last executing test programs: 7.344719272s ago: executing program 1 (id=1894): ioperm(0x0, 0x2, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) timerfd_create(0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x40, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xa2a}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}]]}, 0x40}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, 0x0) r7 = syz_create_resource$binfmt(&(0x7f0000000e40)='./file0\x00') r8 = openat$binfmt(0xffffff9c, r7, 0x41, 0x1ff) write$binfmt_script(r8, &(0x7f0000001140)={'#! ', './file0', [{0x20, '@]!+\x00]!\b\x00\x00\x00\x00\x00\x00\x00[)\\#.'}]}, 0x20) execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) execve(&(0x7f0000001040)='./file0\x00', 0x0, &(0x7f0000000040)={[&(0x7f0000000080)='#! ']}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x8, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, {0x4}, {0xe, 0xffff}, {0xf, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x52cd}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x2b, &(0x7f00000000c0)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9, 0x0, @opaque="c6"}}}}}, 0x0) 6.169994507s ago: executing program 1 (id=1897): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{}k%@\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r5 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) readv(r4, &(0x7f0000000200)=[{&(0x7f0000000080)=""/3, 0x3}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x10) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_REAPURB(r6, 0x4008550c, &(0x7f0000002680)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000060a0b0400000000b2000000020000000900020073797a7f00000000140000001100010000000000000000000000000a"], 0x48}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000480)='\xf5\xfc\xd2\xec]\x95zx8*\xa2d\x11\xb5\xb1\x01\x00\x00\x00\xe49{\x8a{\x81s\xea$\xdfg\xb1\x03DY!\x97\xadM\xd7\xff\x8a\xcd[>\x12e\xc3]d8\xba\x8ec\x00\x00\x00\x00\x00\x00\x00\xa0\xe2\xd5y\xec\x90\x00\x98Y\x91\x19\x16\x89\xd0\x1a\xad\xcd\xd6\xd0\xc6\xb9\xeb\x95\xd3\x9cl\x9cu#\xb4\xee\xe5\x9d\t\fV\xd4\xda\xfc`2?\x15P\xba\x14b\x1c\xcc\xd5\xb9jA$s\xb9g3\x15M\xd9\xb9 \xca[\xc7\xec\xa9;\xee\x01\xc9\xc4\x1f\xc3\xe4\xfa\xd3fU\x0e\x86\xc8\xa7\xaf\xaf\x04p\xa3\x8bb\xbf\\\xdb\x83\x00\x96sy\x14\x1eo\xcc9&\x946\xf9\xf5v\xee\xb5m$;\x01\xb8\xeau\x00\xd1S=\x920H\xc2z\xb5\xbe\x95\xef\xeb\xd1\xc8\xa1\xba\xach\xbef\xa8\x86\xc2\x18\x9cC\x15\x9c^\xcf\xe9\xbcp\xb4Ff\x00\x9d>p\"\x19\xd8}|~\xae\xdb\a59f\xb8?\xba\xf2\x8e\xa5y\\\xf0\fkd??-\x983\xf3\x19\xc7\xc0/\xe9\x1a\x80=\xa72)\xd2\x00'/277, &(0x7f0000000340)='/\x00\x01\x00H\x98', 0x0) tkill(r5, 0xb) socket(0x10, 0x3, 0x0) 6.16956956s ago: executing program 3 (id=1898): setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_redirect(0x0, &(0x7f0000000180), 0x0, 0x0, 0x3) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000b40)=ANY=[@ANYBLOB="180000000000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) fcntl$setlease(r0, 0x400, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) r5 = syz_open_dev$dri(0x0, 0x1f, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000008c0)=[0x0], &(0x7f0000000900), 0x0, 0x1, 0x0, 0x0, r7}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r5, 0xc01064ab, &(0x7f0000000000)={0x0, r8, r7}) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r9, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r10], 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000ac0)={&(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0], 0x9, r10, 0x0, 0x10, 0xfff, 0x3ff, 0x3, {0x5, 0x8, 0x7, 0x10, 0xf8, 0x0, 0x2, 0x6, 0x8000, 0x4, 0x2, 0x2c, 0x8, 0x7ff, "6360a63a96390bdb159482c234d0e30cd5524f787142c5184e2420bb1743963f"}}) pwritev(r4, &(0x7f0000000040)=[{0x0}], 0x1, 0x4000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x2, 0x5, 0x4f0, 0x228, 0x228, 0xffffffff, 0x228, 0x0, 0x45c, 0x45c, 0xffffffff, 0x45c, 0x45c, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0xffffffff, 0x0, 'pim6reg\x00', 'dvmrp0\x00', {0x284867cb942d9816}, {}, 0xbc4f28a3537236dc}, 0xac030000, 0x1f4, 0x228, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_to_batadv\x00', {0x800, 0x81, 0x16, 0x1, 0x11000, 0x3, 0x3, 0x6, 0x0, 0x20}, {0x4}}}, @common=@addrtype={{0x2c}, {0x2}}]}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0x1, {0x0, @broadcast, @private=0xa010102, @icmp_id=0x66, @port=0x4e20}}}}, {{@uncond, 0x0, 0xb8, 0xec, 0x0, {}, [@common=@unspec=@state={{0x24}, {0x10}}, @common=@inet=@set2={{0x24}}]}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0x4, @broadcast, @empty, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa4}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @local, @icmp_id, @port=0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xffffff00, 0xffffff00, 'virt_wifi0\x00', 'ipvlan1\x00', {0xff}, {}, 0x62, 0x2, 0x14}, 0x0, 0x70, 0xa4}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x14, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @gre_key=0x81, @gre_key=0x6}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x54c) socket$inet6_tcp(0xa, 0x1, 0x0) 5.579236425s ago: executing program 3 (id=1900): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000002004000b7080000000000007b8af8ff00000000b708000000020000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xcc}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000000000000800080000014000091ff0f00004500f5ff06ff00010100fc5e15f4c3d3fbd80dad0000abfa"], 0x125) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r4 = io_uring_setup(0x79ae, &(0x7f0000000340)={0x0, 0x1}) r5 = socket$inet6(0xa, 0x40000080806, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000020000000000000000000000850000000f000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='ext4_writepages\x00', r6}, 0x10) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) bind$inet6(r5, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) listen(r5, 0x20000005) r7 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000180)='wg0\x00', 0x10) r8 = accept4(r5, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r8) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$key(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="020e0403027000fcdbdf25cee4627474bf179f5cc1c782a290d09eaaf7c36c6a0521422514e5babd949b65000b051906142cfb2f760690da4d5cc5fbed1c0d184d1b684b50aaa6c5b072a67f943371b37193132399819b7029fe887e32728706352a7b852cef5e64313d9683e51bcbb4112284762031a2aad9a6181eb350ab80a1f4cdcc6ef0d767a3d891c5a3fcf06df30bc24c99ccf400"/174], 0x10}}, 0x20000004) 5.244931074s ago: executing program 1 (id=1901): openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x595a, 0x34324152, 0x0, 0xa, [{}, {0x10}, {0x0, 0x1}, {0x9}, {}, {}, {0xfffffffc}, {0x7}], 0x0, 0x0, 0x4}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000440)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r2], 0x0) syz_open_procfs$namespace(0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x5, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000080)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x4a141) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDSIGACCEPT(r6, 0x400455c8, 0x9) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x2) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) ioctl$sock_bt_hci(r7, 0x400448c9, &(0x7f0000000880)) write(0xffffffffffffffff, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200020000", 0x1c) socket$pppoe(0x18, 0x1, 0x0) 4.566755206s ago: executing program 0 (id=1902): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYBLOB="da2261875f58323cf5704ca92bdcc7e39a892ad9ce2e9482b397d74faa777043c79850203e844203a9e2442046a6d5429a7a66ed82d75475981032f61c1771fdfdafc95b6573e3530000"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0xac, &(0x7f0000000140)=""/172, 0x41000, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) r0 = syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0) kcmp(r0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0x0, 0x0, @mcast2}}}, 0x48) r4 = socket(0x1d, 0x2, 0x6) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000500)={'tunl0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000000)={0x1d, r6, 0x2}, 0x18) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}, r8}}, 0x48) close(r7) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x2000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) 4.537509985s ago: executing program 2 (id=1903): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x54) openat$tun(0xffffff9c, &(0x7f0000000040), 0x80, 0x0) r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x34, 0x0, @void}, 0x10) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = syz_open_dev$dri(0x0, 0x4, 0x418c02) fcntl$dupfd(r1, 0x0, r2) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$caif_stream(0x25, 0x1, 0x2) close(0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0x0, '.\x00'}}) sendto$inet(r0, &(0x7f0000000100)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x34, 0xfffffffe}, 0x9c) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x4, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f}}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000002000000020000000400000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00!', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) openat2$dir(0xffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={0x10400, 0x2, 0xc}, 0x18) 4.4794765s ago: executing program 3 (id=1904): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000140), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303}, "48af39015c3b3931", "fa8131adcbf31f7ae106bd79d15dc96d2b038bdbb1db36da7df63bf87f8b3eb0", "b1c519fe", "4bf2ab68836171fc"}, 0x38) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x8, 0x400000000000003, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x80000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0xfffffffffffffffd, 0x0, 0x7fffffff}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) sendmsg$nl_route(r0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000003100090000000000"], 0x1c}}, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x101182) write$sndseq(r5, 0x0, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x0, 0x1) 3.3287765s ago: executing program 2 (id=1905): r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = dup(r0) bind$unix(r1, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @broadcast=0xac14140a, @initdev={0xac, 0x1e, 0x0, 0x0}}, "0800000002000000"}}}}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x15, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000680)={@map=r2, 0x2e, 0x1, 0x9ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x6f4a, 0x10100, 0x0, 0x0, 0x0, r4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r5, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000000)=0x7d) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSTI(r8, 0x5412, &(0x7f00000003c0)=0x7e) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000140)={'team_slave_0\x00'}) r11 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r11, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdir(0x0, 0x0) mount$afs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000500)={[{}, {@dyn}]}) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) 3.273482611s ago: executing program 0 (id=1906): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="eacab4e41800000000000000000000000200000095000000"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x17, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_clone(0x800c000, &(0x7f0000001480)="627807434619734911420e123cb6f44fb54d82f86f3720b1d5ecd9651a9fcb2a1c358b9cd99a9da0b00953486764e0c7d13faa0d43ad3164e14aa9d4eafc2ae39ce2be18d63433b7dfc78608200e69639ab1530087488555d6d92591d54b3a4b2d398d", 0x63, 0x0, 0x0, &(0x7f00000015c0)="89ef1284c86555bfe69b541fc18b8f329814f57bd00b1b3a") r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000400)={0x0, &(0x7f0000000040)}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0xc102, 0x0) sendfile(r4, r4, 0x0, 0x40008) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000001000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r7}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'syz_tun\x00'}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000}, 0x810) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b100000850000000f000000950000000000000062319a634de31a0d537ef187a35b5511521ef070af4faa3a5589ce30bcaa1e37a8b4fd0f639f37ff9f5bdd296794f27fdaacb57c2abfded31a81d8ada065e9c54f8ab70426e589e0f3ba0bd3adb814ff089a60edb6a38c2450fc3d649434200d147ac3a0365bf16e12a6fcdeda39082461aebc31b23ed0f890405274f96ba6552fd8d7b00a2ce539d4d45ca61d9f03d0"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xa9, &(0x7f0000000340)=""/169, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 3.17886805s ago: executing program 3 (id=1907): r0 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$PTRACE_GETSIGMASK(0x420a, r0, 0x8, &(0x7f00000001c0)) syz_open_dev$vcsa(&(0x7f0000000080), 0x1ff, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x7, 0xba, &(0x7f0000000140)=""/186, 0x2936e9239afce1fc, 0x37, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) socket(0x10, 0x3, 0x0) socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000680)=ANY=[@ANYBLOB="0180c2000000a538ae4646320800", @ANYBLOB="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"], 0x0) r4 = openat$cdrom(0xffffff9c, &(0x7f0000000000), 0xa40, 0x0) ioctl$CDROM_SELECT_DISK(r4, 0x5322, 0x0) socket(0x6, 0xa, 0x20100) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f00000005c0)={0x40, 0x0, 0x1}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000c40)={0x40, 0x0, 0x3}, 0x10) bind$tipc(r5, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', 0x0, 0x6c, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) 3.178291287s ago: executing program 2 (id=1908): setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_redirect(0x0, &(0x7f0000000180), 0x0, 0x0, 0x3) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000b40)=ANY=[@ANYBLOB="180000000000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) fcntl$setlease(r0, 0x400, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) r5 = syz_open_dev$dri(0x0, 0x1f, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000008c0)=[0x0], &(0x7f0000000900), 0x0, 0x1, 0x0, 0x0, r7}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r5, 0xc01064ab, &(0x7f0000000000)={0x0, r8, r7}) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r9, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r10], 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000ac0)={&(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0], 0x9, r10, 0x0, 0x10, 0xfff, 0x3ff, 0x3, {0x5, 0x8, 0x7, 0x10, 0xf8, 0x0, 0x2, 0x6, 0x8000, 0x4, 0x2, 0x2c, 0x8, 0x7ff, "6360a63a96390bdb159482c234d0e30cd5524f787142c5184e2420bb1743963f"}}) pwritev(r4, &(0x7f0000000040)=[{0x0}], 0x1, 0x4000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x2, 0x5, 0x4f0, 0x228, 0x228, 0xffffffff, 0x228, 0x0, 0x45c, 0x45c, 0xffffffff, 0x45c, 0x45c, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0xffffffff, 0x0, 'pim6reg\x00', 'dvmrp0\x00', {0x284867cb942d9816}, {}, 0xbc4f28a3537236dc}, 0xac030000, 0x1f4, 0x228, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_to_batadv\x00', {0x800, 0x81, 0x16, 0x1, 0x11000, 0x3, 0x3, 0x6, 0x0, 0x20}, {0x4}}}, @common=@addrtype={{0x2c}, {0x2}}]}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0x1, {0x0, @broadcast, @private=0xa010102, @icmp_id=0x66, @port=0x4e20}}}}, {{@uncond, 0x0, 0xb8, 0xec, 0x0, {}, [@common=@unspec=@state={{0x24}, {0x10}}, @common=@inet=@set2={{0x24}}]}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0x4, @broadcast, @empty, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa4}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @local, @icmp_id, @port=0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xffffff00, 0xffffff00, 'virt_wifi0\x00', 'ipvlan1\x00', {0xff}, {}, 0x62, 0x2, 0x14}, 0x0, 0x70, 0xa4}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x14, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @gre_key=0x81, @gre_key=0x6}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x54c) socket$inet6_tcp(0xa, 0x1, 0x0) 2.578580835s ago: executing program 2 (id=1909): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) syz_clone(0x200000, &(0x7f0000000380)="58872f6f5df6c86cb979afaa40d0597777b35710898193a4754881cd9408d65840da0a7b9e20acdf0e2cb800717d0d58a263e56cbd8139a0380d10858d868c646d8d2e48f0769d62a3737484ea5934592b0fb3cab27fb5bed52596a6fdedfb49a52e65539cd616af4b5dfbafecd82f2d1b72a32c43d8b0bb7defabd2e88d1ddbdfc5f5eeab3f193d4bd14a88b4d29288", 0x90, &(0x7f0000000440), &(0x7f0000000480), &(0x7f0000000500)="659a6473af6824e5e2f38f1efc3cbe471a9bed84c26e4293aca377c5e26474c6085018469d65cc7c7f2f1423d6b95e30ff3617ef222d57e985da2159f264473d405c934f2a795a3df8903004dbd941a9639cc7ebd06e7ac074167fa7a41a2f968122b239e93e6a6faba9c6410bdef018fe8fe510fc313a3c04f349886b75df98771d65b69590aebdb2a40413245e22ebb774ac79b17041b579cff82da8397a140f28903d9ce08efe8b534a76f3780dc496ee2379951e77e7dd1f5a71b4c313b1c675a2955b023f0803b27abf508b0e76064c267a59da413fec") mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000340)='./file0\x00', &(0x7f00000004c0), 0x700, 0x0) chdir(&(0x7f0000000100)='./file0\x00') socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000000c0), 0x12) syz_init_net_socket$rose(0xb, 0x5, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @multicast1}}, 0x0, 0x0, 0x3f8, 0x0, 0x32, 0x1, 0xfe}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0cc5605, &(0x7f0000000180)={0x1, @vbi={0x0, 0x0, 0x34325852}}) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000000)=0x8, 0x4) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) openat$audio(0xffffffffffffff9c, 0x0, 0x8000, 0x0) 2.328336675s ago: executing program 0 (id=1910): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1b, 0x13, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x104) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019480)={0x8, 0x1c29, &(0x7f0000019440)=ANY=[@ANYBLOB="18000000010100000003000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000000200), 0x10) r4 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x2}, 0xe) connect(r6, &(0x7f00000004c0)=@rc={0x1f, @none, 0x8}, 0x80) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400600142603600e1208000b0000000401a8001600a400014009000200036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) dup3(r4, r7, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) madvise(&(0x7f0000d38000/0x3000)=nil, 0x3000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r8, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r8, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0xae, 0x0, 0x7ffc0000}]}) shutdown(r8, 0x1) 2.084237947s ago: executing program 3 (id=1911): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="61154c000000000061138c0000000000bfa00000000000001503000008004e002d35010000000000950041000000000069163a0000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ff3d4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2739670b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc401000000cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be19637302f3b41eae50509fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524a3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8b0100010000000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d545ffffffff00000000a1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf857689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684ee54c0a263c806aabac2f66cb052f847c62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961ef4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fc0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bb000000000000000000000000000000884efcecca45ea4ab2ec097668456a6ff12854997f5aed737d5205ace5c0b64f87ef10784d0479cb44ca077e0c4ce6ff880e2ce3de63853a9740e9233683bfc8636bee293aeeb680b399a296e6f44c07b5fc5d9d359af007f23004a7acb6df23664ea209620b4fe0f4df81c33bd8ca2335cb4b50881937379b45a301175c3e8eb32970564ec8e25c46ee3bae079faedaad94276cfa251be8256c4c37fc84a25c3a2feb39e94a5266a10716d4a3cef499fa176018054e9149a1c9d20a809ce3"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x54) openat$tun(0xffffff9c, &(0x7f0000000040), 0x80, 0x0) r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x34, 0x0, @void}, 0x10) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = syz_open_dev$dri(0x0, 0x4, 0x418c02) fcntl$dupfd(r1, 0x0, r2) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}], 0x1, 0x0, 0x0) socket$caif_stream(0x25, 0x1, 0x2) close(0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0x0, '.