last executing test programs: 2.026771018s ago: executing program 2 (id=231): bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) clock_gettime(0x7, &(0x7f0000000000)) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)={'#! ', './file0', [{0x20, '/\xf4'}, {0x20, ')$-#*::'}, {0x20, '\x00\x00\x00\x00\x00\x00\x00\x00\xed l\xce'}, {0x20, '--'}, {0x20, '/d\xac\xd4k\x92Tc\\ev/nullb0\x00 \xa1g\xa1\x06<^$\xd1k'}, {0x20, '\xf3VD\xa0s\x93\x94O~s\x91\xc65dRX\x04\x00\x00\x00\xf5\xa4G\x91EC\xad\x80\xc9D,\xe3\xb6q\xbe\xe8M\'+\x930\x93\xb0e\xfe\xa8\xa0\x9c0\xb4b\xdb\xa4X\r\xf5\xc5\x8c\xff\x87I\xac\xaa'}, {0x20, '9\xe6]\r\xc0\x9eN7\x13{D\xe6\xa6\xa5\xa0Y4\xe4\xc4\xa6\x80\x1d\a\x00\x00\x00\x00\x00\x00\x00|\xd2\xbbP\xb2,\xee\xa20d\x18R:\xc71c\x8b\xedp\xe9\xac\xfb\xd2^\xe9\xa0H\xb7T7c\xd3\x13\x90\x9d/3Y\xda\xbb\r%W(M\xff\xcd)\xf1\xb7\xca\xfaSv\xc1\xd1\xc9\x92\x92!\x01\x9d\xaa\xf5,\xf5\x92\xb3\xc1\x85\xf1>\x1f\xd0\x97\xd0\xa2\xde\x7f%-\xb0\x182\t7\xd5\xf3o\x96\r\xb2\xf0]h\xb9\x05\xb6\xe72\xd7\xd5\xbf\x13\xafV\xad\x15.\xdbH\xba\x8f`9!O\x0f\x017P\xb8^\x1c\xc9\xaa\xe3\x13\xc3H\x00\x96\x92\x89\r\xca\x90]fmkc\xb1O\x98!\xfa\x82z\x99G\ry(H+a\x91Z\xbd\xd7\x19\xecF\xe0\xd0\xa4\xb5\xa6\x16\x04\x9e\xf5<\x9eE}\xeb\xe5\xff\xa6\xa8F\x12\x9b4v\x05\xfd\x88a\xb1x\xf3L\xbbo\xa9\xc7\x95\xbcV \xca\xa89\x06\xc3\xfc\'5]\x8a0\x884Y\x92\xe51\x1e\x84}CfT\xc38F\xd2\xdekG\x92\xcaI\xbe\xf9\ri\xa2\xc0\x84=t\x1e>\xd9\x1b5P:\t\xfb\xb0\n\xa2\n\t\xda\x9f\xcb\x92;\x80\x05m9\xfa\xa1\xd3\xd5\xc70\xf8\x99cM\xfa\x9d=\xd0\x8c\xe0\xd3\x81#\xd4&\xb5jm5|\n@\xca\"?HM\xeaG\xe1\xafUO=\xbb\x15\xf42\xa7\xd4~W\xec\x91h\n\xd2\xd6(\x91\xff\xfc\x0f\xbf\f\xdfne\x03\xc7\xaf\xf8=\xa7\xc2C'}]}, 0x1f7) ioctl$BLKRRPART(r3, 0x125f, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x1a, &(0x7f0000000cc0)={@initdev}, &(0x7f0000000d00)=0x14) 1.669788916s ago: executing program 0 (id=235): r0 = syz_open_dev$usbmon(&(0x7f0000000200), 0x0, 0x582) ioctl$MON_IOCQ_URB_LEN(r0, 0x9201) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/address_bits', 0x0, 0x0) mknodat$loop(r1, &(0x7f0000000100)='./file0\x00', 0x2000, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = eventfd(0x0) r5 = eventfd(0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000240)={r4, 0x0, 0x0, r5}) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000001c0)={r4, 0xd, 0x2, r1}) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="b60970581f13875e8c43ea23e25e50271ed1c2a6520b5aaad1f23f1328f6af558cd56b666cea482c82ea0fee5bd5f43583f5065e08bb465de396012e99934fea3367f277e30ab4a86d661e26315c9854822ef72ae9067a505f4b91e361afee144aa1fd819a37a4b25df5d5ed75c436d18116a7b22af0d42283ee87d04adec2b913d181352990ffe3980a11b2904dfc2fd2691601af6d1b5ad4ff3d53ca630734b8f5b28b99aa5a1f3c179a613f929a27d303c3fbb8dba83366b960433f4e57c91ac9a63a7f8cf00433138f83d9a3485e8d74b693", @ANYRES16=r6, @ANYBLOB="01000000000000000000010000004000018008000800000000000c0007000000000000000000080005000000000007000600666f000008000b00736970000800090000000000060001000a0000"], 0x54}}, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_buf(r1, 0x107, 0x0, &(0x7f0000000280)="6b5706f02a937cc8bbfe5523b28b1f0c3c36d730448a826b4e42584c0b8ba0589d3f91303818d2fb710a9dab434f80b5dc25412dd763ccefe3e12928c112921916623ccdb702514f2ad6095cf469e49eb12b5df093738951c00b5bf3c895e3f5b9919cd30c80db046d486ba6e66dbfb9c4", 0x71) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x6) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/14], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000040)={0x0, 0x0, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r10, &(0x7f00000005c0)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r11, 0x2}}, 0x18) bind$alg(r9, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) accept4(r9, 0x0, 0x0, 0x0) 1.665566766s ago: executing program 2 (id=236): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000003147df800000000400000000900020073797a32000000000800410004006500140033007465616d5f736c6176655f31"], 0x38}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={{0x64}, [], {0x4, 0x4, 0x1, 0x1000000}}, 0x64}}, 0x0) r4 = fsmount(r2, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x7, 0x6, 0x6, 0x3c204, r4, 0xc, '\x00', 0x0, r4, 0x5, 0x1, 0x2, 0x0, @value, @void, @value=r4}, 0x50) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000400)={@map=r5, 0x12, 0x0, 0x7, 0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0x0}, 0x78) io_uring_enter(r4, 0x21d9, 0xc04a, 0xa, &(0x7f00000000c0)={[0x101, 0x5]}, 0x8) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0x3) setsockopt$inet6_int(r6, 0x29, 0x8, &(0x7f0000000000)=0x3, 0x4) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r9 = creat(&(0x7f0000000100)='./bus\x00', 0x0) splice(r8, 0x0, r9, 0x0, 0x10000000000016, 0x0) 1.272142489s ago: executing program 3 (id=239): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x32) setresuid(0x0, r1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003640)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000740)=0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000005680)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000840)=[{{&(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000280)=[{&(0x7f00000004c0)="ebf15132db06ed548a0af333b49bc64d28f1e5a99015e5e1578da0d5df17940584b5c833cf02475767aaf3d66b75c7d28bb811772e3e0b5df83cd0d945fbe635298270a5826eee963ec9a68f7632f1f27b2530ec16aface2cde9d0172928835b20a297640a5901547783a6371d18cf7fc79d701c08937fbeac0b05c1b13e2b2c8521138b08b386b2eb774cebc13fdd4b654ddcf71a20cd792ff6d4b08a4374cf5891004659d434f75c65", 0xaa}, {&(0x7f0000000580)="128e8f77a2b7785fede8bcb8e0b422e14874dff30e97adf4c56f24ed4ef64897775862791220e92b55fb53884f150beb21b498f0f4d2b178ddb11ce8333378736084407b81bce5f3808035dacda8b747012ff46ef015baa36e7fc3d1852f1273d53afecb0b2a931f53e45dfefdbf46ecf719cb77", 0x74}, {&(0x7f0000000600)="088ded57c366fb355a6bfa172adba24da23a1100d351f180ea7f2e7c052d29b0ae3b1bb5c43b6a2dc2fe03d82c2fd0e50138de7e71d764c5647eff721255fc340bc86a412c40be7e2a91c52cf4a507a0b8d7eeabd637f3858279fa23febc6894f6724cdfd2f6b615e8f8a286dfc7d6befa6add2011126fb069b01a7f5945f61a34a8aa181fe0d3c982613e65dc31f74fcfe73a38cf9c276080bf5ae1bdbe340e34f8b202a25e97a6e8ddcac6", 0xac}], 0x3, &(0x7f0000000780)=[@rights={{0x30, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, r0, r0, r0, r0]}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18, 0x1, 0x2, {0x0, r1, r2}}}, @cred={{0x18, 0x1, 0x2, {r3, r4, r5}}}], 0x90, 0x4000000}}], 0x1, 0x81) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x1f, 0x21, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x81}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8020}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0xb3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}]}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r8}, 0xc) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r9, 0x0, 0x1, 0x0, &(0x7f0000000080)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = socket$inet_udp(0x2, 0x2, 0x0) close(r12) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x161b01, 0x0) ioctl$TIOCSETD(r13, 0x5423, &(0x7f0000000040)=0xd) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r11, &(0x7f0000000200), 0xfffffecc) socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) splice(r10, 0x0, r12, 0x0, 0x4ffe6, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r14, 0x40086200, &(0x7f0000000480)=0x7) 1.214597362s ago: executing program 1 (id=240): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000002000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x0, 0x4f, 0xad, &(0x7f0000000240)="8769d8c1509ea43321fe35869f024ee2d9e1cbb59da090db342f6ef8667a2f79ea35fd866170f1ea6c59ba75b5cf706c9aef1e1c13b67a97395412aaae739d2e106103ff91b8f89c6cd50b5827a257", &(0x7f0000000740)=""/173, 0x6, 0x0, 0x36, 0x99, &(0x7f0000000140)="5f26355385fe6f678210bf0d17113fb2bed006ae77c03efeaeabf8eb48224f02d6c5efa2d8ab24ae11b7f32ecc9294a39e21fb0f3176", &(0x7f0000000800)="3f668deb66324b0d3099cb95d7da3c8cd5ed80d7d40896a43479c54fc749e3f70a792132c4b09d88e439ab52360b9685110920d143023aee377567a9adb1da5a4c54813b0393d41305eb7be15c94e3f7c66d5843e1dc1c85863d9351c55ee42b58743f1304b1a0dd325e6c6f29fc11779e2752305da03ddf756a90a31ebc0c7133a0e103b90214de9a97e2b6e65af1bd0f0090f2a265d068da", 0x5, 0x0, 0x7a7}, 0x4c) socket$inet_dccp(0x2, 0x6, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd}, 0x0, &(0x7f0000000080)={0x3ff}, 0x0, 0x0) 769.960881ms ago: executing program 2 (id=241): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x500, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300090c0000000000000000000000030006000000000002000000e00000010000000000000000020001000000000000000300000000000300050000000000020000007f0000010000000000000000020013", @ANYRES8=0x0, @ANYRES32=r1], 0x60}}, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000000), &(0x7f0000000040)=0x8) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="0800b70000000001080026006c09"], 0x34}}, 0x40020) 659.972591ms ago: executing program 2 (id=242): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x4533, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180)=0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = inotify_init() r6 = syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x86}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r11, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000000d7c0d6c878f064eb", @ANYRES32=r12, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}) io_uring_enter(r6, 0x20007113, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(r5, &(0x7f0000000000)='.\x00', 0x400017e) creat(&(0x7f0000000100)='./file0\x00', 0x0) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4048aecb, &(0x7f0000000480)=ANY=[]) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 375.545348ms ago: executing program 0 (id=243): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x1, 0x0, 0x5) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4) 375.033468ms ago: executing program 0 (id=244): r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, &(0x7f0000000040)=0x10, 0x4c8d6265da1d1a87) recvfrom$inet(r0, &(0x7f0000000080)=""/148, 0x94, 0x100, &(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000180)=0x80, 0x4) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000280)={@tipc=@nameseq={0x1e, 0x1, 0x1, {0x2, 0x1, 0x3}}, {&(0x7f00000001c0)=""/84, 0x54}, &(0x7f0000000240), 0x4}, 0xa0) r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000340)={0x9, @remote}, &(0x7f0000000380)=0x12, 0x0) recvfrom$x25(r1, &(0x7f00000003c0)=""/245, 0xf5, 0x10040, &(0x7f00000004c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000500)={0x0, 0x9, 0xc8, 0xef32, 0x4, 0x3ff}, &(0x7f0000000540)=0x14) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000580)=@assoc_value={r3, 0x3}, 0x8) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f00000005c0), 0x4) connect$x25(r1, &(0x7f0000000600), 0x12) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000008c0)={&(0x7f0000000680), 0xc, &(0x7f0000000880)={&(0x7f00000006c0)={0x1ac, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0xe0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x46}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x419}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x78, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x4800}, 0x800) r6 = openat$ttyS3(0xffffff9c, &(0x7f0000000900), 0x140, 0x0) ioctl$TCGETS2(r6, 0x802c542a, &(0x7f0000000940)) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000004, 0x10010, r4, 0x4fe1f000) sendto$inet(r0, &(0x7f0000000980)="e9fa70da67cbcb33224fcd432436dd9cf17edec0c359fe0ab49f22e3d16c055fbd2b66b51b51f60bdd69555d2abb164f2a2f2ae1ab83b816ccb2f1caa3192d8f1978d2e1602d2cc4e5bee651906498ebe1db15d573cf87cbc41c331976b01f23c97cee15169fb2ed148b969f83479b435e303b4786989d2dc7ea47c7d370cdf578657d0d8b6dea51442d0590d6cfdca681831454bfa4e9d2fa1ba78c571f2a005b9c7fca20c715c65184bc7f027747c1aa43b8593b6fe52bc2d588189f33fbcaa8d502f4ff5f591d2ae208bddeb443363884afc2a100f080f3cb334ea21f36ff3841815e", 0xe4, 0x81, &(0x7f0000000a80)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b00), r5) sendmsg$IPVS_CMD_DEL_SERVICE(r5, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b40)={0x88, r7, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x23}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x842}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bond\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x587}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0x88}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_GET(r8, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x30, 0x1409, 0x1, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000dc0)={0xffffffffffffffff}, 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000e40)={0x16, 0x98, 0xfa00, {&(0x7f0000000d80), 0x3, r9, 0x30, 0x1, @in={0x2, 0x4e21, @loopback}}}, 0xa0) r10 = syz_open_dev$vcsa(&(0x7f0000000f00), 