x8ea2}}, {0x0, 0x12}}}, 0xa0) sendfile(r4, r4, &(0x7f0000000080), 0x7f04) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) 26.540967101s ago: executing program 3 (id=371): fsopen(&(0x7f00000001c0)='ocfs2_dlmfs\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) clock_adjtime(0x0, &(0x7f0000000680)={0x19b1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0xe5, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4b}) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x1a, 0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2020, 0x0, {0x1}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x110, &(0x7f0000000040)=0x7, 0x0, 0x4) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x8a2b01) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x1000000000000, 0x2, 0x0, &(0x7f0000ffa000/0x4000)=nil) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$media(&(0x7f0000000040), 0x7ffffffe, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000040)=ANY=[]) r8 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCDELRT(r8, 0x890c, &(0x7f0000000140)={0x0, @in={0x2, 0x4e23, @loopback}, @vsock={0x28, 0x0, 0x2711, @local}, @phonet={0x23, 0x37, 0x0, 0x3}, 0x7ff, 0x0, 0x0, 0x0, 0x24f2, 0x0, 0x2, 0xf93, 0x5}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) poll(&(0x7f0000000000)=[{r9, 0xa123}], 0x1, 0x15) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 26.103269836s ago: executing program 3 (id=377): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = gettid() r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000200)) pipe(&(0x7f0000000380)) socket$inet_tcp(0x2, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$kcm(0x29, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x80000000000000a, 0x2, 0x0) socket(0x80000000000000a, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) r4 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x0, 0x0, 0x34b}, &(0x7f00000000c0)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x10, 0x0, r3, 0x0, 0x0}) io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOCTL_STOP_ACCEL_DEV(r7, 0x40096101, &(0x7f0000000140)={{&(0x7f0000000680)={'Accelerator0\x00', {&(0x7f0000000500)=@adf_str={@format={'Cy', '4', 'RingRx\x00'}, {"31dbbc754e7d8e317313a5e6598e06e60433e607f1e92adca94b2d6e421383d751b9ab9257353eb01e2c50974e5bdfd2d76568b40a5e74258536717a705e6a89"}, {&(0x7f00000003c0)=@adf_hex={@format={'Cy', '3', 'NumConcurrentSymRequests\x00'}, {0x7}}}}}, {&(0x7f0000000300)={'KERNEL\x00', {&(0x7f00000005c0)=@adf_str={@bank={'Bank', '5', 'InterruptCoalescingEnabled\x00'}, {"25f0b426d395f45ee5ceef58b5f1be327fb948af250ad3a6dad8d65c68fb325a9c93afe0a57c9c14b6f89edb9a36763aaac7f384d8bb8cfcd7bd2b74ab2d79df"}}}}}}}, 0x1}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r8 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) 25.131451525s ago: executing program 3 (id=382): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) unshare(0x22020600) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) eventfd2(0x2, 0x1) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r4, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r5, r3}, 0x10) 25.01310414s ago: executing program 3 (id=383): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/resume', 0x414a03, 0x5e) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x10fffff, 0xffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000000)=""/197) 25.003975878s ago: executing program 3 (id=384): openat$dsp(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) io_setup(0x6, &(0x7f0000001380)) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x6, 0x10001, 0x34324152, 0x0, 0xb, [{0x80000000}, {0x10}, {0x2}, {0x2}, {}, {0x0, 0x10001}, {0x8000}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000200)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001c00)=ANY=[@ANYBLOB="28040000", @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r5], 0x428}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b400000019000100fcffffff00000000ac14142c000000000000000000000000e00000010000000000000000000000004e2200004e2400000a00006000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001040000000000100800000000000024b1135bf2a587a9d718dd00000000400000000000000000000000001a000000000000000100000000000000feffffffffffffff7a0000000000000005000000000000000000000000000000ff7f000000000000080000000000000001010300"], 0xb4}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x10, 0x3, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0xf, 0x7}, {}, {0xd, 0x4}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x8, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x2, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8080}, 0x4008010) sendto$inet6(r2, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0xffffffc8, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020605000000000000180000030000400000078000000840000000000000140009000000050005000200000005000400030000000900020073797a3200000000000003006269746d61703a706f7274100000020073797a3200000000000005000a0000000000078000001240ffffffff00687eed9023fa0000094000000006000007000000440000000005404e200000"], 0x4c}}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e21, 0x9, @remote, 0xd}, 0x1c) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000200", @ANYRES16=r8, @ANYBLOB="000228bd7000fbdbdf250200000005003d000600000008003f00ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x4008091}, 0x41) mount$tmpfs(0x0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000f80), 0x400, &(0x7f0000000080)=ANY=[]) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, 0x0, 0x40c48b0) syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs\x00') 16.142633536s ago: executing program 1 (id=422): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, {[], @echo_request={0x80, 0x0, 0x0, 0x0, 0x9}}}}}}, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x5, 0xb68, 0xfffffffffffffeb9, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0xe}, 0x48) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) madvise(&(0x7f0000f0f000/0x2000)=nil, 0x2000, 0x15) 15.252992023s ago: executing program 1 (id=425): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x6280, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x2) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f00000003c0)={0x0, 0xfc, 0x1}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000400)=0x5) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="5de0e8bf9a1fd711a6934274b745a214578a936cba92626fc1fdef5532618f46e76932958681f8e5598c5361725beb9da930d14aa5968d69d16ffec9e43616837cd1586a350d8ecc1f4fb18cb19b1d8537fb40d47758d1dd96e3a854e69a020a3339773a19c84a970ca7b77ce6c75a5c959ffebea5fd45b4178034fcdd03a03ed262be0a2e3148ba65f3a3c9a665f1050a289e26bffecebb180751d37242864fe3c693b9"], 0x48) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') pread64(r1, &(0x7f0000000000)=""/18, 0xcf8ce04d, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getrusage(0x0, 0x0) r3 = epoll_create1(0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000200)={0x20000002}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000080)={0x11}) r5 = dup(r2) write$6lowpan_enable(r5, &(0x7f0000000300)='0', 0xfffffe56) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r7 = socket(0x5, 0x1, 0x4107) ioctl$sock_ifreq(r7, 0x89f2, &(0x7f0000000040)={'bond0\x00', @ifru_settings={0x6, 0x8, @sync=0x0}}) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$SNDCTL_SEQ_SYNC(r5, 0x5101) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r8 = socket(0xa, 0x3, 0x3a) ioctl$SIOCSIFMTU(r8, 0x8922, &(0x7f0000000080)={'veth0_vlan\x00', 0x200}) ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000005c0)={@null, 0x8005, 'lo\x00'}) openat$kvm(0xffffff9c, &(0x7f0000000180), 0x400000, 0x0) keyctl$read(0x20, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) 14.185517326s ago: executing program 1 (id=430): r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000180)=[{0x2, 0x2, {0x2, 0x0, 0x2}, {0x0, 0x0, 0x1}, 0x1, 0xff}], 0x20) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4e, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="ef1cd1c1e34c30dd10f7c516e5f3c1bf735dd32e75d9ee46f52ce1881f3ac2be3bd499e1f51d9269dae66be1f2ea5b9fc2aaf910fe6b28800a75eccb85da6b65a03e09d8bdef23fefe"], 0xb4}, 0x1, 0x0, 0x0, 0x890}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000580)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x6b, &(0x7f0000000680)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x40089, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffffffc5, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0}, {&(0x7f0000000540)=""/29, 0x1d}], 0x3}, 0xfffffff0}], 0x1, 0x40012140, &(0x7f0000000a00)) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x41, 0x0, 0x7, 0x7ffc0001}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) unshare(0x22020600) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 13.055090622s ago: executing program 1 (id=433): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x803, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x9) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000080)={0x4, 0x0, 0x0, "6cfef8b4b9fd4fc8bf98040c2599000000bd4400", 0x34343459}) setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x15) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@getnexthop={0x58, 0x6a, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@NHA_GROUPS={0x4}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_FDB={0x4}, @NHA_GROUPS={0x4}, @NHA_MASTER={0x8}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_FDB={0x4}, @NHA_MASTER={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x0) r8 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r8, 0x400442c8, &(0x7f0000000100)={r6, 0x0, 0x4}) syz_io_uring_setup(0xc17, &(0x7f0000000140)={0x0, 0x3ac7, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xffffbffc, 0x0, 0x4) socket(0x2a, 0x2, 0x80053c) 10.908903481s ago: executing program 1 (id=439): write$dsp(0xffffffffffffffff, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b400000000809b5519f1f15de44ffbe7afae657b9600d015367fb00000000000d500ff01000000009500740000000000725d38f05a8a822b9ac927e12382a50000000000000000f267a93fcb3b185fcba1569a707058639a99a04a"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) close(r0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0x40045010, &(0x7f0000000300)=0x100) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f00000000c0)=0xc) prlimit64(r1, 0x5, &(0x7f0000000100)={0x7, 0x6b0}, &(0x7f0000000140)) ioctl$SNDCTL_DSP_RESET(0xffffffffffffffff, 0x5000, 0x0) r2 = socket$inet6(0xa, 0x802, 0x88) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) sendto$inet6(r2, &(0x7f00000001c0), 0xffdd, 0x40001, 0x0, 0x0) 10.853036035s ago: executing program 1 (id=440): openat$nullb(0xffffffffffffff9c, 0x0, 0x40, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000014916b05c84e21000ab16d6e230675f802", 0x15}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) 9.752302424s ago: executing program 32 (id=384): openat$dsp(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) io_setup(0x6, &(0x7f0000001380)) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x6, 0x10001, 0x34324152, 0x0, 0xb, [{0x80000000}, {0x10}, {0x2}, {0x2}, {}, {0x0, 0x10001}, {0x8000}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000200)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001c00)=ANY=[@ANYBLOB="28040000", @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r5], 0x428}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b400000019000100fcffffff00000000ac14142c000000000000000000000000e00000010000000000000000000000004e2200004e2400000a00006000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001040000000000100800000000000024b1135bf2a587a9d718dd00000000400000000000000000000000001a000000000000000100000000000000feffffffffffffff7a0000000000000005000000000000000000000000000000ff7f000000000000080000000000000001010300"], 0xb4}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x10, 0x3, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0xf, 0x7}, {}, {0xd, 0x4}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x8, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x2, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8080}, 0x4008010) sendto$inet6(r2, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0xffffffc8, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020605000000000000180000030000400000078000000840000000000000140009000000050005000200000005000400030000000900020073797a3200000000000003006269746d61703a706f7274100000020073797a3200000000000005000a0000000000078000001240ffffffff00687eed9023fa0000094000000006000007000000440000000005404e200000"], 0x4c}}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e21, 0x9, @remote, 0xd}, 0x1c) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000200", @ANYRES16=r8, @ANYBLOB="000228bd7000fbdbdf250200000005003d000600000008003f00ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x4008091}, 0x41) mount$tmpfs(0x0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000f80), 0x400, &(0x7f0000000080)=ANY=[]) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, 0x0, 0x40c48b0) syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs\x00') 5.423813144s ago: executing program 0 (id=459): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = socket(0x15, 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) syz_open_procfs(0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x0, @ib={0x1b, 0x9, 0x4, {"2ed96cfde8fb00cdd2303d56fae5e4e7"}, 0x40f9, 0x6, 0x8}, @in6={0xa, 0x4e24, 0x3ff, @private0}}}, 0x118) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x238, &(0x7f0000000740)={0x0, 0x198b, 0x10100, 0x0, 0x3aa, 0x0, r3}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r8, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000500)=[@in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e23, 0x1, @mcast1, 0x2003}, @in6={0xa, 0x4e21, 0x0, @mcast2, 0x8}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e23, 0x7fff, @mcast2}, @in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x17}, 0x894}], 0xa0) sendto$inet6(r8, &(0x7f0000000100)="b8", 0x1, 0xc8d1, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r8, 0x84, 0x18, &(0x7f0000000300), 0x8) openat$rdma_cm(0xffffff9c, &(0x7f00000002c0), 0x2, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) bind$tipc(r3, &(0x7f0000000080)=@name={0x1e, 0x2, 0x2, {{0x2, 0x3}, 0x2}}, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000029500000000000000"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_drvinfo={0x33, "dabb6386f6d73094a90d1fdb507195e485f544228032f04eff6b7454b702570f", "6aabb3257fbc4eb5a702000000a9b0bfed5a88511bfa36cd4d6206598017dffa", "3323b7b8cd277c616d9206e6fd2d56ff18c6adb2b5f90e30b32158c846051324", "193d5bf82fba97515dda05e0637ba9fbf81e49d4f1b5508a4c956379155801bc", "d87badb8a826b9f7474cf73cc0ade30d0cd9c5a00f9025f55d18c2764e77d3fe", "14d3094839a1d8e1ef22cffc"}}) io_uring_enter(r5, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r11 = msgget$private(0x0, 0x100) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r12, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="e1ffffff00"}) msgsnd(r11, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x2000, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x100, 0x3, 0x0, {0x60, 0x0, 0x0, r13, {0x0, 0x2}, {0xffff, 0xffff}, {0x4, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) 4.490053972s ago: executing program 0 (id=462): r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000180)=[{0x2, 0x2, {0x2, 0x0, 0x2}, {0x0, 0x0, 0x1}, 0x1, 0xff}], 0x20) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4e, 0x0, &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="ef1cd1c1e34c30dd10f7c516e5f3c1bf735dd32e75d9ee46f52ce1881f3ac2be3bd499e1f51d9269dae66be1f2ea5b9fc2aaf910fe6b28800a75eccb85da6b65a03e09d8bdef23fefe"], 0xb4}, 0x1, 0x0, 0x0, 0x890}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000580)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x6b, &(0x7f0000000680)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x40089, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffffffc5, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0}, {&(0x7f0000000540)=""/29, 