\x00'}}) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x34, 0xfffffffe}, 0x9c) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x4, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f}}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000002000000020000000400000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00!', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) openat2$dir(0xffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={0x10400, 0x2, 0xc}, 0x18) 2.061800879s ago: executing program 1 (id=1912): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) getpid() sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_emit_ethernet(0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) recvmsg$kcm(r5, &(0x7f0000002940)={0x0, 0x0, 0x0}, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002b00010000000000000000000401"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x4) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000040)={0x3, r8, 0x10000000, 0x80000001, 0xb, 0x1fd, 0x1}) close_range(r0, 0xffffffffffffffff, 0x0) 1.755108735s ago: executing program 0 (id=1913): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r0, 0x4018aee2, &(0x7f0000000040)=@attr_irq_timer={0x0, 0x1, 0x0, 0x0}) 1.668873292s ago: executing program 0 (id=1914): socket$netlink(0x10, 0x3, 0x15) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000000c0)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "28d7b07d54891881fe02c1203fe49696b9f26f2da4149683f065714f8a61d1f32c9d064bbd27b2aa57459cff33a3a9831ac46b8829b48fff3d63520d260804d0"}, 0x48, 0xfffffffffffffffd) keyctl$setperm(0x5, r1, 0x0) keyctl$revoke(0x6, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x5c, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) unshare(0x26020280) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = socket$pptp(0x18, 0x1, 0x2) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x2c00, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) bind$pptp(r3, &(0x7f0000000080)={0x18, 0x2, {0x0, @dev}}, 0x1e) bind$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) syz_clone(0xa0320080, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x2, 0x3, 0x2) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r5, 0x0) 1.646343096s ago: executing program 2 (id=1915): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000140), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303}, "48af39015c3b3931", "fa8131adcbf31f7ae106bd79d15dc96d2b038bdbb1db36da7df63bf87f8b3eb0", "b1c519fe", "4bf2ab68836171fc"}, 0x38) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x8, 0x400000000000003, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x80000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0xfffffffffffffffd, 0x0, 0x7fffffff}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) sendmsg$nl_route(r0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000003100090000000000"], 0x1c}}, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x101182) write$sndseq(r5, 0x0, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x0, 0x1) 968.924341ms ago: executing program 1 (id=1916): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYBLOB="da2261875f58323cf5704ca92bdcc7e39a892ad9ce2e9482b397d74faa777043c79850203e844203a9e2442046a6d5429a7a66ed82d75475981032f61c1771fdfdafc95b6573e3530000"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0xac, &(0x7f0000000140)=""/172, 0x41000, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) r0 = syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0) kcmp(r0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0x0, 0x0, @mcast2}}}, 0x48) r4 = socket(0x1d, 0x2, 0x6) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000500)={'tunl0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000000)={0x1d, r6, 0x2}, 0x18) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}, r8}}, 0x48) close(r7) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x2000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) 428.814523ms ago: executing program 3 (id=1917): setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_redirect(0x0, &(0x7f0000000180), 0x0, 0x0, 0x3) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000b40)=ANY=[@ANYBLOB="180000000000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) fcntl$setlease(r0, 0x400, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r6 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000008c0)=[0x0], &(0x7f0000000900), 0x0, 0x1, 0x0, 0x0, r7}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r5, 0xc01064ab, &(0x7f0000000000)={0x0, r8, r7}) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r9, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r10], 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000ac0)={&(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0], 0x9, r10, 0x0, 0x10, 0xfff, 0x3ff, 0x3, {0x5, 0x8, 0x7, 0x10, 0xf8, 0x0, 0x2, 0x6, 0x8000, 0x4, 0x2, 0x2c, 0x8, 0x7ff, "6360a63a96390bdb159482c234d0e30cd5524f787142c5184e2420bb1743963f"}}) pwritev(r4, &(0x7f0000000040)=[{0x0}], 0x1, 0x4000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x2, 0x5, 0x4f0, 0x228, 0x228, 0xffffffff, 0x228, 0x0, 0x45c, 0x45c, 0xffffffff, 0x45c, 0x45c, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0xffffffff, 0x0, 'pim6reg\x00', 'dvmrp0\x00', {0x284867cb942d9816}, {}, 0xbc4f28a3537236dc}, 0xac030000, 0x1f4, 0x228, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_to_batadv\x00', {0x800, 0x81, 0x16, 0x1, 0x11000, 0x3, 0x3, 0x6, 0x0, 0x20}, {0x4}}}, @common=@addrtype={{0x2c}, {0x2}}]}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0x1, {0x0, @broadcast, @private=0xa010102, @icmp_id=0x66, @port=0x4e20}}}}, {{@uncond, 0x0, 0xb8, 0xec, 0x0, {}, [@common=@unspec=@state={{0x24}, {0x10}}, @common=@inet=@set2={{0x24}}]}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0x4, @broadcast, @empty, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa4}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @local, @icmp_id, @port=0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xffffff00, 0xffffff00, 'virt_wifi0\x00', 'ipvlan1\x00', {0xff}, {}, 0x62, 0x2, 0x14}, 0x0, 0x70, 0xa4}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x14, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @gre_key=0x81, @gre_key=0x6}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x54c) socket$inet6_tcp(0xa, 0x1, 0x0) 412.636239ms ago: executing program 0 (id=1918): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000005000000020000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18400000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000ffffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0600000004000000010000000e000000000000009efaec743404b5cf6a5c704e9d33abd2facf82b4151e5577c8570f653441dc3adaa2323e275e9852cfb09ff974c5b1a9be5213802c0e151935407df42bcbbdbb3ac0327322665c8da9942a772e5b94d61e58490bf3f705d18743f0ae7e531c47bceab0b1d0edbcc8317b711a80cd6e14d8e82be8f75949237b3e3c8260ecd97a07b130e3a0c8eb12b1cec750940c78febbe8fef89935645029c407cf04ab1452d834429a860587a9006485815a0fdbb84c", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$FIGETBSZ(r4, 0x2, &(0x7f00000000c0)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x8, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r5, 0x0, 0x2000c8d0) ioctl$TIOCPKT(r1, 0x5420, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "c96c8fe9124f9ba1"}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'macvlan1\x00', &(0x7f0000000080)=@ethtool_cmd={0x26, 0x10000180, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x2]}}) openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0xc) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000bac000/0x4000)=nil, 0x4000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x3) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 328.267135ms ago: executing program 2 (id=1919): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@private1, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xff}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x32}, 0x0, @in=@multicast1}}, 0xe8) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0x0, [{0xfffffffc}, {}, {0x0, 0x3}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000380)={"f9bef8d1aaeadafa287efdb9450ae3e2d260489591c42ab93a0c7bca18e9a19fa8e6cd61e9f62f91123f1311f81f85b4044554cb6e3ca1b6d1fc011bd71bdda82f37ccfa5b87dd5dcd311dbbb67f240dc02c53b7eabf3651660ce801e3878538da8bb24e1dbc480dae36207bf6b7b946c7a8ec08468f9a75ec797b8c11807655272833a7c70ccfc9a8259e7a148eca4d16b6ff519973a20b65f91a7261cdd2440a5a0566d843fa334b0280f0aacc3b417322b9b56098dd842c44139da4bd1e2212a40ba043bd72b995b172b26b71d434e9f3bf74b4ed480b264e0e9d6f628732534db36bfb92ee6419fb244db44abf0cd9357755ce9c4c9a584e5eb89ffd10c8a6c3c6115265f25f798570751917cd7cfc2ca71729e268c3b30c05b3dfdb18cbbfd3036a889f5fefb0f9d56bf970bdbf2524f8e435b721c809e73a5fdafbf1594088ad1974908bf5fc752d564c1a4989a7d1e59564567d9b437442c5c1cfec93526395d18b1ecb18dedd713ced403a00a2cd27b2dc857808287ea88157b3c19075eb33f7cc60a6161a88ad37fb04d0ce0fda24176406391a5ac521299143bdf59a474a17272105e55e9870cec2942a6705993e821e54441c877a64450e739b1321ad17e1ed552e65654bbfcc8ebd1d64fc4e888609a90410f780fe5031c27737f2de05a7ddf00129eb746a2e990438d9bf6a3211779707d615d79111b3fe71c26433482306ce7563c11cdf6f8da283ae147311465af80ba5350e6d65438cd5a20ec155d78227e5336d504f8f1145f4b942180f7ba6e5c9a070d4e31289d4845229780e53713090e782a75b32729c10da28c1f2702dad57a37416fc138040064347a0a290803f51a619402d88d0a4b2bef39bf92696b6d7052459a78a258edfe2e66f2e10a80b168b483c90a1a1dd67c6d6c9b7a2336d1678131ca38552d9acff05dcd57f9f4164064b7781d8a8b5507e21edfe35d65d726bf24799535648cd04f3b7e85c3f6762f353a8f65afdc7ba63bc0eb65d7188cb1adee1d8d14c0413458d2ff65093d972ac3696fa12defc0f8dedf2309e1b80fc672205e6ccfc6b494233c4d00b5471cb52d896c73cddee40e5e51ee8a9bbe453a1a7d5b9832cacc5965220145504ccb2a157a7c1d9d718c0bf96cd350ac5ca330c827bedbff299774707f5840a0d954ae39c9421975d48e05d87a1ceddefbecae936e15ffb308364b69eefd345d6200cd128e48c162a4ebd026fefb7cc73e80204b21ff30d63e8707292f60682c6f6a587fff9c5a0fae24e0406df5363c7c9d31f72829b6a9d9237a84e83e22c33bf6313ee4072f09f9c6254d0eb7239d51cdda77b8e3d42a89449a3e1b6be8953a27651486383879490486fd11b6ac4e1b86f8a71fc294e0ebf572f4ef00582be189ee5a38c18d4d51cd3221fb1475a56cdf3cc7258bf8c559bf1a9"}) r6 = dup(r1) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000540)=ANY=[@ANYBLOB]) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000d00)=ANY=[@ANYBLOB="042e145b95541e31f4030000000000000100000000000000ff03000000000000010000000000000096030800000000000500000000020000530000005abf7ba00a72a0df7483d9338cbc873c719282a39bb54c8a126aff784a0f908cb328de17835fecbe70354364b210e7746a5382c82e442f9654f9154b43073504d6d36200"/137]) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setregid(0x0, 0x0) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000380)=""/231, 0xe7) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 0s ago: executing program 1 (id=1920): sendmsg$key(0xffffffffffffffff, 0x0, 0x40000) prctl$PR_SCHED_CORE(0x3e, 0x80000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680)) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000440)) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000400)=0x0) r4 = syz_open_procfs(r3, &(0x7f00000004c0)='net/xfrm_stat\x00') pread64(r4, &(0x7f000001a240)=""/102391, 0x18ff7, 0x1) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) setresuid(0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x2209000, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000030000,user_i', @ANYRESDEC=0x0, @ANYBLOB, @ANYBLOB=',defaul', @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB="39001d0127095c8a367a65bf58b7f7954f2b7e934566c35fa92795cb1b58fae21df594177cfd36ae834c46b6795a780e0073cf52614b359aa477551b7151c04798ee14637350bbd85089e25750f8afc901edaa49d050d63406aab7e703002d42715ff0cf5b1d67f3d30e60b4dcbfaf617e71e55156708f"]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES8=r1, @ANYRESHEX=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) openat$zero(0xffffff9c, &(0x7f0000000240), 0x664d82, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r7, 0x0, 0x1}, 0x18) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) r9 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r9, 0x7) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCGSERIAL(r10, 0x541e, 0x0) inotify_init() write$cgroup_int(r6, &(0x7f0000000040)=0x1c8, 0x12) kernel console output (not intermixed with test programs): code=0x7ffc0000 [ 306.596970][ T39] audit: type=1326 audit(1733269090.865:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10574 comm="syz.1.949" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7fb0579 code=0x7ffc0000 [ 306.633642][ T39] audit: type=1326 audit(1733269090.865:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10574 comm="syz.1.949" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7fb05a7 code=0x7ffc0000 [ 306.645903][T10577] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 306.649443][T10577] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 306.652756][T10577] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 306.769521][T10582] 9pnet_fd: Insufficient options for proto=fd [ 306.818984][T10584] Cannot find set identified by id 0 to match [ 307.360728][ T5299] Bluetooth: hci3: command 0x0405 tx timeout [ 308.997179][T10615] Cannot find set identified by id 0 to match [ 309.450876][T10626] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 309.454263][T10626] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 309.457293][T10626] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 309.552186][ T5299] Bluetooth: hci3: command 0x0405 tx timeout [ 309.613690][T10630] 9pnet_fd: Insufficient options for proto=fd [ 310.325131][T10639] Cannot find set identified by id 0 to match [ 310.774596][T10649] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.833597][T10650] Cannot find set identified by id 0 to match [ 311.592714][ T5299] Bluetooth: hci3: command 0x0405 tx timeout [ 311.680739][T10663] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 311.682579][T10663] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 311.684979][T10663] vhci_hcd vhci_hcd.0: Device attached [ 311.947874][T10674] Cannot find set identified by id 0 to match [ 312.016668][ T9] vhci_hcd: vhci_device speed not set [ 312.103660][T10677] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 312.105961][T10677] overlayfs: failed to set xattr on upper [ 312.106041][ T9] usb 41-1: new full-speed USB device number 3 using vhci_hcd [ 312.108275][T10677] overlayfs: ...falling back to redirect_dir=nofollow. [ 312.113395][T10677] overlayfs: ...falling back to index=off. [ 312.115623][T10677] overlayfs: ...falling back to uuid=null. [ 312.829108][T10683] 9pnet_fd: Insufficient options for proto=fd [ 312.918951][T10686] netlink: 'syz.0.972': attribute type 1 has an invalid length. [ 313.117337][T10666] vhci_hcd: connection reset by peer [ 313.119687][ T1134] vhci_hcd: stop threads [ 313.122500][ T1134] vhci_hcd: release socket [ 313.124340][ T1134] vhci_hcd: disconnect device [ 313.596831][T10697] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 313.601611][T10697] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 313.604122][T10697] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 314.440711][T10702] x_tables: ip_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 314.788431][T10714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 315.019654][T10719] netlink: 48 bytes leftover after parsing attributes in process `syz.0.979'. [ 315.646268][T10726] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 315.649118][T10726] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 315.651934][T10726] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 316.074370][T10725] netlink: 'syz.2.980': attribute type 10 has an invalid length. [ 316.091848][T10725] bond0: (slave batadv0): Releasing backup interface [ 316.107432][T10725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.113801][T10725] team0: Port device batadv0 added [ 316.132898][T10734] mkiss: ax0: crc mode is auto. [ 316.163988][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.166146][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.368404][T10725] syz.2.980 (10725) used greatest stack depth: 21216 bytes left [ 316.517772][T10746] 9pnet_fd: Insufficient options for proto=fd [ 316.921353][ T39] kauditd_printk_skb: 2887 callbacks suppressed [ 316.921372][ T39] audit: type=1326 audit(1733269101.424:2962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10740 comm="syz.3.993" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57579 code=0x7ffc0000 [ 317.024888][ T39] audit: type=1326 audit(1733269101.526:2963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10740 comm="syz.3.993" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57579 code=0x7ffc0000 [ 317.282110][ T9] vhci_hcd: vhci_device speed not set [ 317.521471][T10740] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 317.725841][T10759] lo speed is unknown, defaulting to 1000 [ 317.728592][T10759] lo speed is unknown, defaulting to 1000 [ 317.731101][T10759] ip_vti0 speed is unknown, defaulting to 1000 [ 317.751766][ T5945] Bluetooth: hci3: command 0x0405 tx timeout [ 317.847202][T10762] sp0: Synchronizing with TNC [ 318.980987][T10771] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 318.983382][T10771] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 318.986023][T10771] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 319.127386][T10776] vivid-007: disconnect [ 319.155707][T10778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.994'. [ 319.402452][T10782] overlay: Unknown parameter '/' [ 320.181132][T10774] vivid-007: reconnect [ 320.338622][T10798] syz.0.996 (10798): drop_caches: 2 [ 320.756640][T10799] bridge1: entered promiscuous mode [ 320.758657][T10799] bridge1: entered allmulticast mode [ 320.986337][ T5299] Bluetooth: hci1: command 0x0406 tx timeout [ 320.996215][ T5299] Bluetooth: hci3: command 0x0405 tx timeout [ 321.500346][T10801] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 321.502988][T10801] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 321.526175][T10801] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 321.857302][T10821] sp0: Synchronizing with TNC [ 321.901468][T10821] overlayfs: conflicting lowerdir path [ 322.493967][ T5299] Bluetooth: hci0: command 0x0406 tx timeout [ 323.523529][ T5299] Bluetooth: hci3: command 0x0405 tx timeout [ 323.525755][ T5299] Bluetooth: hci1: command 0x0406 tx timeout [ 323.669763][T10846] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 323.674308][T10846] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 323.677447][T10846] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 323.770613][T10847] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1007'. [ 323.865932][T10855] Cannot find set identified by id 0 to match [ 324.207565][T10859] Cannot find set identified by id 0 to match [ 325.194634][T10867] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 325.929906][T10882] netlink: 'syz.1.1016': attribute type 4 has an invalid length. [ 325.932857][T10882] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1016'. [ 327.054986][T10896] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 327.058062][T10896] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 327.061136][T10896] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 327.080937][T10893] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1019'. [ 327.217970][T10898] Cannot find set identified by id 0 to match [ 328.278838][T10919] Cannot find set identified by id 0 to match [ 