last executing test programs: 18.489893376s ago: executing program 1 (id=45): r0 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r0, 0x0, 0x0, 0x20008000, &(0x7f0000000000)={0x11, 0x1c, 0x0, 0x1, 0x8, 0x6, @random="6d6eb1f60783"}, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x900, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket$pptp(0x18, 0x1, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f0000000500)={0x0, 0x0}}, 0xffffffffffffff3b) ioperm(0x0, 0x80000001, 0x6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYRESOCT=r0, @ANYBLOB="fda9804f359db20109ec86b6622d78add49cf0807270ed6f8cd41d1d1834b28266c87cbb964bcc440a22e7c4a7318238d13c756b847a2af27c076420c05ff7682ff2739bae11f7e93e19af2588649afb76d924c8effcef3a0eb83f428c3825a7d6eeac5a6ea489f4c626451bfa1987c6f43c5af337217773c837ad4ce614380ff4b19c33b265a5bf60c6ce76577d9f64448b8e33", @ANYRES8=r6, @ANYRESHEX=r5, @ANYRES64=0x0], 0x48) r9 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0200000093961b3cfe6c5c78f347b3000008000074dc663e8461b8b215c905cd68af672b8643ffdc180028d5a160a12d14e2de085e3aa334d3eadbad81f747258a99d80078bc2da4debc72af8ce245747057d90200d131ab1539a8a09565e1c538f3cc95c716a1aa37ff05e4a32f4145e5d5c36503f87adf04978bf9d1b1af9cb1ae04668b8e47d9fb58dced181a", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="189963fe01a2ea42450000000000000018130000", @ANYRES32=r9, @ANYBLOB="000000000000000085000000260000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xc, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r8, @ANYRES32=r10, @ANYBLOB="0500"/12, @ANYRES32, @ANYBLOB="dbb62c9a52e9b8d592e5cb8274be01f3d2bbdd7ba3468823041e3a9643e6a4bd953291dcfbbfb2c36297c9de95772c836e77f49e19fa6c7d40601b56c05850c56ba440e71dea9b229fa246a9892ca064a849028c23ea36d9fac6bfb688023b8cb74a0ad0b977e49c7fa20067b89af639285048232959f07ef2ab7b9277ca", @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000040)=@tcp=r1}, 0x1c) shutdown(r7, 0x1) recvmsg(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000800)=""/140, 0x8c}], 0x1}, 0x0) futex(&(0x7f0000004000), 0x3, 0x0, 0x0, &(0x7f0000004000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 18.206659491s ago: executing program 1 (id=49): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x4, r1}, 0x14) syz_emit_ethernet(0x1f, &(0x7f0000000040)=ANY=[], 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000300)) r3 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f00000006c0)={0x0, 0xffffffffffffff16, 0x0}, 0x44080) sendmsg(r3, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002d80)="0f", 0x1}, {0x0, 0x2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x4d}, {0x0}], 0x9}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x18e420, &(0x7f0000000140)=ANY=[@ANYBLOB='mode=0']) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x4044090}, 0x2404c851) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x3e, 0x0) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000000040)) syz_usb_disconnect(r4) r5 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r5, 0x28, 0x6, &(0x7f00000000c0)={0x0, 0x2710}, 0x8) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x49, &(0x7f0000000200)=0x7fc000, 0x4) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r2) sendmsg$NFC_CMD_FW_DOWNLOAD(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000001500000008000100", @ANYRES32=0x0, @ANYBLOB="06001400287d0000160014002f6465762f696e7075742f6576656e742300000008000100", @ANYRES16, @ANYBLOB="050014002d0000000f47635043833f37747590f597b55aad8b3193d5b3871a383830d64e33086f02"], 0x58}}, 0x40) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0x0) sendmsg$NFC_CMD_VENDOR(r2, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000780)=ANY=[@ANYBLOB="7801a4ab4509b4326ec76e8aac00b84d837eba2152fabb02fe02c72bc6ff1b3af076d5f92e7f9929d8e8f102ce4516c983baa8078bab935e17cbb5520c67ef3c834ebfc06062f5280a339e5f3a3568e41ba968c8c25ce7e5a76c04c56328bbd4857894011e3f45f6b8ca844877286b854b03f393c722115786f1f564be52f38d665347f0a308394c921a9cc9cace4bfcf64f1a7e26b18e04577a58a4e16294f2fb48c330e484095af4", @ANYRES16=r9, @ANYBLOB="00012abd7000ffdbdf251d00000008001d000800000008001d000500000008000100", @ANYRES32=0x0, @ANYBLOB="08001e0001000000c5001f0068a088adb4ea5f1cd00ad61b74aa69ef15e17cc5436e1612c71b762bced1ed8258231b28a1e8e8b427584277e5bc5cfd158d2a572ac618467cfdbd65fa16e6f43e7bfff69a3a58a0cdc736d94e23d2eee4bda901cbcf8d218f0cafbe22b4c271d0e5ee5ca906ad8f8709346c008cc6e90e7d8f22c4bc4bd21b370befd2988b9ec07a3befdaef0399ca015bc1e1f91405e02a4fa33427ed394ae04cc310ab219a91722e5b2ede6ce4359f0aec324d1a2ef15495c14181e517743c1706feb1331e9e00000008000100", @ANYRES32=r10, @ANYBLOB="74001f00e1e792751a412d2d498bbcb6deab2cb95150c95cc50eb0d69ae4c259303e42ace57dfeaffa6f057bf9615ddf2df24712036fe5cb2fc89431e2951ccc72f5efa773dc79a4295e5798f26cda04e0706d0ce4049a90578f5da7ac60e698e38fe2fece0bafe6fccce29791ca1ed27e73cf08"], 0x178}, 0x1, 0x0, 0x0, 0x4000084}, 0x20008044) socket$nl_route(0x10, 0x3, 0x0) splice(0xffffffffffffffff, 0x0, r7, 0x0, 0x4ffe6, 0x0) 17.379821762s ago: executing program 1 (id=55): syz_open_dev$char_usb(0xc, 0xb4, 0x6fc) r0 = inotify_init() r1 = syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) (async, rerun: 32) io_uring_enter(r1, 0x20007113, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) (async) creat(&(0x7f0000000100)='./file0\x00', 0x0) 17.379317691s ago: executing program 1 (id=56): ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee00}}, './file0\x00'}) r1 = openat$cgroup_ro(r0, 0xfffffffffffffffe, 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r2, 0x0) (async) symlinkat(&(0x7f00000000c0)='./file1\x00', r2, 0x0) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, 0x0) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) (async) mkdirat(r4, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r5, &(0x7f0000000100)='./file0\x00', r5, &(0x7f0000000580)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x2) (async) renameat2(r5, &(0x7f0000000100)='./file0\x00', r5, &(0x7f0000000580)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080), 0x111, 0x9}}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRES32=r6], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') (async) chdir(&(0x7f0000000080)='./file1\x00') inotify_init1(0x0) (async) r7 = inotify_init1(0x0) fcntl$setown(r7, 0x8, 0xffffffffffffffff) fcntl$getownex(r7, 0x10, &(0x7f0000000380)) (async) fcntl$getownex(r7, 0x10, &(0x7f0000000380)) 17.309516812s ago: executing program 1 (id=57): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007"], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) r2 = syz_open_dev$video(&(0x7f0000000440), 0x1, 0x0) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x0, {0x0, 0x0, 0x729}}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000006c0)={{0x1, 0x1, 0xfffffffffffffeba}, './file0\x00'}) 8.659585441s ago: executing program 0 (id=115): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000080ffffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r2, 0x4bfa, &(0x7f0000000100)) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x1d, &(0x7f00000000c0)=ANY=[@ANYBLOB="03000004000570975c9afb00000a00", @ANYBLOB, @ANYRES32=0x0], 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000180)={@ifindex=0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$vga_arbiter(r6, &(0x7f0000000cc0)=ANY=[], 0xa) syz_emit_ethernet(0x4e, &(0x7f0000000b40)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @dev, [{0x0, 0x0, "0caa"}]}}}}}}, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@fwd={0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={r7, 0x20, &(0x7f00000001c0)={&(0x7f0000000000)=""/146, 0x92, 0x0, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000040)={r7, 0x20, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000001340)=""/4096, 0x1000}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x5, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, [@func, @alu={0x0, 0x0, 0x8, 0x2, 0x3, 0x6, 0x10}]}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x13, 0xf, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8c, 0x0, 0x0, 0x0, 0xf57a}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000d00)=""/4096, 0x40f00, 0x4, '\x00', r5, @fallback=0x1c, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r8, 0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000340), 0x10, 0x101, @void, @value}, 0x94) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000480)={0x1, 0xb, 0x120, 0x17, 0x6}, 0x14) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r9, 0x4008ae8a, &(0x7f0000000300)=ANY=[]) 8.019945234s ago: executing program 0 (id=123): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000300)={'\x00', 0x0, 0x5, 0x2, 0x9, 0x0, "000080000000e200", '\x00', '\x00', "97ad3700", ["fdb88eb180a8f7b6a6ce3bfc", "0001000800008059f4ff7f00", '\x00', "ccf9f22f689bf82f5ddeb100"]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x4}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0x34, 0x39, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='R\xcb'}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0x8, 