0x1d}], 0x3}, 0xfffffff0}], 0x1, 0x40012140, &(0x7f0000000a00)) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x41, 0x0, 0x7, 0x7ffc0001}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) unshare(0x22020600) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 3.892023068s ago: executing program 4 (id=463): r0 = syz_open_dev$video(&(0x7f0000000b40), 0x7, 0x28000) preadv(r0, &(0x7f0000001200)=[{&(0x7f0000000c00)=""/113, 0x71}], 0x1, 0x4, 0xb) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x6, &(0x7f0000000000)=[{0xe4, 0x1, 0x8, 0x80}, {0x8, 0x6, 0xc0}, {0xe000, 0x8, 0x4}, {0x3, 0x21, 0x7, 0x2}, {0x7ff, 0x7, 0x7, 0x800}, {0x8, 0x4, 0x3}]}, 0x8) 3.72540057s ago: executing program 4 (id=464): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) read$FUSE(r2, &(0x7f0000002080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, r3}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) write$FUSE_DIRENTPLUS(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="1000"], 0x10) getresuid(&(0x7f0000000000), &(0x7f0000000200), &(0x7f0000000400)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r4]) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) 3.652759145s ago: executing program 4 (id=466): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) accept4$rose(r0, 0x0, 0x0, 0x80000) open$dir(&(0x7f0000000080)='./file0\x00', 0x20000, 0xd) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r1 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000240)={{0x3, @bcast}, [@bcast, @null, @null, @remote, @remote, @netrom, @default, @rose]}, &(0x7f00000002c0)=0x48, 0x100800) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x2}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000240)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000000)={0x2, 0x1, 0x1, "4a37f6c000190000000000000020000000000000000000000100", 0x31435641}) accept4$ax25(r1, &(0x7f0000000300)={{0x3, @null}, [@null, @null, @netrom, @remote, @default, @rose, @default, @netrom]}, 0x0, 0x800) bind$rose(0xffffffffffffffff, &(0x7f00000003c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x6, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default]}, 0x40) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0c0000be1d67ca463d23776f0c41c45d6cb900040000", @ANYBLOB, @ANYRES32], 0x50) socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r4 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = syz_io_uring_setup(0x1c57, &(0x7f0000000300)={0x0, 0x40ac, 0x10000, 0x2, 0x3f, 0x0, r5}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) ptrace$PTRACE_GETSIGMASK(0x420a, 0x0, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}) io_uring_enter(r6, 0x2def, 0x4000, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_open_dev$vim2m(0x0, 0x5, 0x2) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x9, 0x1ff, 0x7, 0xdc31}}]}}, 0x15) syz_emit_vhci(&(0x7f00000005c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0xf, 0x0, 0x80b}}}, 0x7) lstat(0x0, 0x0) 3.480023704s ago: executing program 0 (id=468): r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000180)=[{0x2, 0x2, {0x2, 0x0, 0x2}, {0x0, 0x0, 0x1}, 0x1, 0xff}], 0x20) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4e, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="ef1cd1c1e34c30dd10f7c516e5f3c1bf735dd32e75d9ee46f52ce1881f3ac2be3bd499e1f51d9269dae66be1f2ea5b9fc2aaf910fe6b28800a75eccb85da6b65a03e09d8bdef23fefe"], 0xb4}, 0x1, 0x0, 0x0, 0x890}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000580)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x6b, &(0x7f0000000680)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x40089, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffffffc5, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0}, {&(0x7f0000000540)=""/29, 0x1d}], 0x3}, 0xfffffff0}], 0x1, 0x40012140, &(0x7f0000000a00)) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x41, 0x0, 0x7, 0x7ffc0001}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) unshare(0x22020600) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 2.72903934s ago: executing program 2 (id=469): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c00010062726964"], 0x3c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, &(0x7f0000000700)=ANY=[@ANYBLOB="56c78e3c733d76697274676f2c6e6f65bc33dbde548d51f5638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000300)='./file0\x00') rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') creat(&(0x7f0000000440)='./file0\x00', 0x0) userfaultfd(0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) 2.498012967s ago: executing program 0 (id=470): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c00010062726964"], 0x3c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, &(0x7f0000000700)=ANY=[@ANYBLOB="56c78e3c733d76697274676f2c6e6f65bc33dbde548d51f5638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000300)='./file0\x00') rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') creat(&(0x7f0000000440)='./file0\x00', 0x0) userfaultfd(0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) 2.48275895s ago: executing program 4 (id=471): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r0) socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) r2 = io_uring_setup(0x734a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfff7fffc}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x1, &(0x7f0000000080)=ANY=[@ANYRESHEX=r1, @ANYRES8=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='f', @ANYBLOB]) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0xff, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) link(&(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mount$tmpfs(0x0, 0x0, &(0x7f0000000080), 0x810, &(0x7f00000000c0)=ANY=[@ANYBLOB="71756f763959b9"]) unshare(0x2a020480) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="11000000040000000400000002"], 0x48) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000080)={r7, 0x58, &(0x7f00000003c0)}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd) 1.452460604s ago: executing program 4 (id=472): syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x116b, &(0x7f0000002240)=ANY=[@ANYBLOB], 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, 0x0, 0x50) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0xbb8, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 1.445308088s ago: executing program 2 (id=480): r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r4, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r5, r3, 0x0, r2}, 0x10) 1.372274267s ago: executing program 0 (id=473): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r0) socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) r2 = io_uring_setup(0x734a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfff7fffc}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x1, &(0x7f0000000080)=ANY=[@ANYRESHEX=r1, @ANYRES8=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='f', @ANYBLOB]) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0xff, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) link(&(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mount$tmpfs(0x0, 0x0, &(0x7f0000000080), 0x810, &(0x7f00000000c0)=ANY=[@ANYBLOB="71756f763959b9"]) unshare(0x2a020480) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="11000000040000000400000002"], 0x48) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000080)={r7, 0x58, &(0x7f00000003c0)}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd) 1.372007838s ago: executing program 2 (id=474): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r1 = dup(r0) read$FUSE(r1, &(0x7f0000002080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18, 0x0, r2}, 0x18) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) write$FUSE_DIRENTPLUS(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="1000"], 0x10) getresuid(&(0x7f0000000000), &(0x7f0000000200), &(0x7f0000000400)) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) 1.293201522s ago: executing program 2 (id=475): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) read$FUSE(r2, &(0x7f0000002080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, r3}, 0x18) getresuid(&(0x7f0000000000), &(0x7f0000000200), &(0x7f0000000400)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r4]) 1.032925265s ago: executing program 2 (id=476): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x3938700}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newtaction={0x114, 0x30, 0x1, 0x0, 0x0, {}, [{0x100, 0x1, [@m_ct={0xb4, 0x12, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x809c, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x74, 0x6, "734f184ddb320380491902cc6160d7c7de6da8a2184150f9bfd185b902de7cf84ea24e81fb74d20a4356d8e685c94000ceb9c8f576a163f0a31a9955b2a56b2bce3949f613f978f7390046a3111c9d64a62e1a5fb101432d70da7508d97df23e112c1b3d737dd27c4c2337b10de076d4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x3}}}]}, {0xfffffffffffffe67}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) mount$9p_xen(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x4c021, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r2], 0x48}}, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x48062, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x7, &(0x7f00000000c0)) creat(&(0x7f0000000180)='./file1\x00', 0x20) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) 678.771905ms ago: executing program 4 (id=477): r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000002640)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x8, @remote}, 0x9) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}]}, 0x40}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@bridge_getlink={0x34, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg0\x00'}]}, 0x34}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) memfd_create(&(0x7f0000000000)='/dev/sequencer\x00', 0x1) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f00000003c0)=[@window={0x3, 0xe, 0x7ff}, @timestamp, @sack_perm, @window={0x3, 0x8000, 0xfffc}, @sack_perm, @sack_perm, @window={0x3, 0xfff, 0x4}, @window={0x3, 0x5}], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0xc7) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80080) write$P9_RREADLINK(r6, &(0x7f0000000280)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'tunl0\x00'}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 413.540073ms ago: executing program 0 (id=478): r0 = socket$inet6(0xa, 0xa, 0x400000) connect$inet6(r0, 0x0, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0xc8000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000001000)={@multicast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x40, 0x2f, 0x0, @private=0xa010101, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb, 0x0, 0x3, [0x8]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x0]}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x2, {0x0, 0x4}}}}}}}}, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e22, 0x1, @remote, 0xffffffef}}, 0x5, 0x8, 0x45, 0x10100, 0xff}, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180)) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x85, 0x0, 0xfe, 0xd2, 0x0, 0x5f, 0xfb, 0x0, 0xa6, 0x4, 0xff, 0x0, 0xf7fffffffffffdfc}, {0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x4, 0xff, 0x2, 0x0, 0x800000000000000}, {0x2, 0x33, 0x0, 0x0, 0xac, 0x5, 0x14, 0x9, 0x5}], 0xfffffffd}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x7ff, 0x0, 0x1000000000, 0x2004cb, 0x1, 0xfffffffffffffffe, 0x3, 0x0, 0xff, 0x0, 0x4, 0xffffffffffffffff, 0x1ffc], 0x80a0000}) r5 = openat$tun(0xffffff9c, &(0x7f00000000c0), 0x109940, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r7 = socket(0x25, 0x1, 0x1) io_submit(r6, 0x1, &(0x7f0000000100)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x2}]) ioctl$TUNSETQUEUE(r5, 0x400454d9, 0x0) syz_emit_ethernet(0x22c, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) 0s ago: executing program 2 (id=479): ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x119}) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1, 0xa}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x431, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x7453c}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4f, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004805}, 0xc080) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:58148' (ED25519) to the list of known hosts. [ 41.384507][ T5885] cgroup: Unknown subsys name 'net' [ 41.559924][ T5885] cgroup: Unknown subsys name 'cpuset' [ 41.564252][ T5885] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 42.396981][ T5885] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.594587][ T5978] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 45.597910][ T5978] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 45.600755][ T5978] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 45.603636][ T5978] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 45.603992][ T5982] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 45.606801][ T5978] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 45.606982][ T5983] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 45.607785][ T5984] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 45.607797][ T5983] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 45.608059][ T5983] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 45.609270][ T5984] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 45.609681][ T5982] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 45.609801][ T5982] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 45.610238][ T5983] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 45.610306][ T5982] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 45.615185][ T5978] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 45.618815][ T5983] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 45.621130][ T5978] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 45.623441][ T5983] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 45.625173][ T5978] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 45.965209][ T5970] chnl_net:caif_netlink_parms(): no params data found [ 45.986861][ T5975] chnl_net:caif_netlink_parms(): no params data found [ 46.035903][ T5979] chnl_net:caif_netlink_parms(): no params data found [ 46.138688][ T5974] chnl_net:caif_netlink_parms(): no params data found [ 46.162554][ T5975] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.165971][ T5975] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.168503][ T5975] bridge_slave_0: entered allmulticast mode [ 46.171721][ T5975] bridge_slave_0: entered promiscuous mode [ 46.259922][ T5975] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.262040][ T5975] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.264228][ T5975] bridge_slave_1: entered allmulticast mode [ 46.267030][ T5975] bridge_slave_1: entered promiscuous mode [ 46.273821][ T5970] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.276972][ T5970] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.279744][ T5970] bridge_slave_0: entered allmulticast mode [ 46.282391][ T5970] bridge_slave_0: entered promiscuous mode [ 46.285520][ T5970] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.287804][ T5970] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.290163][ T5970] bridge_slave_1: entered allmulticast mode [ 46.292751][ T5970] bridge_slave_1: entered promiscuous mode [ 46.430795][ T5975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.487218][ T5970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.491189][ T5975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.522499][ T5979] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.524623][ T5979] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.526798][ T5979] bridge_slave_0: entered allmulticast mode [ 46.529257][ T5979] bridge_slave_0: entered promiscuous mode [ 46.533225][ T5970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.558879][ T5974] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.561247][ T5974] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.563579][ T5974] bridge_slave_0: entered allmulticast mode [ 46.569190][ T5974] bridge_slave_0: entered promiscuous mode [ 46.572712][ T5979] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.575443][ T5979] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.577760][ T5979] bridge_slave_1: entered allmulticast mode [ 46.580640][ T5979] bridge_slave_1: entered promiscuous mode [ 46.613454][ T5974] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.616595][ T5974] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.619512][ T5974] bridge_slave_1: entered allmulticast mode [ 46.623172][ T5974] bridge_slave_1: entered promiscuous mode [ 46.678274][ T5975] team0: Port device team_slave_0 added [ 46.709170][ T5979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.713256][ T5970] team0: Port device team_slave_0 added [ 46.717021][ T5975] team0: Port device team_slave_1 added [ 46.737452][ T5974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.741644][ T5979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.745554][ T5970] team0: Port device team_slave_1 added [ 46.761844][ T5974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.858411][ T5970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.860577][ T5970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.869669][ T5970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.874245][ T5975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.878300][ T5975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.889381][ T5975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.907292][ T5979] team0: Port device team_slave_0 added [ 46.909739][ T5970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.912150][ T5970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.920286][ T5970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.931197][ T5975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.933427][ T5975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.942165][ T5975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.947331][ T5974] team0: Port device team_slave_0 added [ 46.950243][ T5979] team0: Port device team_slave_1 added [ 46.960232][ T5974] team0: Port device team_slave_1 added [ 47.039346][ T5979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.041555][ T5979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.050435][ T5979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.097539][ T5979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.099903][ T5979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.107949][ T5979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.111947][ T5974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.114153][ T5974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.122147][ T5974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.126595][ T5974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.129024][ T5974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.136937][ T5974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.143280][ T5975] hsr_slave_0: entered promiscuous mode [ 47.145996][ T5975] hsr_slave_1: entered promiscuous mode [ 47.150802][ T5970] hsr_slave_0: entered promiscuous mode [ 47.153046][ T5970] hsr_slave_1: entered promiscuous mode [ 47.155223][ T5970] debugfs: 'hsr0' already exists in 'hsr' [ 47.157076][ T5970] Cannot create hsr debugfs directory [ 47.250878][ T5979] hsr_slave_0: entered promiscuous mode [ 47.253153][ T5979] hsr_slave_1: entered promiscuous mode [ 47.255247][ T5979] debugfs: 'hsr0' already exists in 'hsr' [ 47.257105][ T5979] Cannot create hsr debugfs directory [ 47.281414][ T5974] hsr_slave_0: entered promiscuous mode [ 47.283736][ T5974] hsr_slave_1: entered promiscuous mode [ 47.286148][ T5974] debugfs: 'hsr0' already exists in 'hsr' [ 47.287935][ T5974] Cannot create hsr debugfs directory [ 47.597058][ T5975] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.603542][ T5975] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.608488][ T5975] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.621858][ T5975] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.647785][ T5970] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.653005][ T5970] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.657637][ T5970] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.662589][ T5970] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.685914][ T5978] Bluetooth: hci2: command tx timeout [ 47.685917][ T5972] Bluetooth: hci1: command tx timeout [ 47.686333][ T5983] Bluetooth: hci0: command tx timeout [ 47.695123][ T5983] Bluetooth: hci3: command tx timeout [ 47.710913][ T5974] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.720289][ T5974] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.729284][ T5974] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.733840][ T5974] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.804480][ T5979] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.809123][ T5979] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.813541][ T5979] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.818231][ T5979] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.846613][ T5975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.853159][ T5970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.875450][ T5975] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.888308][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.891331][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.895316][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.897629][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.902800][ T5970] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.914459][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.916995][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.931861][ T5974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.944424][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.946799][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.959584][ T5974] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.971214][ T5975] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.983878][ T216] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.986254][ T216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.006374][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.008677][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.032130][ T5979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.047332][ T5979] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.058654][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.060900][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.067041][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.069347][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.097003][ T5975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.099505][ T5979] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 48.103597][ T5979] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.139193][ T5970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.149066][ T5975] veth0_vlan: entered promiscuous mode [ 48.159696][ T5975] veth1_vlan: entered promiscuous mode [ 48.180633][ T5974] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.193483][ T5970] veth0_vlan: entered promiscuous mode [ 48.204533][ T5975] veth0_macvtap: entered promiscuous mode [ 48.210825][ T5970] veth1_vlan: entered promiscuous mode [ 48.214015][ T5975] veth1_macvtap: entered promiscuous mode [ 48.238473][ T5974] veth0_vlan: entered promiscuous mode [ 48.244216][ T5970] veth0_macvtap: entered promiscuous mode [ 48.249873][ T5970] veth1_macvtap: entered promiscuous mode [ 48.255653][ T5975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.262269][ T5979] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.265961][ T5974] veth1_vlan: entered promiscuous mode [ 48.272549][ T5970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.278521][ T5970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.286497][ T5975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.293912][ T1142] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.299317][ T1142] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.308502][ T1142] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.311323][ T1142] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.318057][ T1142] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.326550][ T1142] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.329300][ T1142] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.339889][ T1142] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.358493][ T5974] veth0_macvtap: entered promiscuous mode [ 48.366342][ T5974] veth1_macvtap: entered promiscuous mode [ 48.376958][ T5979] veth0_vlan: entered promiscuous mode [ 48.395273][ T5979] veth1_vlan: entered promiscuous mode [ 48.398528][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.401282][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.405902][ T5974] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.417153][ T5974] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.420687][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.423183][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.442648][ T1142] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.446877][ T1142] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.450611][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.453094][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.453854][ T1142] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.459414][ T1142] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.466858][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.469345][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.470320][ T5979] veth0_macvtap: entered promiscuous mode [ 48.481227][ T5979] veth1_macvtap: entered promiscuous mode [ 48.499397][ T5975] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.503422][ T5979] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.520183][ T5979] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.527147][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.531049][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.534484][ T46] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.538645][ T1151] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.541422][ T1151] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.544509][ T1151] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.549339][ T6058] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 48.565980][ T6058] netlink: 'syz.3.4': attribute type 4 has an invalid length. [ 48.568431][ T6058] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4'. [ 48.574666][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.578741][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.578974][ T6058] netlink: 27 bytes leftover after parsing attributes in process `syz.3.4'. [ 48.628368][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.634702][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.648797][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.651861][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.658233][ T6061] block device autoloading is deprecated and will be removed. [ 48.697404][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 48.712098][ T6061] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 48.805169][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 48.815114][ T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!! [ 48.839230][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 48.865286][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.405886][ T6082] Zero length message leads to an empty skb [ 49.408045][ T6082] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7'. [ 49.453341][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 49.456388][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.460296][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.766093][ T5983] Bluetooth: hci2: command tx timeout [ 49.775521][ T5983] Bluetooth: hci1: command tx timeout [ 49.777291][ T5983] Bluetooth: hci3: command tx timeout [ 49.778972][ T5983] Bluetooth: hci0: command tx timeout [ 50.691914][ T6099] block nbd3: Attempted send on invalid socket [ 50.694089][ T6099] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 50.697527][ T6099] vxfs: unable to read disk superblock at 1 [ 50.700273][ T6099] block nbd3: Attempted send on invalid socket [ 50.702370][ T6099] I/O error, dev nbd3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 50.705492][ T6099] vxfs: unable to read disk superblock at 8 [ 50.707498][ T6099] vxfs: can't find superblock. [ 50.731994][ T6099] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 50.885695][ T6101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11'. [ 50.889774][ T6101] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11'. [ 50.893202][ T6101] netlink: 'syz.2.11': attribute type 14 has an invalid length. [ 50.915095][ T6102] block nbd0: Attempted send on invalid socket [ 50.917280][ T6102] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 50.920768][ T6102] vxfs: unable to read disk superblock at 1 [ 50.923300][ T6102] block nbd0: Attempted send on invalid socket [ 50.925475][ T6102] I/O error, dev nbd0, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 50.929090][ T6102] vxfs: unable to read disk superblock at 8 [ 50.931030][ T6102] vxfs: can't find superblock. [ 50.938510][ T6104] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12'. [ 50.938761][ T6102] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 51.275273][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 51.278414][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 51.663710][ T6125] block nbd0: Attempted send on invalid socket [ 51.665921][ T6125] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 51.668857][ T6125] vxfs: unable to read disk superblock at 1 [ 51.670837][ T6125] block nbd0: Attempted send on invalid socket [ 51.672795][ T6125] I/O error, dev nbd0, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 51.675851][ T6125] vxfs: unable to read disk superblock at 8 [ 51.677729][ T6125] vxfs: can't find superblock. [ 51.735319][ T6127] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 51.845061][ T5972] Bluetooth: hci2: command tx timeout [ 51.855110][ T5972] Bluetooth: hci0: command tx timeout [ 51.856898][ T5972] Bluetooth: hci3: command tx timeout [ 51.858682][ T5972] Bluetooth: hci1: command tx timeout [ 52.131614][ T6133] cgroup: Name too long [ 53.176244][ T6155] netlink: 12 bytes leftover after parsing attributes in process `syz.1.27'. [ 53.926020][ T5983] Bluetooth: hci1: command tx timeout [ 53.927774][ T5983] Bluetooth: hci3: command tx timeout [ 53.929603][ T5983] Bluetooth: hci0: command tx timeout [ 53.931335][ T5983] Bluetooth: hci2: command tx timeout [ 54.848167][ T6181] netlink: 'syz.1.32': attribute type 2 has an invalid length. [ 54.851206][ T6181] netlink: 116 bytes leftover after parsing attributes in process `syz.1.32'. [ 54.857201][ T6182] netlink: 'syz.1.32': attribute type 2 has an invalid length. [ 54.860364][ T6182] netlink: 116 bytes leftover after parsing attributes in process `syz.1.32'. [ 54.897415][ T6186] capability: warning: `syz.1.34' uses deprecated v2 capabilities in a way that may be insecure [ 55.054947][ T6192] overlayfs: missing 'lowerdir' [ 55.459745][ T6199] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 55.461968][ T6199] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 55.471490][ T6199] vhci_hcd vhci_hcd.0: Device attached [ 55.553906][ T6202] syz.3.37 uses obsolete (PF_INET,SOCK_PACKET) [ 55.645052][ T34] vhci_hcd: vhci_device speed not set [ 55.704993][ T34] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 56.168025][ T6200] vhci_hcd: connection reset by peer [ 56.171006][ T46] vhci_hcd: stop threads [ 56.172768][ T46] vhci_hcd: release socket [ 