328.575772][T10923] 9pnet_fd: Insufficient options for proto=fd [ 329.385338][T10936] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 329.387433][T10936] overlayfs: failed to set xattr on upper [ 329.389317][T10936] overlayfs: ...falling back to redirect_dir=nofollow. [ 329.391233][T10936] overlayfs: ...falling back to index=off. [ 329.392814][T10936] overlayfs: ...falling back to uuid=null. [ 330.416220][T10947] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 330.418989][T10947] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 330.423218][T10947] vhci_hcd vhci_hcd.0: Device attached [ 330.519535][T10955] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 330.522182][T10955] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 330.524488][T10955] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 330.616768][ T3227] vhci_hcd: vhci_device speed not set [ 330.686457][ T3227] usb 37-1: new full-speed USB device number 3 using vhci_hcd [ 331.528927][T10963] x_tables: ip_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 332.081523][T10951] vhci_hcd: connection reset by peer [ 332.093898][ T213] vhci_hcd: stop threads [ 332.095052][ T213] vhci_hcd: release socket [ 332.095471][T10971] x_tables: ip_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 332.096275][ T213] vhci_hcd: disconnect device [ 332.346066][T10977] netlink: 'syz.2.1040': attribute type 4 has an invalid length. [ 332.399198][T10978] 9pnet_fd: Insufficient options for proto=fd [ 332.402795][ T57] lo speed is unknown, defaulting to 1000 [ 332.829073][T10992] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 332.831901][T10992] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 332.837135][T10992] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 333.750618][T11005] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 333.754533][T11005] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 333.757759][T11005] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 334.831931][T11021] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 334.833918][T11021] overlayfs: failed to set xattr on upper [ 334.835466][T11021] overlayfs: ...falling back to redirect_dir=nofollow. [ 334.837319][T11021] overlayfs: ...falling back to index=off. [ 334.838874][T11021] overlayfs: ...falling back to uuid=null. [ 335.588889][T11030] bond0: (slave batadv0): Releasing backup interface [ 335.594860][T11030] bridge_slave_0: left allmulticast mode [ 335.596685][T11030] bridge_slave_0: left promiscuous mode [ 335.599212][T11030] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.602593][T11030] bridge_slave_1: left allmulticast mode [ 335.604343][T11030] bridge_slave_1: left promiscuous mode [ 335.605925][T11030] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.613601][T11030] bond0: (slave bond_slave_0): Releasing backup interface [ 335.630259][T11030] bond0: (slave bond_slave_1): Releasing backup interface [ 335.656873][T11030] team0: Port device team_slave_0 removed [ 335.668539][T11030] team0: Port device team_slave_1 removed [ 335.670503][T11030] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 335.672388][T11030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.675642][T11030] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.677794][T11030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.773728][ T3227] vhci_hcd: vhci_device speed not set [ 335.799520][ T39] audit: type=1326 audit(1733269120.453:2964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11029 comm="syz.1.1050" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb0579 code=0x7fc00000 [ 336.213139][T11046] tipc: Enabling of bearer rejected, already enabled [ 336.413904][ T39] audit: type=1326 audit(1733269121.065:2965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11029 comm="syz.1.1050" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fb0579 code=0x7fc00000 [ 336.419658][ T39] audit: type=1326 audit(1733269121.065:2966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11029 comm="syz.1.1050" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb0579 code=0x7fc00000 [ 337.010155][T11055] overlayfs: conflicting lowerdir path [ 337.016389][T11056] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 337.018634][T11056] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 337.021257][T11056] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 337.938181][T11064] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 337.940052][T11064] overlayfs: failed to set xattr on upper [ 337.941960][T11064] overlayfs: ...falling back to redirect_dir=nofollow. [ 337.943908][T11064] overlayfs: ...falling back to index=off. [ 337.945624][T11064] overlayfs: ...falling back to uuid=null. [ 338.710536][T11082] Cannot find set identified by id 0 to match [ 339.944654][T11106] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 339.947167][T11106] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 339.949493][T11106] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 340.141648][T11110] team0: Port device batadv0 removed [ 340.148836][T11110] bridge_slave_0: left allmulticast mode [ 340.150910][T11110] bridge_slave_0: left promiscuous mode [ 340.152530][T11110] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.159784][T11110] bridge_slave_1: left allmulticast mode [ 340.161721][T11110] bridge_slave_1: left promiscuous mode [ 340.163449][T11110] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.169054][T11110] bond0: (slave bond_slave_0): Releasing backup interface [ 340.176410][T11110] bond0: (slave bond_slave_1): Releasing backup interface [ 340.185933][T11110] team0: Port device team_slave_0 removed [ 340.192449][T11110] team0: Port device team_slave_1 removed [ 340.194522][T11110] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 340.196507][T11110] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 340.201114][T11110] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.203085][T11110] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.210288][T11110] bond0: (slave netdevsim0): Releasing backup interface [ 340.240881][ T9448] ip6_tnl_xmit_ctl: 7 callbacks suppressed [ 340.240893][ T9448] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 340.281503][T11114] Cannot find set identified by id 0 to match [ 340.376159][ T39] audit: type=1326 audit(1733269125.038:2967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11109 comm="syz.2.1070" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68579 code=0x7fc00000 [ 340.896019][ T39] audit: type=1326 audit(1733269125.559:2968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11109 comm="syz.2.1070" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f68579 code=0x7fc00000 [ 340.919799][ T39] audit: type=1326 audit(1733269125.559:2969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11109 comm="syz.2.1070" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68579 code=0x7fc00000 [ 340.925667][ T39] audit: type=1326 audit(1733269125.559:2970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11109 comm="syz.2.1070" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68579 code=0x7fc00000 [ 340.932105][ T39] audit: type=1326 audit(1733269125.569:2971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11109 comm="syz.2.1070" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68579 code=0x7fc00000 [ 341.037382][ T9448] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 341.041784][T11132] Cannot find set identified by id 0 to match [ 341.265021][T11144] syzkaller1: entered promiscuous mode [ 341.266717][T11144] syzkaller1: entered allmulticast mode [ 341.346510][T11145] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1079'. [ 341.415409][T11134] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 341.417641][T11134] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 341.419774][T11134] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 342.125581][T11159] wireguard0: entered promiscuous mode [ 342.299830][T11170] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 342.303166][T11170] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 342.306817][T11170] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 342.346713][T11171] netlink: 'syz.3.1081': attribute type 12 has an invalid length. [ 342.348816][T11171] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1081'. [ 343.604431][T11188] x_tables: ip_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 343.733489][T11196] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 343.736434][T11196] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 343.739013][T11196] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 343.812629][T11199] Cannot find set identified by id 0 to match [ 344.628543][ T5299] Bluetooth: hci3: command 0x0405 tx timeout [ 344.731789][T11213] 9pnet_fd: Insufficient options for proto=fd [ 345.196327][T11221] 9pnet_fd: Insufficient options for proto=fd [ 345.202676][T11221] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1094'. [ 345.501868][T11226] x_tables: ip_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 345.608309][T11228] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 345.611147][T11228] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 345.614190][T11228] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 345.930218][T11238] x_tables: ip_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 346.483511][T11245] Cannot find set identified by id 0 to match [ 346.705538][T11247] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 346.708363][T11247] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 346.711254][T11247] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 346.996949][T11253] vivid-007: disconnect [ 347.481860][T11261] overlay: Unknown parameter '/' [ 347.677901][T11266] syz.2.1105 (11266): drop_caches: 2 [ 347.972311][T11252] vivid-007: reconnect [ 348.112262][T11270] netlink: 7520 bytes leftover after parsing attributes in process `syz.0.1107'. [ 348.192882][T11273] Cannot find set identified by id 0 to match [ 348.392583][T11279] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 348.395223][T11279] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 348.397958][T11279] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 348.413595][T11280] x_tables: ip_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 349.442505][T11293] x_tables: ip_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 349.553646][T11292] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 349.556460][T11292] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 349.559567][T11292] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 350.375012][T11307] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 350.377466][T11307] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 350.380574][T11307] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 350.408278][ T57] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 350.569721][ T57] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 350.576057][ T57] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 350.580924][ T57] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 350.583473][ T57] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.587573][T11299] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 350.593514][ T57] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 350.798311][ T57] usb 5-1: USB disconnect, device number 3 [ 351.353883][T11326] bridge2: entered promiscuous mode [ 351.355768][T11326] bridge2: entered allmulticast mode [ 352.052554][T11337] vivid-007: disconnect [ 352.105109][ T39] audit: type=1326 audit(1733269136.790:2972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11330 comm="syz.2.1119" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68579 code=0x7ffc0000 [ 352.116666][ T39] audit: type=1326 audit(1733269136.800:2973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11330 comm="syz.2.1119" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68579 code=0x7ffc0000 [ 352.127519][ T39] audit: type=1326 audit(1733269136.800:2974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11330 comm="syz.2.1119" exe="/syz-executor" sig=0 arch=40000003 syscall=322 compat=1 ip=0xf7f68579 code=0x7ffc0000 [ 352.133018][ T39] audit: type=1326 audit(1733269136.800:2975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11330 comm="syz.2.1119" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68579 code=0x7ffc0000 [ 352.138797][ T39] audit: type=1326 audit(1733269136.800:2976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11330 comm="syz.2.1119" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68579 code=0x7ffc0000 [ 352.146155][ T39] audit: type=1326 audit(1733269136.800:2977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11330 comm="syz.2.1119" exe="/syz-executor" sig=0 arch=40000003 syscall=355 compat=1 ip=0xf7f68579 code=0x7ffc0000 [ 352.151903][ T39] audit: type=1326 audit(1733269136.800:2978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11330 comm="syz.2.1119" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68579 code=0x7ffc0000 [ 352.157594][ T39] audit: type=1326 audit(1733269136.800:2979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11330 comm="syz.2.1119" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68579 code=0x7ffc0000 [ 352.164006][ T39] audit: type=1326 audit(1733269136.800:2980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11330 comm="syz.2.1119" exe="/syz-executor" sig=0 arch=40000003 syscall=326 compat=1 ip=0xf7f68579 code=0x7ffc0000 [ 352.169759][ T39] audit: type=1326 audit(1733269136.800:2981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11330 comm="syz.2.1119" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68579 code=0x7ffc0000 [ 352.401318][T11344] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 352.404187][T11344] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 352.407134][T11344] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 352.413636][T11343] overlay: Unknown parameter '/' [ 352.535375][ C0] vkms_vblank_simulate: vblank timer overrun [ 353.056269][T11336] vivid-007: reconnect [ 353.229530][T11356] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 353.231771][T11356] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 353.234581][T11356] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 353.517561][T11365] 9pnet_fd: Insufficient options for proto=fd [ 355.822014][T11404] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 355.822014][T11404] program syz.1.1131 not setting count and/or reply_len properly [ 356.060413][T11403] veth1_macvtap: left promiscuous mode [ 356.061965][T11403] macsec0: entered promiscuous mode [ 356.063318][T11403] macsec0: entered allmulticast mode [ 356.207688][T11406] netlink: 'syz.3.1133': attribute type 10 has an invalid length. [ 356.479563][T11406] team0: Failed to send options change via netlink (err -105) [ 356.492749][T11406] team0: Port device netdevsim0 added [ 356.515881][T11409] netlink: 'syz.3.1133': attribute type 10 has an invalid length. [ 356.541748][T11402] bridge2: entered promiscuous mode [ 356.543631][T11402] bridge2: entered allmulticast mode [ 356.571262][T11409] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 356.616668][T11409] team0: Failed to send options change via netlink (err -105) [ 356.618956][T11409] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 356.622975][T11409] team0: Port device netdevsim0 removed [ 356.628535][T11409] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 356.640366][T11411] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 356.643724][T11411] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 356.647158][T11411] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 356.872044][T11409] ata1.00: non-matching transfer count (1530558389/0) [ 357.326529][T11423] sp0: Synchronizing with TNC [ 357.826986][T11427] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 357.830763][T11427] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 357.834216][T11427] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 358.642427][T11441] Cannot find set identified by id 0 to match [ 358.828420][T11449] IPVS: stopping master sync thread 11450 ... [ 358.830709][T11450] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 358.845933][T11449] ./file0: Can't lookup blockdev [ 359.338178][T11454] 9pnet_virtio: no channels available for device syz [ 359.415249][T11455] tmpfs: Unknown parameter 'Î ' [ 359.420062][T11455] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 360.029415][T11463] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 360.032361][T11463] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 360.035295][T11463] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 360.910428][T11474] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 360.913638][T11474] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 360.916992][T11474] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 361.449480][T11482] 9pnet_fd: Insufficient options for proto=fd [ 361.985469][T11491] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 361.989224][T11491] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 361.992477][T11491] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 362.033901][T11489] Cannot find set identified by id 0 to match [ 362.532806][T11500] vivid-007: disconnect [ 362.887549][T11502] overlay: Unknown parameter '/' [ 363.191374][T11507] Cannot find set identified by id 0 to match [ 363.472819][T11499] vivid-007: reconnect [ 363.719971][T11513] 9pnet_fd: Insufficient options for proto=fd [ 364.648626][T11528] 9pnet_fd: Insufficient options for proto=fd [ 364.705827][T11530] 9pnet_fd: Insufficient options for proto=fd [ 364.795084][T11531] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 364.798723][T11531] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 364.801099][T11531] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 366.398498][T11549] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 366.400766][T11549] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 366.402941][T11549] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 367.193186][T11564] Cannot find set identified by id 0 to match [ 367.276758][T11566] sp0: Synchronizing with TNC [ 367.405547][T11568] sp0: Synchronizing with TNC [ 368.190971][T11577] syz.1.1167 (11577): drop_caches: 2 [ 368.782934][T11586] 9pnet_fd: Insufficient options for proto=fd [ 369.402014][T11602] 9pnet_fd: Insufficient options for proto=fd [ 370.112563][T11608] netlink: 7520 bytes leftover after parsing attributes in process `syz.3.1176'. [ 371.004522][T11619] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 371.007568][T11619] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 371.010384][T11619] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 373.992439][ T5951] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 374.181625][T11662] nbd2: detected capacity change from 0 to 12 [ 374.188501][T11664] block nbd2: NBD_DISCONNECT [ 374.188719][T11316] block nbd2: Send control failed (result -89) [ 374.192660][T11316] block nbd2: Request send failed, requeueing [ 374.194556][T11316] block nbd2: Disconnected due to user request. [ 374.198769][T11664] block nbd2: Send disconnect failed -89 [ 374.200278][ T52] blk_print_req_error: 108 callbacks suppressed [ 374.200290][ T52] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 374.205147][ T52] buffer_io_error: 100 callbacks suppressed [ 374.205156][ T52] Buffer I/O error on dev nbd2, logical block 0, async page read [ 374.209302][T11316] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 374.214704][T11316] Buffer I/O error on dev nbd2, logical block 0, async page read [ 374.219355][T11316] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 374.222913][T11662] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 374.225532][T11316] Buffer I/O error on dev nbd2, logical block 0, async page read [ 374.227647][T11316] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 374.230342][T11316] Buffer I/O error on dev nbd2, logical block 0, async page read [ 