0x7, 0x20000) write$P9_RMKNOD(r10, &(0x7f0000000f40)={0x14, 0x13, 0x2, {0x0, 0x1, 0x2}}, 0x14) r11 = memfd_secret(0x0) chroot(&(0x7f0000000f80)='./file0\x00') ioctl$VIDIOC_TRY_EXT_CTRLS(r11, 0xc0185649, &(0x7f0000001080)={0x9d0000, 0x9, 0x4, 0xffffffffffffffff, 0x0, &(0x7f0000001040)={0x9a090a, 0x8b, '\x00', @p_u8=&(0x7f0000001000)=0x20}}) 320.168035ms ago: executing program 0 (id=245): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = socket$unix(0x1, 0x5, 0x0) r5 = dup2(r4, r3) io_uring_setup(0x428, &(0x7f0000000180)={0x0, 0x0, 0x2}) io_uring_enter(r5, 0x0, 0x0, 0x1a, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x38, r1, 0x1, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x1, 0xd, 0x0, 0x5, 0x4, 0x8, 0xfff8]}}]}]}]}, 0x38}}, 0x0) syz_emit_ethernet(0x3b6, &(0x7f00000009c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a741e54006598080a8030000004023493b87aafaff0500ffffffe723732472eefa45ad96579269748e254c1e4a948b580a9bc430d3be27df3e34060000ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000100000000001995319c00"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x3, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x0, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0) 315.27156ms ago: executing program 1 (id=246): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = signalfd(r0, &(0x7f0000000040)={[0xffff8001, 0x4]}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r1, 0x0, 0x6d, 0x97, &(0x7f0000000340)="7d0104468de564fe49f5c0b3f3e3eb6546ea95b8e2aeb25d6c7f04f7a0e737b35f1b64b024d4737b350ba33a0e43e047edf622a02436a11ba59e3e7a5a061e31702901acd3a64933267946770307a778752e52af29ddd5fbb9fed5a262ef118baaffa3372e78ca942c816e9314", &(0x7f0000000440)=""/151, 0x1, 0x0, 0x6d, 0x1000, &(0x7f0000000680)="4170de7eb9b35ead7641f3142813b6beafdb9924dd944ffbf434980ec85824b82ad8f1ebd0dc7c216f30637ccac2f03905f72b68dfefe649c68b0d27d2eb0788939c1bdfc433fd7aba12d16437c23f862ef5f65b8f8d629bb7828793b18aea306a351df86634d03e199d0acfcf", &(0x7f0000001d40)="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", 0x5, 0x0, 0xcfa}, 0x4c) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f0000000080)=0x7fff) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)={0x50, r4, 0x1, 0x0, 0x0, {0x27}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x51}}]}, 0x50}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r6 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r6, 0xc034564b, &(0x7f0000000180)={0x0, 0x35315258, 0xf00, 0x870, 0x0, @discrete={0x2, 0x1}}) (async, rerun: 64) r7 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x1) (async) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'}) ioctl$UI_SET_KEYBIT(r8, 0x40045565, 0x120) (async) ioctl$UI_DEV_CREATE(r8, 0x5501) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x1415, 0x101, 0x1, 0x25dfdbfc}, 0x10}}, 0x0) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r10, 0x29, 0x4e, &(0x7f0000000000), 0x4) (async) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r11}, 0x10) (async) lsm_set_self_attr(0x68, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) (rerun: 32) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r13, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x34, 0x5, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100687372001c000280050007000300000008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r12], 0x48}}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xffffffc1, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181014100000000010000000000000e000a000f00000002800200121f", 0x2e}], 0x1}, 0x0) 315.039423ms ago: executing program 3 (id=247): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x40281, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x3302) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) 272.500821ms ago: executing program 0 (id=248): r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x284, r1, 0x301, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xa4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x87}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}, @TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "9714fd32eb5c7cb0ef23a21d7176380ecc8c7420c6de3618a98ba0bb29dd95b46256"}}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "d4af043b7876c155c9e75e7393f9f21beb59d294e2b8a703ee15690dd02db7ce5921af"}}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "ad14b88c8a5e97f03a115dab44f16d9b3daabda4931bf0de492fa0b5f212174a74"}}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'bridge_slave_1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x8, @empty, 0x9}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf63}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2d9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff77e2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x48b4}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}]}, 0x284}, 0x1, 0x0, 0x0, 0x11}, 0x4008844) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0x6}, 0x1c) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, &(0x7f0000000840)) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = openat$vhost_vsock(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = openat$hpet(0xffffff9c, &(0x7f00000009c0), 0x0, 0x0) poll(&(0x7f0000000a80)=[{r4}, {r3}], 0x2, 0x0) r5 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x0, 0x0, r4}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000040)=ANY=[@ANYBLOB="1a"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x12, r8, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r5, 0x2d3e, 0x0, 0x0, 0x0, 0x0) sendmmsg$sock(r0, &(0x7f0000000740)=[{{&(0x7f0000000080)=@phonet={0x23, 0x0, 0x0, 0x7}, 0x13, 0x0, 0x0, &(0x7f0000000240)=[@txtime={{0x18}}], 0x18}}], 0x1, 0x0) 272.1471ms ago: executing program 3 (id=249): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.stat\x00', 0x26e1, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04230d05c80009958ecaa5b7b8f65e0b"], 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x6e93ebbbcc0884f2, 0x0, 0x0) socket(0x11, 0x800000003, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mq_notify(r3, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r8, &(0x7f0000000580)=ANY=[@ANYBLOB="5300000002"], 0x8) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x9c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x40, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000000000000500060010000000"], 0x10) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2, 0x2001000c}}, './file0\x00'}) r9 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r9, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) 271.502324ms ago: executing program 2 (id=250): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.stat\x00', 0x26e1, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04230d05c80009958ecaa5b7b8f65e0b"], 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x6e93ebbbcc0884f2, 0x0, 0x0) socket(0x11, 0x800000003, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mq_notify(r3, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="5300000002"], 0x8) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000abf020000000000000000010000000900010073797a3000000000540044d767f638a9a60000030a010100000000000000000100000009000300"], 0x9c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x40, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000000000000500060010000000"], 0x10) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2, 0x2001000c}}, './file0\x00'}) r7 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r7, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) 257.815287ms ago: executing program 1 (id=251): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) mkdir(0x0, 0x0) syz_emit_vhci(0x0, 0xd) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0xc0182101, 0x20000000) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x4, 0xc9, 0x9e}}}, 0x8) socket$kcm(0x10, 0x2, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000900)={0x0, 0x0, 0x2, 0x7, 0x0, 0x2}, 0x14) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000000500)="ab", 0x1, 0x40, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) 229.367639ms ago: executing program 0 (id=252): r0 = openat$binderfs_ctrl(0xffffff9c, &(0x7f0000000080)='./binderfs2/binder-control\x00', 0x800, 0x0) close_range(r0, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) r4 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r4, 0xab0a, 0x1000001000104) ioctl$NBD_SET_SOCK(r4, 0xab00, r3) ioctl$NBD_DO_IT(r2, 0xab03) close_range(r1, 0xffffffffffffffff, 0x0) 225.889534ms ago: executing program 2 (id=253): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4080094}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x10000001) r1 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) fchdir(r1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, 0x0, 0x0) listen(r2, 0x0) r3 = syz_open_dev$dri(&(0x7f00000002c0), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1500, 0x0, 0x0, 0x0, r4}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x4, 0x7, 0x7, 0x1, 0x78, @dev={0xfe, 0x80, '\x00', 0x11}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80, 0x1, 0x7fffffff, 0xd}}) 161.629981ms ago: executing program 1 (id=254): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='io.stat\x00', 0x26e1, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$SIOCSIFHWADDR(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="020000202000"}) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0, 0x407006}, 0x104) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='veno\x00', 0x5) 161.012256ms ago: executing program 3 (id=255): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001040)={0x7c, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}]}]}]}]}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000010000000900010073797a300000000078000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000253c0011800a0001006c696d69740000002c0002800c000240000000000000000008000540000000000c00014000000000000004000800044000000001"], 0xc0}}, 0x0) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPOIB_PKEY={0x6, 0x1, 0x401}]}}}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) (async) restart_syscall() 160.804032ms ago: executing program 1 (id=256): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x2def, 0xf510, 0x8, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0xf0f041, 0x7f00}) 50.146078ms ago: executing program 3 (id=257): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x40, 0x1, 0x1, 0x201, 0x1000000, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x400006}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x8}]}, @CTA_STATUS={0x8}]}, 0x40}}, 0x0) 49.302725ms ago: executing program 1 (id=258): socket(0x2a, 0x2, 0xe2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=@newtaction={0x470, 0x30, 0x1, 0x0, 0x0, {}, [{0x45c, 0x1, [@m_tunnel_key={0xfc, 0xe, 0x0, 0x0, {{0xf}, {0x6c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xff, 0x1000, 0xffffffffffffffff, 0x5, 0x8}, 0x1}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x7}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1, 0x6, 0x8}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @private=0xa010100}]}, {0x63, 0x6, "ce6ae3bfbfc0d7564a36de312244ce7d1e4544c25658caac130992a0591ae3d86cbd798361773e0a2642daa491bc54f12e4829db50672400898b53e0aff2aabed851fc518da45bf180926f87bec7f1bc7b8d2c79e2257730a192aef7f27d40"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ife={0xd8, 0x5, 0x0, 0x0, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x6}}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x0, 0x10000000, 0xfffffe1c}, 0x1}}]}, {0x76, 0x6, "89aeb73cd710ca9dcd1f79e0ea5d7f05e6e2973b8f30611d70cd6f527192ff1a80754b36ed127bb2863d019deca793987144d6eeb9dd6b42a607c153881228aa7cdaf6429ab933020ffce9627b7ecfcbdb31e562d54bc59520c49baf9fb9a3e73c1799f3841b83ed312534d11e301ed32cc9"}, {0xc}, {0xc}}}, @m_csum={0x100, 0x20, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x7, 0x5, 0x7fff, 0x762}, 0x3c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xa56f, 0x7b28, 0x7, 0x8, 0xfcc9}, 0x9}}]}, {0x9a, 0x6, "d102c4612258e01a29d528dae0d18fe5c93f5a1e4dbf3e8f3bdda4f28fedfe01988413bbbb83f907d6c01adcb05e63df544bce28fafc7d50c5bf43da343017b0c1a702ab9211d5730ceaac0bf7f4799728d9d389c0e19419a6ff9fb31377c524ebeac170095ad5e643e0f6791f4610bb745bbaa0a5e552ce2f25608bb86a1794d669d5ac9f46e76f4e675874e3f513b51f91416694c5"}, {0xc, 0x7, {0x0, 0xd10b8314aa0102ff}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mirred={0x184, 0x5, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x5, 0x6, 0x0, 0x6}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x200, 0x0, 0x8, 0x9a, 0x4}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7c, 0x5, 0x10000000, 0x448a, 0xce}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x1000000, 0x5}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x8, 