56.175592][ T46] vhci_hcd: disconnect device [ 56.303992][ T6211] syz.1.39 (6211): drop_caches: 0 [ 57.075248][ T6226] fuse: Unknown parameter 'rootm¥Í”Ðq%8Šd^cóÛhyode' [ 57.245794][ T6228] netlink: 8 bytes leftover after parsing attributes in process `syz.0.42'. [ 57.415948][ T29] libceph: connect (1)[c::]:6789 error -101 [ 57.418905][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 57.442499][ T6232] ceph: No mds server is up or the cluster is laggy [ 58.026451][ T6243] block nbd1: Attempted send on invalid socket [ 58.028459][ T6243] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 58.031492][ T6243] vxfs: unable to read disk superblock at 1 [ 58.033792][ T6243] block nbd1: Attempted send on invalid socket [ 58.035931][ T6243] I/O error, dev nbd1, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 58.119097][ T6243] vxfs: unable to read disk superblock at 8 [ 58.121044][ T6243] vxfs: can't find superblock. [ 58.165781][ T6249] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 58.949238][ T6275] netlink: 12 bytes leftover after parsing attributes in process `syz.1.52'. [ 59.606142][ T5972] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 59.609720][ T5972] Bluetooth: hci0: Injecting HCI hardware error event [ 59.613495][ T5983] Bluetooth: hci0: hardware error 0x00 [ 60.261831][ T5972] block nbd0: Receive control failed (result -107) [ 60.285741][ T6290] nbd0: detected capacity change from 0 to 63 [ 60.368045][ T6076] block nbd0: Dead connection, failed to find a fallback [ 60.377889][ T6076] block nbd0: shutting down sockets [ 60.413345][ T6076] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 60.429320][ T6076] Buffer I/O error on dev nbd0, logical block 0, async page read [ 60.464395][ T6076] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 60.475625][ T6076] Buffer I/O error on dev nbd0, logical block 1, async page read [ 60.487205][ T6076] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 60.500810][ T6076] Buffer I/O error on dev nbd0, logical block 2, async page read [ 60.520447][ T6076] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 60.538466][ T6076] Buffer I/O error on dev nbd0, logical block 3, async page read [ 60.557305][ T6076] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 60.588367][ T6076] Buffer I/O error on dev nbd0, logical block 0, async page read [ 60.599410][ T6076] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 60.617359][ T6076] Buffer I/O error on dev nbd0, logical block 1, async page read [ 60.638075][ T6076] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 60.659457][ T6076] Buffer I/O error on dev nbd0, logical block 2, async page read [ 60.685811][ T6076] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 60.744342][ T6076] Buffer I/O error on dev nbd0, logical block 3, async page read [ 60.745959][ T6305] block nbd3: Attempted send on invalid socket [ 60.748527][ T6305] vxfs: unable to read disk superblock at 1 [ 60.752482][ T6305] block nbd3: Attempted send on invalid socket [ 60.803029][ T6076] Buffer I/O error on dev nbd0, logical block 0, async page read [ 60.805028][ T34] vhci_hcd: vhci_device speed not set [ 60.816520][ T6305] vxfs: unable to read disk superblock at 8 [ 60.818767][ T6305] vxfs: can't find superblock. [ 60.825075][ T6306] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 60.831324][ T6076] Buffer I/O error on dev nbd0, logical block 1, async page read [ 60.915901][ T6076] ldm_validate_partition_table(): Disk read failed. [ 60.964442][ T6076] Dev nbd0: unable to read RDB block 0 [ 60.993785][ T6076] nbd0: unable to read partition table [ 61.076444][ T6076] ldm_validate_partition_table(): Disk read failed. [ 61.080524][ T6076] Dev nbd0: unable to read RDB block 0 [ 61.083113][ T6076] nbd0: unable to read partition table [ 61.175553][ T6313] warning: `syz.0.59' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 61.276099][ T6325] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 61.282936][ T6325] netlink: 36 bytes leftover after parsing attributes in process `syz.1.58'. [ 61.477571][ T6331] block nbd2: Attempted send on invalid socket [ 61.480533][ T6331] vxfs: unable to read disk superblock at 1 [ 61.484292][ T6331] block nbd2: Attempted send on invalid socket [ 61.487871][ T6331] vxfs: unable to read disk superblock at 8 [ 61.490814][ T6331] vxfs: can't find superblock. [ 61.561553][ T6331] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 61.610567][ T6334] netlink: 12 bytes leftover after parsing attributes in process `syz.0.67'. [ 61.685187][ T5983] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 62.907654][ T6360] random: crng reseeded on system resumption [ 63.813155][ T6370] netlink: 12 bytes leftover after parsing attributes in process `syz.1.78'. [ 63.980893][ T6372] blk_print_req_error: 144 callbacks suppressed [ 63.980940][ T6372] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 63.986826][ T6372] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 63.990440][ T6372] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 63.993822][ T6372] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 63.997154][ T6372] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 64.000368][ T6372] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 64.003542][ T6372] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 64.006755][ T6372] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 64.009893][ T6372] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 64.013039][ T6372] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 64.023097][ T6372] ldm_validate_partition_table(): Disk read failed. [ 64.030270][ T6372] Dev nbd0: unable to read RDB block 0 [ 64.037116][ T6372] nbd0: unable to read partition table [ 64.040308][ T6372] vxfs: unable to read disk superblock at 1 [ 64.043373][ T6372] vxfs: unable to read disk superblock at 8 [ 64.045394][ T6372] vxfs: can't find superblock. [ 64.114781][ T6372] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 64.589907][ T6386] IPVS: Unknown mcast interface: dvmrp1 [ 64.706327][ T6389] Bluetooth: MGMT ver 1.23 [ 64.758100][ T6398] Bluetooth: MGMT ver 1.23 [ 64.761420][ T6398] netlink: 'syz.2.86': attribute type 1 has an invalid length. [ 64.764106][ T6398] netlink: 236 bytes leftover after parsing attributes in process `syz.2.86'. [ 66.179288][ T6409] bridge1: entered promiscuous mode [ 66.232836][ T6409] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 66.316452][ T6419] Bluetooth: hci0: invalid len left 7, exp >= 258 [ 67.030241][ T72] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 67.032711][ T72] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 67.040652][ T72] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 67.043053][ T72] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 67.047991][ T72] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 67.050390][ T72] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 67.052720][ T72] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 67.055816][ T72] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 67.059970][ T72] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 67.062340][ T72] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 67.075129][ T72] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.03 Device [syz1] on syz1 [ 67.119550][ T6447] fido_id[6447]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 67.832439][ T6465] sp0: Synchronizing with TNC [ 68.076844][ T6470] netlink: 20 bytes leftover after parsing attributes in process `syz.3.107'. [ 68.199870][ T6473] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 68.203376][ T6473] UDF-fs: Scanning with blocksize 2048 failed [ 68.232381][ T6473] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 68.238135][ T6473] UDF-fs: Scanning with blocksize 4096 failed [ 68.352196][ T6476] block nbd2: Attempted send on invalid socket [ 68.354345][ T6476] vxfs: unable to read disk superblock at 1 [ 68.356538][ T6476] block nbd2: Attempted send on invalid socket [ 68.359380][ T6476] vxfs: unable to read disk superblock at 8 [ 68.361575][ T6476] vxfs: can't find superblock. [ 68.370349][ T6476] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 68.550933][ T6480] random: crng reseeded on system resumption [ 68.947255][ T6487] block nbd3: Attempted send on invalid socket [ 68.949615][ T6487] vxfs: unable to read disk superblock at 1 [ 68.952498][ T6487] block nbd3: Attempted send on invalid socket [ 68.954663][ T6487] vxfs: unable to read disk superblock at 8 [ 68.956918][ T6487] vxfs: can't find superblock. [ 68.972930][ T6487] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 69.216011][ T6486] netlink: 60 bytes leftover after parsing attributes in process `syz.0.110'. [ 69.233950][ T6486] overlayfs: failed to resolve './file1': -2 [ 69.514489][ T6495] netlink: 80 bytes leftover after parsing attributes in process `syz.0.115'. [ 70.236256][ T6503] blk_print_req_error: 60 callbacks suppressed [ 70.236268][ T6503] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 70.241734][ T6503] buffer_io_error: 202 callbacks suppressed [ 70.241743][ T6503] Buffer I/O error on dev nbd0, logical block 0, async page read [ 70.246417][ T6503] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 70.249237][ T6503] Buffer I/O error on dev nbd0, logical block 1, async page read [ 70.251715][ T6503] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 70.254529][ T6503] Buffer I/O error on dev nbd0, logical block 2, async page read [ 70.257133][ T6503] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 70.259931][ T6503] Buffer I/O error on dev nbd0, logical block 3, async page read [ 70.262398][ T6503] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 70.265285][ T6503] Buffer I/O error on dev nbd0, logical block 0, async page read [ 70.267784][ T6503] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 70.270642][ T6503] Buffer I/O error on dev nbd0, logical block 1, async page read [ 70.273124][ T6503] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 70.276145][ T6503] Buffer I/O error on dev nbd0, logical block 2, async page read [ 70.278796][ T6503] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 70.281584][ T6503] Buffer I/O error on dev nbd0, logical block 3, async page read [ 70.284069][ T6503] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 70.286974][ T6503] Buffer I/O error on dev nbd0, logical block 0, async page read [ 70.289474][ T6503] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 70.292293][ T6503] Buffer I/O error on dev nbd0, logical block 1, async page read [ 70.295054][ T6505] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 70.295976][ T6503] ldm_validate_partition_table(): Disk read failed. [ 70.300937][ T6503] Dev nbd0: unable to read RDB block 0 [ 70.304276][ T6503] nbd0: unable to read partition table [ 70.306452][ T6503] vxfs: unable to read disk superblock at 1 [ 70.308413][ T6503] vxfs: unable to read disk superblock at 8 [ 70.310463][ T6503] vxfs: can't find superblock. [ 70.454370][ T6513] syz_tun: entered allmulticast mode [ 70.462344][ T6512] syz_tun: left allmulticast mode [ 70.889713][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.891924][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.407689][ T6549] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 72.190986][ T6554] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 72.577852][ T6568] netlink: 340 bytes leftover after parsing attributes in process `syz.0.133'. [ 74.246400][ T6588] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 74.868984][ T6600] netlink: 20 bytes leftover after parsing attributes in process `syz.3.140'. [ 74.872353][ T6600] netlink: 36 bytes leftover after parsing attributes in process `syz.3.140'. [ 75.677210][ T6617] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 75.679639][ T6617] UDF-fs: Scanning with blocksize 2048 failed [ 75.683526][ T6617] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 75.686186][ T6617] UDF-fs: Scanning with blocksize 4096 failed [ 76.177193][ T1342] cfg80211: failed to load regulatory.db [ 76.252638][ T6630] hugetlbfs: Unknown parameter 'nÀžâ' [ 76.255019][ T6630] netlink: 20 bytes leftover after parsing attributes in process `syz.1.149'. [ 76.766297][ T6639] netlink: 'syz.2.148': attribute type 10 has an invalid length. [ 76.774016][ T6639] batman_adv: batadv0: Adding interface: team0 [ 76.776126][ T6639] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.785631][ T6639] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 77.180768][ T6645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.153'. [ 77.322485][ T6647] overlayfs: failed to resolve 'redirect_dir=follow': -2 [ 77.394319][ T6654] netlink: 'syz.2.156': attribute type 4 has an invalid length. [ 77.947171][ T6674] netlink: 4 bytes leftover after parsing attributes in process `syz.2.161'. [ 78.431171][ T6683] netlink: 24 bytes leftover after parsing attributes in process `syz.1.164'. [ 78.858222][ T6704] usb usb1: usbfs: process 6704 (syz.3.171) did not claim interface 42 before use [ 79.370582][ T6705] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 79.774267][ T6722] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 79.777863][ T6722] block device autoloading is deprecated and will be removed. [ 79.781736][ T6719] md: md2 stopped. [ 80.056866][ T6737] sg_write: data in/out 91/154 bytes for SCSI command 0x0-- guessing data in; [ 80.056866][ T6737] program syz.3.178 not setting count and/or reply_len properly [ 81.549654][ T6755] blk_print_req_error: 56 callbacks suppressed [ 81.549710][ T6755] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 81.554539][ T6755] buffer_io_error: 54 callbacks suppressed [ 81.554578][ T6755] Buffer I/O error on dev nbd0, logical block 0, async page read [ 81.559374][ T6755] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 81.562255][ T6755] Buffer I/O error on dev nbd0, logical block 1, async page read [ 81.565126][ T6755] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 81.567961][ T6755] Buffer I/O error on dev nbd0, logical block 2, async page read [ 81.570622][ T6755] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 81.573511][ T6755] Buffer I/O error on dev nbd0, logical block 3, async page read [ 81.576323][ T6755] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 81.579158][ T6755] Buffer I/O error on dev nbd0, logical block 0, async page read [ 81.581987][ T6755] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 81.584950][ T6755] Buffer I/O error on dev nbd0, logical block 1, async page read [ 81.587629][ T6755] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 81.590485][ T6755] Buffer I/O error on dev nbd0, logical block 2, async page read [ 81.593146][ T6755] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 81.596165][ T6755] Buffer I/O error on dev nbd0, logical block 3, async page read [ 81.599029][ T6755] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 81.601883][ T6755] Buffer I/O error on dev nbd0, logical block 0, async page read [ 81.604658][ T6755] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 81.607599][ T6755] Buffer I/O error on dev nbd0, logical block 1, async page read [ 81.615481][ T6755] ldm_validate_partition_table(): Disk read failed. [ 81.621749][ T6755] Dev nbd0: unable to read RDB block 0 [ 81.627464][ T6755] nbd0: unable to read partition table [ 81.630005][ T6755] vxfs: unable to read disk superblock at 1 [ 81.632325][ T6755] vxfs: unable to read disk superblock at 8 [ 81.634275][ T6755] vxfs: can't find superblock. [ 81.653230][ T6755] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 82.000498][ T6759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.184'. [ 83.186134][ T6789] capability: warning: `syz.2.192' uses 32-bit capabilities (legacy support in use) [ 83.633678][ T6798] netlink: 24 bytes leftover after parsing attributes in process `syz.2.194'. [ 83.983257][ T6805] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 84.096193][ T10] hid_parser_main: 73 callbacks suppressed [ 84.096206][ T10] hid-generic 00A0:0008:0003.0003: unknown