374.235249][T11316] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 374.237775][T11316] Buffer I/O error on dev nbd2, logical block 0, async page read [ 374.239825][T11316] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 374.242656][T11316] Buffer I/O error on dev nbd2, logical block 0, async page read [ 374.244787][T11316] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 374.247162][T11316] Buffer I/O error on dev nbd2, logical block 0, async page read [ 374.257490][T11316] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 374.261466][T11316] Buffer I/O error on dev nbd2, logical block 0, async page read [ 374.265014][T11316] ldm_validate_partition_table(): Disk read failed. [ 374.267316][T11316] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 374.270445][T11316] Buffer I/O error on dev nbd2, logical block 0, async page read [ 374.273523][T11316] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 374.276781][T11316] Buffer I/O error on dev nbd2, logical block 0, async page read [ 374.279815][T11316] Dev nbd2: unable to read RDB block 0 [ 374.284163][T11316] nbd2: unable to read partition table [ 374.286290][T11316] nbd2: partition table beyond EOD, truncated [ 374.294528][T11316] ldm_validate_partition_table(): Disk read failed. [ 374.297522][T11316] Dev nbd2: unable to read RDB block 0 [ 374.300376][T11316] nbd2: unable to read partition table [ 374.305560][T11316] nbd2: partition table beyond EOD, truncated [ 374.468022][T11670] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1189'. [ 374.907960][T11676] sp0: Synchronizing with TNC [ 374.940579][T11676] trusted_key: encrypted_key: insufficient parameters specified [ 377.350340][T11714] Cannot find set identified by id 0 to match [ 377.401822][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.404673][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 377.538344][T11719] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 377.540378][T11719] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 377.542562][T11719] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 378.040247][ T5951] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 378.043219][ T5951] Bluetooth: hci1: Injecting HCI hardware error event [ 378.047843][ T5951] Bluetooth: hci1: hardware error 0x00 [ 378.158016][T11729] Cannot find set identified by id 0 to match [ 379.303723][T11743] syz.2.1203: attempt to access beyond end of device [ 379.303723][T11743] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 379.309149][T11743] syz.2.1203: attempt to access beyond end of device [ 379.309149][T11743] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 379.313934][T11743] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 379.324776][T11743] syz.2.1203: attempt to access beyond end of device [ 379.324776][T11743] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 379.330147][T11743] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 379.331742][T11747] nbd2: detected capacity change from 0 to 20 [ 379.337557][T11743] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 379.417389][T11743] block nbd2: Send control failed (result -89) [ 379.420929][T11743] block nbd2: Request send failed, requeueing [ 379.425288][ T5299] block nbd2: Receive control failed (result -32) [ 379.428995][ T71] block nbd2: Dead connection, failed to find a fallback [ 379.431765][ T71] block nbd2: shutting down sockets [ 379.433156][ T71] blk_print_req_error: 25 callbacks suppressed [ 379.433164][ T71] I/O error, dev nbd2, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 379.437223][T11743] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=4, location=4 [ 379.440942][T11316] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 379.441550][T11743] I/O error, dev nbd2, sector 12 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 379.451150][T11743] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=3, location=3 [ 379.454670][T11743] I/O error, dev nbd2, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 379.457593][T11743] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=2, location=2 [ 379.459544][T11316] buffer_io_error: 25 callbacks suppressed [ 379.459553][T11316] Buffer I/O error on dev nbd2, logical block 0, async page read [ 379.461322][T11743] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 379.462379][T11316] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 379.469914][T11316] Buffer I/O error on dev nbd2, logical block 1, async page read [ 379.473855][T11743] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 379.476710][T11743] I/O error, dev nbd2, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 379.479609][T11316] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 379.480558][T11743] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=1, location=1 [ 379.486193][T11316] Buffer I/O error on dev nbd2, logical block 0, async page read [ 379.489608][T11316] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 379.493128][T11316] Buffer I/O error on dev nbd2, logical block 0, async page read [ 379.497066][T11743] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 379.507458][T11316] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 379.511798][T11316] Buffer I/O error on dev nbd2, logical block 0, async page read [ 379.515000][T11743] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=0, location=0 [ 379.518140][T11743] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 379.518547][T11316] Buffer I/O error on dev nbd2, logical block 0, async page read [ 379.522072][T11743] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 379.524805][T11316] Buffer I/O error on dev nbd2, logical block 0, async page read [ 379.531336][T11316] Buffer I/O error on dev nbd2, logical block 0, async page read [ 379.534747][T11316] Buffer I/O error on dev nbd2, logical block 0, async page read [ 379.537927][T11316] ldm_validate_partition_table(): Disk read failed. [ 379.540456][T11316] Buffer I/O error on dev nbd2, logical block 0, async page read [ 379.543437][T11316] Dev nbd2: unable to read RDB block 0 [ 379.545773][T11316] nbd2: unable to read partition table [ 379.548014][T11316] nbd2: partition table beyond EOD, truncated [ 379.554569][T11316] ldm_validate_partition_table(): Disk read failed. [ 379.557318][T11316] Dev nbd2: unable to read RDB block 0 [ 379.559650][T11316] nbd2: unable to read partition table [ 379.561850][T11316] nbd2: partition table beyond EOD, truncated [ 380.007755][ T63] IPVS: starting estimator thread 0... [ 380.061689][T11755] vivid-007: disconnect [ 380.110442][T11753] IPVS: using max 38 ests per chain, 91200 per kthread [ 380.119687][ T5951] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 380.541464][T11764] dlm: no local IP address has been set [ 380.542971][T11764] dlm: cannot start dlm midcomms -107 [ 381.380309][T11775] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 381.698120][T11780] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 381.700819][T11780] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 381.703150][T11780] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 381.924867][T11764] vivid-007: reconnect [ 383.080940][T11804] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 383.083564][T11804] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 383.086165][T11804] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 384.084569][T11821] syz.3.1215: attempt to access beyond end of device [ 384.084569][T11821] nbd3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 384.091124][T11821] syz.3.1215: attempt to access beyond end of device [ 384.091124][T11821] nbd3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 384.095555][T11821] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 384.105311][T11821] syz.3.1215: attempt to access beyond end of device [ 384.105311][T11821] nbd3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 384.116990][T11821] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 384.135006][T11821] syz.3.1215: attempt to access beyond end of device [ 384.135006][T11821] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 384.146204][T11822] fuse: Bad value for 'fd' [ 384.147157][T11821] syz.3.1215: attempt to access beyond end of device [ 384.147157][T11821] nbd3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 384.158396][T11821] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 384.166421][T11821] syz.3.1215: attempt to access beyond end of device [ 384.166421][T11821] nbd3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 384.170438][T11821] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 384.177494][T11821] syz.3.1215: attempt to access beyond end of device [ 384.177494][T11821] nbd3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 384.182662][T11821] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 384.185703][T11821] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 384.189143][T11819] nbd3: detected capacity change from 0 to 20 [ 384.189697][T11821] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 384.200612][T11821] block nbd3: Send control failed (result -89) [ 384.202877][T11821] block nbd3: Request send failed, requeueing [ 384.205352][ T5299] block nbd3: Receive control failed (result -32) [ 384.211179][T11710] block nbd3: Dead connection, failed to find a fallback [ 384.214674][T11710] block nbd3: shutting down sockets [ 384.216881][T11821] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=1, location=1 [ 384.221765][T11821] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=0, location=0 [ 384.224522][T11821] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 384.227145][T11821] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 384.565182][T11316] blk_print_req_error: 33 callbacks suppressed [ 384.565195][T11316] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 384.570858][T11316] buffer_io_error: 26 callbacks suppressed [ 384.570869][T11316] Buffer I/O error on dev nbd3, logical block 0, async page read [ 384.574686][T11316] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 384.577070][T11316] Buffer I/O error on dev nbd3, logical block 0, async page read [ 384.579757][T11316] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 384.582596][T11316] Buffer I/O error on dev nbd3, logical block 0, async page read [ 384.584894][T11316] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 384.589965][T11316] Buffer I/O error on dev nbd3, logical block 0, async page read [ 384.593570][T11316] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 384.596131][T11316] Buffer I/O error on dev nbd3, logical block 0, async page read [ 384.598694][T11316] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 384.601318][T11316] Buffer I/O error on dev nbd3, logical block 0, async page read [ 384.603768][T11316] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 384.606329][T11316] Buffer I/O error on dev nbd3, logical block 0, async page read [ 384.610982][T11316] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 384.614852][T11316] Buffer I/O error on dev nbd3, logical block 0, async page read [ 384.617064][T11316] ldm_validate_partition_table(): Disk read failed. [ 384.619595][T11316] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 384.622186][T11316] Buffer I/O error on dev nbd3, logical block 0, async page read [ 384.624517][T11316] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 384.627576][T11316] Buffer I/O error on dev nbd3, logical block 0, async page read [ 384.630965][T11316] Dev nbd3: unable to read RDB block 0 [ 384.633188][T11316] nbd3: unable to read partition table [ 384.635114][T11316] nbd3: partition table beyond EOD, truncated [ 385.190301][T11316] ldm_validate_partition_table(): Disk read failed. [ 385.193348][T11316] Dev nbd3: unable to read RDB block 0 [ 385.195179][T11316] nbd3: unable to read partition table [ 385.196966][T11316] nbd3: partition table beyond EOD, truncated [ 385.544527][T11840] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 385.546708][T11840] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 385.549069][T11840] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 385.642996][T11842] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1222'. [ 385.855707][T11848] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 386.742570][T11869] sp0: Synchronizing with TNC [ 386.921751][T11870] 8021q: adding VLAN 0 to HW filter on device bond3 [ 388.321551][T11885] loop9: detected capacity change from 0 to 6 [ 388.322862][T11885] Dev loop9: unable to read RDB block 6 [ 388.322962][T11885] loop9: unable to read partition table [ 388.323521][T11885] loop9: partition table beyond EOD, truncated [ 388.323596][T11885] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 388.323596][T11885] ) failed (rc=-5) [ 388.435789][T11888] vivid-007: disconnect [ 388.773166][T11889] dlm: no local IP address has been set [ 388.775150][T11889] dlm: cannot start dlm midcomms -107 [ 388.942010][T11897] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 388.945241][T11897] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 388.949028][T11897] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 389.569966][T11889] vivid-007: reconnect [ 389.639505][T11904] vivid-007: disconnect [ 390.114800][T11914] overlay: Unknown parameter '/' [ 390.916366][T11903] vivid-007: reconnect [ 390.954376][T11919] 9pnet_virtio: no channels available for device syz [ 391.355503][T11931] 9pnet_fd: Insufficient options for proto=fd [ 391.419152][T11933] 9pnet_fd: Insufficient options for proto=fd [ 392.104208][T11944] overlay: Unknown parameter '/dev/snd/pcmC#D#p' [ 392.130963][T11944] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 392.148666][T11946] nbd0: detected capacity change from 0 to 20 [ 392.161499][T11316] block nbd0: Send control failed (result -89) [ 392.165546][T11316] block nbd0: Request send failed, requeueing [ 392.174537][ T5299] block nbd0: Receive control failed (result -32) [ 392.177792][ T71] block nbd0: Dead connection, failed to find a fallback [ 392.180289][ T71] block nbd0: shutting down sockets [ 392.181718][ T71] blk_print_req_error: 25 callbacks suppressed [ 392.181727][ T71] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 392.185741][ T71] buffer_io_error: 25 callbacks suppressed [ 392.185748][ T71] Buffer I/O error on dev nbd0, logical block 0, async page read [ 392.191071][T11316] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 392.193540][T11316] Buffer I/O error on dev nbd0, logical block 0, async page read [ 392.197150][T11316] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 392.201533][T11316] Buffer I/O error on dev nbd0, logical block 0, async page read [ 392.204861][T11316] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 392.207428][T11316] Buffer I/O error on dev nbd0, logical block 0, async page read [ 392.210445][T11316] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 392.213013][T11316] Buffer I/O error on dev nbd0, logical block 0, async page read [ 392.217380][T11316] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 392.220405][T11316] Buffer I/O error on dev nbd0, logical block 0, async page read [ 392.223437][T11316] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 392.225867][T11316] Buffer I/O error on dev nbd0, logical block 0, async page read [ 392.229151][T11316] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 392.231895][T11316] Buffer I/O error on dev nbd0, logical block 0, async page read [ 392.236808][T11316] ldm_validate_partition_table(): Disk read failed. [ 392.243502][T11316] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 392.257319][T11316] Buffer I/O error on dev nbd0, logical block 0, async page read [ 392.259692][T11316] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 392.262274][T11316] Buffer I/O error on dev nbd0, logical block 0, async page read [ 392.265709][T11316] Dev nbd0: unable to read RDB block 0 [ 392.268598][T11316] nbd0: unable to read partition table [ 392.270865][T11316] nbd0: partition table beyond EOD, truncated [ 392.276921][T11946] ldm_validate_partition_table(): Disk read failed. [ 392.279883][T11946] Dev nbd0: unable to read RDB block 0 [ 392.282256][T11946] nbd0: unable to read partition table [ 392.284704][T11946] nbd0: partition table beyond EOD, truncated [ 392.288588][T11946] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 392.295748][T11946] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=9, location=9 [ 392.302452][T11946] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=8, location=8 [ 392.307182][T11946] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=7, location=7 [ 392.309728][T11316] ldm_validate_partition_table(): Disk read failed. [ 392.311326][T11946] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 392.318878][T11946] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 392.318961][T11316] Dev nbd0: unable to read RDB block 0 [ 392.323718][T11946] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=4, location=4 [ 392.327339][T11316] nbd0: unable to read partition table [ 392.328176][T11946] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=3, location=3 [ 392.329896][T11316] nbd0: partition table beyond EOD, truncated [ 392.337140][T11946] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=2, location=2 [ 392.340989][T11946] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 392.344203][T11946] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 392.347295][T11946] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=1, location=1 [ 392.350628][T11946] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=0, location=0 [ 392.357165][T11946] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 392.360463][T11946] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 392.943327][T11960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1246'. [ 393.274857][T11964] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 393.278100][T11964] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 393.280463][T11964] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 393.508617][T11971] 8021q: adding VLAN 0 to HW filter on device bond3 [ 393.662106][T11960] orangefs_mount: mount request failed with -4 [ 394.498296][T11985] 9pnet_fd: Insufficient options for proto=fd [ 394.839117][T11997] 9pnet_fd: Insufficient options for proto=fd [ 395.745335][T12011] lo speed is unknown, defaulting to 1000 [ 395.747375][T12011] lo speed is unknown, defaulting to 1000 [ 395.749393][T12011] ip_vti0 speed is unknown, defaulting to 1000 [ 396.169113][T12020] Cannot find set identified by id 0 to match [ 396.367354][T12024] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 396.369744][T12024] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 396.372524][T12024] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 397.268676][T12034] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 397.273008][T12034] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 397.277111][T12034] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 397.649923][T12045] 9pnet_fd: Insufficient options for proto=fd [ 397.883042][T12048] 9pnet_fd: Insufficient options for proto=fd [ 400.043655][T12085] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 400.045941][T12085] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 400.048170][T12085] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 400.360743][T12089] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1273'. [ 400.620280][T12099] 9pnet_fd: Insufficient options for proto=fd [ 400.853858][T12102] 9pnet_fd: Insufficient options for proto=fd [ 400.866002][T12103] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 400.868382][T12103] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 400.870796][T12103] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 401.780041][T12112] random: crng reseeded on system resumption [ 401.898589][T12118] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 402.018662][T12127] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1278'. [ 402.028497][T12127] netlink: 276 bytes leftover after parsing attributes in process `syz.1.1278'. [ 403.838445][T12149] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 403.840963][T12149] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 403.843940][T12149] vhci_hcd vhci_hcd.0: Device attached [ 403.861950][T12156] dvmrp1: entered allmulticast mode [ 404.087506][ T30] vhci_hcd: vhci_device speed not set [ 404.146381][ T30] usb 39-1: new full-speed USB device number 3 using vhci_hcd [ 404.152911][T12166] 9pnet_fd: Insufficient options for proto=fd [ 404.497180][T12160] 8021q: adding VLAN 0 to HW filter on device bond1 [ 404.562489][ C0] vkms_vblank_simulate: vblank timer overrun [ 404.596400][T12165] afs: Unknown parameter '_µWzk' [ 404.599201][ C0] vkms_vblank_simulate: vblank timer overrun [ 404.636758][ C0] vkms_vblank_simulate: vblank timer overrun [ 404.673313][ C0] vkms_vblank_simulate: vblank timer overrun [ 404.886865][T12152] vhci_hcd: connection reset by peer [ 404.888832][ T78] vhci_hcd: stop threads [ 404.891361][ T78] vhci_hcd: release socket [ 404.895517][ T78] vhci_hcd: disconnect device [ 405.573461][T12184] 9pnet_fd: Insufficient options for proto=fd [ 405.870650][ T63] libceph: connect (1)[c::]:6789 error -101 [ 405.872411][ T63] libceph: mon0 (1)[c::]:6789 connect error [ 405.925753][T12194] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 405.995970][T12190] ceph: No mds server is up or the cluster is laggy [ 406.228960][T12203] overlay: Unknown parameter '/dev/snd/pcmC#D#p' [ 406.354711][T12203] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 407.088142][T12214] tipc: Started in network mode [ 407.089826][T12214] tipc: Node identity 10000, cluster identity 4711 [ 407.092158][T12214] tipc: Node number set to 65536 [ 407.280804][T11913] Bluetooth: hci4: Frame reassembly failed (-84) [ 407.818679][T12229] 8021q: adding VLAN 0 to HW filter on device bond1 [ 408.317811][T12235] 9pnet_fd: Insufficient options for proto=fd [ 408.614059][T12244] 9pnet_fd: Insufficient options for proto=fd [ 409.113852][ T5299] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 409.208275][ T30] vhci_hcd: vhci_device speed not set [ 409.389369][ T5299] Bluetooth: hci3: command 0x0405 tx timeout [ 409.447457][T12262] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 409.449625][T12262] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 409.452315][T12262] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 410.477696][T12282] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 410.480918][T12282] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 410.483634][T12282] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 411.543217][T12296] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 411.545562][T12296] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 411.548134][T12296] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 411.638567][T12297] netlink: 'syz.0.1312': attribute type 4 has an invalid length. [ 411.661167][ T25] lo speed is unknown, defaulting to 1000 [ 411.708660][T12299] 8021q: adding VLAN 0 to HW filter on device bond2 [ 411.766739][T12297] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 411.768574][T12297] overlayfs: failed to set xattr on upper [ 411.769981][T12297] overlayfs: ...falling back to redirect_dir=nofollow. [ 411.771747][T12297] overlayfs: ...falling back to index=off. [ 411.773239][T12297] overlayfs: ...falling back to uuid=null. [ 412.189655][T12306] 9pnet_fd: Insufficient options for proto=fd [ 413.147433][T12319] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 414.015302][T12329] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 414.018051][T12329] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 414.021569][T12329] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 416.053784][T12355] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 416.055945][T12355] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 416.058200][T12355] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 416.238908][T12364] overlay: Unknown parameter '/dev/snd/pcmC#D#p' [ 416.346071][T12365] 9pnet_fd: Insufficient options for proto=fd [ 417.557736][T12385] netlink: 'syz.3.1327': attribute type 4 has an invalid length. [ 417.617277][T12385] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 417.619441][T12385] overlayfs: failed to set xattr on upper [ 417.621065][T12385] overlayfs: ...falling back to redirect_dir=nofollow. [ 417.623245][T12385] overlayfs: ...falling back to index=off. [ 417.625252][T12385] overlayfs: ...falling back to uuid=null. [ 417.707610][ T5951] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 417.853673][ T39] kauditd_printk_skb: 21 callbacks suppressed [ 417.853686][ T39] audit: type=1326 audit(1733269202.951:3003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12387 comm="syz.1.1328" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb0579 code=0x7ffc0000 [ 417.888102][ T39] audit: type=1326 audit(1733269202.951:3004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12387 comm="syz.1.1328" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb0579 code=0x7ffc0000 [ 417.905174][ T39] audit: type=1326 audit(1733269202.951:3005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12387 comm="syz.1.1328" exe="/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf7fb0579 code=0x7ffc0000 [ 417.919096][ T39] audit: type=1326 audit(1733269202.961:3006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12387 comm="syz.1.1328" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb0579 code=0x7ffc0000 [ 417.930151][ T39] audit: type=1326 audit(1733269202.961:3007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12387 comm="syz.1.1328" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7fb0579 code=0x7ffc0000 [ 417.940192][ T39] audit: type=1326 audit(1733269202.961:3008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12387 comm="syz.1.1328" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb0579 code=0x7ffc0000 [ 417.950933][ T39] audit: type=1326 audit(1733269202.961:3009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12387 comm="syz.1.1328" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb0579 code=0x7ffc0000 [ 417.968633][ T39] audit: type=1326 audit(1733269202.971:3010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12387 comm="syz.1.1328" exe="/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf7fb0579 code=0x7ffc0000 [ 417.975532][ T39] audit: type=1326 audit(1733269202.971:3011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12387 comm="syz.1.1328" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb0579 code=0x7ffc0000 [ 417.992311][ T39] audit: type=1326 audit(1733269202.971:3012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12387 comm="syz.1.1328" exe="/syz-executor" sig=0 arch=40000003 syscall=379 compat=1 ip=0xf7fb0579 code=0x7ffc0000 [ 418.547344][T12399] syz.0.1331 (12399): drop_caches: 2 [ 418.660359][T12387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 418.927685][T12403] Cannot find set identified by id 0 to match [ 419.320340][T12416] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 419.323198][T12416] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 419.326495][T12416] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 419.692018][T12427] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1338'. [ 419.996504][T12431] netlink: 'syz.0.1338': attribute type 10 has an invalid length. [ 420.583743][T12437] virtio-fs: tag < cryptd(__ecb-twofish-avx) [ 420.583743][T12437] module : kernel [ 420.583743][T12437] priority : 450 [ 420.583743][T12437] refcnt : 1 [ 420.583743][T12437] selftest : passed [ 420.583743][T12437] internal : yes [ 420.583743][T12437] type : skcipher [ 420.583743][T12437] async : yes [ 420.583743][T12437] blocksize : 16 [ 420.583743][T12437] min keysize : 16 [ 420.583743][T12437] max keysize : 32 [ 420.583743][T12437] ivsize : 0 [ 420.583743][T12437] chunksize : 16 [ 420.583743][T12437] walksize : 16 [ 420.583743][T12437] statesize : 0 [ 420.583743][T12437] [ 420.583743][T12437] name : __gcm(aes) [ 420.583743][T12437] driver : cryptd(__generic-gcm-vaes-avx10_256) [ 420.583743][T12437] module : kernel [ 420.583743][T12437] priority : 750 [ 420.583743][T12437] refcnt : 1 [ 420.583743][T12437] selftest : passed [ 420.583743][T12437] internal : yes [ 420.583743][T12437] type : aead [ 420.583743][T12437] async : yes [ 420.583743][T12437] blocksize : 1 [ 420.583743][T12437] ivsize : 12 [ 420.583743][T12437] maxauthsize : 16 [ 420.583743][T12437] geniv : [ 420.583743][T12437] [ 420.583743][T12437] name : __ctr(aes) [ 420.583743][T12437] driver : cryptd(__ctr-aes-aesni) [ 420.583743][T12437] module : kernel [ 420.583743][T12437] priority : 450 [ 420.583743][T12437] refcnt : 1 [ 420.583743][T12437] selftest : passed [ 420.583743][T12437] internal : yes [ 420.583743][T12437] type : skcipher [ 420.583743][T12437] async : yes [ 420.583743][T12437] blocksize : 1 [ 420.583743][T12437] min keysize : 16 [ 420.583743][T12437] max keysize : 32 [ 420.583743][T12437] ivsize : 16 [ 420.583743][T12437] chunksize : 16 [ 420.583743][T12437] walksize : 16 [ 420.583743][T12437] statesize : 0 [ 420.583743][T12437] [ 420.640123][T12439] 9pnet_rdma: rdma_create_trans (12439): problem binding to privport: 13 [ 421.021750][T12446] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 421.024129][T12446] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 421.026405][T12446] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 421.524646][T12453] Cannot find set identified by id 0 to match [ 422.367668][T12465] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 422.370292][T12465] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 422.372734][T12465] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 422.497091][ T35] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 422.673588][ T35] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 422.678196][ T35] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 422.683739][ T35] usb 6-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 422.686878][ T35] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.694252][ T35] usb 6-1: config 0 descriptor?? [ 423.117453][ T35] usbhid 6-1:0.0: can't add hid device: -71 [ 423.120752][ T35] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 423.138754][ T35] usb 6-1: USB disconnect, device number 5 [ 423.403830][T12474] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 423.407067][T12474] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 423.410819][T12474] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 423.469762][T12472] lo speed is unknown, defaulting to 1000 [ 423.493094][T12472] lo speed is unknown, defaulting to 1000 [ 423.495733][T12472] ip_vti0 speed is unknown, defaulting to 1000 [ 424.643830][T12487] Cannot find set identified by id 0 to match [ 424.930750][T12492] xt_CT: You must specify a L4 protocol and not use inversions on it [ 425.059363][T12497] Cannot find set identified by id 0 to match [ 425.550740][T12508] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 425.553713][T12508] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 425.556687][T12508] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 426.327464][T12513] Cannot find set identified by id 0 to match [ 426.578076][T12518] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 426.580400][T12518] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 426.582754][T12518] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 426.769594][T12491] lo speed is unknown, defaulting to 1000 [ 426.773111][T12491] lo speed is unknown, defaulting to 1000 [ 426.776290][T12491] ip_vti0 speed is unknown, defaulting to 1000 [ 427.020002][T12525] MTD: Attempt to mount non-MTD device "/dev/nbd1" [ 427.093291][T12525] bio_check_eod: 2 callbacks suppressed [ 427.095038][T12525] syz.1.1359: attempt to access beyond end of device [ 427.095038][T12525] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 427.230566][T12531] 8021q: adding VLAN 0 to HW filter on device bond2 [ 427.773512][T12539] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 427.776729][T12539] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 427.779697][T12539] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 428.462254][T12550] Cannot find set identified by id 0 to match [ 428.475417][T12551] Cannot find set identified by id 0 to match [ 429.280801][T12568] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 429.283188][T12568] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 429.285431][T12568] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 429.322518][T12567] Cannot find set identified by id 0 to match [ 430.309626][T12580] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 430.312458][T12580] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 430.315293][T12580] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 431.668602][T12604] Cannot find set identified by id 0 to match [ 431.696290][T12608] Cannot find set identified by id 0 to match [ 432.083379][ T39] kauditd_printk_skb: 6 callbacks suppressed [ 432.083390][ T39] audit: type=1800 audit(1733269217.256:3019): pid=12612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1376" name="file1" dev="overlay" ino=1988 res=0 errno=0 [ 432.108443][T12612] No control pipe specified [ 432.140246][T12612] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1376'. [ 433.086210][T12620] Cannot find set identified by id 0 to match [ 433.590510][T12643] pimreg: entered allmulticast mode [ 433.934431][T12654] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 433.937711][T12654] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 433.941455][T12654] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 433.946057][ T63] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 433.963912][T12650] binder: transaction release 55 bad handle 1, ret = -22 [ 434.394674][T12676] Cannot find set identified by id 0 to match [ 435.229792][T12688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1390'. [ 435.293923][T12693] Cannot find set identified by id 0 to match [ 435.401359][ T5299] Bluetooth: hci3: command 0x0405 tx timeout [ 436.403617][T12704] lo speed is unknown, defaulting to 1000 [ 436.405698][T12704] lo speed is unknown, defaulting to 1000 [ 436.407824][T12704] ip_vti0 speed is unknown, defaulting to 1000 [ 438.354487][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 438.356179][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.997276][T12732] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 441.266927][T12729] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1393'. [ 441.942695][T12745] Cannot find set identified by id 0 to match [ 441.985988][T12748] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 441.988100][T12748] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 441.990206][T12748] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 442.839837][T12778] Cannot find set identified by id 0 to match [ 444.703907][T12801] 8021q: adding VLAN 0 to HW filter on device bond3 [ 444.926252][T12809] syz.3.1407 (12809): drop_caches: 2 [ 445.299056][T12814] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 445.301372][T12814] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 445.303700][T12814] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 446.019958][ T5951] Bluetooth: hci3: command 0x0405 tx timeout [ 446.106352][T12829] overlay: Unknown parameter 'smackfsfloor' [ 446.242162][T12833] syzkaller1: entered promiscuous mode [ 446.244147][T12833] syzkaller1: entered allmulticast mode [ 447.382397][ T39] audit: type=1326 audit(1733269232.592:3020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12843 comm="syz.3.1419" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57579 code=0x7ffc0000 [ 447.401884][ T39] audit: type=1326 audit(1733269232.602:3021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12843 comm="syz.3.1419" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57579 code=0x7ffc0000 [ 447.665748][ T39] audit: type=1326 audit(1733269232.602:3022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12843 comm="syz.3.1419" exe="/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf7f57579 code=0x7ffc0000 [ 447.677763][ T39] audit: type=1326 audit(1733269232.612:3023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12843 comm="syz.3.1419" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57579 code=0x7ffc0000 [ 447.975714][ T39] audit: type=1326 audit(1733269233.193:3024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12843 comm="syz.3.1419" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7f57579 code=0x7ffc0000 [ 447.982000][ T39] audit: type=1326 audit(1733269233.193:3025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12843 comm="syz.3.1419" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57579 code=0x7ffc0000 [ 447.988373][ T39] audit: type=1326 audit(1733269233.193:3026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12843 comm="syz.3.1419" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57579 code=0x7ffc0000 [ 447.995416][ T39] audit: type=1326 audit(1733269233.193:3027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12843 comm="syz.3.1419" exe="/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf7f57579 code=0x7ffc0000 [ 448.002969][ T39] audit: type=1326 audit(1733269233.193:3028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12843 comm="syz.3.1419" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57579 code=0x7ffc0000 [ 448.009669][ T39] audit: type=1326 audit(1733269233.193:3029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12843 comm="syz.3.1419" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57579 code=0x7ffc0000 [ 448.398153][T12843] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 448.814321][T12866] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 448.816717][T12866] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 448.819022][T12866] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 451.106038][T12904] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1430'. [ 451.133764][T12904] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 451.137335][T12904] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 451.140946][T12904] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 451.144102][T12904] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 452.210256][T12922] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 452.213192][T12922] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 452.216084][T12922] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 453.188233][T12940] random: crng reseeded on system resumption [ 453.360761][T12941] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1437'. [ 453.419111][T12942] netlink: 276 bytes leftover after parsing attributes in process `syz.2.1437'. [ 453.738288][T12947] libceph: resolve '. [ 453.738288][T12947] #)|.زf͹Dza×ïÅ2sˆoÖw¿úÕ?