0x2, 0x9, 0x5}, 0x1}}]}, {0xb7, 0x6, "95bdbc60016f4798c453c68b16f6b7c5498d1cea53192e12b78f241a0cbce52cf6c438d5f04562fe91ce111599e0ba51b34542c53165982516af7094315a9f5de98b478c3fd7bca6991df049b6967d28a247a0015e1a6270ad423230d957ba038496570b7efe6d0462a6f547ef6f1b51356df9f9aa4a0174217ec8347d747fb119fa830416d486cfcb16932a4dacf4edc35b61e9d99ecc571193eb9671601b1fb7e9691202daf2671193708e4e820f521def80"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x470}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) openat$binfmt(0xffffff9c, 0x0, 0x41, 0x1ff) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) (async) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000340)=ANY=[@ANYRES8=r3], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = socket$inet(0x2, 0x3, 0x5) connect$inet(r5, &(0x7f0000000340)={0x2, 0x0, @multicast1}, 0x10) (async) connect$inet(r5, &(0x7f0000000340)={0x2, 0x0, @multicast1}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) (async) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020}, 0x2020) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="66aa643deb68c5baa802f380d32e42e5ccfe3d40f22cccb17b5f9479210a98e5aac69f1805ef005ee7", @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="66aa643deb68c5baa802f380d32e42e5ccfe3d40f22cccb17b5f9479210a98e5aac69f1805ef005ee7", @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000004180)={0x2020}, 0x2020) (async) read$FUSE(r6, &(0x7f0000004180)={0x2020}, 0x2020) umount2(&(0x7f0000000280)='./file0/file0\x00', 0x0) write$FUSE_NOTIFY_INVAL_INODE(r6, &(0x7f00000000c0)={0x28, 0x4}, 0x28) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r7}, 0x10) 0s ago: executing program 3 (id=259): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x4533, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180)=0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = inotify_init() r6 = syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x86}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r11, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000000d7c0d6c878f064eb", @ANYRES32=r12, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@delchain={0x24, 0x2e, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}) io_uring_enter(r6, 0x20007113, 0x0, 0x0, 0x0, 0x0) inotify_add_watch(r5, &(0x7f0000000000)='.\x00', 0x400017e) creat(&(0x7f0000000100)='./file0\x00', 0x0) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4048aecb, &(0x7f0000000480)=ANY=[]) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:3658' (ED25519) to the list of known hosts. [ 34.827844][ T5859] cgroup: Unknown subsys name 'net' [ 35.000883][ T5859] cgroup: Unknown subsys name 'cpuset' [ 35.004461][ T5859] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 35.806685][ T5859] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 37.694096][ T5946] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 37.696445][ T5949] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 37.699840][ T5949] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 37.701950][ T5949] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 37.703889][ T5949] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 37.704461][ T5951] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 37.706515][ T5949] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 37.707917][ T5951] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 37.708066][ T5950] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 37.709015][ T5953] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 37.709761][ T5954] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 37.710451][ T5954] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 37.712664][ T5949] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 37.712771][ T5951] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 37.712979][ T5951] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 37.713102][ T5951] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 37.715001][ T64] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 37.722399][ T5949] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 37.724166][ T64] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 37.725428][ T5950] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 37.725836][ T5950] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 37.726733][ T5949] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 37.726956][ T5949] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 37.741600][ T5950] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 37.885160][ T5940] chnl_net:caif_netlink_parms(): no params data found [ 37.910772][ T5948] chnl_net:caif_netlink_parms(): no params data found [ 38.018550][ T5939] chnl_net:caif_netlink_parms(): no params data found [ 38.022379][ T5941] chnl_net:caif_netlink_parms(): no params data found [ 38.051806][ T5948] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.054098][ T5948] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.056130][ T5948] bridge_slave_0: entered allmulticast mode [ 38.058744][ T5948] bridge_slave_0: entered promiscuous mode [ 38.065471][ T5948] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.067844][ T5948] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.070357][ T5948] bridge_slave_1: entered allmulticast mode [ 38.072755][ T5948] bridge_slave_1: entered promiscuous mode [ 38.085133][ T5940] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.087078][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.089073][ T5940] bridge_slave_0: entered allmulticast mode [ 38.091109][ T5940] bridge_slave_0: entered promiscuous mode [ 38.093643][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.095528][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.097415][ T5940] bridge_slave_1: entered allmulticast mode [ 38.100366][ T5940] bridge_slave_1: entered promiscuous mode [ 38.135630][ T5948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.139380][ T5948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.173230][ T5940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.177448][ T5940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.225231][ T5948] team0: Port device team_slave_0 added [ 38.254168][ T5940] team0: Port device team_slave_0 added [ 38.257213][ T5948] team0: Port device team_slave_1 added [ 38.276636][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.279736][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.282126][ T5939] bridge_slave_0: entered allmulticast mode [ 38.284629][ T5939] bridge_slave_0: entered promiscuous mode [ 38.300851][ T5941] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.303221][ T5941] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.305150][ T5941] bridge_slave_0: entered allmulticast mode [ 38.307182][ T5941] bridge_slave_0: entered promiscuous mode [ 38.311593][ T5940] team0: Port device team_slave_1 added [ 38.321620][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.324043][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.326681][ T5939] bridge_slave_1: entered allmulticast mode [ 38.330571][ T5939] bridge_slave_1: entered promiscuous mode [ 38.344529][ T5941] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.346435][ T5941] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.348317][ T5941] bridge_slave_1: entered allmulticast mode [ 38.350924][ T5941] bridge_slave_1: entered promiscuous mode [ 38.374621][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.377227][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.386177][ T5948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.392433][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.394695][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.403473][ T5948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.441860][ T5939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.446751][ T5941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.452321][ T5941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.455947][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.458491][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.467199][ T5940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.473762][ T5939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.506263][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.508223][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.516820][ T5940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.538748][ T5941] team0: Port device team_slave_0 added [ 38.544625][ T5941] team0: Port device team_slave_1 added [ 38.571186][ T5948] hsr_slave_0: entered promiscuous mode [ 38.573205][ T5948] hsr_slave_1: entered promiscuous mode [ 38.585607][ T5939] team0: Port device team_slave_0 added [ 38.589919][ T5939] team0: Port device team_slave_1 added [ 38.641971][ T5940] hsr_slave_0: entered promiscuous mode [ 38.645002][ T5940] hsr_slave_1: entered promiscuous mode [ 38.648404][ T5940] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.651716][ T5940] Cannot create hsr debugfs directory [ 38.666663][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.669195][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.678001][ T5941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.713265][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.715707][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.724431][ T5939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.729158][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.731537][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.740357][ T5941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.765388][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.767949][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.777576][ T5939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.842437][ T5941] hsr_slave_0: entered promiscuous mode [ 38.845374][ T5941] hsr_slave_1: entered promiscuous mode [ 38.848094][ T5941] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.851100][ T5941] Cannot create hsr debugfs directory [ 38.900541][ T5939] hsr_slave_0: entered promiscuous mode [ 38.902676][ T5939] hsr_slave_1: entered promiscuous mode [ 38.904758][ T5939] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.906848][ T5939] Cannot create hsr debugfs directory [ 39.108013][ T5948] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 39.120931][ T5948] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 39.124458][ T5948] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 39.133612][ T5948] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 39.165888][ T5940] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.171025][ T5940] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.182679][ T5940] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.186933][ T5940] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.201125][ T5941] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 39.208093][ T5941] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 39.225821][ T5941] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 39.232221][ T5941] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 39.245178][ T5939] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 39.249915][ T5939] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 39.253075][ T5939] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 39.257115][ T5939] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.304896][ T5948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.328960][ T5948] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.337697][ T5940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.357178][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.359207][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.364372][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.366623][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.375340][ T5940] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.382949][ T5941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.399633][ T5939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.402062][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.403920][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.407873][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.409787][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.417592][ T5941] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.427615][ T5939] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.437317][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.439310][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.442264][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.444520][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.449007][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.451584][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.468437][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.471208][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.512179][ T5940] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.541834][ T5948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.566350][ T5948] veth0_vlan: entered promiscuous mode [ 39.571766][ T5948] veth1_vlan: entered promiscuous mode [ 39.583897][ T5948] veth0_macvtap: entered promiscuous mode [ 39.589729][ T5948] veth1_macvtap: entered promiscuous mode [ 39.600501][ T5940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.611211][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.619545][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.622817][ T5939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.629105][ T5948] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.632344][ T5948] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.634936][ T5948] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.637180][ T5948] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.643141][ T5941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.682718][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.685533][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.692733][ T5941] veth0_vlan: entered promiscuous mode [ 39.709291][ T5940] veth0_vlan: entered promiscuous mode [ 39.709306][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.712432][ T5941] veth1_vlan: entered promiscuous mode [ 39.712841][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.721592][ T5940] veth1_vlan: entered promiscuous mode [ 39.725673][ T5939] veth0_vlan: entered promiscuous mode [ 39.729274][ T5939] veth1_vlan: entered promiscuous mode [ 39.743803][ T5941] veth0_macvtap: entered promiscuous mode [ 39.743867][ T5948] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.753055][ T5941] veth1_macvtap: entered promiscuous mode [ 39.762926][ T5940] veth0_macvtap: entered promiscuous mode [ 39.770347][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.774330][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.777475][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.780889][ T5939] veth0_macvtap: entered promiscuous mode [ 39.784535][ T5940] veth1_macvtap: entered promiscuous mode [ 39.789103][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.790370][ T5295] Bluetooth: hci2: command tx timeout [ 39.790922][ T5950] Bluetooth: hci0: command tx timeout [ 39.791983][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.792510][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.800410][ T5295] Bluetooth: hci1: command tx timeout [ 39.801017][ T5950] Bluetooth: hci3: command tx timeout [ 39.806499][ T5939] veth1_macvtap: entered promiscuous mode [ 39.811793][ T5941] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.814335][ T5941] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.816712][ T5941] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.819540][ T5941] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.826416][ T5940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.830706][ T5940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.834007][ T5940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.837565][ T5940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.841480][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.844878][ T5939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.848198][ T5939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.851720][ T5939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.854952][ T5939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.857799][ T5939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.861059][ T5939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.864478][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.878818][ T5940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.881693][ T5940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.884975][ T5940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.889627][ T5940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.893822][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.898560][ T5940] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.901004][ T5940] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.903435][ T5940] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.905991][ T5940] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.911609][ T5939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.914624][ T5939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.917325][ T5939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.920941][ T5939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.924540][ T5939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.928067][ T5939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.933331][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.943513][ T5939] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.946451][ T5939] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.949084][ T5939] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.951296][ T5939] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.990388][ T1136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.992437][ T1136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.998500][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.003737][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.026824][ T1136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.031790][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.038001][ T1136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.042087][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.051438][ T1136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.053852][ T1136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.058390][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.060690][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.206996][ T6016] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 40.210879][ T6016] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.213326][ T6016] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.217604][ T6016] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.220677][ T6016] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.270096][ T6018] Bluetooth: MGMT ver 1.23 [ 40.438726][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 40.440949][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 40.651318][ T6015] netlink: 'syz.2.3': attribute type 4 has an invalid length. [ 40.690755][ T6015] netlink: 'syz.2.3': attribute type 4 has an invalid length. [ 40.852395][ T6027] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6'. [ 40.955741][ T6031] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7'. [ 40.960746][ T6031] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7'. [ 41.028893][ T6033] bond1: entered promiscuous mode [ 41.031655][ T6033] bond1: entered allmulticast mode [ 41.034399][ T6033] 8021q: adding VLAN 0 to HW filter on device bond1 [ 41.117917][ T6033] bond1 (unregistering): Released all slaves [ 41.250216][ T6041] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11'. [ 41.252906][ T6041] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.254859][ T6041] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.260551][ T6041] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.262571][ T6041] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.389657][ T6042] netlink: 'syz.2.10': attribute type 4 has an invalid length. [ 41.427693][ T6042] netlink: 'syz.2.10': attribute type 4 has an invalid length. [ 41.574358][ T6047] netlink: 'syz.1.12': attribute type 4 has an invalid length. [ 41.869160][ T5950] Bluetooth: hci1: command tx timeout [ 41.871295][ T5950] Bluetooth: hci3: command tx timeout [ 41.873289][ T5950] Bluetooth: hci2: command tx timeout [ 41.875202][ T5950] Bluetooth: hci0: command tx timeout [ 42.310638][ T6051] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13'. [ 42.930927][ T6061] netlink: 'syz.2.16': attribute type 4 has an invalid length. [ 42.981947][ T6062] netlink: 'syz.2.16': attribute type 4 has an invalid length. [ 43.212984][ T6070] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17'. [ 43.322195][ T6075] bond1: entered promiscuous mode [ 43.323506][ T6075] bond1: entered allmulticast mode [ 43.324977][ T6075] 8021q: adding VLAN 0 to HW filter on device bond1 [ 43.396480][ T6075] bond1 (unregistering): Released all slaves [ 43.536885][ T6079] bond1: entered promiscuous mode [ 43.538255][ T6079] bond1: entered allmulticast mode [ 43.541825][ T6079] 8021q: adding VLAN 0 to HW filter on device bond1 [ 43.587228][ T6079] bond1 (unregistering): Released all slaves [ 43.658935][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 43.661484][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 43.663682][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 43.667469][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 43.670201][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 43.672407][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 43.794703][ T6084] o2cb: This node has not been configured. [ 43.796599][ T6084] o2cb: Cluster check failed. Fix errors before retrying. [ 43.799854][ T6084] (syz.2.23,6084,3):user_dlm_register:674 ERROR: status = -22 [ 43.802522][ T6084] (syz.2.23,6084,3):dlmfs_mkdir:436 ERROR: Error -22 could not register domain "bus" [ 43.937472][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 43.948650][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 43.948705][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 43.948891][ T5295] Bluetooth: hci0: command tx timeout [ 43.948918][ T5943] Bluetooth: hci3: command tx timeout [ 43.948921][ T5295] Bluetooth: hci1: command tx timeout [ 43.948973][ T5950] Bluetooth: hci2: command tx timeout [ 44.040840][ T6094] netlink: 'syz.3.25': attribute type 4 has an invalid length. [ 44.092851][ T6097] netlink: 'syz.3.25': attribute type 4 has an invalid length. [ 44.475557][ T6103] netlink: 'syz.0.28': attribute type 4 has an invalid length. [ 44.920310][ T6112] trusted_key: syz.3.32 sent an empty control message without MSG_MORE. [ 45.377641][ T6125] netlink: 24 bytes leftover after parsing attributes in process `syz.0.37'. [ 45.906993][ T6132] Driver unsupported XDP return value 0 on prog (id 4) dev N/A, expect packet loss! [ 46.029666][ T5950] Bluetooth: hci3: command tx timeout [ 46.031179][ T5950] Bluetooth: hci0: command tx timeout [ 46.032604][ T5950] Bluetooth: hci2: command tx timeout [ 46.034090][ T5295] Bluetooth: hci1: command tx timeout [ 46.222902][ T6137] bond1: entered promiscuous mode [ 46.224312][ T6137] bond1: entered allmulticast mode [ 46.226003][ T6137] 8021q: adding VLAN 0 to HW filter on device bond1 [ 46.322626][ T6137] bond1 (unregistering): Released all slaves [ 46.322926][ T6144] validate_nla: 6 callbacks suppressed [ 46.322972][ T6144] netlink: 'syz.2.41': attribute type 4 has an invalid length. [ 46.348887][ T6140] netlink: 'syz.2.41': attribute type 4 has an invalid length. [ 46.538796][ T56] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 46.625145][ T6148] netlink: 'syz.3.44': attribute type 4 has an invalid length. [ 46.629558][ T6148] netlink: 'syz.3.44': attribute type 4 has an invalid length. [ 46.712548][ T56] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 46.714979][ T56] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 46.717688][ T56] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 46.720905][ T56] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 46.734610][ T56] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 46.737877][ T56] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 46.751592][ T56] usb 5-1: Product: syz [ 46.753279][ T56] usb 5-1: Manufacturer: syz [ 46.773604][ T56] cdc_wdm 5-1:1.0: skipping garbage [ 46.775593][ T56] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 46.895216][ T6151] netlink: 'syz.1.45': attribute type 4 has an invalid length. [ 46.907436][ T6151] netlink: 'syz.1.45': attribute type 4 has an invalid length. [ 46.969816][ T56] usb 5-1: USB disconnect, device number 2 [ 47.309645][ T25] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 47.642834][ T6164] netlink: 'syz.0.48': attribute type 4 has an invalid length. [ 47.667075][ T6164] netlink: 'syz.0.48': attribute type 4 has an invalid length. [ 47.979023][ T833] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 48.691339][ T6184] netlink: 'syz.2.55': attribute type 4 has an invalid length. [ 48.741290][ T6183] netlink: 'syz.2.55': attribute type 4 has an invalid length. [ 49.092184][ T6190] netlink: 44 bytes leftover after parsing attributes in process `syz.3.59'. [ 49.095751][ T6190] netlink: 59 bytes leftover after parsing attributes in process `syz.3.59'. [ 49.288729][ T56] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 