main item tag 0x7 [ 84.106788][ T10] hid-generic 00A0:0008:0003.0003: item fetching failed at offset 14/15 [ 84.109990][ T10] hid-generic 00A0:0008:0003.0003: probe with driver hid-generic failed with error -22 [ 86.791443][ T6861] block nbd2: Attempted send on invalid socket [ 86.794073][ T6861] blk_print_req_error: 56 callbacks suppressed [ 86.794082][ T6861] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 86.800546][ T6861] vxfs: unable to read disk superblock at 1 [ 86.803433][ T6861] block nbd2: Attempted send on invalid socket [ 86.806044][ T6861] I/O error, dev nbd2, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 86.809966][ T6861] vxfs: unable to read disk superblock at 8 [ 86.812416][ T6861] vxfs: can't find superblock. [ 86.883792][ T6862] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 87.063186][ T6850] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 87.754970][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 87.917433][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 87.922626][ T10] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 87.927245][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.929786][ T10] usb 7-1: Product: syz [ 87.931186][ T10] usb 7-1: Manufacturer: syz [ 87.932635][ T10] usb 7-1: SerialNumber: syz [ 87.937075][ T10] usb 7-1: config 0 descriptor?? [ 88.304671][ T6889] ufs: You didn't specify the type of your ufs filesystem [ 88.304671][ T6889] [ 88.304671][ T6889] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 88.304671][ T6889] [ 88.304671][ T6889] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 88.314479][ T6889] ufs: ufstype=old is supported read-only [ 88.319477][ T6889] I/O error, dev loop3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 88.527931][ T6124] usb 7-1: USB disconnect, device number 2 [ 92.424776][ T6966] netlink: 48 bytes leftover after parsing attributes in process `syz.2.236'. [ 92.469724][ T6961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.234'. [ 92.472553][ T6961] lo: entered promiscuous mode [ 92.474145][ T6961] lo: entered allmulticast mode [ 92.476773][ T6961] tunl0: entered promiscuous mode [ 92.478421][ T6961] tunl0: entered allmulticast mode [ 92.480456][ T6961] gre0: entered promiscuous mode [ 92.482221][ T6961] gre0: entered allmulticast mode [ 92.484639][ T6961] gretap0: entered promiscuous mode [ 92.486788][ T6961] gretap0: entered allmulticast mode [ 92.489962][ T6961] erspan0: entered promiscuous mode [ 92.491763][ T6961] erspan0: entered allmulticast mode [ 92.494078][ T6961] ip_vti0: entered promiscuous mode [ 92.495937][ T6961] ip_vti0: entered allmulticast mode [ 92.498097][ T6961] ip6_vti0: entered promiscuous mode [ 92.499966][ T6961] ip6_vti0: entered allmulticast mode [ 92.502174][ T6961] sit0: entered promiscuous mode [ 92.504091][ T6961] sit0: entered allmulticast mode [ 92.507048][ T6912] delete_channel: no stack [ 92.510544][ T6961] ip6tnl0: entered promiscuous mode [ 92.515001][ T6961] ip6tnl0: entered allmulticast mode [ 92.517461][ T6961] ip6gre0: entered promiscuous mode [ 92.519457][ T6961] ip6gre0: entered allmulticast mode [ 92.521822][ T6961] syz_tun: entered promiscuous mode [ 92.523631][ T6961] syz_tun: entered allmulticast mode [ 92.529333][ T6961] ip6gretap0: entered promiscuous mode [ 92.531607][ T6961] ip6gretap0: entered allmulticast mode [ 92.543108][ T6961] bridge0: entered promiscuous mode [ 92.546912][ T6961] bridge0: entered allmulticast mode [ 92.552702][ T6961] vcan0: entered promiscuous mode [ 92.554816][ T6961] vcan0: entered allmulticast mode [ 92.560033][ T6961] bond0: entered promiscuous mode [ 92.562298][ T6961] bond_slave_0: entered promiscuous mode [ 92.565442][ T6961] bond_slave_1: entered promiscuous mode [ 92.567990][ T6961] bond0: entered allmulticast mode [ 92.570116][ T6961] bond_slave_0: entered allmulticast mode [ 92.572566][ T6961] bond_slave_1: entered allmulticast mode [ 92.586108][ T6961] team0: entered promiscuous mode [ 92.591619][ T6961] team_slave_0: entered promiscuous mode [ 92.594405][ T6961] team_slave_1: entered promiscuous mode [ 92.598047][ T6961] team0: entered allmulticast mode [ 92.599733][ T6961] team_slave_0: entered allmulticast mode [ 92.602210][ T6961] team_slave_1: entered allmulticast mode [ 92.606715][ T6961] dummy0: entered promiscuous mode [ 92.610412][ T6961] dummy0: entered allmulticast mode [ 92.613497][ T6961] nlmon0: entered promiscuous mode [ 92.616786][ T6961] nlmon0: entered allmulticast mode [ 92.621773][ T6961] caif0: entered promiscuous mode [ 92.623391][ T6961] caif0: entered allmulticast mode [ 92.625710][ T6961] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 93.143546][ T6980] netlink: 28 bytes leftover after parsing attributes in process `syz.2.241'. [ 93.150494][ T6980] netlink: 32 bytes leftover after parsing attributes in process `syz.2.241'. [ 93.157211][ T40] audit: type=1326 audit(1756012597.347:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6979 comm="syz.2.241" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28579 code=0x7ffc0000 [ 93.163795][ T40] audit: type=1326 audit(1756012597.347:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6979 comm="syz.2.241" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f28598 code=0x7ffc0000 [ 93.170514][ T40] audit: type=1326 audit(1756012597.347:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6979 comm="syz.2.241" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28579 code=0x7ffc0000 [ 93.177233][ T40] audit: type=1326 audit(1756012597.347:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6979 comm="syz.2.241" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f28598 code=0x7ffc0000 [ 93.184025][ T40] audit: type=1326 audit(1756012597.347:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6979 comm="syz.2.241" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28579 code=0x7ffc0000 [ 93.190677][ T40] audit: type=1326 audit(1756012597.347:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6979 comm="syz.2.241" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f28598 code=0x7ffc0000 [ 93.199208][ T40] audit: type=1326 audit(1756012597.347:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6979 comm="syz.2.241" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28579 code=0x7ffc0000 [ 93.206009][ T40] audit: type=1326 audit(1756012597.347:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6979 comm="syz.2.241" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f28598 code=0x7ffc0000 [ 93.213485][ T40] audit: type=1326 audit(1756012597.347:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6979 comm="syz.2.241" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28579 code=0x7ffc0000 [ 93.220250][ T40] audit: type=1326 audit(1756012597.347:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6979 comm="syz.2.241" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f28598 code=0x7ffc0000 [ 93.262341][ T6981] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 93.265570][ T6981] buffer_io_error: 54 callbacks suppressed [ 93.265579][ T6981] Buffer I/O error on dev nbd0, logical block 0, async page read [ 93.269876][ T6981] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 93.272772][ T6981] Buffer I/O error on dev nbd0, logical block 1, async page read [ 93.275330][ T6981] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 93.278310][ T6981] Buffer I/O error on dev nbd0, logical block 2, async page read [ 93.280829][ T6981] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 93.283619][ T6981] Buffer I/O error on dev nbd0, logical block 3, async page read [ 93.286244][ T6981] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 93.288979][ T6981] Buffer I/O error on dev nbd0, logical block 0, async page read [ 93.291445][ T6981] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 93.294234][ T6981] Buffer I/O error on dev nbd0, logical block 1, async page read [ 93.296832][ T6981] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 93.299580][ T6981] Buffer I/O error on dev nbd0, logical block 2, async page read [ 93.302070][ T6981] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 93.304817][ T6981] Buffer I/O error on dev nbd0, logical block 3, async page read [ 93.307325][ T6981] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 93.310110][ T6981] Buffer I/O error on dev nbd0, logical block 0, async page read [ 93.312589][ T6981] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 93.315566][ T6981] Buffer I/O error on dev nbd0, logical block 1, async page read [ 93.319237][ T6981] ldm_validate_partition_table(): Disk read failed. [ 93.322058][ T6981] Dev nbd0: unable to read RDB block 0 [ 93.324548][ T6981] nbd0: unable to read partition table [ 93.326531][ T6981] vxfs: unable to read disk superblock at 1 [ 93.328470][ T6981] vxfs: unable to read disk superblock at 8 [ 93.330337][ T6981] vxfs: can't find superblock. [ 93.335669][ T6981] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 93.536616][ T6990] netlink: 8 bytes leftover after parsing attributes in process `syz.2.245'. [ 93.539886][ T6990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.245'. [ 93.542884][ T6990] netlink: 'syz.2.245': attribute type 7 has an invalid length. [ 93.862183][ T6995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.247'. [ 93.866559][ T6995] lo: entered promiscuous mode [ 93.868076][ T6995] lo: entered allmulticast mode [ 93.874549][ T6995] tunl0: entered promiscuous mode [ 93.876418][ T6995] tunl0: entered allmulticast mode [ 93.878150][ T6995] gre0: entered promiscuous mode [ 93.879847][ T6995] gre0: entered allmulticast mode [ 93.881917][ T6995] gretap0: entered promiscuous mode [ 93.883546][ T6995] gretap0: entered allmulticast mode [ 93.885829][ T6995] erspan0: entered promiscuous mode [ 93.887402][ T6995] erspan0: entered allmulticast mode [ 93.889518][ T6995] ip_vti0: entered promiscuous mode [ 93.891219][ T6995] ip_vti0: entered allmulticast mode [ 93.893314][ T6995] ip6_vti0: entered promiscuous mode [ 93.895267][ T6995] ip6_vti0: entered allmulticast mode [ 93.897858][ T6995] sit0: entered promiscuous mode [ 93.899744][ T6995] sit0: entered allmulticast mode [ 93.901670][ T6995] ip6tnl0: entered promiscuous mode [ 93.903342][ T6995] ip6tnl0: entered allmulticast mode [ 93.906144][ T6995] ip6gre0: entered promiscuous mode [ 93.907815][ T6995] ip6gre0: entered allmulticast mode [ 93.909790][ T6995] syz_tun: entered promiscuous mode [ 93.911473][ T6995] syz_tun: entered allmulticast mode [ 93.913619][ T6995] ip6gretap0: entered promiscuous mode [ 93.915696][ T6995] ip6gretap0: entered allmulticast mode [ 93.917924][ T6995] bridge0: entered promiscuous mode [ 93.919493][ T6995] bridge0: entered allmulticast mode [ 93.921566][ T6995] vcan0: entered promiscuous mode [ 93.923128][ T6995] vcan0: entered allmulticast mode [ 93.925001][ T6995] bond0: entered promiscuous mode [ 93.926637][ T6995] bond_slave_0: entered promiscuous mode [ 93.928488][ T6995] bond_slave_1: entered promiscuous mode [ 93.930351][ T6995] bond0: entered allmulticast mode [ 93.931982][ T6995] bond_slave_0: entered allmulticast mode [ 93.934119][ T6995] bond_slave_1: entered allmulticast mode [ 93.937407][ T6995] team0: entered promiscuous mode [ 93.938979][ T6995] team_slave_0: entered promiscuous mode [ 93.940788][ T6995] team_slave_1: entered promiscuous mode [ 93.942630][ T6995] team0: entered allmulticast mode [ 93.944282][ T6995] team_slave_0: entered allmulticast mode [ 93.946252][ T6995] team_slave_1: entered allmulticast mode [ 93.949581][ T6995] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.951767][ T6995] batman_adv: batadv0: Interface activated: team0 [ 93.954328][ T6995] dummy0: entered promiscuous mode [ 93.956044][ T6995] dummy0: entered allmulticast mode [ 93.957983][ T6995] nlmon0: entered promiscuous mode [ 93.959548][ T6995] nlmon0: entered allmulticast mode [ 93.962049][ T6995] caif0: entered promiscuous mode [ 93.963657][ T6995] caif0: entered allmulticast mode [ 93.967097][ T6995] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 94.241737][ T7012] netlink: 12 bytes leftover after parsing attributes in process `syz.0.253'. [ 94.244605][ T7012] netlink: 12 bytes leftover after parsing attributes in process `syz.0.253'. [ 94.441882][ T7021] block nbd3: Attempted send on invalid socket [ 94.444140][ T7021] block nbd3: Attempted send on invalid socket [ 94.447125][ T7021] Mount JFS Failure: -5 [ 94.971456][ T7032] 9pnet_virtio: no channels available for device syz [ 95.563365][ T7039] ldm_validate_partition_table(): Disk read failed. [ 95.566589][ T7039] Dev nbd0: unable to read RDB block 0 [ 95.569253][ T7039] nbd0: unable to read partition table [ 95.571225][ T7039] vxfs: unable to read disk superblock at 1 [ 95.573717][ T7039] vxfs: unable to read disk superblock at 8 [ 95.575703][ T7039] vxfs: can't find superblock. [ 95.591728][ T7039] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 95.753223][ T7047] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 95.756461][ T7047] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 95.765334][ T7047] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 95.770396][ T7047] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 95.772744][ T7047] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 95.777403][ T7047] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 95.782110][ T7047] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 95.784351][ T7047] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 95.799826][ T7047] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 96.446417][ T10] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 96.619156][ T10] usb 8-1: config index 0 descriptor too short (expected 45, got 36) [ 96.622032][ T10] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 96.625792][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 96.629072][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 96.632786][ T10] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 96.637053][ T10] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 96.639839][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.645470][ T10] usb 8-1: config 0 descriptor?? [ 96.647565][ T7072] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 96.745102][ T7088] kernel read not supported for file /blkio.throttle.io_service_bytes_recursive (pid: 7088 comm: syz.1.278) [ 97.015263][ T54] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 97.077876][ T10] usbhid 8-1:0.0: can't add hid device: -71 [ 97.080831][ T10] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 97.103470][ T10] usb 8-1: USB disconnect, device number 2 [ 97.177157][ T54] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 8224, setting to 1024 [ 97.180761][ T54] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 97.183832][ T54] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 97.191461][ T54] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 97.194288][ T54] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.197087][ T54] usb 6-1: Product: syz [ 97.198622][ T54] usb 6-1: Manufacturer: syz [ 97.200115][ T54] usb 6-1: SerialNumber: syz [ 97.206553][ T7088] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 97.210300][ T54] hub 6-1:1.0: bad descriptor, ignoring hub [ 97.213416][ T54] hub 6-1:1.0: probe with driver hub failed with error -5 [ 97.414476][ T54] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 97.645622][ T54] usb 6-1: USB disconnect, device number 2 [ 97.661758][ T54] usblp0: removed [ 97.685030][ T5983] Bluetooth: hci1: command 0x0c1a tx timeout [ 97.855070][ T5983] Bluetooth: hci3: command 0x0c1a tx timeout [ 97.855172][ T5972] Bluetooth: hci2: command 0x0c1a tx timeout [ 98.065775][ T7125] netlink: 'syz.2.289': attribute type 10 has an invalid length. [ 98.077266][ T7125] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 98.080693][ T7125] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 98.105939][ T7125] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 