0x9, 0x0, 0x1, [@typed={0x4}]}]}, 0x34}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) (async) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000300)={'\x00', 0x0, 0x5, 0x2, 0x9, 0x0, "000080000000e200", '\x00', '\x00', "97ad3700", ["fdb88eb180a8f7b6a6ce3bfc", "0001000800008059f4ff7f00", '\x00', "ccf9f22f689bf82f5ddeb100"]}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x4}, 0x18) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0x34, 0x39, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='R\xcb'}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0x8, 0x9, 0x0, 0x1, [@typed={0x4}]}]}, 0x34}}, 0x0) (async) 8.019533591s ago: executing program 0 (id=124): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) fcntl$setstatus(r0, 0x4, 0x2c00) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x91905a, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000dc0)='./file0/file0\x00', 0x0, 0x1145d10, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') read$FUSE(r1, &(0x7f0000000600)={0x2020}, 0xffffffb5) 7.925956872s ago: executing program 0 (id=125): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x1a, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r0}, 0x10) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1, 0x80, 0x0, 0x0) (async) prlimit64(0x0, 0x2, &(0x7f0000000380)={0x6, 0x1000087}, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x4000000400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002580)=ANY=[@ANYBLOB="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"/1223], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x1f2f, 0xf, 0x3ce, &(0x7f00000007c0)="9f44948721919580680710a486dd", 0x0, 0x23b, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) (async) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) (async) keyctl$setperm(0x5, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) close(0xffffffffffffffff) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x6, 0xfd, 0x3}) (async) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r7 = memfd_create(&(0x7f0000000300)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) ftruncate(r7, 0xffff) fcntl$addseals(r7, 0x409, 0x7) r8 = ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f00000002c0)={r7, 0x0, 0x0, 0x1000}) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r9}) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000100)={r10, 0x0}) (async) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000080)={r10}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000140)={r11}) 7.590011795s ago: executing program 0 (id=126): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f00000002c0)={0x2, 0xfffffffe}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x18c}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x4) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)={0xa0, 0x3b, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @generic="de13d7ff19c88370b827a8ea5db46f37d8a49947202f84ef0d44bdd2641c8f6e209ba985d993d171d550b40973484801f2cdb960a85fd412b4017b7c97c1dc04f79ec04d400ecc5a6210c447a2b6798d307a7a4e5cd5fb87972cb69d5acc5c173ba9982f66a83b7c5361f0f6b21acc33352a58f64a00befe6b"]}, 0xa0}}, 0xc008) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000007c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="facf5c3dc33ed0761617f7087e3979836ecbf31d88a542e6c9a4f7d44fbd4155dd6fa70b3075800f544275eb01a0a06604b000220d94a063d38ab9e1d1e81f8fdaf20c8f8af2d0799a4ba6279151b946df7ca62515225b990adb07b76eb0b4860600f32955bf7467b13cced02806e860621702927507b6b223f83f5fe4c0ed9eb69b3b"], 0xa) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) ioctl$MON_IOCX_GET(r0, 0x400c9206, &(0x7f0000000500)={&(0x7f0000000440), &(0x7f0000000480)=""/68, 0x44}) listen(r6, 0xfffffffd) syz_emit_ethernet(0x4a, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6010104000140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a81d1b54c2000090780000"], 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000880)=ANY=[@ANYBLOB="0180c2000000bbbb0100000000000000044800203aff20010000000000000000000000000001fe8000000000000000000000000000aa8800907800000000fe8000eb0000000000000000000000bb020136dad83aea8d"], 0x0) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000400)={r0}, 0x8) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100), 0xffffffffffffffff) r9 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$GTP_CMD_ECHOREQ(r7, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="08000500ac1414aa"], 0x24}, 0x1, 0x0, 0x0, 0x4048804}, 0xb5a4b2a060c17528) 3.839022301s ago: executing program 2 (id=146): r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000140)={'broute\x00', 0x0, 0x0, 0x0, [0x10, 0x4, 0x7, 0x2, 0x8, 0x5], 0x1, 0x0, 0x0, [{}]}, 0x60) 3.769330539s ago: executing program 2 (id=147): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet(r1, &(0x7f0000004d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0xcd2cc9c3d2a1745b) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="00018d70", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x9, 0xc, &(0x7f0000000a40)=ANY=[@ANYRES64=r2, @ANYRES32=r2, @ANYRES64=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = memfd_create(&(0x7f00000024c0)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05V%$6\x9fU\x86\xbe\xcbx\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xb2\xae\xda\xa9\xf6\x92\xaf4\xb5|W\r0{\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\x97.A\x84\x1d\xc2\x86\x89{\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\x9d\xce\xb3%QF\x03\b\x9dh\xfd\x91\xea\xce\x06\a\xba`\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8\x83\x87+nM\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5\xcc\x8fI\x00\xf0\xc9%\n\xa7\xd6\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4Xl\v\xa5\xca\v|\xe2L\xac\x80\xc7\x15\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11\xd7oC\xe4\x06\xa8[O\xe6\x1d=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\xb7\xbc\xc3\xad\xf1\x92/(A=A\x8b\xa5I\xd7\xd3#\xb0\x89\x9e5\x12\xa4\x9a\va\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\xbb\xd2\xfc]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\x98\xfa\xbbb\xb1\x00\x99\xf7\xfd\'\xae\x906\xe0\xaa\xdbtWWH\xa4L\xb5po,\xdfN\x0f8\t\xe7X_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0s\xa8\x1f(\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x13\xa4\xad\xd8\xf9\xd2\x95\xa8\x81\xbe\xbc\xa6\x14_o\xfb\xdaL\xcb\xda\x9a\xec\xce\xd18&\xfbG\xa1\f\xf4\xd5u\xb0xE)j\x1b\xecL\xa1\xdc\xabUiN\xdet\xc7Q\xe6\xa4\x99-\xba\x16\xe5\xba!\xbdCI#\x03', 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x200000f, 0x20051, r5, 0xce9e1000) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r6, 0x6, 0x0, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x12, &(0x7f0000000240)=0x7, 0x4) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000980)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000146ea3846948b106fe32d2e4e6090000"], 0x20}}, 0x0) connect$inet(r7, 0x0, 0x0) sendto$inet(r7, &(0x7f00000007c0), 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000000)) 2.619940248s ago: executing program 2 (id=148): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01010000000000000000010000000522afdb6eb10a72e86e24000180060005004e000000060001000200000008000300ac14"], 0x38}}, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20010004, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x9) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r7, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x26}}, 0x9}}, [0x9, 0x5, 0x7fff, 0x200, 0x3, 0x0, 0x1, 0x7, 0x8001, 0x9, 0x3, 0x6, 0x8, 0x726d]}, &(0x7f00000001c0)=0xfc) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000200)={r8}, 0x8) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x2000)=nil, 0x930, 0x8, 0x8032, 0xffffffffffffffff, 0x0) ioctl$KVM_IOEVENTFD(r9, 0x4040ae79, 0x0) ioctl$KVM_IOEVENTFD(r9, 0x4040ae79, &(0x7f0000000080)={0x5000, 0x0, 0x2, 0xffffffffffffffff, 0x1}) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0x80111500, 0x20000000) r12 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r12, 0x0, 0x0) write$eventfd(r11, &(0x7f0000000000), 0xfffffdef) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(0x4) mmap$KVM_VCPU(&(0x7f0000ffc000/0x3000)=nil, 0x930, 0x3000002, 0x8a031, 0xffffffffffffffff, 0x0) 1.707798023s ago: executing program 2 (id=149): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = dup(r0) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000020000008704"]) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010300000000000000000000000005000400000000000900020073797a3100000000050001", @ANYRES16=r1, @ANYRES32=0x0, @ANYRES8=r1, @ANYRESHEX=r0], 0x60}}, 0x4044051) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000013000100"/20, @ANYRES32=r3, @ANYBLOB="00000000000000001c001a80100002"], 0x3c}}, 0x0) fchmod(r2, 0x1) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f96424fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.296233014s