£'Ê%ÐKAq‰f»CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM¤¨ìó¤h‡E$ [ 453.738288][T12947] ' (ret=-3): failed [ 455.518958][T12979] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 455.521877][T12979] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 455.525296][T12979] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 456.545488][T13001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1450'. [ 457.126796][T13006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1449'. [ 458.247175][T13027] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1456'. [ 458.342771][T13024] usb 2-1: USB disconnect, device number 5 [ 459.078921][T13042] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 459.082461][T13042] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 459.085421][T13042] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 459.551342][T13052] 9pnet_fd: Insufficient options for proto=fd [ 460.265974][T13062] Cannot find set identified by id 0 to match [ 462.241064][T13095] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 462.244122][T13095] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 462.247029][T13095] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 462.415981][T13100] 9pnet_fd: Insufficient options for proto=fd [ 463.253911][T13115] Cannot find set identified by id 0 to match [ 463.767420][T13122] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 463.769144][T13122] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 463.772634][T13122] vhci_hcd vhci_hcd.0: Device attached [ 463.946743][ T25] vhci_hcd: vhci_device speed not set [ 464.006451][ T25] usb 43-1: new full-speed USB device number 3 using vhci_hcd [ 464.045104][T13122] afs: Unknown parameter '_µWzk' [ 464.059180][T13120] Cannot find set identified by id 0 to match [ 464.593489][ T39] kauditd_printk_skb: 29 callbacks suppressed [ 464.593500][ T39] audit: type=1326 audit(1733269249.822:3059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13129 comm="syz.2.1478" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68579 code=0x7ffc0000 [ 464.607998][ T39] audit: type=1326 audit(1733269249.822:3060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13129 comm="syz.2.1478" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68579 code=0x7ffc0000 [ 464.614868][ T39] audit: type=1326 audit(1733269249.822:3061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13129 comm="syz.2.1478" exe="/syz-executor" sig=0 arch=40000003 syscall=322 compat=1 ip=0xf7f68579 code=0x7ffc0000 [ 464.628879][ T39] audit: type=1326 audit(1733269249.822:3062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13129 comm="syz.2.1478" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68579 code=0x7ffc0000 [ 464.643032][ T39] audit: type=1326 audit(1733269249.822:3063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13129 comm="syz.2.1478" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68579 code=0x7ffc0000 [ 464.655133][ T39] audit: type=1326 audit(1733269249.822:3064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13129 comm="syz.2.1478" exe="/syz-executor" sig=0 arch=40000003 syscall=355 compat=1 ip=0xf7f68579 code=0x7ffc0000 [ 464.669634][ T39] audit: type=1326 audit(1733269249.822:3065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13129 comm="syz.2.1478" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68579 code=0x7ffc0000 [ 464.696760][ T39] audit: type=1326 audit(1733269249.822:3066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13129 comm="syz.2.1478" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68579 code=0x7ffc0000 [ 464.702471][ T39] audit: type=1326 audit(1733269249.822:3067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13129 comm="syz.2.1478" exe="/syz-executor" sig=0 arch=40000003 syscall=326 compat=1 ip=0xf7f68579 code=0x7ffc0000 [ 464.710201][ T39] audit: type=1326 audit(1733269249.822:3068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13129 comm="syz.2.1478" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68579 code=0x7ffc0000 [ 464.720758][T13123] vhci_hcd: connection reset by peer [ 464.724583][ T1134] vhci_hcd: stop threads [ 464.725937][ T1134] vhci_hcd: release socket [ 464.727355][ T1134] vhci_hcd: disconnect device [ 464.826702][T13135] lo speed is unknown, defaulting to 1000 [ 464.830245][T13135] lo speed is unknown, defaulting to 1000 [ 464.833682][T13135] ip_vti0 speed is unknown, defaulting to 1000 [ 465.177834][T13140] hub 2-0:1.0: USB hub found [ 465.179505][T13140] hub 2-0:1.0: 6 ports detected [ 465.365033][ T5979] usb 2-1: new high-speed USB device number 6 using ehci-pci [ 465.489366][T13150] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 465.492460][T13150] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 465.496326][T13150] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 465.569695][ T5979] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 465.573020][ T5979] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 465.575734][ T5979] usb 2-1: Product: QEMU USB Tablet [ 465.577431][ T5979] usb 2-1: Manufacturer: QEMU [ 465.578946][ T5979] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 465.790559][T13157] 9pnet_fd: Insufficient options for proto=fd [ 466.517350][ T5979] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0006/input/input20 [ 466.576137][ T5979] hid-generic 0003:0627:0001.0006: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 466.627321][T13167] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 466.630198][T13167] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 466.632483][T13167] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 467.927112][T13183] Cannot find set identified by id 0 to match [ 468.225079][T13189] syz.3.1490 (13189): drop_caches: 2 [ 468.629652][T13194] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 468.631892][T13194] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 468.635814][T13194] vhci_hcd vhci_hcd.0: Device attached [ 468.738172][T13179] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 468.739556][T13199] afs: Unknown parameter '_µWzk' [ 468.740904][T13179] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 468.751911][T13186] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 468.755997][T13190] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 468.832189][ T57] vhci_hcd: vhci_device speed not set [ 468.922896][ T57] usb 41-1: new full-speed USB device number 4 using vhci_hcd [ 469.057256][T13208] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1494'. [ 469.102378][ T25] vhci_hcd: vhci_device speed not set [ 469.494470][T13196] vhci_hcd: connection reset by peer [ 469.501240][ T1134] vhci_hcd: stop threads [ 469.510771][ T1134] vhci_hcd: release socket [ 469.517799][ T1134] vhci_hcd: disconnect device [ 469.763045][T13220] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 469.765214][T13220] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 469.767283][T13220] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 470.126389][ T5299] Bluetooth: hci0: command 0x0406 tx timeout [ 470.662666][T13237] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 470.665059][T13237] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 470.667398][T13237] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 470.755533][T13228] lo speed is unknown, defaulting to 1000 [ 470.758575][T13228] lo speed is unknown, defaulting to 1000 [ 470.763526][T13228] ip_vti0 speed is unknown, defaulting to 1000 [ 470.800889][ T5299] Bluetooth: hci3: command 0x0405 tx timeout [ 471.347693][T13255] netlink: 'syz.2.1501': attribute type 21 has an invalid length. [ 471.496603][T13261] lo speed is unknown, defaulting to 1000 [ 471.499712][T13261] lo speed is unknown, defaulting to 1000 [ 471.502894][T13261] ip_vti0 speed is unknown, defaulting to 1000 [ 471.961009][T13266] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 471.964193][T13266] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 471.967548][T13266] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 472.941874][T13280] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 472.944806][T13280] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 472.947774][T13280] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 473.565359][T13284] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 473.567231][T13284] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 473.569772][T13284] vhci_hcd vhci_hcd.0: Device attached [ 473.624977][T13291] random: crng reseeded on system resumption [ 473.635372][T13291] Restarting kernel threads ... done. [ 473.748770][ T5979] vhci_hcd: vhci_device speed not set [ 473.753043][T13293] overlayfs: overlapping lowerdir path [ 473.766847][T13293] afs: Unknown parameter '_µWzk' [ 473.928902][T13302] Cannot find set identified by id 0 to match [ 473.938659][ T5979] usb 37-1: new full-speed USB device number 4 using vhci_hcd [ 474.058473][ T57] vhci_hcd: vhci_device speed not set [ 474.407614][T13305] lo speed is unknown, defaulting to 1000 [ 474.410828][T13305] lo speed is unknown, defaulting to 1000 [ 474.413137][T13305] ip_vti0 speed is unknown, defaulting to 1000 [ 474.544897][T13286] vhci_hcd: connection reset by peer [ 474.547166][ T1140] vhci_hcd: stop threads [ 474.548830][ T1140] vhci_hcd: release socket [ 474.550099][ T1140] vhci_hcd: disconnect device [ 474.742843][T13319] 9pnet_fd: Insufficient options for proto=fd [ 474.747149][T13319] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1513'. [ 475.023032][T13322] Cannot find set identified by id 0 to match [ 475.578297][T13337] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1519'. [ 475.604742][T13337] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 475.609167][T13337] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 475.612528][T13337] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 475.615775][T13337] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 475.997111][ T7125] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 476.158860][ T7125] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 476.166915][ T7125] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 476.170046][ T7125] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 476.173174][ T7125] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 476.180382][ T7125] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 476.182809][ T7125] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.187881][ T7125] usb 7-1: config 0 descriptor?? [ 476.191583][T13338] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 476.331034][T13348] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 476.333230][T13348] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 476.335466][T13348] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 477.058792][T13354] Cannot find set identified by id 0 to match [ 477.097933][ T7125] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 477.102286][ T7125] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 477.121330][ T7125] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 477.380466][ T7125] usb 7-1: USB disconnect, device number 7 [ 477.384545][T13360] Cannot find set identified by id 0 to match [ 478.430891][T13368] tipc: Started in network mode [ 478.431677][T13369] 9pnet_fd: Insufficient options for proto=fd [ 478.432677][T13368] tipc: Node identity 10000, cluster identity 4711 [ 478.437212][T13368] tipc: Node number set to 65536 [ 478.470013][ T65] Bluetooth: hci4: Frame reassembly failed (-84) [ 478.472291][ T65] Bluetooth: hci4: Frame reassembly failed (-84) [ 478.474352][ T65] Bluetooth: hci4: Frame reassembly failed (-84) [ 478.476673][ T65] Bluetooth: hci4: Frame reassembly failed (-84) [ 478.478491][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 479.082004][T13390] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 479.084353][T13390] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 479.086922][T13390] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 479.095242][ T5979] vhci_hcd: vhci_device speed not set [ 479.469075][T13377] ALSA: mixer_oss: invalid OSS volume 'u' [ 479.596212][T13397] Cannot find set identified by id 0 to match [ 480.072968][T13405] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 480.076723][T13405] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 480.080674][T13405] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 480.467058][ T5299] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 481.040878][T13420] Cannot find set identified by id 0 to match [ 481.530231][T13429] 9pnet_fd: Insufficient options for proto=fd [ 481.657266][T13425] lo speed is unknown, defaulting to 1000 [ 481.659152][T13425] lo speed is unknown, defaulting to 1000 [ 481.660969][T13425] ip_vti0 speed is unknown, defaulting to 1000 [ 481.752707][T13433] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1538'. [ 483.848048][T13460] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 483.852390][T13460] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 483.855270][T13460] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 485.596762][T13492] 9pnet_fd: Insufficient options for proto=fd [ 485.790931][ T30] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 485.950832][ T30] usb 6-1: Using ep0 maxpacket: 8 [ 485.960946][ T30] usb 6-1: config index 0 descriptor too short (expected 5924, got 36) [ 485.963258][ T30] usb 6-1: config 250 has an invalid interface number: 228 but max is -1 [ 485.966356][ T30] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 485.968968][ T30] usb 6-1: config 250 has no interface number 0 [ 485.969316][T13494] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1552'. [ 485.971737][ T30] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 485.979622][ T30] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 486.001081][ T30] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 486.010968][ T30] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 486.015334][ T30] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 486.018984][ T30] usb 6-1: config 250 interface 228 has no altsetting 0 [ 486.024196][ T30] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 486.029873][ T30] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 486.032390][ T30] usb 6-1: Product: syz [ 486.033530][ T30] usb 6-1: SerialNumber: syz [ 486.036754][T13494] netlink: 'syz.2.1552': attribute type 10 has an invalid length. [ 486.047115][ T30] hub 6-1:250.228: bad descriptor, ignoring hub [ 486.048801][ T30] hub 6-1:250.228: probe with driver hub failed with error -5 [ 486.238011][ T30] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 6 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 486.340595][T13501] Cannot find set identified by id 0 to match [ 486.558693][T13490] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1551'. [ 486.688911][T13509] Cannot find set identified by id 0 to match [ 486.764810][ C0] vkms_vblank_simulate: vblank timer overrun [ 486.890268][ C0] vkms_vblank_simulate: vblank timer overrun [ 486.905109][ T25] usb 6-1: USB disconnect, device number 6 [ 486.907794][ T25] usblp0: removed [ 486.935927][T13515] Cannot find set identified by id 0 to match [ 487.297256][ T39] kauditd_printk_skb: 37 callbacks suppressed [ 487.297270][ T39] audit: type=1326 audit(1733269272.538:3106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13516 comm="syz.3.1558" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57579 code=0x7ffc0000 [ 487.336784][ T39] audit: type=1326 audit(1733269272.558:3107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13516 comm="syz.3.1558" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57579 code=0x7ffc0000 [ 487.348071][ T39] audit: type=1326 audit(1733269272.558:3108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13516 comm="syz.3.1558" exe="/syz-executor" sig=0 arch=40000003 syscall=71 compat=1 ip=0xf7f57579 code=0x7ffc0000 [ 487.354689][ T39] audit: type=1326 audit(1733269272.558:3109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13516 comm="syz.3.1558" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57579 code=0x7ffc0000 [ 487.360845][ T39] audit: type=1326 audit(1733269272.558:3110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13516 comm="syz.3.1558" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57579 code=0x7ffc0000 [ 487.366685][ T39] audit: type=1326 audit(1733269272.558:3111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13516 comm="syz.3.1558" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f57579 code=0x7ffc0000 [ 487.373128][ T39] audit: type=1326 audit(1733269272.558:3112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13516 comm="syz.3.1558" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57579 code=0x7ffc0000 [ 487.378974][ T39] audit: type=1326 audit(1733269272.558:3113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13516 comm="syz.3.1558" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57579 code=0x7ffc0000 [ 487.388378][ T39] audit: type=1326 audit(1733269272.558:3114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13516 comm="syz.3.1558" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f57579 code=0x7ffc0000 [ 487.395662][ T39] audit: type=1326 audit(1733269272.558:3115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13516 comm="syz.3.1558" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57579 code=0x7ffc0000 [ 488.024589][T13541] 9pnet_fd: Insufficient options for proto=fd [ 488.129717][T13544] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 488.132162][T13544] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 488.134716][T13544] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 488.782184][T13551] Cannot find set identified by id 0 to match [ 488.798426][T13552] netlink: 'syz.1.1563': attribute type 21 has an invalid length. [ 489.004261][T13555] Cannot find set identified by id 0 to match [ 489.462959][T13566] MTD: Attempt to mount non-MTD device "/dev/nbd2" [ 489.467468][T13566] syz.2.1568: attempt to access beyond end of device [ 489.467468][T13566] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 490.927073][T13585] 9pnet_fd: Insufficient options for proto=fd [ 491.092447][T13590] random: crng reseeded on system resumption [ 491.215832][T13594] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 491.218063][T13594] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 491.220243][T13594] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 491.346683][T13597] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1572'. [ 491.397700][T13597] netlink: 276 bytes leftover after parsing attributes in process `syz.3.1572'. [ 491.602133][T13600] Cannot find set identified by id 0 to match [ 491.671901][T13603] Cannot find set identified by id 0 to match [ 491.852032][T13608] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 493.429239][T13637] 9pnet_fd: Insufficient options for proto=fd [ 493.921324][T13644] Cannot find set identified by id 0 to match [ 494.321553][T13651] Cannot find set identified by id 0 to match [ 494.376243][T13653] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 494.378631][T13653] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 494.380815][T13653] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 495.515499][ T5299] Bluetooth: hci3: unknown advertising packet type: 0x65 [ 495.515558][ T5299] Bluetooth: hci3: Malformed LE Event: 0x02 [ 496.537140][T13687] 9pnet_fd: Insufficient options for proto=fd [ 496.737938][T13688] Cannot find set identified by id 0 to match [ 496.785926][T13692] MTD: Attempt to mount non-MTD device "/dev/nbd0" [ 496.787843][T13692] syz.0.1595: attempt to access beyond end of device [ 496.787843][T13692] nbd0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 496.842598][T13693] Cannot find set identified by id 0 to match [ 497.559691][T13711] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 498.153041][T13716] syz.0.1601 (13716): drop_caches: 2 [ 499.436644][T13734] Cannot find set identified by id 0 to match [ 499.726803][T13742] 9pnet_fd: Insufficient options for proto=fd [ 499.773298][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 499.784152][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 500.258296][T13745] MTD: Attempt to mount non-MTD device "/dev/nbd3" [ 500.261325][T13745] syz.3.1608: attempt to access beyond end of device [ 500.261325][T13745] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 500.407145][T13751] syz.1.1610 (13751): drop_caches: 2 [ 500.768029][T13756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1611'. [ 501.901684][T11913] Bluetooth: hci4: Frame reassembly failed (-84) [ 502.128531][T13781] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 502.456059][T13786] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1618'. [ 502.459223][T13786] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1618'. [ 503.807257][T13800] netlink: 'syz.3.1630': attribute type 2 has an invalid length. [ 503.809866][T13800] netlink: 'syz.3.1630': attribute type 9 has an invalid length. [ 503.812761][T13800] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1630'. [ 503.871229][T13800] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2758444543 (5516889086 ns) > initial count (4205064 ns). Using initial count to start timer. [ 503.900988][ T5299] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 