98.114784][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.118639][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.382257][ T7137] tmpfs: Bad value for 'mpol' [ 98.456116][ T7143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.293'. [ 98.469319][ T7141] netlink: 24 bytes leftover after parsing attributes in process `syz.2.292'. [ 98.504694][ T40] kauditd_printk_skb: 737 callbacks suppressed [ 98.504705][ T40] audit: type=1326 audit(1756012602.687:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7144 comm="syz.0.294" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fd4579 code=0x0 [ 98.598098][ T7148] tipc: Started in network mode [ 98.599833][ T7148] tipc: Node identity 32ff945aecc8, cluster identity 4711 [ 98.602778][ T7148] tipc: Enabled bearer , priority 0 [ 98.606675][ T7148] syzkaller0: mtu less than device minimum [ 98.931518][ T7159] block nbd3: Attempted send on invalid socket [ 98.933580][ T7159] blk_print_req_error: 124 callbacks suppressed [ 98.933623][ T7159] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 98.938789][ T7159] vxfs: unable to read disk superblock at 1 [ 98.941458][ T7159] block nbd3: Attempted send on invalid socket [ 98.943648][ T7159] I/O error, dev nbd3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 98.947269][ T7159] vxfs: unable to read disk superblock at 8 [ 98.949531][ T7159] vxfs: can't find superblock. [ 99.029606][ T7160] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 99.157810][ T7162] block nbd1: Attempted send on invalid socket [ 99.159839][ T7162] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 99.162939][ T7162] vxfs: unable to read disk superblock at 1 [ 99.165127][ T7162] block nbd1: Attempted send on invalid socket [ 99.167081][ T7162] I/O error, dev nbd1, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 99.170009][ T7162] vxfs: unable to read disk superblock at 8 [ 99.171886][ T7162] vxfs: can't find superblock. [ 99.176307][ T7162] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 99.334172][ T7144] tipc: Disabling bearer [ 99.372875][ T7166] netlink: 28 bytes leftover after parsing attributes in process `syz.2.300'. [ 99.440013][ T7168] netlink: 24 bytes leftover after parsing attributes in process `syz.0.301'. [ 99.580446][ T40] audit: type=1326 audit(1756012603.767:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7172 comm="syz.3.302" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66579 code=0x7ffc0000 [ 99.589766][ T40] audit: type=1326 audit(1756012603.767:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7172 comm="syz.3.302" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66579 code=0x7ffc0000 [ 99.603527][ T40] audit: type=1326 audit(1756012603.767:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7172 comm="syz.3.302" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f66579 code=0x7ffc0000 [ 99.613347][ T40] audit: type=1326 audit(1756012603.767:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7172 comm="syz.3.302" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66579 code=0x7ffc0000 [ 99.620952][ T40] audit: type=1326 audit(1756012603.767:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7172 comm="syz.3.302" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f66579 code=0x7ffc0000 [ 99.630081][ T40] audit: type=1326 audit(1756012603.767:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7172 comm="syz.3.302" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66579 code=0x7ffc0000 [ 99.639448][ T40] audit: type=1326 audit(1756012603.767:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7172 comm="syz.3.302" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f66579 code=0x7ffc0000 [ 99.648954][ T40] audit: type=1326 audit(1756012603.767:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7172 comm="syz.3.302" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66579 code=0x7ffc0000 [ 99.658104][ T40] audit: type=1326 audit(1756012603.767:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7172 comm="syz.3.302" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f66579 code=0x7ffc0000 [ 99.775022][ T5972] Bluetooth: hci1: command 0x0c1a tx timeout [ 99.845098][ T72] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 99.924992][ T5972] Bluetooth: hci2: command 0x0c1a tx timeout [ 99.935019][ T5972] Bluetooth: hci3: command 0x0c1a tx timeout [ 100.265056][ T72] usb 8-1: Using ep0 maxpacket: 32 [ 100.268952][ T72] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 100.274354][ T72] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 100.277735][ T72] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 100.280859][ T72] usb 8-1: Product: syz [ 100.282171][ T72] usb 8-1: Manufacturer: syz [ 100.284069][ T72] usb 8-1: SerialNumber: syz [ 100.287008][ T72] usb 8-1: config 0 descriptor?? [ 100.290926][ T7173] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 100.294348][ T72] hub 8-1:0.0: bad descriptor, ignoring hub [ 100.296346][ T72] hub 8-1:0.0: probe with driver hub failed with error -5 [ 100.625314][ T7189] nbd2: detected capacity change from 0 to 18 [ 100.821391][ T7194] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 100.823458][ T7194] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 100.826314][ T7194] vhci_hcd vhci_hcd.0: Device attached [ 100.841540][ T7194] netdevsim netdevsim3: Direct firmware load for @ failed with error -2 [ 100.844684][ T7194] netdevsim netdevsim3: Falling back to sysfs fallback for: @ [ 101.059571][ T7198] netlink: 'syz.1.309': attribute type 1 has an invalid length. [ 101.072204][ T7198] netlink: 4 bytes leftover after parsing attributes in process `syz.1.309'. [ 101.095144][ T61] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 101.115716][ T7200] netlink: 'syz.1.310': attribute type 1 has an invalid length. [ 101.139331][ T7200] 8021q: adding VLAN 0 to HW filter on device bond1 [ 101.182389][ T7200] bond1: (slave veth5): Enslaving as an active interface with a down link [ 101.211642][ T7200] bond1: (slave veth0_to_bond): making interface the new active one [ 101.216592][ T7200] veth0_to_bond: entered promiscuous mode [ 101.219670][ T7200] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 101.245030][ T7200] vlan2: entered allmulticast mode [ 101.246967][ T7200] veth0_to_bond: entered allmulticast mode [ 101.249902][ T7200] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 101.296534][ T7189] block nbd2: shutting down sockets [ 101.304989][ C0] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 101.307884][ C0] buffer_io_error: 118 callbacks suppressed [ 101.307894][ C0] Buffer I/O error on dev nbd2, logical block 0, async page read [ 101.313181][ T6076] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 101.316738][ T6076] Buffer I/O error on dev nbd2, logical block 0, async page read [ 101.319196][ T6076] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 101.321984][ T6076] Buffer I/O error on dev nbd2, logical block 0, async page read [ 101.324619][ T6076] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 101.327669][ T6076] Buffer I/O error on dev nbd2, logical block 0, async page read [ 101.330240][ T6076] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 101.333052][ T6076] Buffer I/O error on dev nbd2, logical block 0, async page read [ 101.335737][ T6076] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 101.338900][ T6076] Buffer I/O error on dev nbd2, logical block 0, async page read [ 101.341602][ T6076] Buffer I/O error on dev nbd2, logical block 0, async page read [ 101.344253][ T6076] Buffer I/O error on dev nbd2, logical block 0, async page read [ 101.347257][ T6076] ldm_validate_partition_table(): Disk read failed. [ 101.349584][ T6076] Buffer I/O error on dev nbd2, logical block 0, async page read [ 101.352218][ T6076] Buffer I/O error on dev nbd2, logical block 0, async page read [ 101.355161][ T6076] Dev nbd2: unable to read RDB block 0 [ 101.357317][ T6076] nbd2: unable to read partition table [ 101.359247][ T6076] nbd2: partition table beyond EOD, truncated [ 101.367508][ T5383] ldm_validate_partition_table(): Disk read failed. [ 101.370746][ T5383] Dev nbd2: unable to read RDB block 0 [ 101.373462][ T5383] nbd2: unable to read partition table [ 101.376511][ T5383] nbd2: partition table beyond EOD, truncated [ 101.379720][ T6076] ldm_validate_partition_table(): Disk read failed. [ 101.382660][ T6076] Dev nbd2: unable to read RDB block 0 [ 101.385328][ T6076] nbd2: unable to read partition table [ 101.387587][ T6076] nbd2: partition table beyond EOD, truncated [ 101.731528][ T7211] ldm_validate_partition_table(): Disk read failed. [ 101.734477][ T7211] Dev nbd0: unable to read RDB block 0 [ 101.737286][ T7211] nbd0: unable to read partition table [ 101.739212][ T7211] vxfs: unable to read disk superblock at 1 [ 101.741158][ T7211] vxfs: unable to read disk superblock at 8 [ 101.743002][ T7211] vxfs: can't find superblock. [ 101.747182][ T7211] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 101.917089][ T5983] Bluetooth: hci1: command 0x0c1a tx timeout [ 101.976032][ T7217] netlink: 28 bytes leftover after parsing attributes in process `syz.1.315'. [ 102.005173][ T5983] Bluetooth: hci3: command 0x0c1a tx timeout [ 102.005240][ T5978] Bluetooth: hci2: command 0x0c1a tx timeout [ 102.631905][ T7195] vhci_hcd: connection reset by peer [ 102.640597][ T60] vhci_hcd: stop threads [ 102.642260][ T60] vhci_hcd: release socket [ 102.644290][ T60] vhci_hcd: disconnect device [ 102.736476][ T1022] usb 8-1: USB disconnect, device number 3 [ 102.741149][ T7228] netlink: 24 bytes leftover after parsing attributes in process `syz.3.318'. [ 102.848187][ T7229] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(13) [ 102.850944][ T7229] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 102.854258][ T7229] vhci_hcd vhci_hcd.0: Device attached [ 102.925412][ T7228] Bluetooth: MGMT ver 1.23 [ 103.005319][ T7230] vhci_hcd: connection closed [ 103.013929][ T46] vhci_hcd: stop threads [ 103.019446][ T46] vhci_hcd: release socket [ 103.026706][ T46] vhci_hcd: disconnect device [ 103.078938][ T7234] overlayfs: failed to get inode (-116) [ 103.081127][ T7234] overlayfs: failed to get inode (-116) [ 103.082990][ T7234] overlayfs: failed to get inode (-116) [ 103.085615][ T34] vhci_hcd: vhci_device speed not set [ 103.085680][ T7234] overlayfs: failed to get inode (-116) [ 104.095267][ T5972] Bluetooth: hci3: command 0x0c1a tx timeout [ 104.339321][ T7262] netlink: 28 bytes leftover after parsing attributes in process `syz.2.329'. [ 104.755944][ T7267] blk_print_req_error: 110 callbacks suppressed [ 104.755960][ T7267] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.775434][ T7267] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.779115][ T7267] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.793035][ T7267] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.796925][ T7267] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.799765][ T7267] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.802528][ T7267] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.815192][ T7267] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.825294][ T7267] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.828091][ T7267] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 104.832272][ T7267] ldm_validate_partition_table(): Disk read failed. [ 104.841820][ T7267] Dev nbd0: unable to read RDB block 0 [ 104.844453][ T7267] nbd0: unable to read partition table [ 104.846746][ T7267] vxfs: unable to read disk superblock at 1 [ 104.851660][ T7267] vxfs: unable to read disk superblock at 8 [ 104.853489][ T7267] vxfs: can't find superblock. [ 104.953094][ T7264] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 104.965344][ T5978] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 104.975599][ T5978] Bluetooth: hci2: command 0x0c1a tx timeout [ 105.320345][ T7279] (syz.0.334,7279,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 105.322869][ T7279] (syz.0.334,7279,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 105.326740][ T7279] (syz.0.334,7279,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 105.329686][ T7279] (syz.0.334,7279,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 105.339885][ T7277] team0: No ports can be present during mode change [ 105.348487][ T7277] FAULT_INJECTION: forcing a failure. [ 105.348487][ T7277] name failslab, interval 1, probability 0, space 0, times 0 [ 105.352344][ T7277] CPU: 1 UID: 0 PID: 7277 Comm: syz.3.333 Not tainted syzkaller #0 PREEMPT(full) [ 105.352358][ T7277] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 105.352364][ T7277] Call Trace: [ 105.352368][ T7277] [ 105.352372][ T7277] dump_stack_lvl+0x16c/0x1f0 [ 105.352389][ T7277] should_fail_ex+0x512/0x640 [ 105.352404][ T7277] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 105.352440][ T7277] should_failslab+0xc2/0x120 [ 105.352454][ T7277] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 105.352466][ T7277] ? __alloc_skb+0x2b2/0x380 [ 105.352482][ T7277] __alloc_skb+0x2b2/0x380 [ 105.352494][ T7277] ? __pfx___alloc_skb+0x10/0x10 [ 105.352508][ T7277] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 105.352525][ T7277] netlink_alloc_large_skb+0x69/0x130 [ 105.352540][ T7277] netlink_sendmsg+0x6a1/0xdd0 [ 105.352556][ T7277] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.352571][ T7277] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 105.352585][ T7277] ____sys_sendmsg+0xa95/0xc70 [ 105.352597][ T7277] ? __pfx_____sys_sendmsg+0x10/0x10 [ 105.352606][ T7277] ? get_compat_msghdr+0x11a/0x170 [ 105.352624][ T7277] ___sys_sendmsg+0x134/0x1d0 [ 105.352638][ T7277] ? __pfx____sys_sendmsg+0x10/0x10 [ 105.352657][ T7277] ? find_held_lock+0x2b/0x80 [ 105.352677][ T7277] __sys_sendmsg+0x16d/0x220 [ 105.352690][ T7277] ? __pfx___sys_sendmsg+0x10/0x10 [ 105.352709][ T7277] ? rcu_is_watching+0x12/0xc0 [ 105.352721][ T7277] __do_fast_syscall_32+0x7c/0x3a0 [ 105.352737][ T7277] do_fast_syscall_32+0x32/0x80 [ 105.352750][ T7277] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 105.352763][ T7277] RIP: 0023:0xf7f66579 [ 105.352772][ T7277] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 105.352781][ T7277] RSP: 002b:00000000f548655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 105.352791][ T7277] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 105.352797][ T7277] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 105.352803][ T7277] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 105.352808][ T7277] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 105.352814][ T7277] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 105.352826][ T7277] [ 106.075641][ T7306] netlink: 28 bytes leftover after parsing attributes in process `syz.0.341'. [ 106.375533][ T61] vhci_hcd: vhci_device speed not set [ 106.849215][ T7318] block nbd1: Attempted send on invalid socket [ 106.851414][ T7318] vxfs: unable to read disk superblock at 1 [ 106.853340][ T7318] block nbd1: Attempted send on invalid socket [ 106.855388][ T7318] vxfs: unable to read disk superblock at 8 [ 106.857263][ T7318] vxfs: can't find superblock. [ 106.865631][ T7320] block nbd2: Attempted send on invalid socket [ 106.867866][ T7320] vxfs: unable to read disk superblock at 1 [ 106.870109][ T7320] block nbd2: Attempted send on invalid socket [ 106.872249][ T7320] vxfs: unable to read disk superblock at 8 [ 106.874283][ T7320] vxfs: can't find superblock. [ 106.886171][ T7318] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 106.946208][ T7316] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 107.259581][ T7324] block nbd1: Attempted send on invalid socket [ 107.305537][ T7324] vxfs: unable to read disk superblock at 1 [ 107.473366][ T7324] block nbd1: Attempted send on invalid socket [ 107.565793][ T7324] vxfs: unable to read disk superblock at 8 [ 107.567688][ T7324] vxfs: can't find superblock. [ 107.683420][ T7323] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 107.991803][ T7340] block nbd2: Attempted send on invalid socket [ 107.994186][ T7340] vxfs: unable to read disk superblock at 1 [ 107.996599][ T7340] block nbd2: Attempted send on invalid socket [ 107.998887][ T7340] vxfs: unable to read disk superblock at 8 [ 108.000939][ T7340] vxfs: can't find superblock. [ 108.048021][ T7339] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 108.496728][ T40] kauditd_printk_skb: 74 callbacks suppressed [ 108.496739][ T40] audit: type=1800 audit(1756012612.687:833): pid=7346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.352" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 108.526349][ T216] Bluetooth: hci4: Frame reassembly failed (-84) [ 108.802477][ T7353] block nbd2: Attempted send on invalid socket [ 108.804777][ T7353] vxfs: unable to read disk superblock at 1 [ 108.807125][ T7353] block nbd2: Attempted send on invalid socket [ 108.809260][ T7353] vxfs: unable to read disk superblock at 8 [ 108.811348][ T7353] vxfs: can't find superblock. [ 108.867731][ T7354] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 108.900965][ T7343] Bluetooth: hci4: Frame reassembly failed (-84) [ 109.357204][ T7366] vxfs: unable to read disk superblock at 1 [ 109.360569][ T7366] vxfs: unable to read disk superblock at 8 [ 109.362800][ T7366] vxfs: can't find superblock. [ 109.388981][ T7366] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 110.064401][ T34] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 110.140774][ T34] hid-generic 0000:0000:0000.0004: hidraw1: HID v0.00 Device [syz1] on syz0 [ 110.166513][ T7377] fido_id[7377]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 110.186077][ T7380] trusted_key: syz.0.362 sent an empty control message without MSG_MORE. [ 110.223484][ T7383] comedi comedi1: comedi_config --init_data is deprecated [ 110.230857][ T7383] lo speed is unknown, defaulting to 1000 [ 110.232763][ T7383] lo speed is unknown, defaulting to 1000 [ 110.237074][ T7383] lo speed is unknown, defaulting to 1000 [ 110.242132][ T7383] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 110.248728][ T7383] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 110.268549][ T7383] lo speed is unknown, defaulting to 1000 [ 110.272206][ T7383] lo speed is unknown, defaulting to 1000 [ 110.274763][ T7383] lo speed is unknown, defaulting to 1000 [ 110.279769][ T7383] lo speed is unknown, defaulting to 1000 [ 110.325810][ T7383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.363'. [ 110.330049][ T7383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.363'. [ 110.565550][ T5972] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 110.566373][ T5978] Bluetooth: hci4: command 0x1003 tx timeout [ 112.454579][ T40] audit: type=1326 audit(1756012616.637:834): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=7417 comm="syz.1.372" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x0 [ 112.634538][ T7423] syz.3.371 (7423): attempted to duplicate a private mapping with mremap. This is not supported. [ 112.735151][ T5972] Bluetooth: hci1: command 0x0c1a tx timeout [ 112.764200][ T7429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.375'. [ 112.865287][ T12] veth0_to_bond: left promiscuous mode [ 112.981873][ T7437] fuse: Unknown parameter 'x¤è' [ 113.084522][ T7441] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.087825][ T7441] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.092639][ T7441] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.095898][ T7441] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.099728][ T7441] batman_adv: batadv0: Interface deactivated: team0 [ 113.102687][ T7441] batman_adv: batadv0: Removing interface: team0 [ 113.453229][ T40] audit: type=1804 audit(1756012846.637:835): pid=7452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.380" name="/newroot/95/bus/bus" dev="overlay" ino=525 res=1 errno=0 [ 113.784979][ T40] audit: type=1804 audit(1756012846.967:836): pid=7452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.380" name="/newroot/95/bus/bus" dev="overlay" ino=525 res=1 errno=0 [ 114.665088][ T72] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 114.814994][ T72] usb 7-1: Using ep0 maxpacket: 16 [ 114.825639][ T72] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 114.825929][ T7474] netlink: 24 bytes leftover after parsing attributes in process `syz.0.388'. [ 114.829060][ T72] usb 7-1: config 0 has no interface number 0 [ 114.840828][ T72] usb 7-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 114.844627][ T72] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.847743][ T72] usb 7-1: Product: syz [ 114.849465][ T72] usb 7-1: Manufacturer: syz [ 114.851502][ T72] usb 7-1: SerialNumber: syz [ 114.865078][ T72] usb 7-1: config 0 descriptor?? [ 114.872169][ T72] hub 7-1:0.132: bad descriptor, ignoring hub [ 114.875561][ T72] hub 7-1:0.132: probe with driver hub failed with error -5 [ 114.882362][ T72] input: bcm5974 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.132/input/input5 [ 115.327306][ T841] usb 7-1: USB disconnect, device number 3 [ 116.093275][ T7482] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.096629][ T7482] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.264809][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.268207][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.271396][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.277481][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.259734][ T7510] netlink: 24 bytes leftover after parsing attributes in process `syz.0.399'. [ 117.632672][ T7514] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 118.584217][ T7531] tmpfs: Unknown parameter 'usrquot_inodliûit' [ 121.213279][ T7568] blk_print_req_error: 69 callbacks suppressed [ 121.213291][ T7568] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 121.218407][ T7568] buffer_io_error: 168 callbacks suppressed [ 121.218416][ T7568] Buffer I/O error on dev nbd0, logical block 0, async page read [ 121.222952][ T7568] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 121.226200][ T7568] Buffer I/O error on dev nbd0, logical block 1, async page read [ 121.228735][ T7568] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 121.231556][ T7568] Buffer I/O error on dev nbd0, logical block 2, async page read [ 121.234041][ T7568] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 121.237121][ T7568] Buffer I/O error on dev nbd0, logical block 3, async page read [ 121.239590][ T7568] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 121.242356][ T7568] Buffer I/O error on dev nbd0, logical block 0, async page read [ 121.245936][ T7568] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 121.248873][ T7568] Buffer I/O error on dev nbd0, logical block 1, async page read [ 121.251375][ T7568] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 121.254172][ T7568] Buffer I/O error on dev nbd0, logical block 2, async page read [ 121.256784][ T7568] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 121.259544][ T7568] Buffer I/O error on dev nbd0, logical block 3, async page read [ 121.262063][ T7568] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 121.264973][ T7568] Buffer I/O error on dev nbd0, logical block 0, async page read [ 121.267457][ T7568] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 121.270306][ T7568] Buffer I/O error on dev nbd0, logical block 1, async page read [ 121.274122][ T7568] ldm_validate_partition_table(): Disk read failed. [ 121.277230][ T7568] Dev nbd0: unable to read RDB block 0 [ 121.279873][ T7568] nbd0: unable to read partition table [ 121.281805][ T7568] vxfs: unable to read disk superblock at 1 [ 121.283772][ T7568] vxfs: unable to read disk superblock at 8 [ 121.285843][ T7568] vxfs: can't find superblock. [ 121.297254][ T7568] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 121.603790][ T7578] ldm_validate_partition_table(): Disk read failed. [ 121.607195][ T7578] Dev nbd0: unable to read RDB block 0 [ 121.609851][ T7578] nbd0: unable to read partition table [ 121.612207][ T7578] vxfs: unable to read disk superblock at 1 [ 121.614639][ T7578] vxfs: unable to read disk superblock at 8 [ 121.616595][ T7578] vxfs: can't find superblock. [ 121.628669][ T7578] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 124.196781][ T7625] nbd_handle_cmd: 2 callbacks suppressed [ 124.196794][ T7625] block nbd2: Attempted send on invalid socket [ 124.200605][ T7625] vxfs: unable to read disk superblock at 1 [ 124.202570][ T7625] block nbd2: Attempted send on invalid socket [ 124.204545][ T7625] vxfs: unable to read disk superblock at 8 [ 124.206509][ T7625] vxfs: can't find superblock. [ 124.209876][ T7625] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 124.492549][ T7630] block nbd2: Attempted send on invalid socket [ 124.494805][ T7630] vxfs: unable to read disk superblock at 1 [ 124.497714][ T7630] block nbd2: Attempted send on invalid socket [ 124.500201][ T7630] vxfs: unable to read disk superblock at 8 [ 124.502121][ T7630] vxfs: can't find superblock. [ 124.550993][ T7630] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 124.946605][ T7637] ldm_validate_partition_table(): Disk read failed. [ 124.949482][ T7637] Dev nbd0: unable to read RDB block 0 [ 124.952017][ T7637] nbd0: unable to read partition table [ 124.953893][ T7637] vxfs: unable to read disk superblock at 1 [ 124.955990][ T7637] vxfs: unable to read disk superblock at 8 [ 124.957812][ T7637] vxfs: can't find superblock. [ 124.963607][ T7637] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 128.839099][ T7686] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 129.285566][ T7689] 9p: Unknown access argument 18446744073709551615: -34 [ 129.373815][ T7691] netlink: 12 bytes leftover after parsing attributes in process `syz.2.445'. [ 129.413122][ T5978] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 129.417364][ T5978] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 129.420845][ T5978] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 129.424717][ T5978] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 129.456347][ T5978] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 129.481878][ T7693] lo speed is unknown, defaulting to 1000 [ 129.562167][ T7693] chnl_net:caif_netlink_parms(): no params data found [ 129.887195][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.911816][ T7693] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.917600][ T7693] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.921141][ T7693] bridge_slave_0: entered allmulticast mode [ 129.938536][ T7693] bridge_slave_0: entered promiscuous mode [ 129.939277][ T7704] netlink: 76 bytes leftover after parsing attributes in process `syz.0.446'. [ 129.947303][ T7693] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.952982][ T7693] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.960653][ T7693] bridge_slave_1: entered allmulticast mode [ 129.970438][ T7693] bridge_slave_1: entered promiscuous mode [ 130.005375][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.286738][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.402097][ T7693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.427974][ T7693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.451270][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.534441][ T7693] team0: Port device team_slave_0 added [ 130.542946][ T7693] team0: Port device team_slave_1 added [ 130.545883][ T7710] FAULT_INJECTION: forcing a failure. [ 130.545883][ T7710] name failslab, interval 1, probability 0, space 0, times 0 [ 130.549817][ T7710] CPU: 0 UID: 0 PID: 7710 Comm: syz.0.448 Not tainted syzkaller #0 PREEMPT(full) [ 130.549831][ T7710] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 130.549837][ T7710] Call Trace: [ 130.549842][ T7710] [ 130.549846][ T7710] dump_stack_lvl+0x16c/0x1f0 [ 130.549865][ T7710] should_fail_ex+0x512/0x640 [ 130.549879][ T7710] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 130.549892][ T7710] should_failslab+0xc2/0x120 [ 130.549905][ T7710] __kmalloc_cache_noprof+0x6a/0x3e0 [ 130.549916][ T7710] ? nfnl_err_add+0x4e/0x350 [ 130.549928][ T7710] nfnl_err_add+0x4e/0x350 [ 130.549939][ T7710] nfnetlink_rcv_batch+0xc95/0x2330 [ 130.549956][ T7710] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 130.549969][ T7710] ? __local_bh_enable_ip+0xa4/0x120 [ 130.549981][ T7710] ? __dev_queue_xmit+0xaf1/0x4490 [ 130.549992][ T7710] ? __dev_queue_xmit+0xb12/0x4490 [ 130.550009][ T7710] ? __pfx___dev_queue_xmit+0x10/0x10 [ 130.550033][ T7710] ? __nla_parse+0x40/0x60 [ 130.550045][ T7710] nfnetlink_rcv+0x3c1/0x430 [ 130.550055][ T7710] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 130.550069][ T7710] netlink_unicast+0x5aa/0x870 [ 130.550086][ T7710] ? __pfx_netlink_unicast+0x10/0x10 [ 130.550099][ T7710] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 130.550118][ T7710] netlink_sendmsg+0x8d1/0xdd0 [ 130.550134][ T7710] ? __pfx_netlink_sendmsg+0x10/0x10 [ 130.550149][ T7710] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 130.550163][ T7710] ____sys_sendmsg+0xa95/0xc70 [ 130.550175][ T7710] ? __pfx_____sys_sendmsg+0x10/0x10 [ 130.550184][ T7710] ? get_compat_msghdr+0x11a/0x170 [ 130.550203][ T7710] ___sys_sendmsg+0x134/0x1d0 [ 130.550218][ T7710] ? __pfx____sys_sendmsg+0x10/0x10 [ 130.550238][ T7710] ? find_held_lock+0x2b/0x80 [ 130.550258][ T7710] __sys_sendmsg+0x16d/0x220 [ 130.550271][ T7710] ? __pfx___sys_sendmsg+0x10/0x10 [ 130.550291][ T7710] ? rcu_is_watching+0x12/0xc0 [ 130.550303][ T7710] __do_fast_syscall_32+0x7c/0x3a0 [ 130.550318][ T7710] do_fast_syscall_32+0x32/0x80 [ 130.550332][ T7710] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 130.550345][ T7710] RIP: 0023:0xf7fd4579 [ 130.550353][ T7710] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 130.550363][ T7710] RSP: 002b:00000000f54f655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 130.550374][ T7710] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 130.550380][ T7710] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 130.550385][ T7710] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 130.550391][ T7710] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 130.550397][ T7710] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 130.550410][ T7710] [ 130.707734][ T7693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.709984][ T7693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.718256][ T7693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.722849][ T7693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.725328][ T7693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.742612][ T7693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.798072][ T7693] hsr_slave_0: entered promiscuous mode [ 130.800333][ T7693] hsr_slave_1: entered promiscuous mode [ 130.802411][ T7693] debugfs: 'hsr0' already exists in 'hsr' [ 130.804254][ T7693] Cannot create hsr debugfs directory [ 130.863267][ T12] bridge_slave_1: left allmulticast mode [ 130.874571][ T12] bridge_slave_1: left promiscuous mode [ 130.878581][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.884293][ T12] bridge_slave_0: left allmulticast mode [ 130.888052][ T12] bridge_slave_0: left promiscuous mode [ 130.889884][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.438968][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.442229][ T12] bond_slave_0: left promiscuous mode [ 131.444288][ T12] bond_slave_0: left allmulticast mode [ 131.448454][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.451662][ T12] bond_slave_1: left promiscuous mode [ 131.453537][ T12] bond_slave_1: left allmulticast mode [ 131.457419][ T12] bond0 (unregistering): Released all slaves [ 131.464012][ T12] bond1 (unregistering): Released all slaves [ 131.525091][ T5972] Bluetooth: hci4: command tx timeout [ 131.670760][ T7693] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 131.695442][ T7693] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 131.714101][ T7693] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 131.732635][ T7693] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 131.949590][ T12] hsr_slave_0: left promiscuous mode [ 131.952234][ T12] hsr_slave_1: left promiscuous