ago: executing program 2 (id=150): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}}) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000140)=@ethtool_pauseparam={0x13, 0x0, 0xfffffffd}}) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x41071, 0xffffffffffffffff, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) (async) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0xf, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003940)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffff1) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) write$tun(r3, &(0x7f0000003040)={@val={0x8, 0x800}, @val={0x0, 0x0, 0x2}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @multicast2=0xe0000001}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0x36) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000eb000000000000000000001826a790ee7c6a3c2d8a110000ef0db007bcd3a56070c519b3fd6d727234ba8d43856709de723e88cf6e26f5547b2247ddaf27a0bbe1aa7c9ced0ac4c3493edf979129f484d1506ef70fa2e789309d792e99976b7db7161268f6041a53b2b7ba96dbee55aafe496a6a0fe131a6bf06bfa5bca3dbb436aeea384ea826d1e5800622983f2a5e8ab7a1de79df753623ad64cd8117a130164b8bf8bcea433583d14c677c03ea1327d758ed2f1f1456e4c026852e14a3c7606398d9cc8b277fc8d7ba7a4313fc6e6efddac69b6f8979e8eaec3495ca205e4f7be8a631f97633843f457dbeb7f856ca4b52819f76117eea3253000000000000000000000000000000007f03abd74ff9dd8b8902667477", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b70300001b0000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b6080000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) 969.53798ms ago: executing program 3 (id=151): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x169802, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000019280)={'syztnl2\x00', &(0x7f00000190c0)={'sit0\x00', 0x0, 0x8000, 0x1, 0x1, 0x10, {{0x17, 0x4, 0x3, 0x3a, 0x5c, 0x64, 0x0, 0x5, 0x4, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x17}, {[@lsrr={0x83, 0x7, 0xe1, [@private=0xa010100]}, @cipso={0x86, 0x37, 0x3, [{0x0, 0x11, "b4d7fc9aa23e5e6d200c8af6e546fe"}, {0x0, 0xf, "755acebb429dc275cbf72416cd"}, {0x0, 0x3, '<'}, {0x6, 0xe, "16dc6866577713d68a0122c4"}]}, @cipso={0x86, 0xa, 0x3, [{0x7, 0x4, "11b5"}]}]}}}}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000180)={@ipv4={'\x00', '\xff\xff', @local}, 0x6e, r0}) setxattr$incfs_size(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)=0x3, 0x4) syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x20, 0x0, 0x340}, &(0x7f0000000000), &(0x7f0000000100)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001808ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socketpair(0x0, 0x1, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, 0x0) r7 = socket(0x10, 0x3, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f0000000040)={0x1d, r9}, 0x18) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, r9}, 0x18) r10 = dup(r8) sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0xc0}, 0x33fe0}}, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write(r7, &(0x7f0000000000)="2400000011005f0414", 0x9) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000040)={{@my=0x1, 0x10000}, @host, 0x0, 0x0, 0x7}) 888.927884ms ago: executing program 3 (id=152): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1ae8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='jbd2_handle_stats\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001000000"], 0x50}}, 0x0) r2 = inotify_init1(0x800) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x29}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') write$binfmt_aout(r5, 0x0, 0x61) r6 = syz_open_procfs(r3, &(0x7f0000000600)='fd/4\x00') ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40305839, &(0x7f0000000240)=0x28084) unlink(&(0x7f0000000040)='./file0\x00') 861.11805ms ago: executing program 0 (id=127): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x5) mount(&(0x7f0000000100)=@sr0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='adfs\x00', 0x8001, 0x0) (async) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000240)=ANY=[], 0x78) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x4}, 0x10) (async) sendto$inet(r1, &(0x7f0000000180)="a7", 0x1, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000002c0)={0x0, 0x3}, 0x8) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080), 0x8) (async) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000400)={0x3}, 0x10) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x2c}}, 0x24008818) (async) mount_setattr(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000280)={0x10018f, 0x0, 0x120000}, 0x20) (async) faccessat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x3) 855.586336ms ago: executing program 3 (id=153): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000f00"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) r1 = socket(0x11, 0x3, 0x0) (rerun: 32) getsockopt(r1, 0x1, 0x4, 0x0, &(0x7f0000000200)) (async, rerun: 64) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) ioctl$FBIOGET_FSCREENINFO(r3, 0x4602, &(0x7f0000000280)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async) r4 = socket$inet(0x2, 0x3, 0x2) (async) r5 = fanotify_init(0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000001c0), 0xfffffe46) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x2, 0x7fff0003}]}) select(0x0, 0x0, 0x0, 0x0, 0x0) fremovexattr(r6, &(0x7f0000000000)=@known='security.apparmor\x00') close_range(r5, 0xffffffffffffffff, 0x0) (async) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @local, @loopback}, 0xc) (async) getsockopt$inet_buf(r4, 0x0, 0x29, &(0x7f0000000040)=""/179, &(0x7f0000000100)=0xb3) (async) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000000240), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000ac0)='gid', 0x0, 0x0) (async, rerun: 32) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r7, 0x800448f0, &(0x7f0000000100)={0x4, 0x307f, "ffe870", 0xd, 0x40}) (async) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) ftruncate(0xffffffffffffffff, 0x200000) (async, rerun: 64) preadv(0xffffffffffffffff, &(0x7f0000002100)=[{&(0x7f00000007c0)=""/80, 0x50}], 0x2, 0x1fffff, 0x0) (async, rerun: 64) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f00000001c0)=@x86={0x0, 0x7, 0x1, 0x0, 0x3, 0x5, 0x1, 0x6, 0x7, 0x7, 0xe1, 0x8, 0x0, 0x800, 0x4, 0x0, 0xfc, 0x9, 0x6, '\x00', 0x5, 0x8}) (async) dup(r8) 299.600438ms ago: executing program 3 (id=154): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) semget$private(0x0, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@delpolicy={0x5c, 0x14, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@multicast1}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48040}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_buf(r2, 0x29, 0xd3, &(0x7f0000000300)="1674ee19770e5c16c40d1489e65b738804495c2856ff702463df3e540a55885a5ba9c336cd019e8e7d6df264ae5835aa40af50f96da4244ef4e8cb88322f6b34ac94221a9dc7587b2fdf87a9739c0cd14560003826b4f0afae892ec1c3411e748bdaf59a2b7427a93c6dee67d4eaef2b97efdf0049f7441f84f2852b1ac64dbba39b2f2c9aa990dafafa0044e43614586c79183a8bd2c4e5b26a7089536b9b06efb6e57748fa7e84fd8dc78a4439941df81249be55b23923e979b0f0c603cf23c2e0a5cdfc1ad932af396458fd110c5d", 0xd0) 83.487906ms ago: executing program 1 (id=128): syz_usb_connect(0x4, 0x2d, &(0x7f00000003c0)=ANY=[@ANYRESOCT], 0x0) (async) syz_usb_connect(0x4, 0x2d, &(0x7f00000003c0)=ANY=[@ANYRESOCT], 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getpeername(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 74.417398ms ago: executing program 2 (id=155): socket$nl_rdma(0x10, 0x3, 0x14) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) creat(0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f0000003840)={0x8, {"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", 0x1000}}, 0x1059) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SG_EMULATED_HOST(r4, 0x2283, &(0x7f0000000480)) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2400c044) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000100)={0x0, 0x0, 0x8, 0x16, 0x200, &(0x7f0000000880)="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"}) mount$bind(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x0, &(0x7f00000001c0)='\x05\x00\x00\x00s\x00') unshare(0x40000000) 71.779693ms ago: executing program 3 (id=156): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000000000f9000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xfed7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x6, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) (async) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, &(0x7f0000000340)) (async) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000003000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x0) (async) syz_emit_ethernet(0xfdef, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004500005c00000000001190780000000000000000000000000048907803000000000000006d4dfdeb8cf7bbfe143803bec2ce783e04cd32308cdd8ddec71cb8adfc0600a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c"], 