504.362908][T13812] usb 2-1: USB disconnect, device number 6 [ 504.398358][T13812] hub 2-0:1.0: USB hub found [ 504.400178][T13812] hub 2-0:1.0: 6 ports detected [ 504.560537][ T25] usb 2-1: new high-speed USB device number 7 using ehci-pci [ 504.743514][ T25] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 504.746013][ T25] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 504.752515][ T25] usb 2-1: Product: QEMU USB Tablet [ 504.757668][ T25] usb 2-1: Manufacturer: QEMU [ 504.759163][ T25] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 504.788584][ T25] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0008/input/input21 [ 504.854539][ T25] hid-generic 0003:0627:0001.0008: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 505.020470][ T5299] Bluetooth: hci3: command 0x0405 tx timeout [ 507.061246][T13842] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1628'. [ 507.164223][T13848] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1631'. [ 507.176938][T13848] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 507.180263][T13848] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 508.251213][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 509.207941][T13874] random: crng reseeded on system resumption [ 509.233288][T13874] Restarting kernel threads ... done. [ 510.287631][ T5299] Bluetooth: hci4: command 0x1003 tx timeout [ 510.287816][ T5951] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 511.667105][T13919] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 511.669646][T13919] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 511.672746][T13919] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 513.406598][T13954] random: crng reseeded on system resumption [ 513.476870][ T63] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 515.095090][ T57] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 515.245085][ T57] usb 8-1: Using ep0 maxpacket: 8 [ 515.258684][ T57] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 515.261021][ T57] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 515.264591][ T57] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 515.268023][ T57] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 515.277450][ T57] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 515.284302][ T57] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 515.286950][ T57] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 515.292774][ T57] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 515.300451][ T57] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 515.304563][ T57] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 515.320002][ T57] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 515.321819][ T57] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 515.334768][ T57] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 515.339490][ T57] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 515.342938][ T57] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 515.393576][ T57] usb 8-1: string descriptor 0 read error: -22 [ 515.395451][ T57] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 515.397981][ T57] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.429335][ T57] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 515.553980][T14003] lo speed is unknown, defaulting to 1000 [ 515.563215][T14003] lo speed is unknown, defaulting to 1000 [ 515.568940][T14003] ip_vti0 speed is unknown, defaulting to 1000 [ 515.663330][ T9] usb 8-1: USB disconnect, device number 4 [ 515.863142][ T39] kauditd_printk_skb: 9 callbacks suppressed [ 515.863228][ T39] audit: type=1326 audit(1733269301.123:3125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14008 comm="syz.1.1660" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb0579 code=0x0 [ 516.764416][ T5951] Bluetooth: hci0: command 0x0406 tx timeout [ 524.805053][T14040] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 524.830814][T14040] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 524.834589][T14040] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 525.386306][T14072] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 525.388039][T14072] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 525.392224][T14072] vhci_hcd vhci_hcd.0: Device attached [ 526.120048][ T9] vhci_hcd: vhci_device speed not set [ 526.179465][ T9] usb 37-1: new full-speed USB device number 5 using vhci_hcd [ 526.448555][T14076] vhci_hcd: connection reset by peer [ 526.450800][ T1216] vhci_hcd: stop threads [ 526.452034][ T1216] vhci_hcd: release socket [ 526.453730][ T1216] vhci_hcd: disconnect device [ 526.965307][T14094] Cannot find set identified by id 0 to match [ 528.082142][T14120] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 528.084338][T14120] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 528.086557][T14120] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 528.176443][T14122] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1674'. [ 528.178910][T14122] netlink: 312 bytes leftover after parsing attributes in process `syz.0.1674'. [ 528.844035][T14126] syz.2.1677 (14126): drop_caches: 2 [ 529.329842][T14139] veth1_macvtap: entered promiscuous mode [ 529.331356][T14139] veth1_macvtap: entered allmulticast mode [ 530.631607][T14157] Cannot find set identified by id 0 to match [ 532.138397][ T9] vhci_hcd: vhci_device speed not set [ 532.756426][ T5951] Bluetooth: hci0: command 0x0406 tx timeout [ 533.017944][T14195] syz.1.1691 (14195): drop_caches: 2 [ 533.848013][T14209] x_tables: ip_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 536.046800][T14248] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 536.050031][T14248] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 536.053298][T14248] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 536.221782][T14247] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1703'. [ 536.884200][T14267] syz.3.1705 (14267): drop_caches: 2 [ 536.893746][T14263] Cannot find set identified by id 0 to match [ 537.191130][T14276] sp0: Synchronizing with TNC [ 537.923131][T14283] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1709'. [ 537.925672][T14283] netlink: 312 bytes leftover after parsing attributes in process `syz.2.1709'. [ 539.305984][T14302] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 539.309033][T14302] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 539.311528][T14302] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 541.258298][T14334] Cannot find set identified by id 0 to match [ 541.754291][ T25] e1000 0000:00:06.0 eth0: Reset adapter [ 541.949824][T14346] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 542.083505][T14365] Cannot find set identified by id 0 to match [ 542.743883][T14378] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 542.746361][T14378] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 542.749119][T14378] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 543.954734][ T25] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 552.787205][T14423] lo speed is unknown, defaulting to 1000 [ 552.789006][T14423] lo speed is unknown, defaulting to 1000 [ 552.790846][T14423] ip_vti0 speed is unknown, defaulting to 1000 [ 553.640604][T14441] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 553.642813][T14441] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 553.645593][T14441] vhci_hcd vhci_hcd.0: Device attached [ 553.739891][T14441] overlayfs: failed to resolve './file0': -2 [ 554.055875][T14442] vhci_hcd: connection closed [ 554.056073][T11913] vhci_hcd: stop threads [ 554.058799][T11913] vhci_hcd: release socket [ 554.060018][T11913] vhci_hcd: disconnect device [ 554.275242][T14456] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 554.277488][T14456] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 554.279688][T14456] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 554.905933][T14464] Cannot find set identified by id 0 to match [ 555.326206][T14476] sp0: Synchronizing with TNC [ 555.662613][T14475] lo speed is unknown, defaulting to 1000 [ 555.665083][T14475] lo speed is unknown, defaulting to 1000 [ 555.667134][T14475] ip_vti0 speed is unknown, defaulting to 1000 [ 555.829761][T14483] sp0: Synchronizing with TNC [ 556.425141][T14491] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 556.427419][T14491] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 556.431357][T14491] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 557.390602][T14508] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 557.394059][T14508] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 557.401254][T14508] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 557.873407][ T5299] Bluetooth: hci3: command 0x0405 tx timeout [ 558.291963][T14524] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 558.297925][T14524] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 558.300211][T14524] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 558.627567][T14529] Cannot find set identified by id 0 to match [ 559.168885][T14537] sp0: Synchronizing with TNC [ 559.217570][T14537] sp0: Synchronizing with TNC [ 559.878403][T14541] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 559.880568][T14541] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 559.882849][T14541] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 559.954039][ T5951] Bluetooth: hci3: command 0x0405 tx timeout [ 560.611138][ T30] libceph: connect (1)[c::]:6789 error -101 [ 560.613725][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 560.899317][T14553] ceph: No mds server is up or the cluster is laggy [ 561.008091][T14571] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 561.011270][T14571] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 561.014312][T14571] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 561.164465][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 561.166213][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.223284][T14598] syz.3.1767 (14598) used greatest stack depth: 20688 bytes left [ 563.449796][T14619] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 563.452045][T14619] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 563.455004][T14619] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 564.461680][T14639] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 564.464196][T14639] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 564.543442][T14634] x_tables: ip_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 566.591459][T14678] mkiss: ax0: crc mode is auto. [ 566.884380][T14692] Cannot find set identified by id 0 to match [ 567.022650][T14691] usb usb1: usbfs: process 14691 (syz.0.1783) did not claim interface 0 before use [ 567.096926][T14695] 9pnet_fd: Insufficient options for proto=fd [ 567.345720][T14691] random: crng reseeded on system resumption [ 567.824494][T14707] netlink: 'syz.2.1786': attribute type 9 has an invalid length. [ 567.827377][T14707] netlink: 209560 bytes leftover after parsing attributes in process `syz.2.1786'. [ 567.898169][T14683] delete_channel: no stack [ 568.588305][T14727] netlink: 'syz.0.1792': attribute type 4 has an invalid length. [ 568.598759][T14727] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 568.600568][T14727] overlayfs: failed to set xattr on upper [ 568.602041][T14727] overlayfs: ...falling back to redirect_dir=nofollow. [ 568.604718][T14727] overlayfs: ...falling back to index=off. [ 568.606757][T14727] overlayfs: ...falling back to uuid=null. [ 568.934015][ T25] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 568.968313][T14731] syzkaller0: entered promiscuous mode [ 568.969842][T14731] syzkaller0: entered allmulticast mode [ 570.473681][T14739] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 570.476124][T14739] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 570.478410][T14739] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 570.487284][T14742] mkiss: ax0: crc mode is auto. [ 570.611562][T14750] Cannot find set identified by id 0 to match [ 570.851356][T14753] syz.1.1797 (14753): drop_caches: 2 [ 570.990381][T14755] snd_dummy snd_dummy.0: control 0:0:3:syz0:0 is already present [ 571.093332][ T9] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 571.273383][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 571.276984][ T9] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 571.279613][ T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 571.282109][ T9] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 571.285656][ T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 571.288244][ T9] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 571.291528][ T9] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 571.294235][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.546210][ T9] usb 8-1: GET_CAPABILITIES returned 0 [ 571.547984][ T9] usbtmc 8-1:16.0: can't read capabilities [ 571.814539][T14782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1807'. [ 572.800115][T14759] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 572.814599][ T30] usb 8-1: USB disconnect, device number 5 [ 573.218236][T14801] Cannot find set identified by id 0 to match [ 574.115546][T14821] netlink: 'syz.1.1811': attribute type 10 has an invalid length. [ 574.128431][T14821] batman_adv: batadv0: Adding interface: team0 [ 574.130150][T14821] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 574.136407][T14821] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 574.157123][T14820] netlink: 'syz.1.1811': attribute type 10 has an invalid length. [ 574.160865][T14820] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1811'. [ 574.165026][T14820] team0: entered promiscuous mode [ 574.173126][T14820] 8021q: adding VLAN 0 to HW filter on device team0 [ 574.185828][T14820] batman_adv: batadv0: Interface activated: team0 [ 574.187977][T14820] batman_adv: batadv0: Interface deactivated: team0 [ 574.189759][T14820] batman_adv: batadv0: Removing interface: team0 [ 574.195167][T14820] bridge0: port 1(team0) entered blocking state [ 574.196971][T14820] bridge0: port 1(team0) entered disabled state [ 574.206640][T14820] team0: entered allmulticast mode [ 575.964010][T14860] Cannot find set identified by id 0 to match [ 577.563236][T14884] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 577.564958][T14884] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 577.567650][T14884] vhci_hcd vhci_hcd.0: Device attached [ 578.203382][ T9] vhci_hcd: vhci_device speed not set [ 578.218914][T14885] vhci_hcd: connection closed [ 578.219219][ T65] vhci_hcd: stop threads [ 578.221644][ T65] vhci_hcd: release socket [ 578.224579][ T65] vhci_hcd: disconnect device [ 578.264422][ T9] usb 37-1: new full-speed USB device number 6 using vhci_hcd [ 578.268693][ T9] usb 37-1: enqueue for inactive port 0 [ 578.335176][ T9] vhci_hcd: vhci_device speed not set [ 580.481279][T14936] Cannot find set identified by id 0 to match [ 580.490015][T14937] veth1_macvtap: left promiscuous mode [ 580.493660][T14937] macsec0: entered promiscuous mode [ 580.501849][T14937] macsec0: entered allmulticast mode [ 580.586653][T14937] lo speed is unknown, defaulting to 1000 [ 580.588568][T14937] lo speed is unknown, defaulting to 1000 [ 580.590496][T14937] ip_vti0 speed is unknown, defaulting to 1000 [ 581.463320][ T7125] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 581.623355][ T7125] usb 8-1: Using ep0 maxpacket: 16 [ 581.632064][ T7125] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 581.634205][ T7125] usb 8-1: config 0 has no interface number 0 [ 581.635773][ T7125] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 581.638736][ T7125] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 581.735747][ T7125] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 581.741121][ T7125] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 581.743827][ T7125] usb 8-1: Product: syz [ 581.745817][ T7125] usb 8-1: SerialNumber: syz [ 581.763431][ T7125] usb 8-1: config 0 descriptor?? [ 581.768285][ T7125] cm109 8-1:0.8: invalid payload size 0, expected 4 [ 581.771691][ T7125] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.8/input/input23 [ 581.993788][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 582.732463][T14983] binder: 14981:14983 ioctl c0306201 20000680 returned -14 [ 583.085435][T14988] Cannot find set identified by id 0 to match [ 584.227907][ C0] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 584.231433][ C0] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 584.233400][ C0] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 584.235395][ C0] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 584.237343][ C0] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 584.239382][ C0] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 584.241360][ C0] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 584.243412][ C0] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 584.245379][ C0] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 584.247347][ C0] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 584.251299][ T7125] usb 8-1: USB disconnect, device number 6 [ 584.251395][ C0] cm109 8-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 584.274565][ T7125] cm109 8-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 584.612864][T15014] Cannot find set identified by id 0 to match [ 584.725044][T15022] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 584.727263][T15022] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 584.729411][T15022] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 584.827840][T15027] Cannot find set identified by id 0 to match [ 585.838633][T15046] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 585.840685][T15046] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 585.842953][T15046] vhci_hcd vhci_hcd.0: Device attached [ 585.850775][T15046] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 586.341245][ T25] vhci_hcd: vhci_device speed not set [ 586.363309][ T39] audit: type=1800 audit(1733269371.628:3126): pid=15038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1865" name="/" dev="fuse" ino=1 res=0 errno=0 [ 586.390220][ T7125] libceph: connect (1)[c::]:6789 error -101 [ 586.392010][ T7125] libceph: mon0 (1)[c::]:6789 connect error [ 586.393627][ T25] usb 43-1: new full-speed USB device number 4 using vhci_hcd [ 586.494302][T15050] ceph: No mds server is up or the cluster is laggy [ 586.927433][T15047] vhci_hcd: connection reset by peer [ 586.929601][T11913] vhci_hcd: stop threads [ 586.931007][T11913] vhci_hcd: release socket [ 586.932394][T11913] vhci_hcd: disconnect device [ 587.593987][T15078] Cannot find set identified by id 0 to match [ 587.773411][ T35] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 587.923369][ T35] usb 6-1: Using ep0 maxpacket: 16 [ 587.928420][ T35] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 587.931179][ T35] usb 6-1: config 0 has no interface number 0 [ 587.933962][ T35] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 587.937635][ T35] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 587.943303][ T35] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 587.946470][ T35] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 587.948782][ T35] usb 6-1: Product: syz [ 587.949894][ T35] usb 6-1: SerialNumber: syz [ 587.953590][ T35] usb 6-1: config 0 descriptor?? [ 587.959053][ T35] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 587.962617][ T35] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.8/input/input24 [ 588.169116][ C3] cm109 6-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 590.562856][ C1] cm109_urb_ctl_callback: 6 callbacks suppressed [ 590.562868][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 590.566593][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 590.568552][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 590.570541][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 590.572510][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 590.574527][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 