49.471144][ T56] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 49.474536][ T56] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 49.478345][ T56] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 49.481860][ T56] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 49.488357][ T56] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 49.491958][ T56] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 49.494876][ T56] usb 6-1: Product: syz [ 49.496417][ T56] usb 6-1: Manufacturer: syz [ 49.503401][ T56] cdc_wdm 6-1:1.0: skipping garbage [ 49.505448][ T56] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 49.710590][ T833] usb 6-1: USB disconnect, device number 2 [ 50.152428][ T6213] bond1: entered promiscuous mode [ 50.154359][ T6213] bond1: entered allmulticast mode [ 50.156488][ T6213] 8021q: adding VLAN 0 to HW filter on device bond1 [ 50.229441][ T6213] bond1 (unregistering): Released all slaves [ 50.472191][ T6224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.69'. [ 51.008505][ T5950] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 51.012108][ T5950] Bluetooth: hci0: Injecting HCI hardware error event [ 51.016350][ T5950] Bluetooth: hci0: hardware error 0x00 [ 51.576138][ T6248] validate_nla: 10 callbacks suppressed [ 51.576154][ T6248] netlink: 'syz.2.74': attribute type 4 has an invalid length. [ 51.673238][ T6249] netlink: 'syz.0.75': attribute type 4 has an invalid length. [ 51.685980][ T6249] netlink: 'syz.0.75': attribute type 4 has an invalid length. [ 51.895318][ T6252] netlink: 'syz.3.76': attribute type 4 has an invalid length. [ 52.033872][ T6254] netlink: 4 bytes leftover after parsing attributes in process `syz.1.77'. [ 52.036959][ T6254] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.040092][ T6254] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.043501][ T6254] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.045964][ T6254] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.516158][ T6260] bond1: entered promiscuous mode [ 52.517729][ T6260] bond1: entered allmulticast mode [ 52.519919][ T6260] 8021q: adding VLAN 0 to HW filter on device bond1 [ 52.721468][ T6260] bond1 (unregistering): Released all slaves [ 52.982196][ T6275] netlink: 'syz.0.82': attribute type 4 has an invalid length. [ 52.996044][ T6275] netlink: 'syz.0.82': attribute type 4 has an invalid length. [ 53.078732][ T5950] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 53.116320][ T6281] bond1: entered promiscuous mode [ 53.118081][ T6281] bond1: entered allmulticast mode [ 53.120640][ T6281] 8021q: adding VLAN 0 to HW filter on device bond1 [ 53.250305][ T6281] bond1 (unregistering): Released all slaves [ 53.298760][ T834] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 53.332190][ T6289] netlink: 'syz.1.85': attribute type 4 has an invalid length. [ 53.350779][ T6289] netlink: 'syz.1.85': attribute type 4 has an invalid length. [ 53.455383][ T834] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.459465][ T834] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.463000][ T834] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 53.467442][ T834] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 53.474606][ T834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.486493][ T834] usb 5-1: config 0 descriptor?? [ 53.731041][ T833] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 53.789183][ T5950] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 53.791781][ T5950] Bluetooth: hci3: Injecting HCI hardware error event [ 53.794743][ T64] Bluetooth: hci3: hardware error 0x00 [ 53.912505][ T834] usbhid 5-1:0.0: can't add hid device: -71 [ 53.914207][ T834] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 53.929441][ T834] usb 5-1: USB disconnect, device number 3 [ 53.931039][ T6301] netlink: 'syz.3.87': attribute type 4 has an invalid length. [ 54.078949][ T6301] netlink: 'syz.3.87': attribute type 4 has an invalid length. [ 54.426769][ T6318] bond1: entered promiscuous mode [ 54.428153][ T6318] bond1: entered allmulticast mode [ 54.429975][ T6318] 8021q: adding VLAN 0 to HW filter on device bond1 [ 54.496859][ T6318] bond1 (unregistering): Released all slaves [ 54.562519][ T6325] overlay: ./file1 is not a directory [ 55.471795][ T6330] block nbd0: shutting down sockets [ 55.523818][ T6339] bond1: entered promiscuous mode [ 55.525175][ T6339] bond1: entered allmulticast mode [ 55.527019][ T6339] 8021q: adding VLAN 0 to HW filter on device bond1 [ 55.549105][ T6332] nbd0: detected capacity change from 0 to 67108884 [ 55.585683][ T6339] bond1 (unregistering): Released all slaves [ 55.869683][ T64] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 66.286969][ T6366] validate_nla: 5 callbacks suppressed [ 66.286985][ T6366] netlink: 'syz.1.96': attribute type 4 has an invalid length. [ 66.302707][ T6366] netlink: 'syz.1.96': attribute type 4 has an invalid length. [ 66.379731][ T6368] netlink: 'syz.2.97': attribute type 4 has an invalid length. [ 66.383644][ T6368] netlink: 'syz.2.97': attribute type 4 has an invalid length. [ 66.459541][ T6369] netlink: 'syz.0.95': attribute type 4 has an invalid length. [ 67.032988][ T6365] o2cb: This node has not been configured. [ 67.034612][ T6365] o2cb: Cluster check failed. Fix errors before retrying. [ 67.036739][ T6365] (syz.3.98,6365,0):user_dlm_register:674 ERROR: status = -22 [ 67.039045][ T6365] (syz.3.98,6365,0):dlmfs_mkdir:436 ERROR: Error -22 could not register domain "bus" [ 67.155546][ T6375] netlink: 24 bytes leftover after parsing attributes in process `syz.0.99'. [ 67.177587][ T6380] netlink: 4 bytes leftover after parsing attributes in process `syz.1.100'. [ 67.266177][ T6382] netlink: 24 bytes leftover after parsing attributes in process `syz.3.101'. [ 67.268714][ T6382] netlink: 24 bytes leftover after parsing attributes in process `syz.3.101'. [ 67.725735][ T6391] netlink: 'syz.1.103': attribute type 4 has an invalid length. [ 67.765929][ T6390] nullb0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 67.771771][ T6390] nullb0: p1 start 790638693 is beyond EOD, truncated [ 67.774131][ T6390] nullb0: p2 start 1680810029 is beyond EOD, truncated [ 67.776290][ T6390] nullb0: p3 start 543936804 is beyond EOD, truncated [ 67.778170][ T6390] nullb0: p4 start 2158838597 is beyond EOD, truncated [ 67.780784][ T6390] nullb0: p5 start 4111292580 is beyond EOD, truncated [ 67.784106][ T6390] nullb0: p6 start 2797921332 is beyond EOD, truncated [ 67.785966][ T6390] nullb0: p7 start 3985335089 is beyond EOD, truncated [ 67.787906][ T6390] nullb0: p8 start 4283246679 is beyond EOD, truncated [ 67.790375][ T6390] nullb0: p9 start 3491708657 is beyond EOD, truncated [ 67.793749][ T6390] nullb0: p10 start 3587650279 is beyond EOD, truncated [ 67.796403][ T6390] nullb0: p11 start 1220744163 is beyond EOD, truncated [ 67.799260][ T6390] nullb0: p12 start 2439064392 is beyond EOD, truncated [ 68.145754][ T6393] overlay: ./file1 is not a directory [ 68.568734][ T6397] nbd0: detected capacity change from 0 to 67108884 [ 68.574239][ T6374] block nbd0: Send control failed (result -89) [ 68.578886][ T6374] block nbd0: Request send failed, requeueing [ 68.583367][ T64] block nbd0: Receive control failed (result -32) [ 68.587669][ T123] block nbd0: Dead connection, failed to find a fallback [ 68.591588][ T123] block nbd0: shutting down sockets [ 68.594446][ T123] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 68.599053][ T123] Buffer I/O error on dev nbd0, logical block 0, async page read [ 68.614390][ T6374] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 68.617434][ T6374] Buffer I/O error on dev nbd0, logical block 0, async page read [ 68.628784][ T6374] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 68.631919][ T6374] Buffer I/O error on dev nbd0, logical block 0, async page read [ 68.634327][ T6374] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 68.638965][ T6374] Buffer I/O error on dev nbd0, logical block 0, async page read [ 68.641541][ T6374] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 68.651024][ T6374] Buffer I/O error on dev nbd0, logical block 0, async page read [ 68.653533][ T6374] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 68.656338][ T6374] Buffer I/O error on dev nbd0, logical block 0, async page read [ 68.660751][ T6374] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 68.666127][ T6374] Buffer I/O error on dev nbd0, logical block 0, async page read [ 68.671732][ T6374] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 68.674564][ T6374] Buffer I/O error on dev nbd0, logical block 0, async page read [ 68.677274][ T6374] ldm_validate_partition_table(): Disk read failed. [ 68.679974][ T6374] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 68.683113][ T6374] Buffer I/O error on dev nbd0, logical block 0, async page read [ 68.685931][ T6374] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 68.689319][ T6374] Buffer I/O error on dev nbd0, logical block 0, async page read [ 68.692604][ T6374] Dev nbd0: unable to read RDB block 0 [ 68.695700][ T6374] nbd0: unable to read partition table [ 68.705704][ T6374] ldm_validate_partition_table(): Disk read failed. [ 68.709665][ T6374] Dev nbd0: unable to read RDB block 0 [ 68.711774][ T6374] nbd0: unable to read partition table [ 69.341679][ T6407] netlink: 'syz.1.107': attribute type 4 has an invalid length. [ 69.775211][ T6406] nullb0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 69.779231][ T6406] nullb0: p1 start 790638693 is beyond EOD, truncated [ 69.781012][ T6406] nullb0: p2 start 1680810029 is beyond EOD, truncated [ 69.782906][ T6406] nullb0: p3 start 543936804 is beyond EOD, truncated [ 69.784699][ T6406] nullb0: p4 start 2158838597 is beyond EOD, truncated [ 69.786490][ T6406] nullb0: p5 start 4111292580 is beyond EOD, truncated [ 69.788275][ T6406] nullb0: p6 start 2797921332 is beyond EOD, truncated [ 69.790158][ T6406] nullb0: p7 start 3985335089 is beyond EOD, truncated [ 69.791948][ T6406] nullb0: p8 start 4283246679 is beyond EOD, truncated [ 69.793737][ T6406] nullb0: p9 start 3491708657 is beyond EOD, truncated [ 69.795513][ T6406] nullb0: p10 start 3587650279 is beyond EOD, truncated [ 69.797914][ T6406] nullb0: p11 start 1220744163 is beyond EOD, truncated [ 69.800738][ T6406] nullb0: p12 start 2439064392 is beyond EOD, truncated [ 69.830485][ T6412] overlay: ./file1 is not a directory [ 69.881848][ T6414] bond1: entered promiscuous mode [ 69.883344][ T6414] bond1: entered allmulticast mode [ 69.885148][ T6414] 8021q: adding VLAN 0 to HW filter on device bond1 [ 69.951030][ T6414] bond1 (unregistering): Released all slaves [ 69.984783][ T6420] netlink: 'syz.2.111': attribute type 4 has an invalid length. [ 70.039901][ T6421] nbd3: detected capacity change from 0 to 67108884 [ 70.044506][ T6399] block nbd3: Send control failed (result -89) [ 70.046826][ T6399] block nbd3: Request send failed, requeueing [ 70.049668][ T64] block nbd3: Receive control failed (result -32) [ 70.049722][ T69] block nbd3: Dead connection, failed to find a fallback [ 70.053940][ T69] block nbd3: shutting down sockets [ 70.056736][ T6399] ldm_validate_partition_table(): Disk read failed. [ 70.060377][ T6399] Dev nbd3: unable to read RDB block 0 [ 70.062614][ T6399] nbd3: unable to read partition table [ 70.066524][ T6399] ldm_validate_partition_table(): Disk read failed. [ 70.069228][ T6399] Dev nbd3: unable to read RDB block 0 [ 70.071999][ T6399] nbd3: unable to read partition table [ 70.761666][ T1414] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.763586][ T1414] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.767804][ T6427] netlink: 'syz.2.113': attribute type 4 has an invalid length. [ 71.178672][ T6430] netlink: 'syz.1.114': attribute type 4 has an invalid length. [ 71.528655][ T6432] bond1: entered promiscuous mode [ 71.530494][ T6432] bond1: entered allmulticast mode [ 71.532515][ T6432] 8021q: adding VLAN 0 to HW filter on device bond1 [ 71.604341][ T6432] bond1 (unregistering): Released all slaves [ 71.676024][ T6437] validate_nla: 1 callbacks suppressed [ 71.676347][ T6437] netlink: 'syz.2.116': attribute type 4 has an invalid length. [ 71.865796][ T6441] netlink: 44 bytes leftover after parsing attributes in process `syz.0.118'. [ 71.868187][ T6441] netlink: 59 bytes leftover after parsing attributes in process `syz.0.118'. [ 72.643591][ T6449] netlink: 'syz.3.120': attribute type 4 has an invalid length. [ 72.676870][ T6449] netlink: 'syz.3.120': attribute type 4 has an invalid length. [ 72.691180][ T6448] netlink: 'syz.2.119': attribute type 4 has an invalid length. [ 73.285302][ T6455] netlink: 44 bytes leftover after parsing attributes in process `syz.3.123'. [ 73.294157][ T6455] netlink: 59 bytes leftover after parsing attributes in process `syz.3.123'. [ 73.325356][ T6457] netlink: 