0x0) (async) mlockall(0x1) (async) madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x9) (async) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000740)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) (async) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) 0s ago: executing program 3 (id=157): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x200401, 0x0) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)={0x4800, 0x0, 0xe}, 0x18) fsetxattr$security_capability(r2, &(0x7f0000000080), 0x0, 0x0, 0x3) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) (async) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0x0) (async) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) (async) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) (async) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0, 0x3000}) (async) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f0000000300)=""/75, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000e00)) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x100, 0x2}) gettid() ioctl$UFFDIO_REGISTER(r3, 0xc020aa04, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}}) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="bc000000100003058af374580100800000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800900010069706970000000000c0002800500090029000000"], 0x3c}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:49454' (ED25519) to the list of known hosts. [ 35.757267][ T5302] cgroup: Unknown subsys name 'net' [ 35.904823][ T5302] cgroup: Unknown subsys name 'cpuset' [ 35.908509][ T5302] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 36.704010][ T5302] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 39.562726][ T5357] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 39.564423][ T5358] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 39.565173][ T5357] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 39.567916][ T5358] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 39.568843][ T5357] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 39.571589][ T5358] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 39.573657][ T5357] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 39.574843][ T5358] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 39.576979][ T5357] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 39.579366][ T5358] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 39.581760][ T5357] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 39.581946][ T5363] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 39.584318][ T5357] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 39.586472][ T5363] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 39.587857][ T5357] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 39.589459][ T5358] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 39.589577][ T5363] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 39.589696][ T5363] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 39.598444][ T5363] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 39.599114][ T5358] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 39.602638][ T5358] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 39.602957][ T5363] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 39.607069][ T5363] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 39.608888][ T5363] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 39.773311][ T5349] chnl_net:caif_netlink_parms(): no params data found [ 39.843241][ T5348] chnl_net:caif_netlink_parms(): no params data found [ 39.947708][ T5352] chnl_net:caif_netlink_parms(): no params data found [ 39.952545][ T5349] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.954442][ T5349] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.956400][ T5349] bridge_slave_0: entered allmulticast mode [ 39.958374][ T5349] bridge_slave_0: entered promiscuous mode [ 39.963808][ T5349] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.965746][ T5349] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.967613][ T5349] bridge_slave_1: entered allmulticast mode [ 39.969976][ T5349] bridge_slave_1: entered promiscuous mode [ 39.995495][ T5348] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.997947][ T5348] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.000536][ T5348] bridge_slave_0: entered allmulticast mode [ 40.003296][ T5348] bridge_slave_0: entered promiscuous mode [ 40.006699][ T5348] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.009242][ T5348] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.011720][ T5348] bridge_slave_1: entered allmulticast mode [ 40.014511][ T5348] bridge_slave_1: entered promiscuous mode [ 40.017201][ T5359] chnl_net:caif_netlink_parms(): no params data found [ 40.117409][ T5349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.122092][ T5348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.154185][ T5349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.158388][ T5348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.235091][ T5348] team0: Port device team_slave_0 added [ 40.244097][ T5352] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.245934][ T5352] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.247691][ T5352] bridge_slave_0: entered allmulticast mode [ 40.249996][ T5352] bridge_slave_0: entered promiscuous mode [ 40.295768][ T5349] team0: Port device team_slave_0 added [ 40.298129][ T5348] team0: Port device team_slave_1 added [ 40.307925][ T5352] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.309953][ T5352] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.311755][ T5352] bridge_slave_1: entered allmulticast mode [ 40.313685][ T5352] bridge_slave_1: entered promiscuous mode [ 40.315576][ T5359] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.317522][ T5359] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.320563][ T5359] bridge_slave_0: entered allmulticast mode [ 40.322526][ T5359] bridge_slave_0: entered promiscuous mode [ 40.327043][ T5349] team0: Port device team_slave_1 added [ 40.354567][ T5359] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.356429][ T5359] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.358305][ T5359] bridge_slave_1: entered allmulticast mode [ 40.360506][ T5359] bridge_slave_1: entered promiscuous mode [ 40.390092][ T5348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.392545][ T5348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.402172][ T5348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.409020][ T5352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.421068][ T5359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.423581][ T5349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.425376][ T5349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.433295][ T5349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.437141][ T5348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.439207][ T5348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.446174][ T5348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.450901][ T5352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.456028][ T5359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.460310][ T5349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.462094][ T5349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.468791][ T5349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.505042][ T5359] team0: Port device team_slave_0 added [ 40.508222][ T5359] team0: Port device team_slave_1 added [ 40.522544][ T5352] team0: Port device team_slave_0 added [ 40.525532][ T5352] team0: Port device team_slave_1 added [ 40.583060][ T5348] hsr_slave_0: entered promiscuous mode [ 40.585312][ T5348] hsr_slave_1: entered promiscuous mode [ 40.602529][ T5349] hsr_slave_0: entered promiscuous mode [ 40.605217][ T5349] hsr_slave_1: entered promiscuous mode [ 40.607012][ T5349] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 40.609538][ T5349] Cannot create hsr debugfs directory [ 40.619417][ T5352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.621905][ T5352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.628230][ T5352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.631628][ T5359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.633559][ T5359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.642309][ T5359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.647314][ T5359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.649571][ T5359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.657968][ T5359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.662251][ T5352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.664076][ T5352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.672357][ T5352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.719339][ T5352] hsr_slave_0: entered promiscuous mode [ 40.721830][ T5352] hsr_slave_1: entered promiscuous mode [ 40.724044][ T5352] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 40.726551][ T5352] Cannot create hsr debugfs directory [ 40.779859][ T5359] hsr_slave_0: entered promiscuous mode [ 40.781791][ T5359] hsr_slave_1: entered promiscuous mode [ 40.783801][ T5359] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 40.786044][ T5359] Cannot create hsr debugfs directory [ 40.993088][ T5349] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 41.000837][ T5349] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 41.004036][ T5349] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 41.010401][ T5349] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 41.022427][ T5348] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 41.029221][ T5348] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 41.032886][ T5348] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 41.040362][ T5348] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 41.057721][ T5352] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 41.071616][ T5352] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 41.080004][ T5352] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 41.083134][ T5352] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 41.120836][ T5359] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 41.124076][ T5359] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 41.127172][ T5359] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 41.132377][ T5359] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 41.162314][ T5349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.190297][ T5349] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.197351][ T105] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.199617][ T105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.210303][ T105] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.212810][ T105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.221627][ T5352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.230314][ T5348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.246664][ T5348] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.254045][ T5352] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.259339][ T105] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.261451][ T105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.277791][ T105] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.279738][ T105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.293934][ T105] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.296131][ T105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.304261][ T1101] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.306461][ T1101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.331813][ T5359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.358373][ T5352] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 41.363977][ T5359] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.378274][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.380196][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.384358][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.386217][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.451150][ T5349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.458571][ T5348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.492879][ T5352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.500382][ T5348] veth0_vlan: entered promiscuous mode [ 41.503066][ T5349] veth0_vlan: entered promiscuous mode [ 41.513071][ T5348] veth1_vlan: entered promiscuous mode [ 41.516346][ T5349] veth1_vlan: entered promiscuous mode [ 41.528565][ T5359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.545238][ T5352] veth0_vlan: entered promiscuous mode [ 41.557203][ T5349] veth0_macvtap: entered promiscuous mode [ 41.562822][ T5349] veth1_macvtap: entered promiscuous mode [ 41.565796][ T5352] veth1_vlan: entered promiscuous mode [ 41.568912][ T5348] veth0_macvtap: entered promiscuous mode [ 41.573700][ T5348] veth1_macvtap: entered promiscuous mode [ 41.586197][ T5349] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.597094][ T5349] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.601355][ T5349] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.604591][ T5349] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.606906][ T5349] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.609996][ T5363] Bluetooth: hci1: command tx timeout [ 41.610207][ T5355] Bluetooth: hci0: command tx timeout [ 41.611391][ T5349] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.613644][ T5348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.619604][ T5348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.622622][ T5348] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.630035][ T5359] veth0_vlan: entered promiscuous mode [ 41.640595][ T5348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.643301][ T5348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.646308][ T5348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.654962][ T5359] veth1_vlan: entered promiscuous mode [ 41.659364][ T5348] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.661751][ T5348] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.664008][ T5348] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.666316][ T5348] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.676298][ T5352] veth0_macvtap: entered promiscuous mode [ 41.678928][ T5355] Bluetooth: hci2: command tx timeout [ 41.679113][ T5363] Bluetooth: hci3: command tx timeout [ 41.695201][ T5352] veth1_macvtap: entered promiscuous mode [ 41.709496][ T5352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.712275][ T5352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.714793][ T5352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.717416][ T5352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.721237][ T5352] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.738579][ T5352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.742033][ T5352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.744614][ T5352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.747141][ T5352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.751842][ T5352] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.755849][ T5352] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.758222][ T5352] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.761460][ T5352] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.763767][ T5352] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.769571][ T5359] veth0_macvtap: entered promiscuous mode [ 41.781508][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.784004][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.794507][ T5359] veth1_macvtap: entered promiscuous mode [ 41.802598][ T1105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.804757][ T1105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.811529][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.813595][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.823333][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.824204][ T5359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.825901][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.829075][ T5359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.833387][ T5359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.836031][ T5359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.838649][ T5359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.842614][ T5359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.845843][ T5359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.851803][ T5359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.854504][ T5359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.857048][ T5359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.860820][ T5359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.863368][ T5359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.866038][ T5359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.871367][ T5359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.896794][ T5349] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 41.914087][ T5359] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.917523][ T5359] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.920874][ T5359] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.923670][ T5359] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.946691][ T105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.953341][ T105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.991817][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.993927][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.994862][ T105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.001363][ T105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.017565][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.021682][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.022735][ T5418] tmpfs: Unknown parameter 'smackfshat' [ 42.047286][ T5414] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.090637][ T5425] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1'. [ 42.095863][ T5423] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 42.113987][ T5418] netlink: 'syz.2.3': attribute type 1 has an invalid length. [ 42.296833][ T5435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8'. [ 42.301323][ T5435] netlink: 173 bytes leftover after parsing attributes in process `syz.0.8'. [ 42.304129][ T5435] netlink: 277 bytes leftover after parsing attributes in process `syz.0.8'. [ 42.306400][ T5435] netlink: 277 bytes leftover after parsing attributes in process `syz.0.8'. [ 42.604999][ T5445] xt_recent: hitcount (4294967293) is larger than allowed maximum (65535) [ 42.793586][ T5450] netlink: 'syz.0.13': attribute type 2 has an invalid length. [ 42.869710][ T5391] IPVS: starting estimator thread 0... [ 42.978854][ T5455] IPVS: using max 35 ests per chain, 84000 per kthread [ 43.015144][ T5464] capability: warning: `syz.2.17' uses deprecated v2 capabilities in a way that may be insecure [ 43.051565][ T39] audit: type=1326 audit(1728407318.569:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5463 comm="syz.2.17" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf744e579 code=0x0 [ 43.252078][ T5472] overlayfs: failed to resolve './file0': -2 [ 43.317227][ T5477] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 43.335384][ T5477] openvswitch: netlink: Missing key (keys=100000040, expected=2000) [ 43.477792][ T5491] libceph: resolve '0.' (ret=-3): failed [ 43.482661][ T5491] libceph: resolve '0.' (ret=-3): failed [ 43.484416][ T5491] libceph: resolve '0.' (ret=-3): failed [ 43.486427][ T5491] libceph: resolve '0.' (ret=-3): failed [ 43.488025][ T5491] libceph: resolve '0.' (ret=-3): failed [ 43.490557][ T5491] libceph: resolve '0.' (ret=-3): failed [ 43.492463][ T5491] libceph: resolve '0.' (ret=-3): failed [ 43.494659][ T5491] libceph: resolve '0.' (ret=-3): failed [ 43.496315][ T5491] libceph: resolve '0.' (ret=-3): failed [ 43.497881][ T5491] libceph: resolve '0.' (ret=-3): failed [ 43.500137][ T5491] libceph: resolve '0.' (ret=-3): failed [ 43.501734][ T5491] libceph: resolve '0.' (ret=-3): failed [ 43.503405][ T5491] libceph: resolve '0.' (ret=-3): failed [ 43.505083][ T5491] libceph: resolve '0.' (ret=-3): failed [ 43.506737][ T5491] libceph: resolve '0.' (ret=-3): failed [ 43.508379][ T5491] libceph: resolve '0.' (ret=-3): failed [ 43.510034][ T5491] libceph: resolve '0.' (ret=-3): failed [ 43.511695][ T5491] libceph: resolve '0.' (ret=-3): failed [ 43.515786][ T5491] libceph: resolve '0.' (ret=-3): failed [ 43.517867][ T5491] libceph: resolve '0.' (ret=-3): failed [ 43.520750][ T5491] libceph: resolve '0.' (ret=-3): failed [ 43.522772][ T5491] libceph: resolve '0.' (ret=-3): failed [ 43.525022][ T5491] libceph: resolve '0.' (ret=-3): failed [ 43.527224][ T5491] libceph: resolve '0.' (ret=-3): failed [ 43.529589][ T5491] libceph: resolve '0.' (ret=-3): failed [ 43.531695][ T5491] libceph: resolve '0.' (ret=-3): failed [ 43.533879][ T5491] libceph: resolve '0.' (ret=-3): failed [ 43.536091][ T5491] libceph: resolve '0.' (ret=-3): failed [ 43.538330][ T5491] libceph: resolve '0.' (ret=-3): failed [ 43.540152][ T5491] libceph: resolve '0.' (ret=-3): failed [ 43.541708][ T5491] libceph: resolve '0.' (ret=-3): failed [ 43.545615][ T5491] libceph: resolve '0.' (ret=-3): failed [ 43.547711][ T5491] libceph: resolve '0.' (ret=-3): failed [ 43.678900][ T5363] Bluetooth: hci1: command tx timeout [ 43.679226][ T5355] Bluetooth: hci0: command tx timeout [ 43.712908][ T5504] netlink: 36 bytes leftover after parsing attributes in process `syz.0.29'. [ 43.769407][ T5355] Bluetooth: hci3: command tx timeout [ 43.769469][ T5363] Bluetooth: hci2: command tx timeout [ 43.842121][ T5506] sg_write: data in/out 196608/4 bytes for SCSI command 0xdb-- guessing data in; [ 43.842121][ T5506] program syz.0.30 not setting count and/or reply_len properly [ 43.930167][ T5512] netlink: 'syz.0.32': attribute type 21 has an invalid length. [ 43.932223][ T5512] netlink: 'syz.0.32': attribute type 20 has an invalid length. [ 43.934264][ T5512] IPv6: NLM_F_CREATE should be specified when creating new route [ 43.941788][ T5508] netlink: 4 bytes leftover after parsing attributes in process `syz.2.31'. [ 43.945069][ T5509] netlink: 4 bytes leftover after parsing attributes in process `syz.2.31'. [ 43.946275][ T5512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.32'. [ 44.208337][ T5523] ======================================================= [ 44.208337][ T5523] WARNING: The mand mount option has been deprecated and [ 44.208337][ T5523] and is ignored by this kernel. Remove the mand [ 44.208337][ T5523] option from the mount to silence this warning. [ 44.208337][ T5523] ======================================================= [ 44.228004][ T5523] devtmpfs: Bad value for 'usrquota_inode_hardlimit' [ 44.281220][ T5525] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 44.546747][ T5536] netlink: 'syz.2.41': attribute type 3 has an invalid length. [ 44.605304][ T5544] netlink: 'syz.2.43': attribute type 4 has an invalid length. [ 45.298863][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 45.301477][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 45.304754][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 45.308080][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 45.545186][ T5574] netlink: 'syz.2.52': attribute type 12 has an invalid length. [ 45.547907][ T5570] netlink: 'syz.0.51': attribute type 9 has an invalid length. [ 45.752703][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 45.758950][ T5363] Bluetooth: hci0: command tx timeout [ 45.769061][ T5363] Bluetooth: hci1: command tx timeout [ 45.839437][ T5363] Bluetooth: hci3: command tx timeout [ 45.839466][ T5355] Bluetooth: hci2: command tx timeout [ 45.850534][ T5581] warning: `syz.0.54' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 45.886075][ T5355] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 45.889895][ T5355] CPU: 1 UID: 0 PID: 5355 Comm: kworker/u33:2 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 45.893383][ T5355] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 45.896165][ T5355] Workqueue: hci3 hci_rx_work [ 45.897421][ T5355] Call Trace: [ 45.898307][ T5355] [ 45.899111][ T5355] dump_stack_lvl+0x16c/0x1f0 [ 45.900401][ T5355] sysfs_warn_dup+0x7f/0xa0 [ 45.901635][ T5355] sysfs_create_dir_ns+0x24d/0x2b0 [ 45.902997][ T5355] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 45.904485][ T5355] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 45.905930][ T5355] ? kobject_add_internal+0x12d/0x990 [ 45.907516][ T5355] ? do_raw_spin_unlock+0x172/0x230 [ 45.908901][ T5355] kobject_add_internal+0x2c8/0x990 [ 45.910282][ T5355] kobject_add+0x16f/0x240 [ 45.911466][ T5355] ? __pfx_kobject_add+0x10/0x10 [ 45.912788][ T5355] ? class_to_subsys+0x3e/0x160 [ 45.914097][ T5355] ? do_raw_spin_unlock+0x172/0x230 [ 45.915472][ T5355] ? kobject_put+0xab/0x5a0 [ 45.916683][ T5355] device_add+0x289/0x1a70 [ 45.917869][ T5355] ? __pfx_dev_set_name+0x10/0x10 [ 45.919194][ T5355] ? __pfx_device_add+0x10/0x10 [ 45.920483][ T5355] ? mgmt_send_event_skb+0x2f2/0x460 [ 45.921887][ T5355] hci_conn_add_sysfs+0x17e/0x230 [ 45.923219][ T5355] le_conn_complete_evt+0xfc7/0x1cf0 [ 45.924611][ T5355] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 45.926112][ T5355] ? trace_contention_end+0xea/0x140 [ 45.927501][ T5355] ? __mutex_lock+0x1a6/0x9c0 [ 45.928745][ T5355] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 45.930299][ T5355] ? skb_pull_data+0x166/0x210 [ 45.931576][ T5355] hci_le_meta_evt+0x2e2/0x5d0 [ 45.932889][ T5355] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 45.934582][ T5355] hci_event_packet+0x666/0x1190 [ 45.935901][ T5355] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 45.937339][ T5355] ? __pfx_hci_event_packet+0x10/0x10 [ 45.938769][ T5355] ? mark_held_locks+0x9f/0xe0 [ 45.940053][ T5355] ? kcov_remote_start+0x3cf/0x6e0 [ 45.941423][ T5355] ? lockdep_hardirqs_on+0x7c/0x110 [ 45.942801][ T5355] hci_rx_work+0x2c6/0x16c0 [ 45.944011][ T5355] ? lock_acquire+0x2f/0xb0 [ 45.945220][ T5355] ? process_one_work+0x8bb/0x1b30 [ 45.946579][ T5355] process_one_work+0x958/0x1b30 [ 45.947889][ T5355] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 45.949372][ T5355] ? __pfx_process_one_work+0x10/0x10 [ 45.950795][ T5355] ? assign_work+0x1a0/0x250 [ 45.952026][ T5355] worker_thread+0x6c8/0xf00 [ 45.953277][ T5355] ? __pfx_worker_thread+0x10/0x10 [ 45.954630][ T5355] kthread+0x2c1/0x3a0 [ 45.955706][ T5355] ? _raw_spin_unlock_irq+0x23/0x50 [ 45.957080][ T5355] ? __pfx_kthread+0x10/0x10 [ 45.958296][ T5355] ret_from_fork+0x45/0x80 [ 45.959477][ T5355] ? __pfx_kthread+0x10/0x10 [ 45.960705][ T5355] ret_from_fork_asm+0x1a/0x30 [ 45.961995][ T5355] [ 45.964514][ T5355] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 45.968514][ T5355] Bluetooth: hci3: failed to register connection device [ 46.719329][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 46.879560][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 46.909635][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 46.991920][ T5600] fuse: Bad value for 'group_id' [ 46.996022][ T5600] fuse: Bad value for 'group_id' [ 47.029245][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 47.358344][ T39] audit: type=1326 audit(1728407322.869:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5618 comm="syz.0.66" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f1f579 code=0x7ffc0000 [ 47.369107][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 47.369332][ T39] audit: type=1326 audit(1728407322.869:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5618 comm="syz.0.66" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f1f579 code=0x7ffc0000 [ 47.395398][ T39] audit: type=1326 audit(1728407322.869:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5618 comm="syz.0.66" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f1f579 code=0x7ffc0000 [ 47.403971][ T39] audit: type=1326 audit(1728407322.869:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5618 comm="syz.0.66" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f1f579 code=0x7ffc0000 [ 47.412864][ T39] audit: type=1326 audit(1728407322.869:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5618 comm="syz.0.66" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f1f579 code=0x7ffc0000 [ 47.418300][ T39] audit: type=1326 audit(1728407322.869:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5618 comm="syz.0.66" exe="/syz-executor" sig=0 arch=40000003 syscall=428 compat=1 ip=0xf7f1f579 code=0x7ffc0000 [ 47.423770][ T39] audit: type=1326 audit(1728407322.869:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5618 comm="syz.0.66" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f1f579 code=0x7ffc0000 [ 47.430903][ T39] audit: type=1326 audit(1728407322.869:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5618 comm="syz.0.66" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f1f579 code=0x7ffc0000 [ 47.436726][ T39] audit: type=1326 audit(1728407322.879:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5618 comm="syz.0.66" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7f1f579 code=0x7ffc0000 [ 47.501827][ T5625] netlink: 'syz.2.67': attribute type 10 has an invalid length. [ 47.504484][ T5625] syz_tun: entered promiscuous mode [ 47.509249][ T5625] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 47.518299][ T5626] __nla_validate_parse: 5 callbacks suppressed [ 47.518312][ T5626] netlink: 16 bytes leftover after parsing attributes in process `syz.3.65'. [ 47.558876][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 47.605172][ T5631] GUP no longer grows the stack in syz.2.68 (5631): 20004000-2000a000 (20002000) [ 47.609509][ T5631] CPU: 2 UID: 0 PID: 5631 Comm: syz.2.68 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 47.613240][ T5631] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 47.616902][ T5631] Call Trace: [ 47.618060][ T5631] [ 47.619085][ T5631] dump_stack_lvl+0x16c/0x1f0 [ 47.620727][ T5631] gup_vma_lookup+0x1d2/0x220 [ 47.622369][ T5631] __get_user_pages+0x26c/0x3b90 [ 47.624086][ T5631] ? find_held_lock+0x2d/0x110 [ 47.625756][ T5631] ? mtree_load+0x30a/0xa40 [ 47.627328][ T5631] ? __pfx_lock_release+0x10/0x10 [ 47.629080][ T5631] ? trace_lock_acquire+0x14a/0x1d0 [ 47.630893][ T5631] ? __pfx___get_user_pages+0x10/0x10 [ 47.632762][ T5631] get_user_pages_remote+0x25e/0xb30 [ 47.634614][ T5631] ? __pfx_get_user_pages_remote+0x10/0x10 [ 47.636638][ T5631] __access_remote_vm+0x3ec/0x7f0 [ 47.638387][ T5631] ? __pfx___access_remote_vm+0x10/0x10 [ 47.640304][ T5631] ? lock_acquire+0x2f/0xb0 [ 47.641912][ T5631] ? proc_pid_cmdline_read+0x25b/0x8d0 [ 47.643813][ T5631] proc_pid_cmdline_read+0x4f4/0x8d0 [ 47.645657][ T5631] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 47.647711][ T5631] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 47.649786][ T5631] vfs_readv+0x6bf/0x890 [ 47.651306][ T5631] ? __pfx_vfs_readv+0x10/0x10 [ 47.653023][ T5631] ? find_held_lock+0x2d/0x110 [ 47.654713][ T5631] ? __pfx_lock_release+0x10/0x10 [ 47.656448][ T5631] ? trace_lock_acquire+0x14a/0x1d0 [ 47.658252][ T5631] ? __fget_files+0x244/0x3f0 [ 47.659890][ T5631] ? do_preadv+0x1b4/0x270 [ 47.661493][ T5631] do_preadv+0x1b4/0x270 [ 47.662962][ T5631] ? __pfx_do_preadv+0x10/0x10 [ 47.664620][ T5631] __do_fast_syscall_32+0x73/0x120 [ 47.666382][ T5631] do_fast_syscall_32+0x32/0x80 [ 47.668067][ T5631] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 47.670255][ T5631] RIP: 0023:0xf744e579 [ 47.671666][ T5631] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 47.678260][ T5631] RSP: 002b:00000000f571556c EFLAGS: 00000296 ORIG_RAX: 000000000000014d [ 47.680876][ T5631] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 000000002001a440 [ 47.682941][ T5631] RDX: 0000000000000001 RSI: 0000000000000100 RDI: 0000000000000000 [ 47.685003][ T5631] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 47.687055][ T5631] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 47.689116][ T5631] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 47.691180][ T5631] [ 47.692099][ C2] vkms_vblank_simulate: vblank timer overrun [ 47.803957][ T5632] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 47.839499][ T5355] Bluetooth: hci1: command tx timeout [ 47.839530][ T5363] Bluetooth: hci0: command tx timeout [ 47.918828][ T5363] Bluetooth: hci3: command tx timeout [ 47.928850][ T5363] Bluetooth: hci2: command tx timeout [ 48.049048][ T5232] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 48.198872][ T5232] usb 5-1: Using ep0 maxpacket: 8 [ 48.203850][ T5232] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 48.206477][ T5232] usb 5-1: config 246 descriptor has 1 excess byte, ignoring [ 48.208604][ T5232] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 48.211298][ T5232] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 48.214399][ T5232] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 48.217492][ T5232] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 48.220628][ T5232] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 48.228068][ T5232] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 48.230554][ T5232] usb 5-1: config 246 descriptor has 1 excess byte, ignoring [ 48.232532][ T5232] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 48.234962][ T5232] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 48.238103][ T5232] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 48.241206][ T5232] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 48.244091][ T5232] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 48.248588][ T5232] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 48.251245][ T5232] usb 5-1: config 246 descriptor has 1 excess byte, ignoring [ 48.253289][ T5232] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 48.255688][ T5232] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 48.258919][ T5232] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 48.261842][ T5232] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 48.264715][ T5232] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 48.271994][ T5232] usb 5-1: string descriptor 0 read error: -22 [ 48.273808][ T5232] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 48.275987][ T5232] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.290572][ T5232] adutux 5-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 48.408286][ T5639] syz.2.71 uses obsolete (PF_INET,SOCK_PACKET) [ 48.493866][ T5409] usb 5-1: USB disconnect, device number 2 [ 49.048854][ T5232] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 49.080574][ T5653] serio: Serial port pts0 [ 49.215247][ T5232] usb 7-1: config 0 has no interfaces? [ 49.216768][ T5232] usb 7-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 49.220590][ T5232] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.222441][ T5660] overlayfs: failed to resolve '/ʳ': -2 [ 49.229904][ T5232] usb 7-1: config 0 descriptor?? [ 49.558370][ T5671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.567667][ T5671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.575655][ T5671] usb usb9: usbfs: process 5671 (syz.2.74) did not claim interface 0 before use [ 49.670575][ T5671] vlan2: entered allmulticast mode [ 49.673792][ T5671] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 49.688600][ T5671] mac80211_hwsim hwsim4 wlan1: left allmulticast mode [ 49.703975][ T2788] usb 7-1: USB disconnect, device number 2 [ 49.833840][ T5677] netlink: 'syz.0.81': attribute type 13 has an invalid length. [ 49.836678][ T5677] netlink: 8 bytes leftover after parsing attributes in process `syz.0.81'. [ 49.998881][ T5363] Bluetooth: hci3: command tx timeout [ 50.044625][ T5680] netlink: 4 bytes leftover after parsing