mode [ 131.954268][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.957999][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.003615][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.006071][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.038977][ T12] veth1_macvtap: left promiscuous mode [ 132.040944][ T12] veth0_macvtap: left promiscuous mode [ 132.042732][ T12] veth1_vlan: left promiscuous mode [ 132.044546][ T12] veth0_vlan: left promiscuous mode [ 132.326673][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.328871][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.645588][ T12] team_slave_1 (unregistering): left promiscuous mode [ 132.647783][ T12] team_slave_1 (unregistering): left allmulticast mode [ 132.650681][ T12] team0 (unregistering): Port device team_slave_1 removed [ 132.729945][ T12] team_slave_0 (unregistering): left promiscuous mode [ 132.732635][ T12] team_slave_0 (unregistering): left allmulticast mode [ 132.737217][ T12] team0 (unregistering): Port device team_slave_0 removed [ 133.295814][ T7693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.307922][ T7693] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.313159][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.315506][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.324113][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.326543][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.344321][ T7693] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 133.347801][ T7693] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 133.443968][ T7755] netlink: 24 bytes leftover after parsing attributes in process `syz.2.457'. [ 133.449219][ T7755] netlink: 24 bytes leftover after parsing attributes in process `syz.2.457'. [ 133.452631][ T7693] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.604194][ T7693] veth0_vlan: entered promiscuous mode [ 133.605995][ T5972] Bluetooth: hci4: command tx timeout [ 133.612530][ T7693] veth1_vlan: entered promiscuous mode [ 133.628847][ T7693] veth0_macvtap: entered promiscuous mode [ 133.633608][ T7693] veth1_macvtap: entered promiscuous mode [ 133.668464][ T7693] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.700181][ T7767] block nbd2: Attempted send on invalid socket [ 133.702233][ T7767] blk_print_req_error: 192 callbacks suppressed [ 133.702242][ T7767] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 133.707283][ T7767] vxfs: unable to read disk superblock at 1 [ 133.709366][ T7767] block nbd2: Attempted send on invalid socket [ 133.711365][ T7767] I/O error, dev nbd2, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 133.714284][ T7767] vxfs: unable to read disk superblock at 8 [ 133.716281][ T7767] vxfs: can't find superblock. [ 133.775551][ T7768] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 133.875049][ T7693] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.880992][ T216] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.883858][ T216] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.896293][ T216] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.899090][ T216] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.942597][ T7769] netdevsim netdevsim0: Direct firmware load for ö×0”©ÛPq•ä…õD"€2ðNÿktT·Wj«³%¼Nµ§ failed with error -2 [ 133.947924][ T7769] netdevsim netdevsim0: Falling back to sysfs fallback for: ö×0”©ÛPq•ä…õD"€2ðNÿktT·Wj«³%¼Nµ§ [ 133.955385][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.957845][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.971636][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.974204][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.009026][ T7773] netlink: 24 bytes leftover after parsing attributes in process `syz.4.444'. [ 135.129431][ T7786] netlink: 4 bytes leftover after parsing attributes in process `syz.2.461'. [ 135.135536][ T7786] netlink: 20 bytes leftover after parsing attributes in process `syz.2.461'. [ 135.695074][ T5972] Bluetooth: hci4: command tx timeout [ 135.749362][ T7803] block nbd2: Attempted send on invalid socket [ 135.754357][ T7803] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 135.764952][ T7803] vxfs: unable to read disk superblock at 1 [ 135.781870][ T7803] block nbd2: Attempted send on invalid socket [ 135.787976][ T7803] I/O error, dev nbd2, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 135.792464][ T7803] vxfs: unable to read disk superblock at 8 [ 135.794948][ T7803] vxfs: can't find superblock. [ 135.953871][ T7796] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 136.310292][ T7809] netlink: 12 bytes leftover after parsing attributes in process `syz.2.469'. [ 136.511185][ T7813] netlink: 12 bytes leftover after parsing attributes in process `syz.0.470'. [ 136.834772][ T7822] 9pnet_virtio: no channels available for device syz [ 137.711832][ T7832] netlink: 4 bytes leftover after parsing attributes in process `syz.4.472'. [ 138.438597][ T7856] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 138.670603][ T7870] wireguard0: entered promiscuous mode [ 138.672499][ T7870] wireguard0: entered allmulticast mode [ 139.134945][ T7893] netlink: 4 bytes leftover after parsing attributes in process `syz.2.479'. [ 139.317004][ T7893] veth7: entered promiscuous mode [ 140.006412][ T5972] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 140.009678][ T5972] Bluetooth: hci4: Injecting HCI hardware error event [ 140.012704][ T5972] Bluetooth: hci4: hardware error 0x00 [ 140.140778][ T7723] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN NOPTI [ 140.144614][ T7723] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 140.148562][ T7723] CPU: 2 UID: 0 PID: 7723 Comm: kbnepd bnep0 Not tainted syzkaller #0 PREEMPT(full) [ 140.152069][ T7723] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 140.156036][ T7723] RIP: 0010:klist_put+0x4d/0x1b0 [ 140.157847][ T7723] Code: c1 ea 03 80 3c 02 00 0f 85 5f 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 2e 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 8c 3e 0d [ 140.163839][ T7723] RSP: 0018:ffffc90007fbf9b0 EFLAGS: 00010202 [ 140.165909][ T7723] RAX: dffffc0000000000 RBX: ffff888024fb6860 RCX: ffffffff825f331d [ 140.168375][ T7723] RDX: 000000000000000b RSI: ffffffff8b861035 RDI: 0000000000000058 [ 140.170856][ T7723] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 140.173325][ T7723] R10: 0000000000000000 R11: 0000000000002c10 R12: 0000000000000000 [ 140.176701][ T7723] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000000 [ 140.179315][ T7723] FS: 0000000000000000(0000) GS:ffff8880976c3000(0000) knlGS:0000000000000000 [ 140.182109][ T7723] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 140.184365][ T7723] CR2: 0000000080001000 CR3: 000000006d271000 CR4: 0000000000352ef0 [ 140.186933][ T7723] Call Trace: [ 140.188011][ T7723] [ 140.188972][ T7723] device_del+0x1d8/0x9f0 [ 140.190359][ T7723] ? __pfx_device_del+0x10/0x10 [ 140.191982][ T7723] ? netdev_unregister_kobject+0x2da/0x540 [ 140.193933][ T7723] unregister_netdevice_many_notify+0x14f0/0x24c0 [ 140.196683][ T7723] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 140.198869][ T7723] ? __pfx___mutex_lock+0x10/0x10 [ 140.200430][ T7723] unregister_netdevice_queue+0x305/0x3f0 [ 140.202167][ T7723] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 140.204180][ T7723] ? rtnl_net_dev_lock+0x28/0x360 [ 140.205819][ T7723] ? rtnl_net_dev_lock+0x146/0x360 [ 140.207424][ T7723] ? rtnl_lock+0x9/0x20 [ 140.208748][ T7723] ? rtnl_net_dev_lock+0x146/0x360 [ 140.210357][ T7723] unregister_netdev+0x1f/0x60 [ 140.211871][ T7723] bnep_session+0x224e/0x2d80 [ 140.213368][ T7723] ? __pfx_bnep_session+0x10/0x10 [ 140.214998][ T7723] ? do_raw_spin_lock+0x12c/0x2b0 [ 140.216575][ T7723] ? __pfx_woken_wake_function+0x10/0x10 [ 140.218325][ T7723] ? rcu_is_watching+0x12/0xc0 [ 140.219824][ T7723] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 140.221651][ T7723] ? lockdep_hardirqs_on+0x7c/0x110 [ 140.223280][ T7723] ? __kthread_parkme+0x19e/0x250 [ 140.225320][ T7723] ? __pfx_bnep_session+0x10/0x10 [ 140.227297][ T7723] kthread+0x3c5/0x780 [ 140.228448][ T7723] ? __pfx_kthread+0x10/0x10 [ 140.229848][ T7723] ? rcu_is_watching+0x12/0xc0 [ 140.231382][ T7723] ? __pfx_kthread+0x10/0x10 [ 140.232857][ T7723] ret_from_fork+0x5d4/0x6f0 [ 140.234351][ T7723] ? __pfx_kthread+0x10/0x10 [ 140.235823][ T7723] ret_from_fork_asm+0x1a/0x30 [ 140.237346][ T7723] [ 140.238269][ T7723] Modules linked in: [ 140.239832][ T7723] ---[ end trace 0000000000000000 ]--- [ 140.241591][ T7723] RIP: 0010:klist_put+0x4d/0x1b0 [ 140.243142][ T7723] Code: c1 ea 03 80 3c 02 00 0f 85 5f 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 2e 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 8c 3e 0d [ 140.250403][ T7723] RSP: 0018:ffffc90007fbf9b0 EFLAGS: 00010202 [ 140.252325][ T7723] RAX: dffffc0000000000 RBX: ffff888024fb6860 RCX: ffffffff825f331d [ 140.255147][ T7723] RDX: 000000000000000b RSI: ffffffff8b861035 RDI: 0000000000000058 [ 140.257691][ T7723] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 140.260127][ T7723] R10: 0000000000000000 R11: 0000000000002c10 R12: 0000000000000000 [ 140.262577][ T7723] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000000 [ 140.265529][ T7723] FS: 0000000000000000(0000) GS:ffff8880976c3000(0000) knlGS:0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 140.268416][ T7723] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 140.270915][ T7723] CR2: 0000000080001000 CR3: 000000004bb7a000 CR4: 0000000000352ef0 [ 140.281413][ T7723] Kernel panic - not syncing: Fatal exception [ 140.284139][ T7723] Kernel Offset: disabled [ 140.285534][ T7723] Rebooting in 86400 seconds.. VM DIAGNOSIS: 05:17:25 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffffffff8e5c10a0 RCX=ffffc90000420001 RDX=ffffc9000041fba0 RSI=ffffffff816ab8a4 RDI=ffffffff8e5c10a0 RBP=0000000000000001 RSP=ffffc9000041f790 R8 =0000000000000001 R9 =0000000000000000 R10=ffffc9000041f848 R11=0000000000012032 R12=ffffffff816ab8a4 R13=ffffc9000041f848 R14=ffffc9000041fb98 R15=ffffc9000041f87c RIP=ffffffff819759f5 RFL=00000297 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880974c3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000066ab6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=000000000000003f Opmask02=00000000fffdffbf Opmask03=0000000000000000 Opmask04=00000000ffffefff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000560319643630 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f93361f1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f93361f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9336152c80 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 332d746e6c632f73 746e65696c632d63 70722f6370726e75 732f6c656e72656b ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 540018534b4e494c 56454400184d4554 5359534255530018 4854415056454400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7361647c2a737369 63637c2a65686361 63627c2a6476787c 2a64767c2a64737c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7265747369676572 6e755f7665647465 6e2e65726f632e74 656e2e6c74637379 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e617020343d7372 6f6e696d5f796361 67656c5f6d756e5f 6964656d6f632e69 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 64656d6f63203233 3d78616d5f736462 6e2032333d706f6f 6c5f78616d203233 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d6d756e2e646368 5f796d6d75642030 34313d736365735f 74756f656d69745f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7265747369676572 6e755f7665647465 6e2e65726f632e74 656e2e6c74637379 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000033d49c RBX=0000000000000001 RCX=ffffffff8b90abf9 RDX=ffffed1005666656 RSI=ffffffff8c162c80 RDI=ffffffff8190cca1 RBP=ffffed1003bdf488 RSP=ffffc9000046fdf8 R8 =0000000000000000 R9 =ffffed1005666655 R10=ffff88802b3332ab R11=0000000000000001 R12=0000000000000001 R13=ffff88801defa440 R14=ffffffff90ab8190 R15=0000000000000000 RIP=ffffffff8b90975f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c01300 GS =0000 ffff8880975c3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000008002c000 CR3=000000006bb8a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000066 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85616e45 RDI=ffffffff9b0f9700 RBP=ffffffff9b0f96c0 RSP=ffffc90007fbf3b0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=000000004153414b R12=0000000000000000 R13=0000000000000066 R14=ffffffff9b0f96c0 R15=ffffffff85616de0 RIP=ffffffff85616e6f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880976c3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080001000 CR3=000000006d271000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080102110 Opmask01=0000000000000000 Opmask02=000000000101002f Opmask03=0000000000000000 Opmask04=00000000ffffefff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7269762f73656369 7665642f7379732f ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3070656e622f7465 6e2f6c6175747269 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000560319640aa0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000560319643910 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f93361f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000560319643910 000056031964a970 000056031966ca70 0000560319630320 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 005c5c5c5c5c5c5c 5c5c5c5c5c455358 0043000d004e5850 5c535b5413495853 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7361647c2a737369 63637c2a65686361 63627c2a6476787c 2a64767c2a64737c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7265747369676572 6e755f7665647465 6e2e65726f632e74 656e2e6c74637379 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e617020343d7372 6f6e696d5f796361 67656c5f6d756e5f 6964656d6f632e69 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 64656d6f63203233 3d78616d5f736462 6e2032333d706f6f 6c5f78616d203233 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d6d756e2e646368 5f796d6d75642030 34313d736365735f 74756f656d69745f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7265747369676572 6e755f7665647465 6e2e65726f632e74 656e2e6c74637379 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000126644 RBX=0000000000000003 RCX=ffffffff8b90abf9 RDX=ffffed10056a6656 RSI=ffffffff8c162c80 RDI=ffffffff8190cca1 RBP=ffffed1003867000 RSP=ffffc9000048fdf8 R8 =0000000000000000 R9 =ffffed10056a6655 R10=ffff88802b5332ab R11=0000000000000001 R12=0000000000000003 R13=ffff88801c338000 R14=ffffffff90ab8190 R15=0000000000000000 RIP=ffffffff8b90975f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977c3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000008000d000 CR3=000000006d271000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcfefe00 Opmask01=0000000000004211 Opmask02=000000007ffeffff Opmask03=0000000000000000 Opmask04=00000000ffffefff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000560319640aa0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f93361f1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f93361f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3070656e622f7465 6e2f3030323a3469 63682f346963682f 68746f6f7465756c ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 574a430502560002 0540494c43055600 0541405144405746 000a56001f47000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7361647c2a737369 63637c2a65686361 63627c2a6476787c 2a64767c2a64737c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7265747369676572 6e755f7665647465 6e2e65726f632e74 656e2e6c74637379 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e617020343d7372 6f6e696d5f796361 67656c5f6d756e5f 6964656d6f632e69 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 64656d6f63203233 3d78616d5f736462 6e2032333d706f6f 6c5f78616d203233 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d6d756e2e646368 5f796d6d75642030 34313d736365735f 74756f656d69745f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7265747369676572 6e755f7665647465 6e2e65726f632e74 656e2e6c74637379 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000