24 bytes leftover after parsing attributes in process `syz.1.121'. [ 73.542157][ T6460] netlink: 'syz.0.122': attribute type 4 has an invalid length. [ 73.632107][ T6462] netlink: 'syz.2.124': attribute type 4 has an invalid length. [ 73.635104][ T6462] netlink: 'syz.2.124': attribute type 4 has an invalid length. [ 74.200790][ T6470] netlink: 'syz.0.126': attribute type 4 has an invalid length. [ 74.203778][ T6470] netlink: 'syz.0.126': attribute type 4 has an invalid length. [ 74.547521][ T6476] netlink: 'syz.2.127': attribute type 4 has an invalid length. [ 75.460573][ T6488] netlink: 24 bytes leftover after parsing attributes in process `syz.2.132'. [ 75.871720][ T73] cfg80211: failed to load regulatory.db [ 75.950808][ T73] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 75.975024][ T6494] binder: 6493:6494 ioctl c0306201 20000680 returned -14 [ 75.983365][ T6492] nullb0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 75.989597][ T6492] nullb0: p1 start 790638693 is beyond EOD, truncated [ 75.992099][ T6492] nullb0: p2 start 1680810029 is beyond EOD, truncated [ 75.994260][ T6492] nullb0: p3 start 543936804 is beyond EOD, truncated [ 75.996185][ T6492] nullb0: p4 start 2158838597 is beyond EOD, truncated [ 75.998083][ T6492] nullb0: p5 start 4111292580 is beyond EOD, truncated [ 76.000983][ T6492] nullb0: p6 start 2797921332 is beyond EOD, truncated [ 76.007357][ T6492] nullb0: p7 start 3985335089 is beyond EOD, truncated [ 76.009546][ T6492] nullb0: p8 start 4283246679 is beyond EOD, truncated [ 76.011514][ T6492] nullb0: p9 start 3491708657 is beyond EOD, truncated [ 76.013540][ T6492] nullb0: p10 start 3587650279 is beyond EOD, truncated [ 76.015438][ T6492] nullb0: p11 start 1220744163 is beyond EOD, truncated [ 76.017715][ T6492] nullb0: p12 start 2439064392 is beyond EOD, truncated [ 76.401633][ T6506] bond1: entered promiscuous mode [ 76.403098][ T6506] bond1: entered allmulticast mode [ 76.404871][ T6506] 8021q: adding VLAN 0 to HW filter on device bond1 [ 76.513260][ T6506] bond1 (unregistering): Released all slaves [ 76.749055][ T6353] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 76.809415][ T6517] validate_nla: 9 callbacks suppressed [ 76.809427][ T6517] netlink: 'syz.3.139': attribute type 4 has an invalid length. [ 76.825403][ T6517] netlink: 'syz.3.139': attribute type 4 has an invalid length. [ 76.878536][ T6508] netlink: 'syz.1.137': attribute type 4 has an invalid length. [ 77.090221][ T6523] bond1: entered promiscuous mode [ 77.092026][ T6523] bond1: entered allmulticast mode [ 77.093725][ T6523] 8021q: adding VLAN 0 to HW filter on device bond1 [ 77.170219][ T6523] bond1 (unregistering): Released all slaves [ 77.187925][ T6521] netlink: 'syz.2.140': attribute type 4 has an invalid length. [ 77.295754][ T6527] bridge0: port 3(netdevsim0) entered blocking state [ 77.298430][ T6527] bridge0: port 3(netdevsim0) entered disabled state [ 77.300481][ T6527] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 77.303150][ T6527] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 77.305781][ T6527] bridge0: port 3(netdevsim0) entered blocking state [ 77.307632][ T6527] bridge0: port 3(netdevsim0) entered forwarding state [ 77.380407][ T6521] netlink: 'syz.2.140': attribute type 4 has an invalid length. [ 78.021423][ T6540] netlink: 'syz.3.146': attribute type 4 has an invalid length. [ 78.026546][ T6541] netlink: 'syz.0.143': attribute type 4 has an invalid length. [ 78.034301][ T6540] netlink: 'syz.3.146': attribute type 4 has an invalid length. [ 78.050194][ T6542] netlink: 'syz.1.144': attribute type 4 has an invalid length. [ 78.059480][ T6542] netlink: 'syz.1.144': attribute type 4 has an invalid length. [ 79.458944][ T6554] nullb0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 79.461111][ T6554] nullb0: p1 start 790638693 is beyond EOD, truncated [ 79.462932][ T6554] nullb0: p2 start 1680810029 is beyond EOD, truncated [ 79.464750][ T6554] nullb0: p3 start 543936804 is beyond EOD, truncated [ 79.466544][ T6554] nullb0: p4 start 2158838597 is beyond EOD, truncated [ 79.468376][ T6554] nullb0: p5 start 4111292580 is beyond EOD, truncated [ 79.470393][ T6554] nullb0: p6 start 2797921332 is beyond EOD, truncated [ 79.472241][ T6554] nullb0: p7 start 3985335089 is beyond EOD, truncated [ 79.474059][ T6554] nullb0: p8 start 4283246679 is beyond EOD, truncated [ 79.475865][ T6554] nullb0: p9 start 3491708657 is beyond EOD, truncated [ 79.477663][ T6554] nullb0: p10 start 3587650279 is beyond EOD, truncated [ 79.479546][ T6554] nullb0: p11 start 1220744163 is beyond EOD, truncated [ 79.481461][ T6554] nullb0: p12 start 2439064392 is beyond EOD, truncated [ 79.555525][ T6557] netlink: 44 bytes leftover after parsing attributes in process `syz.1.151'. [ 79.558009][ T6557] netlink: 59 bytes leftover after parsing attributes in process `syz.1.151'. [ 79.586328][ T6559] overlay: ./file1 is not a directory [ 79.838947][ T6561] nbd0: detected capacity change from 0 to 67108884 [ 79.841870][ T6399] block nbd0: Send control failed (result -89) [ 79.844965][ T6399] block nbd0: Request send failed, requeueing [ 79.847330][ T64] block nbd0: Receive control failed (result -32) [ 79.847375][ T123] block nbd0: Dead connection, failed to find a fallback [ 79.851924][ T123] block nbd0: shutting down sockets [ 79.853323][ T123] blk_print_req_error: 58 callbacks suppressed [ 79.853330][ T123] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 79.857501][ T123] buffer_io_error: 56 callbacks suppressed [ 79.857508][ T123] Buffer I/O error on dev nbd0, logical block 0, async page read [ 79.861406][ T6399] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 79.863798][ T6399] Buffer I/O error on dev nbd0, logical block 0, async page read [ 79.866118][ T6399] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 79.870967][ T6399] Buffer I/O error on dev nbd0, logical block 0, async page read [ 79.873102][ T6399] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 79.875449][ T6399] Buffer I/O error on dev nbd0, logical block 0, async page read [ 79.877522][ T6399] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 79.880122][ T6399] Buffer I/O error on dev nbd0, logical block 0, async page read [ 79.882247][ T6399] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 79.885897][ T6399] Buffer I/O error on dev nbd0, logical block 0, async page read [ 79.887908][ T6399] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 79.890393][ T6399] Buffer I/O error on dev nbd0, logical block 0, async page read [ 79.892436][ T6399] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 79.894778][ T6399] Buffer I/O error on dev nbd0, logical block 0, async page read [ 79.896792][ T6399] ldm_validate_partition_table(): Disk read failed. [ 79.898616][ T6399] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 79.901204][ T6399] Buffer I/O error on dev nbd0, logical block 0, async page read [ 79.903304][ T6399] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 79.905686][ T6399] Buffer I/O error on dev nbd0, logical block 0, async page read [ 79.907796][ T6399] Dev nbd0: unable to read RDB block 0 [ 79.909533][ T6399] nbd0: unable to read partition table [ 79.912364][ T6399] ldm_validate_partition_table(): Disk read failed. [ 79.914419][ T6399] Dev nbd0: unable to read RDB block 0 [ 79.916080][ T6399] nbd0: unable to read partition table [ 80.009032][ T6353] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 80.441564][ T6591] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 80.444721][ T6591] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 80.458434][ T6591] overlayfs: overlapping lowerdir path [ 80.622526][ T6597] netlink: 24 bytes leftover after parsing attributes in process `syz.3.157'. [ 94.508237][ T6637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.162'. [ 94.547636][ T6643] netlink: 44 bytes leftover after parsing attributes in process `syz.2.164'. [ 94.550114][ T6643] netlink: 59 bytes leftover after parsing attributes in process `syz.2.164'. [ 94.567652][ T6648] bond1: entered promiscuous mode [ 94.569115][ T6648] bond1: entered allmulticast mode [ 94.573128][ T6648] 8021q: adding VLAN 0 to HW filter on device bond1 [ 94.647713][ T6648] bond1 (unregistering): Released all slaves [ 94.697506][ T6655] validate_nla: 2 callbacks suppressed [ 94.697517][ T6655] netlink: 'syz.3.167': attribute type 4 has an invalid length. [ 94.729751][ T6655] netlink: 'syz.3.167': attribute type 4 has an invalid length. [ 94.871203][ T6657] o2cb: This node has not been configured. [ 94.872812][ T6657] o2cb: Cluster check failed. Fix errors before retrying. [ 94.874962][ T6657] (syz.1.168,6657,0):user_dlm_register:674 ERROR: status = -22 [ 94.877005][ T6657] (syz.1.168,6657,0):dlmfs_mkdir:436 ERROR: Error -22 could not register domain "bus" [ 95.518149][ T6667] overlayfs: missing 'lowerdir' [ 95.715313][ T6673] netlink: 24 bytes leftover after parsing attributes in process `syz.1.173'. [ 95.842635][ T6672] netlink: 'syz.2.172': attribute type 4 has an invalid length. [ 95.846500][ T6672] netlink: 'syz.2.172': attribute type 4 has an invalid length. [ 96.368982][ T6679] bond1: entered promiscuous mode [ 96.370881][ T6679] bond1: entered allmulticast mode [ 96.372801][ T6679] 8021q: adding VLAN 0 to HW filter on device bond1 [ 96.455823][ T6684] netlink: 24 bytes leftover after parsing attributes in process `syz.1.175'. [ 96.483093][ T6679] bond1 (unregistering): Released all slaves [ 96.518545][ T6686] bond1: entered promiscuous mode [ 96.520348][ T6686] bond1: entered allmulticast mode [ 96.522320][ T6686] 8021q: adding VLAN 0 to HW filter on device bond1 [ 96.576500][ T6686] bond1 (unregistering): Released all slaves [ 96.811998][ T6696] netlink: 'syz.3.178': attribute type 4 has an invalid length. [ 97.122190][ T6699] o2cb: This node has not been configured. [ 97.123827][ T6699] o2cb: Cluster check failed. Fix errors before retrying. [ 97.125852][ T6699] (syz.2.179,6699,3):user_dlm_register:674 ERROR: status = -22 [ 97.127962][ T6699] (syz.2.179,6699,3):dlmfs_mkdir:436 ERROR: Error -22 could not register domain "bus" [ 97.170766][ T6693] netlink: 'syz.3.178': attribute type 4 has an invalid length. [ 97.734901][ T6706] bond1: entered promiscuous mode [ 97.737357][ T6706] bond1: entered allmulticast mode [ 97.739694][ T6706] 8021q: adding VLAN 0 to HW filter on device bond1 [ 97.766382][ T6708] o2cb: This node has not been configured. [ 97.768003][ T6708] o2cb: Cluster check failed. Fix errors before retrying. [ 97.770387][ T6708] (syz.0.181,6708,0):user_dlm_register:674 ERROR: status = -22 [ 97.772500][ T6708] (syz.0.181,6708,0):dlmfs_mkdir:436 ERROR: Error -22 could not register domain "bus" [ 97.862082][ T6706] bond1 (unregistering): Released all slaves [ 97.951897][ T6711] bridge0: port 3(netdevsim0) entered blocking state [ 97.954047][ T6711] bridge0: port 3(netdevsim0) entered disabled state [ 97.956123][ T6711] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 97.958941][ T6711] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 97.962105][ T6711] bridge0: port 3(netdevsim0) entered blocking state [ 97.963911][ T6711] bridge0: port 3(netdevsim0) entered forwarding state [ 98.119481][ T6715] netlink: 'syz.2.184': attribute type 4 has an invalid length. [ 98.187539][ T6715] netlink: 'syz.2.184': attribute type 4 has an invalid length. [ 98.261631][ T6718] netlink: 'syz.3.185': attribute type 4 has an invalid length. [ 98.270628][ T6718] netlink: 'syz.3.185': attribute type 4 has an invalid length. [ 99.151687][ T6735] netlink: 44 bytes leftover after parsing attributes in process `syz.3.188'. [ 99.154099][ T6735] netlink: 59 bytes leftover after parsing attributes in process `syz.3.188'. [ 99.932841][ T6738] validate_nla: 3 callbacks suppressed [ 99.932858][ T6738] netlink: 'syz.1.191': attribute type 4 has an invalid length. [ 99.938546][ T6738] netlink: 'syz.1.191': attribute type 4 has an invalid length. [ 100.162901][ T6749] netlink: 24 bytes leftover after parsing attributes in process `syz.1.194'. [ 100.328866][ T6750] o2cb: This node has not been configured. [ 100.331314][ T6750] o2cb: Cluster check failed. Fix errors before retrying. [ 100.333266][ T6750] (syz.0.190,6750,0):user_dlm_register:674 ERROR: status = -22 [ 100.335801][ T6750] (syz.0.190,6750,0):dlmfs_mkdir:436 ERROR: Error -22 could not register domain "bus" [ 100.361586][ T6746] netlink: 'syz.3.193': attribute type 4 has an invalid length. [ 100.693527][ T6746] netlink: 'syz.3.193': attribute type 4 has an invalid length. [ 101.010595][ T6764] netlink: 24 bytes leftover after parsing attributes in process `syz.3.197'. [ 101.188734][ T35] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 101.316689][ T6772] netlink: 'syz.1.200': attribute type 4 has an invalid length. [ 101.357404][ T35] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.360046][ T35] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.365439][ T35] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 101.368396][ T35] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 101.370740][ T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.373878][ T35] usb 5-1: config 0 descriptor?? [ 101.437056][ T6775] netlink: 24 bytes leftover after parsing attributes in process `syz.3.201'. [ 101.614971][ T6779] netlink: 'syz.1.202': attribute type 4 has an invalid length. [ 101.618922][ T6779] netlink: 'syz.1.202': attribute type 4 has an invalid length. [ 101.797231][ T35] plantronics 0003:047F:FFFF.0002: unknown main item tag 0xd [ 101.799650][ T35] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 101.801686][ T35] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 101.803641][ T35] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 101.805633][ T35] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 101.807624][ T35] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 101.810354][ T35] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 101.817266][ T35] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 101.924565][ T6785] netlink: 'syz.3.204': attribute type 4 has an invalid length. [ 101.965242][ T6785] netlink: 'syz.3.204': attribute type 4 has an invalid length. [ 102.065006][ T56] usb 5-1: USB disconnect, device number 4 [ 102.613536][ T6788] netlink: 'syz.3.205': attribute type 4 has an invalid length. [ 102.757112][ T6792] netlink: 44 bytes leftover after parsing attributes in process `syz.1.207'. [ 102.760667][ T6792] netlink: 59 bytes leftover after parsing attributes in process `syz.1.207'. [ 102.838743][ T56] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 102.991636][ T56] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.996336][ T56] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.000786][ T56] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 103.005369][ T56] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 103.008996][ T56] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.017596][ T56] usb 5-1: config 0 descriptor?? [ 103.151258][ T6797] netlink: 24 bytes leftover after parsing attributes in process `syz.2.208'. [ 103.352442][ T6800] bond1: entered promiscuous mode [ 103.354342][ T6800] bond1: entered allmulticast mode [ 103.356311][ T6800] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.418479][ T6800] bond1 (unregistering): Released all slaves [ 103.428135][ T56] plantronics 0003:047F:FFFF.0003: unknown main item tag 0xd [ 103.430537][ T56] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 103.435064][ T56] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 103.522366][ T6806] bond1: entered promiscuous mode [ 103.523839][ T6806] bond1: entered allmulticast mode [ 103.525561][ T6806] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.580673][ T6806] bond1 (unregistering): Released all slaves [ 103.630305][ T56] usb 5-1: USB disconnect, device number 5 [ 103.745907][ T6809] o2cb: This node has not been configured. [ 103.747623][ T6809] o2cb: Cluster check failed. Fix errors before retrying. [ 103.749857][ T6809] (syz.2.210,6809,0):user_dlm_register:674 ERROR: status = -22 [ 103.752415][ T6809] (syz.2.210,6809,0):dlmfs_mkdir:436 ERROR: Error -22 could not register domain "bus" [ 103.799263][ T6819] netlink: 24 bytes leftover after parsing attributes in process `syz.1.213'. [ 103.801606][ T6819] netlink: 24 bytes leftover after parsing attributes in process `syz.1.213'. [ 105.051783][ T6831] netlink: 24 bytes leftover after parsing attributes in process `syz.0.218'. [ 105.253717][ T6835] validate_nla: 3 callbacks suppressed [ 105.253761][ T6835] netlink: 'syz.1.219': attribute type 4 has an invalid length. [ 106.059527][ T6847] netlink: 24 bytes leftover after parsing attributes in process `syz.3.223'. [ 106.120770][ T6854] netlink: 4 bytes leftover after parsing attributes in process `syz.1.225'. [ 106.224061][ T6853] netlink: 'syz.2.224': attribute type 4 has an invalid length. [ 106.739046][ T6353] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 106.862159][ T6868] netlink: 24 bytes leftover after parsing attributes in process `syz.3.228'. [ 107.368031][ T6884] bond1: entered promiscuous mode [ 107.369735][ T6884] bond1: entered allmulticast mode [ 107.371236][ T6884] 8021q: adding VLAN 0 to HW filter on device bond1 [ 107.419899][ T6887] netlink: 'syz.2.231': attribute type 4 has an invalid length. [ 107.511166][ T6884] bond1 (unregistering): Released all slaves [ 108.047510][ T6894] netlink: 24 bytes leftover after parsing attributes in process `syz.1.234'. [ 108.200921][ T6899] netlink: 'syz.2.236': attribute type 1 has an invalid length. [ 108.432672][ T6904] o2cb: This node has not been configured. [ 108.434785][ T6904] o2cb: Cluster check failed. Fix errors before retrying. [ 108.437271][ T6904] (syz.3.237,6904,3):user_dlm_register:674 ERROR: status = -22 [ 108.439931][ T6904] (syz.3.237,6904,3):dlmfs_mkdir:436 ERROR: Error -22 could not register domain "bus" [ 108.483702][ T6906] FAULT_INJECTION: forcing a failure. [ 108.483702][ T6906] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 108.487306][ T6906] CPU: 0 UID: 0 PID: 6906 Comm: syz.3.238 Not tainted 6.12.0-syzkaller-12128-gf788b5ef1ca9 #0 [ 108.489965][ T6906] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 108.492761][ T6906] Call Trace: [ 108.493657][ T6906] [ 108.494436][ T6906] dump_stack_lvl+0x16c/0x1f0 [ 108.495670][ T6906] should_fail_ex+0x497/0x5b0 [ 108.496907][ T6906] strncpy_from_user+0x3b/0x2d0 [ 108.498178][ T6906] getname_flags.part.0+0x8f/0x550 [ 108.499514][ T6906] getname_flags+0x93/0xf0 [ 108.500675][ T6906] __ia32_sys_mkdir+0x51/0x80 [ 108.501941][ T6906] __do_fast_syscall_32+0x73/0x120 [ 108.503431][ T6906] do_fast_syscall_32+0x32/0x80 [ 108.504708][ T6906] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 108.506363][ T6906] RIP: 0023:0xf7f86579 [ 108.507436][ T6906] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 108.512393][ T6906] RSP: 002b:00000000f510657c EFLAGS: 00000292 ORIG_RAX: 0000000000000027 [ 108.514562][ T6906] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 000000000000010b [ 108.516616][ T6906] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 108.518672][ T6906] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 108.520714][ T6906] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 108.522776][ T6906] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 108.524850][ T6906] [ 109.097910][ T6915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.241'. [ 109.196054][ T6918] netlink: 24 bytes leftover after parsing attributes in process `syz.2.242'. [ 109.431219][ T6923] sctp: [Deprecated]: syz.0.244 (pid 6923) Use of struct sctp_assoc_value in delayed_ack socket option. [ 109.431219][ T6923] Use struct sctp_sack_info instead [ 109.484881][ T6925] IPv6: addrconf: prefix option has invalid lifetime [ 109.504669][ T6928] random: crng reseeded on system resumption [ 109.605684][ T6937] netlink: 4 bytes leftover after parsing attributes in process `syz.3.249'. [ 109.619543][ T6947] warning: `syz.1.254' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 109.687321][ T6956] vivid-007: disconnect [ 109.699244][ T6955] vivid-007: reconnect [ 109.861903][ T6967] netlink: 24 bytes leftover after parsing attributes in process `syz.3.259'. [ 109.869659][ T6952] [ 109.870295][ T6952] ====================================================== [ 109.872072][ T6952] WARNING: possible circular locking dependency detected [ 109.873921][ T6952] 6.12.0-syzkaller-12128-gf788b5ef1ca9 #0 Not tainted [ 109.876584][ T6952] ------------------------------------------------------ [ 109.879047][ T6952] syz.0.252/6952 is trying to acquire lock: [ 109.880564][ T6952] ffff888043621790 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0x99/0x2a0 [ 109.882879][ T6952] [ 109.882879][ T6952] but task is already holding lock: [ 109.884777][ T6952] ffff888023e2d418 (&q->sysfs_lock){+.+.}-{4:4}, at: __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 109.887457][ T6952] [ 109.887457][ T6952] which lock already depends on the new lock. [ 109.887457][ T6952] [ 109.890103][ T6952] [ 109.890103][ T6952] the existing dependency chain (in reverse order) is: [ 109.892407][ T6952] [ 109.892407][ T6952] -> #6 (&q->sysfs_lock){+.+.}-{4:4}: [ 109.894371][ T6952] __mutex_lock+0x19b/0xa60 [ 109.895693][ T6952] __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 109.897388][ T6952] blk_mq_update_nr_hw_queues+0x2a/0x40 [ 109.898962][ T6952] nbd_start_device+0x15b/0xd70 [ 109.900348][ T6952] nbd_ioctl+0x21a/0xfd0 [ 109.901620][ T6952] compat_blkdev_ioctl+0x2f7/0x750 [ 109.903087][ T6952] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 109.904618][ T6952] __do_fast_syscall_32+0x73/0x120 [ 109.906104][ T6952] do_fast_syscall_32+0x32/0x80 [ 109.907500][ T6952] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 109.909286][ T6952] [ 109.909286][ T6952] -> #5 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 109.911512][ T6952] blk_mq_submit_bio+0x1fb6/0x24c0 [ 109.912936][ T6952] __submit_bio+0x384/0x540 [ 109.914253][ T6952] submit_bio_noacct_nocheck+0x698/0xd70 [ 109.916092][ T6952] submit_bio_noacct+0x93a/0x1e20 [ 109.917586][ T6952] mpage_readahead+0x41d/0x590 [ 109.919017][ T6952] read_pages+0x1a8/0xdc0 [ 109.920339][ T6952] page_cache_ra_unbounded+0x3dc/0x750 [ 109.921970][ T6952] force_page_cache_ra+0x24b/0x340 [ 109.923445][ T6952] page_cache_sync_ra+0x110/0x9c0 [ 109.925037][ T6952] filemap_get_pages+0xd7b/0x1be0 [ 109.926503][ T6952] filemap_read+0x3ca/0xd70 [ 109.927836][ T6952] blkdev_read_iter+0x187/0x480 [ 109.929260][ T6952] vfs_read+0x87f/0xbe0 [ 109.930503][ T6952] ksys_read+0x12b/0x250 [ 109.931758][ T6952] do_syscall_64+0xcd/0x250 [ 109.933114][ T6952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.934817][ T6952] [ 109.934817][ T6952] -> #4 (mapping.invalidate_lock#2){.+.+}-{4:4}: [ 109.937034][ T6952] down_read+0x9a/0x330 [ 109.938286][ T6952] page_cache_ra_unbounded+0x173/0x750 [ 109.939851][ T6952] page_cache_ra_order+0x7d9/0xc90 [ 109.941338][ T6952] filemap_fault+0x14a5/0x2820 [ 109.942732][ T6952] __do_fault+0x10a/0x490 [ 109.944014][ T6952] do_pte_missing+0xebd/0x3e00 [ 109.945425][ T6952] __handle_mm_fault+0x103c/0x2a40 [ 109.946890][ T6952] handle_mm_fault+0x3fa/0xaa0 [ 109.948272][ T6952] do_user_addr_fault+0x7a3/0x13f0 [ 109.949762][ T6952] exc_page_fault+0x5c/0xc0 [ 109.951080][ T6952] asm_exc_page_fault+0x26/0x30 [ 109.952488][ T6952] _copy_from_user+0x95/0xd0 [ 109.953860][ T6952] copy_from_sockptr_offset.constprop.0+0x106/0x190 [ 109.955694][ T6952] do_ip_setsockopt+0x198a/0x38c0 [ 109.957144][ T6952] ip_setsockopt+0x59/0xf0 [ 109.958448][ T6952] udp_setsockopt+0x7d/0xd0 [ 109.959773][ T6952] do_sock_setsockopt+0x222/0x480 [ 109.961257][ T6952] __sys_setsockopt+0x1a0/0x230 [ 109.962702][ T6952] __ia32_sys_setsockopt+0xbc/0x160 [ 109.964203][ T6952] __do_fast_syscall_32+0x73/0x120 [ 109.965697][ T6952] do_fast_syscall_32+0x32/0x80 [ 109.967094][ T6952] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 109.968892][ T6952] [ 109.968892][ T6952] -> #3 (sk_lock-AF_INET){+.+.}-{0:0}: [ 109.970859][ T6952] lock_sock_nested+0x3a/0xf0 [ 109.972217][ T6952] inet_shutdown+0x67/0x440 [ 109.973565][ T6952] nbd_mark_nsock_dead+0xae/0x5d0 [ 109.974994][ T6952] sock_shutdown+0x17c/0x280 [ 109.976429][ T6952] nbd_ioctl+0xc7a/0xfd0 [ 109.977725][ T6952] compat_blkdev_ioctl+0x2f7/0x750 [ 109.979173][ T6952] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 109.980748][ T6952] __do_fast_syscall_32+0x73/0x120 [ 109.982246][ T6952] do_fast_syscall_32+0x32/0x80 [ 109.983673][ T6952] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 109.985479][ T6952] [ 109.985479][ T6952] -> #2 (&nsock->tx_lock){+.+.}-{4:4}: [ 109.987456][ T6952] __mutex_lock+0x19b/0xa60 [ 109.988735][ T6952] nbd_queue_rq+0x424/0x1220 [ 109.990253][ T6952] blk_mq_dispatch_rq_list+0x443/0x1dc0 [ 109.991827][ T6952] __blk_mq_sched_dispatch_requests+0xcdf/0x1620 [ 109.993620][ T6952] blk_mq_sched_dispatch_requests+0xd8/0x1b0 [ 109.995297][ T6952] blk_mq_run_hw_queue+0x239/0x670 [ 109.996759][ T6952] blk_mq_flush_plug_list+0x673/0x1c60 [ 109.998390][ T6952] __blk_flush_plug+0x2c5/0x4b0 [ 110.000028][ T6952] __submit_bio+0x439/0x540 [ 110.001470][ T6952] submit_bio_noacct_nocheck+0x698/0xd70 [ 110.003103][ T6952] submit_bio_noacct+0x93a/0x1e20 [ 110.004557][ T6952] block_read_full_folio+0x812/0xa50 [ 110.006122][ T6952] filemap_read_folio+0xc6/0x2a0 [ 110.007544][ T6952] do_read_cache_folio+0x263/0x5c0 [ 110.009046][ T6952] read_part_sector+0xd3/0x410 [ 110.010440][ T6952] adfspart_check_ICS+0xa7/0x8c0 [ 110.011879][ T6952] bdev_disk_changed+0x6c6/0x14e0 [ 110.013357][ T6952] blkdev_get_whole+0x187/0x290 [ 110.014778][ T6952] bdev_open+0x2c7/0xe20 [ 110.016043][ T6952] blkdev_open+0x329/0x400 [ 110.017377][ T6952] do_dentry_open+0xf59/0x1ea0 [ 110.018765][ T6952] vfs_open+0x82/0x3f0 [ 110.019983][ T6952] path_openat+0x1e6a/0x2d60 [ 110.021350][ T6952] do_filp_open+0x20c/0x470 [ 110.022686][ T6952] do_sys_openat2+0x17a/0x1e0 [ 110.024074][ T6952] __x64_sys_openat+0x175/0x210 [ 110.025532][ T6952] do_syscall_64+0xcd/0x250 [ 110.026868][ T6952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.028570][ T6952] [ 110.028570][ T6952] -> #1 (&cmd->lock){+.