590.576740][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 590.578757][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 590.580710][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 590.582663][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 590.704085][ C1] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 590.706444][ T7125] usb 6-1: USB disconnect, device number 7 [ 590.943846][T15128] ceph: No mds server is up or the cluster is laggy [ 591.435990][ T7125] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 591.439800][ T30] libceph: connect (1)[c::]:6789 error -101 [ 591.441555][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 591.543765][ T25] vhci_hcd: vhci_device speed not set [ 592.323762][T15162] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 592.326205][T15162] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 592.329778][T15162] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 593.314539][T15176] 9pnet_fd: Insufficient options for proto=fd [ 593.557380][T15182] Cannot find set identified by id 0 to match [ 593.759069][T15183] serio: Serial port pts0 [ 593.843056][T15187] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 593.845262][T15187] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 593.847417][T15187] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 593.937516][T15192] Cannot find set identified by id 0 to match [ 596.051373][T15224] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 596.053691][T15224] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 596.055854][T15224] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 596.563880][ T25] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 597.035067][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 597.037698][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 597.039965][ T25] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 597.042936][ T25] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 597.046124][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.049779][ T25] usb 7-1: config 0 descriptor?? [ 597.105166][T15239] Cannot find set identified by id 0 to match [ 597.238104][T15233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1894'. [ 597.240741][T15233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1894'. [ 597.462802][ T25] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 597.467440][ T25] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 597.473826][ T25] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 598.150016][ T7125] libceph: connect (1)[c::]:6789 error -101 [ 598.151684][ T7125] libceph: mon0 (1)[c::]:6789 connect error [ 598.255741][T15254] ceph: No mds server is up or the cluster is laggy [ 598.843223][ T45] Bluetooth: hci4: Frame reassembly failed (-90) [ 598.845411][ T45] Bluetooth: hci4: Frame reassembly failed (-84) [ 599.473794][T13795] Bluetooth: hci0: command 0x0406 tx timeout [ 599.475578][ T5951] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 599.526073][T15283] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 599.528838][T15283] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 599.531011][T15283] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 600.530989][ T63] usb 7-1: USB disconnect, device number 8 [ 600.914004][ T5299] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 601.770687][T15319] netlink: 'syz.0.1910': attribute type 21 has an invalid length. [ 602.064727][T15326] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 602.067332][T15326] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 602.070811][T15326] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 602.084274][ T39] audit: type=1326 audit(1733269387.358:3127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15314 comm="syz.0.1910" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4579 code=0x7ffc0000 [ 602.090236][ T39] audit: type=1326 audit(1733269387.358:3128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15314 comm="syz.0.1910" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4579 code=0x7ffc0000 [ 602.096162][ T39] audit: type=1326 audit(1733269387.358:3129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15314 comm="syz.0.1910" exe="/syz-executor" sig=0 arch=40000003 syscall=373 compat=1 ip=0xf7fd4579 code=0x7ffc0000 [ 602.101916][ T39] audit: type=1326 audit(1733269387.358:3130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15314 comm="syz.0.1910" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4579 code=0x7ffc0000 [ 602.108409][ T39] audit: type=1326 audit(1733269387.358:3131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15314 comm="syz.0.1910" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4579 code=0x7ffc0000 [ 602.302576][T15333] netlink: 'syz.0.1914': attribute type 10 has an invalid length. [ 602.308639][T15333] netlink: 'syz.0.1914': attribute type 10 has an invalid length. [ 602.315111][T15333] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1914'. [ 602.323761][T15333] team0: entered promiscuous mode [ 602.328861][T15333] 8021q: adding VLAN 0 to HW filter on device team0 [ 602.336277][T15333] batman_adv: batadv0: Interface activated: team0 [ 602.338320][T15333] batman_adv: batadv0: Interface deactivated: team0 [ 602.340089][T15333] batman_adv: batadv0: Removing interface: team0 [ 602.350762][T15333] bridge0: port 1(team0) entered blocking state [ 602.357237][T15333] bridge0: port 1(team0) entered disabled state [ 602.359354][T15333] team0: entered allmulticast mode [ 603.547825][ T39] audit: type=1326 audit(1733269388.818:3132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15350 comm="syz.2.1919" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68579 code=0x7ffc0000 [ 603.587793][ T39] audit: type=1326 audit(1733269388.818:3133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15350 comm="syz.2.1919" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68579 code=0x7ffc0000 [ 603.599204][ T39] audit: type=1326 audit(1733269388.858:3134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15350 comm="syz.2.1919" exe="/syz-executor" sig=0 arch=40000003 syscall=42 compat=1 ip=0xf7f68579 code=0x7ffc0000 [ 603.606906][ T39] audit: type=1326 audit(1733269388.858:3135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15350 comm="syz.2.1919" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68579 code=0x7ffc0000 [ 603.614829][ T39] audit: type=1326 audit(1733269388.858:3136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15350 comm="syz.2.1919" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68579 code=0x7ffc0000 [ 603.983903][T15360] netlink: 'syz.1.1920': attribute type 39 has an invalid length. [ 604.125063][T15361] sp0: Synchronizing with TNC [ 604.735349][T15354] ================================================================== [ 604.737479][T15354] BUG: KASAN: vmalloc-out-of-bounds in push_insn_history+0x615/0x690 [ 604.739587][T15354] Write of size 4 at addr ffffc9000312c010 by task syz.2.1919/15354 [ 604.742654][T15354] [ 604.743712][T15354] CPU: 0 UID: 0 PID: 15354 Comm: syz.2.1919 Not tainted 6.13.0-rc1-syzkaller-00005-gceb8bf2ceaa7 #0 [ 604.746481][T15354] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 604.749247][T15354] Call Trace: [ 604.750138][T15354] [ 604.750912][T15354] dump_stack_lvl+0x116/0x1f0 [ 604.752151][T15354] print_report+0xc3/0x620 [ 604.753325][T15354] ? __virt_addr_valid+0x5e/0x590 [ 604.754660][T15354] kasan_report+0xd9/0x110 [ 604.755861][T15354] ? push_insn_history+0x615/0x690 [ 604.757208][T15354] ? push_insn_history+0x615/0x690 [ 604.758554][T15354] push_insn_history+0x615/0x690 [ 604.759848][T15354] do_check_common+0xb78/0xd540 [ 604.761131][T15354] ? lockdep_hardirqs_on+0x7c/0x110 [ 604.762486][T15354] ? __pfx_do_check_common+0x10/0x10 [ 604.763854][T15354] ? kvfree+0x47/0x50 [ 604.764910][T15354] ? check_cfg+0x403/0x840 [ 604.766097][T15354] bpf_check+0x77c2/0xc9b0 [ 604.767261][T15354] ? hlock_class+0x4e/0x130 [ 604.768450][T15354] ? __pfx_bpf_check+0x10/0x10 [ 604.769706][T15354] ? find_held_lock+0x2d/0x110 [ 604.770957][T15354] ? bpf_prog_load+0xd45/0x2670 [ 604.772237][T15354] ? __pfx_lock_release+0x10/0x10 [ 604.773551][T15354] ? trace_lock_acquire+0x14e/0x1f0 [ 604.774907][T15354] ? bpf_prog_load+0xd45/0x2670 [ 604.776176][T15354] ? lockdep_hardirqs_on+0x7c/0x110 [ 604.777527][T15354] ? read_tsc+0x9/0x20 [ 604.778608][T15354] ? ktime_get_with_offset+0x20f/0x3a0 [ 604.780028][T15354] ? bpf_obj_name_cpy+0x156/0x1b0 [ 604.781338][T15354] bpf_prog_load+0xe3f/0x2670 [ 604.782565][T15354] ? __pfx_bpf_prog_load+0x10/0x10 [ 604.783889][T15354] ? find_held_lock+0x2d/0x110 [ 604.785148][T15354] ? __might_fault+0x13b/0x190 [ 604.786406][T15354] ? __might_fault+0xe3/0x190 [ 604.787640][T15354] __sys_bpf+0x5677/0x57a0 [ 604.788801][T15354] ? __pfx___sys_bpf+0x10/0x10 [ 604.790053][T15354] ? do_futex+0x123/0x350 [ 604.791183][T15354] ? __pfx_do_futex+0x10/0x10 [ 604.792414][T15354] ? xfd_validate_state+0x5d/0x180 [ 604.793746][T15354] ? rcu_is_watching+0x12/0xc0 [ 604.794993][T15354] __ia32_sys_bpf+0x76/0xe0 [ 604.796185][T15354] __do_fast_syscall_32+0x73/0x120 [ 604.797524][T15354] do_fast_syscall_32+0x32/0x80 [ 604.798814][T15354] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 604.800455][T15354] RIP: 0023:0xf7f68579 [ 604.801518][T15354] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 604.806361][T15354] RSP: 002b:00000000f50c557c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 604.808512][T15354] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200017c0 [ 604.810563][T15354] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 604.812604][T15354] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 604.814655][T15354] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 604.816697][T15354] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 604.818748][T15354] [ 604.819559][T15354] [ 604.820205][T15354] The buggy address belongs to the virtual mapping at [ 604.820205][T15354] [ffffc9000310c000, ffffc9000312e000) created by: [ 604.820205][T15354] kvrealloc_noprof+0xfc/0x150 [ 604.824726][T15354] [ 604.825353][T15354] The buggy address belongs to the physical page: [ 604.827012][T15354] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88806dcd8280 pfn:0x6dcd8 [ 604.829599][T15354] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 604.831456][T15354] raw: 04fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 604.833676][T15354] raw: ffff88806dcd8280 0000000000000000 00000001ffffffff 0000000000000000 [ 604.835889][T15354] page dumped because: kasan: bad access detected [ 604.837579][T15354] page_owner tracks the page as allocated [ 604.839087][T15354] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102cc2(GFP_HIGHUSER|__GFP_NOWARN), pid 15354, tgid 15350 (syz.2.1919), ts 604735260176, free_ts 602616603081 [ 604.843600][T15354] post_alloc_hook+0x2d1/0x350 [ 604.844902][T15354] get_page_from_freelist+0xfce/0x2f80 [ 604.846410][T15354] __alloc_pages_noprof+0x6a6/0x25b0 [ 604.847810][T15354] alloc_pages_mpol_noprof+0x2c9/0x610 [ 604.849246][T15354] __vmalloc_node_range_noprof+0x724/0x1530 [ 604.850825][T15354] __kvmalloc_node_noprof+0x14f/0x1a0 [ 604.852230][T15354] kvrealloc_noprof+0xfc/0x150 [ 604.853482][T15354] push_insn_history+0x2ac/0x690 [ 604.854787][T15354] do_check_common+0xb78/0xd540 [ 604.856124][T15354] bpf_check+0x77c2/0xc9b0 [ 604.857314][T15354] bpf_prog_load+0xe3f/0x2670 [ 604.858580][T15354] __sys_bpf+0x5677/0x57a0 [ 604.859739][T15354] __ia32_sys_bpf+0x76/0xe0 [ 604.860923][T15354] __do_fast_syscall_32+0x73/0x120 [ 604.862264][T15354] do_fast_syscall_32+0x32/0x80 [ 604.863580][T15354] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 604.865231][T15354] page last free pid 15330 tgid 15322 stack trace: [ 604.866916][T15354] free_unref_page+0x661/0x1080 [ 604.868187][T15354] tlb_finish_mmu+0x237/0x7b0 [ 604.869418][T15354] exit_mmap+0x3df/0xb20 [ 604.870534][T15354] __mmput+0x12a/0x4c0 [ 604.871595][T15354] mmput+0x62/0x70 [ 604.872579][T15354] do_exit+0x9bf/0x2d70 [ 604.873673][T15354] do_group_exit+0xd3/0x2a0 [ 604.874856][T15354] get_signal+0x2576/0x2610 [ 604.876041][T15354] arch_do_signal_or_restart+0x90/0x7e0 [ 604.877474][T15354] syscall_exit_to_user_mode+0x150/0x2a0 [ 604.879008][T15354] __do_fast_syscall_32+0x80/0x120 [ 604.880348][T15354] do_fast_syscall_32+0x32/0x80 [ 604.881633][T15354] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 604.883318][T15354] [ 604.883955][T15354] Memory state around the buggy address: [ 604.885413][T15354] ffffc9000312bf00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 604.887524][T15354] ffffc9000312bf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 604.889599][T15354] >ffffc9000312c000: 00 00 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 604.891657][T15354] ^ [ 604.892854][T15354] ffffc9000312c080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 604.894932][T15354] ffffc9000312c100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 604.896998][T15354] ================================================================== [ 604.903716][T15354] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 604.905729][T15354] CPU: 0 UID: 0 PID: 15354 Comm: syz.2.1919 Not tainted 6.13.0-rc1-syzkaller-00005-gceb8bf2ceaa7 #0 [ 604.908480][T15354] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 604.911238][T15354] Call Trace: [ 604.912131][T15354] [ 604.912901][T15354] dump_stack_lvl+0x3d/0x1f0 [ 604.914127][T15354] panic+0x71d/0x800 [ 604.915150][T15354] ? __pfx_panic+0x10/0x10 [ 604.916314][T15354] ? preempt_schedule_thunk+0x1a/0x30 [ 604.917706][T15354] ? preempt_schedule_common+0x44/0xc0 [ 604.919132][T15354] check_panic_on_warn+0xab/0xb0 [ 604.920445][T15354] end_report+0x117/0x180 [ 604.921599][T15354] kasan_report+0xe9/0x110 [ 604.922766][T15354] ? push_insn_history+0x615/0x690 [ 604.924116][T15354] ? push_insn_history+0x615/0x690 [ 604.925449][T15354] push_insn_history+0x615/0x690 [ 604.926769][T15354] do_check_common+0xb78/0xd540 [ 604.928039][T15354] ? lockdep_hardirqs_on+0x7c/0x110 [ 604.929400][T15354] ? __pfx_do_check_common+0x10/0x10 [ 604.930790][T15354] ? kvfree+0x47/0x50 [ 604.931841][T15354] ? check_cfg+0x403/0x840 [ 604.933016][T15354] bpf_check+0x77c2/0xc9b0 [ 604.934202][T15354] ? hlock_class+0x4e/0x130 [ 604.935396][T15354] ? __pfx_bpf_check+0x10/0x10 [ 604.936648][T15354] ? find_held_lock+0x2d/0x110 [ 604.937903][T15354] ? bpf_prog_load+0xd45/0x2670 [ 604.939170][T15354] ? __pfx_lock_release+0x10/0x10 [ 604.940479][T15354] ? trace_lock_acquire+0x14e/0x1f0 [ 604.941840][T15354] ? bpf_prog_load+0xd45/0x2670 [ 604.943115][T15354] ? lockdep_hardirqs_on+0x7c/0x110 [ 604.944477][T15354] ? read_tsc+0x9/0x20 [ 604.945557][T15354] ? ktime_get_with_offset+0x20f/0x3a0 [ 604.946988][T15354] ? bpf_obj_name_cpy+0x156/0x1b0 [ 604.948306][T15354] bpf_prog_load+0xe3f/0x2670 [ 604.949546][T15354] ? __pfx_bpf_prog_load+0x10/0x10 [ 604.950883][T15354] ? find_held_lock+0x2d/0x110 [ 604.952138][T15354] ? __might_fault+0x13b/0x190 [ 604.953400][T15354] ? __might_fault+0xe3/0x190 [ 604.954644][T15354] __sys_bpf+0x5677/0x57a0 [ 604.955812][T15354] ? __pfx___sys_bpf+0x10/0x10 [ 604.957069][T15354] ? do_futex+0x123/0x350 [ 604.958212][T15354] ? __pfx_do_futex+0x10/0x10 [ 604.959445][T15354] ? xfd_validate_state+0x5d/0x180 [ 604.960781][T15354] ? rcu_is_watching+0x12/0xc0 [ 604.962038][T15354] __ia32_sys_bpf+0x76/0xe0 [ 604.963224][T15354] __do_fast_syscall_32+0x73/0x120 [ 604.964561][T15354] do_fast_syscall_32+0x32/0x80 [ 604.965841][T15354] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 604.967482][T15354] RIP: 0023:0xf7f68579 [ 604.968548][T15354] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 604.973501][T15354] RSP: 002b:00000000f50c557c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 604.975662][T15354] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200017c0 [ 604.977710][T15354] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 604.979751][T15354] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 604.981801][T15354] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 604.983841][T15354] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 604.985906][T15354] [ 604.987287][T15354] Kernel Offset: disabled [ 604.988418][T15354] Rebooting in 86400 seconds.. VM DIAGNOSIS: 23:43:09 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff85153290 RDI=ffffffff9a6682c0 RBP=ffffffff9a668280 RSP=ffffc900257cefa0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3030303963666657 R12=0000000000000000 R13=0000000000000020 R14=fffffbfff34cd0aa R15=dffffc0000000000 RIP=ffffffff851532b7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b400000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002efedffc CR3=000000004c464000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000feffff00 Opmask01=000000000000007f Opmask02=00000000fffeff7f Opmask03=2040000404420020 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 003d45444f4d5645 44003d524f4e494d ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffdb3a4750 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 00ff000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 43d88195d2dd6d64 73732620f4f02e38 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73737373737373e2 7373737373737373 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 722f766564752f62 696c2f7273752f00 534b4e494c564544 00454d414e564544 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4a414d003d454d 414e564544003d58 45444e494649003d 4550595456454400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4a414d0018454d 414e564544001858 45444e4946490018 4550595456454400 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000002e1 0000000000000000 0000000000000000 302d78742f736575 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000044495f444948 0000000000000021 000000000000302e ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9f267f2250 00005556d2f6feb0 0000000000008dd1 0000003177617264 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffdfffed 00007fdff7efefff 33fbff7ffaffffff 5f007fdfefefddef ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 49383a3a2648383a 3a2633383a3a2632 383a3a263d383a3a 263c383a3a263f38 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000030 0000000000000030 30706f6f6c2f1e17 00004e4f5341454b ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000030 0000000000000030 000055566c2f1e17 00004e4f5341454b ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000002d66a2d RBX=0000000000000001 RCX=ffffffff8b1ab889 RDX=0000000000000000 RSI=ffffffff8b4cd0e0 RDI=ffffffff8bb136c0 RBP=ffffed10039dc910 RSP=ffffc9000047fe08 R8 =0000000000000001 R9 =ffffed10056a6fed R10=ffff88802b537f6b R11=0000000000000000 R12=0000000000000001 R13=ffff88801cee4880 R14=ffffffff901cb190 R15=0000000000000000 RIP=ffffffff8b1acc6f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020032000 CR3=000000004c464000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffff888000627540 RBX=dffffc0000000000 RCX=ffffffff8176b3dd RDX=1ffff110000c4ea8 RSI=0000000000000004 RDI=ffff888000627558 RBP=ffffc9000103f198 RSP=ffffc9000103f060 R8 =0000000000000001 R9 =fffff52000207dfa R10=0000000000000003 R11=0000000000000001 R12=ffff888053eb4000 R13=dead000000000122 R14=0000000000000001 R15=ffff88804c071930 RIP=ffffffff849f0be0 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055de25ac11b8 CR3=000000004c482000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 005858585858582e 7a7973d0000000e4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ff0f0e0d0c0b0a09 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000001306e21 RBX=0000000000000003 RCX=ffffffff8b1ab889 RDX=0000000000000000 RSI=ffffffff8b4cd0e0 RDI=ffffffff8bb136c0 RBP=ffffed10039df488 RSP=ffffc9000049fe08 R8 =0000000000000001 R9 =ffffed10056e6fed R10=ffff88802b737f6b R11=0000000000000000 R12=0000000000000003 R13=ffff88801cefa440 R14=ffffffff901cb190 R15=0000000000000000 RIP=ffffffff8b1acc6f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020016000 CR3=000000006d36a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001b800000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000