+.}-{4:4}: [ 110.030480][ T6952] __mutex_lock+0x19b/0xa60 [ 110.031814][ T6952] nbd_queue_rq+0xbe/0x1220 [ 110.033157][ T6952] blk_mq_dispatch_rq_list+0x443/0x1dc0 [ 110.034755][ T6952] __blk_mq_sched_dispatch_requests+0xcdf/0x1620 [ 110.036540][ T6952] blk_mq_sched_dispatch_requests+0xd8/0x1b0 [ 110.038264][ T6952] blk_mq_run_hw_queue+0x239/0x670 [ 110.039737][ T6952] blk_mq_flush_plug_list+0x673/0x1c60 [ 110.041328][ T6952] __blk_flush_plug+0x2c5/0x4b0 [ 110.042739][ T6952] __submit_bio+0x439/0x540 [ 110.044081][ T6952] submit_bio_noacct_nocheck+0x698/0xd70 [ 110.045699][ T6952] submit_bio_noacct+0x93a/0x1e20 [ 110.047139][ T6952] block_read_full_folio+0x812/0xa50 [ 110.048685][ T6952] filemap_read_folio+0xc6/0x2a0 [ 110.050129][ T6952] do_read_cache_folio+0x263/0x5c0 [ 110.051609][ T6952] read_part_sector+0xd3/0x410 [ 110.053019][ T6952] adfspart_check_ICS+0xa7/0x8c0 [ 110.054575][ T6952] bdev_disk_changed+0x6c6/0x14e0 [ 110.056022][ T6952] blkdev_get_whole+0x187/0x290 [ 110.057465][ T6952] bdev_open+0x2c7/0xe20 [ 110.058716][ T6952] blkdev_open+0x329/0x400 [ 110.060036][ T6952] do_dentry_open+0xf59/0x1ea0 [ 110.061440][ T6952] vfs_open+0x82/0x3f0 [ 110.062686][ T6952] path_openat+0x1e6a/0x2d60 [ 110.064072][ T6952] do_filp_open+0x20c/0x470 [ 110.065384][ T6952] do_sys_openat2+0x17a/0x1e0 [ 110.066747][ T6952] __x64_sys_openat+0x175/0x210 [ 110.068154][ T6952] do_syscall_64+0xcd/0x250 [ 110.069483][ T6952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.071171][ T6952] [ 110.071171][ T6952] -> #0 (set->srcu){.+.+}-{0:0}: [ 110.073053][ T6952] __lock_acquire+0x249e/0x3c40 [ 110.074483][ T6952] lock_sync+0xf5/0x190 [ 110.075722][ T6952] __synchronize_srcu+0xa9/0x2a0 [ 110.077171][ T6952] blk_mq_quiesce_queue+0x149/0x1b0 [ 110.078665][ T6952] elevator_disable+0x70/0x490 [ 110.080069][ T6952] __blk_mq_update_nr_hw_queues+0x3bb/0x1460 [ 110.081792][ T6952] blk_mq_update_nr_hw_queues+0x2a/0x40 [ 110.083415][ T6952] nbd_start_device+0x15b/0xd70 [ 110.084875][ T6952] nbd_ioctl+0x21a/0xfd0 [ 110.086025][ T6952] compat_blkdev_ioctl+0x2f7/0x750 [ 110.087549][ T6952] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 110.089071][ T6952] __do_fast_syscall_32+0x73/0x120 [ 110.090554][ T6952] do_fast_syscall_32+0x32/0x80 [ 110.091971][ T6952] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 110.093784][ T6952] [ 110.093784][ T6952] other info that might help us debug this: [ 110.093784][ T6952] [ 110.096410][ T6952] Chain exists of: [ 110.096410][ T6952] set->srcu --> &q->q_usage_counter(io)#49 --> &q->sysfs_lock [ 110.096410][ T6952] [ 110.099864][ T6952] Possible unsafe locking scenario: [ 110.099864][ T6952] [ 110.101796][ T6952] CPU0 CPU1 [ 110.103187][ T6952] ---- ---- [ 110.104607][ T6952] lock(&q->sysfs_lock); [ 110.105767][ T6952] lock(&q->q_usage_counter(io)#49); [ 110.107819][ T6952] lock(&q->sysfs_lock); [ 110.109613][ T6952] sync(set->srcu); [ 110.110618][ T6952] [ 110.110618][ T6952] *** DEADLOCK *** [ 110.110618][ T6952] [ 110.112711][ T6952] 5 locks held by syz.0.252/6952: [ 110.114039][ T6952] #0: ffff888040ff8998 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x151/0xfd0 [ 110.116485][ T6952] #1: ffff888040ff88d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0x20/0x40 [ 110.119360][ T6952] #2: ffff888023e2cee8 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x1fc/0x1460 [ 110.122474][ T6952] #3: ffff888023e2cf20 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x1fc/0x1460 [ 110.125641][ T6952] #4: ffff888023e2d418 (&q->sysfs_lock){+.+.}-{4:4}, at: __blk_mq_update_nr_hw_queues+0x446/0x1460 [ 110.128427][ T6952] [ 110.128427][ T6952] stack backtrace: [ 110.129944][ T6952] CPU: 2 UID: 0 PID: 6952 Comm: syz.0.252 Not tainted 6.12.0-syzkaller-12128-gf788b5ef1ca9 #0 [ 110.132552][ T6952] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 110.135337][ T6952] Call Trace: [ 110.136207][ T6952] [ 110.136997][ T6952] dump_stack_lvl+0x116/0x1f0 [ 110.138233][ T6952] print_circular_bug+0x41c/0x610 [ 110.139562][ T6952] check_noncircular+0x31a/0x400 [ 110.140887][ T6952] ? __pfx_check_noncircular+0x10/0x10 [ 110.142355][ T6952] ? __pfx_stack_trace_save+0x10/0x10 [ 110.143783][ T6952] ? lockdep_lock+0xc6/0x200 [ 110.145024][ T6952] ? __pfx_lockdep_lock+0x10/0x10 [ 110.146359][ T6952] __lock_acquire+0x249e/0x3c40 [ 110.147660][ T6952] ? __pfx___lock_acquire+0x10/0x10 [ 110.149048][ T6952] ? hlock_class+0x4e/0x130 [ 110.150249][ T6952] ? mark_lock+0xb5/0xc60 [ 110.151402][ T6952] ? __pfx___lock_acquire+0x10/0x10 [ 110.152784][ T6952] ? __synchronize_srcu+0x99/0x2a0 [ 110.154153][ T6952] lock_sync+0xf5/0x190 [ 110.155255][ T6952] ? __synchronize_srcu+0x99/0x2a0 [ 110.156721][ T6952] __synchronize_srcu+0xa9/0x2a0 [ 110.158076][ T6952] ? __pfx___synchronize_srcu+0x10/0x10 [ 110.159523][ T6952] ? __pfx_lock_release+0x10/0x10 [ 110.160882][ T6952] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 110.162411][ T6952] blk_mq_quiesce_queue+0x149/0x1b0 [ 110.163889][ T6952] elevator_disable+0x70/0x490 [ 110.165295][ T6952] __blk_mq_update_nr_hw_queues+0x3bb/0x1460 [ 110.166965][ T6952] ? lock_acquire.part.0+0x11b/0x380 [ 110.168366][ T6952] ? __mutex_trylock_common+0xea/0x250 [ 110.169825][ T6952] ? __pfx___mutex_trylock_common+0x10/0x10 [ 110.171372][ T6952] ? blk_mq_update_nr_hw_queues+0x20/0x40 [ 110.172599][ T6975] FAULT_INJECTION: forcing a failure. [ 110.172599][ T6975] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.172939][ T6952] ? rcu_is_watching+0x12/0xc0 [ 110.177612][ T6952] ? __pfx___blk_mq_update_nr_hw_queues+0x10/0x10 [ 110.179329][ T6952] ? blk_mq_update_nr_hw_queues+0x20/0x40 [ 110.180869][ T6952] ? __pfx___mutex_lock+0x10/0x10 [ 110.182332][ T6952] ? lockdep_hardirqs_on+0x7c/0x110 [ 110.183716][ T6952] ? __mutex_lock+0x1cc/0xa60 [ 110.184974][ T6952] ? nbd_ioctl+0x151/0xfd0 [ 110.186199][ T6952] ? __pfx___mutex_lock+0x10/0x10 [ 110.187520][ T6952] blk_mq_update_nr_hw_queues+0x2a/0x40 [ 110.189006][ T6952] nbd_start_device+0x15b/0xd70 [ 110.190286][ T6952] ? bpf_lsm_capable+0x9/0x10 [ 110.191526][ T6952] nbd_ioctl+0x21a/0xfd0 [ 110.192652][ T6952] ? __pfx_nbd_ioctl+0x10/0x10 [ 110.193942][ T6952] ? __pfx_lock_release+0x10/0x10 [ 110.195284][ T6952] ? trace_lock_acquire+0x14e/0x1f0 [ 110.196662][ T6952] ? __pfx_nbd_ioctl+0x10/0x10 [ 110.197970][ T6952] compat_blkdev_ioctl+0x2f7/0x750 [ 110.199316][ T6952] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 110.200796][ T6952] ? __fget_files+0x206/0x3a0 [ 110.202072][ T6952] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 110.203560][ T6952] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 110.204958][ T6952] __do_fast_syscall_32+0x73/0x120 [ 110.206277][ T6952] do_fast_syscall_32+0x32/0x80 [ 110.207512][ T6952] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 110.209131][ T6952] RIP: 0023:0xf73ae579 [ 110.210154][ T6952] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 110.214937][ T6952] RSP: 002b:00000000f507557c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 110.217122][ T6952] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000000ab03 [ 110.219191][ T6952] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 110.221358][ T6952] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 110.223455][ T6952] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 110.225564][ T6952] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 110.227726][ T6952] [ 110.228594][ T6975] CPU: 1 UID: 0 PID: 6975 Comm: syz.1.260 Not tainted 6.12.0-syzkaller-12128-gf788b5ef1ca9 #0 [ 110.231419][ T6975] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 110.234423][ T6975] Call Trace: [ 110.235315][ T6975] [ 110.236100][ T6975] dump_stack_lvl+0x16c/0x1f0 [ 110.237366][ T6975] should_fail_ex+0x497/0x5b0 [ 110.238611][ T6975] _copy_from_iter+0x29b/0x1400 [ 110.239901][ T6975] ? trace_lock_acquire+0x14e/0x1f0 [ 110.241274][ T6975] ? __alloc_skb+0x200/0x380 [ 110.242521][ T6975] ? __virt_addr_valid+0x1a4/0x590 [ 110.243893][ T6975] ? __pfx__copy_from_iter+0x10/0x10 [ 110.245299][ T6975] ? __virt_addr_valid+0x1a4/0x590 [ 110.246651][ T6975] ? __virt_addr_valid+0x5e/0x590 [ 110.248010][ T6975] ? __phys_addr_symbol+0x30/0x80 [ 110.249336][ T6975] ? __check_object_size+0x488/0x710 [ 110.250739][ T6975] netlink_sendmsg+0x813/0xd70 [ 110.252012][ T6975] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.253414][ T6975] ____sys_sendmsg+0x9ae/0xb40 [ 110.254679][ T6975] ? __pfx_____sys_sendmsg+0x10/0x10 [ 110.256059][ T6975] ? get_compat_msghdr+0x11b/0x170 [ 110.257429][ T6975] ? rcu_is_watching+0x12/0xc0 [ 110.258685][ T6975] ? lock_release+0x4e2/0x6f0 [ 110.259924][ T6975] ? get_pid_task+0xfc/0x250 [ 110.261155][ T6975] ___sys_sendmsg+0x135/0x1e0 [ 110.262405][ T6975] ? get_pid_task+0x35/0x250 [ 110.263648][ T6975] ? __pfx____sys_sendmsg+0x10/0x10 [ 110.265016][ T6975] ? lock_release+0x4e2/0x6f0 [ 110.266255][ T6975] ? __pfx_lock_release+0x10/0x10 [ 110.267576][ T6975] ? trace_lock_acquire+0x14e/0x1f0 [ 110.268966][ T6975] ? __fget_files+0x206/0x3a0 [ 110.270217][ T6975] __sys_sendmsg+0x16e/0x220 [ 110.271432][ T6975] ? __pfx___sys_sendmsg+0x10/0x10 [ 110.272784][ T6975] ? rcu_is_watching+0x12/0xc0 [ 110.274060][ T6975] __do_fast_syscall_32+0x73/0x120 [ 110.275408][ T6975] do_fast_syscall_32+0x32/0x80 [ 110.276698][ T6975] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 110.278374][ T6975] RIP: 0023:0xf743e579 [ 110.279447][ T6975] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 110.284416][ T6975] RSP: 002b:00000000f512657c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 110.286561][ T6975] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000100 [ 110.288595][ T6975] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 110.290636][ T6975] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 110.292687][ T6975] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 110.294750][ T6975] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 110.296834][ T6975] [ 110.301927][ T64] block nbd0: Receive control failed (result -32) [ 110.303761][ T64] block nbd0: Receive control failed (result -32) [ 110.349167][ T6952] block nbd0: shutting down sockets [ 112.198749][ T12] wlan1: Trigger new scan to find an IBSS to join [ 115.148662][ T1136] wlan1: Trigger new scan to find an IBSS to join [ 118.188775][ T11] wlan1: Trigger new scan to find an IBSS to join [ 119.089158][ T12] wlan1: Creating new IBSS network, BSSID 62:1e:45:73:ef:24 VM DIAGNOSIS: 03:12:30 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff88802b644b80 RCX=ffffffff818d43fc RDX=ffff88801ed24880 RSI=ffffffff818d43d6 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc90000a379a0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000006 R12=ffffed10056c8971 R13=0000000000000001 R14=ffff88802b644b88 R15=ffff88802b43ff80 RIP=ffffffff818d43d8 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f50c5da4 CR3=000000000db7e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff81e0c7aa RDX=ffff88802152c880 RSI=0000000000000000 RDI=0000000000000005 RBP=0000000000000200 RSP=ffffc900274a7b38 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=000000000000e173 R12=0000000000000014 R13=0000000000000000 R14=0000000000210008 R15=ffff888049b057c0 RIP=ffffffff8199408c RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b500000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000000000000 CR3=000000006809a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000037 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff851531d5 RDI=ffffffff9a6682c0 RBP=ffffffff9a668280 RSP=ffffc9000d0ef090 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=0000000000000037 R14=ffffffff85153170 R15=0000000000000000 RIP=ffffffff851531ff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b600000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000205ee000 CR3=0000000043e5e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000012d634 RBX=0000000000000003 RCX=ffffffff8b1ab999 RDX=ffffed10056e6fee RSI=ffffffff8bb13640 RDI=ffffffff81701ef9 RBP=ffffed1003a52488 RSP=ffffc9000049fe08 R8 =0000000000000000 R9 =ffffed10056e6fed R10=ffff88802b737f6b R11=0000000000000001 R12=0000000000000003 R13=ffff88801d292440 R14=ffffffff901cb190 R15=0000000000000000 RIP=ffffffff8b1acd7f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000205f6000 CR3=000000004b658000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000