attributes in process `syz.3.82'. [ 50.153296][ T5686] netlink: 728 bytes leftover after parsing attributes in process `syz.0.84'. [ 50.155644][ T5686] netlink: 16 bytes leftover after parsing attributes in process `syz.0.84'. [ 50.265742][ T5692] overlayfs: failed to resolve './bus/file0': -2 [ 50.387255][ T5699] netlink: 'syz.3.88': attribute type 2 has an invalid length. [ 50.391403][ T5699] netlink: 'syz.3.88': attribute type 2 has an invalid length. [ 50.474255][ T5698] team0: Port device team_slave_0 removed [ 50.476201][ T5698] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 50.498530][ T5698] afs: Unknown parameter 'p49>D)X'isRA &(' [ 50.748871][ T5232] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 50.902676][ T5232] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 50.905744][ T5232] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 50.908420][ T5232] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 50.911110][ T5232] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.916957][ T5702] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 50.926391][ T5232] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 51.128423][ T1998] usb 7-1: USB disconnect, device number 3 [ 51.162842][ T5710] netlink: 16 bytes leftover after parsing attributes in process `syz.2.92'. [ 51.412493][ T5718] 9pnet_fd: Insufficient options for proto=fd [ 52.379501][ T5749] netlink: 40 bytes leftover after parsing attributes in process `syz.2.101'. [ 52.539021][ T5757] evm: overlay not supported [ 52.818767][ T57] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 52.979551][ T57] usb 7-1: not running at top speed; connect to a high speed hub [ 52.982419][ T57] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 52.985248][ T57] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 52.992052][ T57] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 52.994494][ T57] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.996574][ T57] usb 7-1: Product: ⁀鯡ૉ㪤ዛ䡛捞䋚値鑊鸆䢶ꝟ㋡䄔泜꣼處쑧炙豙辣ᙰ嚜⽇๘⩠匠서螫■㴞褓锳陆ꈷ췈಴↩⟘೾㋶怟酬谔ްꐄ懲큂퍬⤚絫㕬뱑쬦ᗞ禦偏籱ꇄ箨莼佤張瞧ȉゅⰉ∔풏糇甀틸ﰋ곈︯❨圓傦̢壘壶钟뙋ᷔ筽呓⊰㍁鬦扊᧌뀬 [ 53.004417][ T57] usb 7-1: Manufacturer: э [ 53.005627][ T57] usb 7-1: SerialNumber: ᐄ [ 53.010534][ T5760] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 53.217180][ T57] cdc_ncm 7-1:1.0: bind() failure [ 53.231329][ T57] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 53.233157][ T57] cdc_ncm 7-1:1.1: bind() failure [ 53.235968][ T57] usb 7-1: USB disconnect, device number 4 [ 53.322219][ T5768] syz.0.106: attempt to access beyond end of device [ 53.322219][ T5768] nbd0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 53.326347][ T5768] syz.0.106: attempt to access beyond end of device [ 53.326347][ T5768] nbd0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 53.330171][ T5768] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 53.332855][ T5768] syz.0.106: attempt to access beyond end of device [ 53.332855][ T5768] nbd0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 53.336136][ T5768] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 53.340146][ T5768] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 53.343172][ T5768] UDF-fs: Scanning with blocksize 512 failed [ 53.346285][ T5768] syz.0.106: attempt to access beyond end of device [ 53.346285][ T5768] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 53.351591][ T5768] syz.0.106: attempt to access beyond end of device [ 53.351591][ T5768] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 53.355967][ T5768] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 53.360081][ T5768] syz.0.106: attempt to access beyond end of device [ 53.360081][ T5768] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 53.364449][ T5768] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 53.367655][ T5768] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 53.370110][ T5768] UDF-fs: Scanning with blocksize 1024 failed [ 53.372144][ T5768] syz.0.106: attempt to access beyond end of device [ 53.372144][ T5768] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 53.375788][ T5768] syz.0.106: attempt to access beyond end of device [ 53.375788][ T5768] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 53.379302][ T5768] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 53.381863][ T5768] syz.0.106: attempt to access beyond end of device [ 53.381863][ T5768] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 53.385439][ T5768] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 53.388775][ T5768] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 53.390913][ T5768] UDF-fs: Scanning with blocksize 2048 failed [ 53.393009][ T5768] syz.0.106: attempt to access beyond end of device [ 53.393009][ T5768] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 53.397254][ T5768] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 53.400504][ T5768] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 53.403036][ T5768] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 53.404992][ T5768] UDF-fs: Scanning with blocksize 4096 failed [ 53.406577][ T5768] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 53.418437][ T5768] netlink: 'syz.0.106': attribute type 7 has an invalid length. [ 53.424100][ T5768] : entered promiscuous mode [ 54.599147][ T65] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 54.792593][ T65] usb 7-1: config index 0 descriptor too short (expected 45, got 36) [ 54.794756][ T65] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 54.797393][ T65] usb 7-1: config 0 has no interfaces? [ 54.798901][ T65] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 54.801331][ T65] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.806797][ T65] usb 7-1: config 0 descriptor?? [ 55.374343][ T5788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.377688][ T5788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.384988][ T5788] No control pipe specified [ 55.422320][ T5818] mmap: syz.3.122 (5818) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 55.547081][ T5825] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 55.550608][ T5825] overlayfs: failed to set xattr on upper [ 55.552121][ T5825] overlayfs: ...falling back to redirect_dir=nofollow. [ 55.553914][ T5825] overlayfs: ...falling back to index=off. [ 55.555445][ T5825] overlayfs: ...falling back to uuid=null. [ 55.974447][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.061870][ T5355] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 56.071930][ T5355] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 56.072920][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.075306][ T5355] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 56.079938][ T5355] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 56.085982][ T5355] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 56.089997][ T5355] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 56.179166][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.214544][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 56.282784][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.290073][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.296680][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.298906][ T5827] bridge_slave_0: entered allmulticast mode [ 56.300994][ T5827] bridge_slave_0: entered promiscuous mode [ 56.303998][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.306253][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.308202][ T5827] bridge_slave_1: entered allmulticast mode [ 56.311054][ T5827] bridge_slave_1: entered promiscuous mode [ 56.348502][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.354631][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.385305][ T5827] team0: Port device team_slave_0 added [ 56.389658][ T5827] team0: Port device team_slave_1 added [ 56.421016][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.422928][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.426163][ T5355] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 56.429896][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.433675][ T5355] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 56.439749][ T5355] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 56.443192][ T5355] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 56.445615][ T5355] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 56.447566][ T5355] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 56.451593][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.453512][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.460922][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.554365][ T11] bridge_slave_1: left allmulticast mode [ 56.556176][ T11] bridge_slave_1: left promiscuous mode [ 56.559122][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.570192][ T11] bridge_slave_0: left allmulticast mode [ 56.571801][ T11] bridge_slave_0: left promiscuous mode [ 56.573520][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.267212][ T5392] usb 7-1: USB disconnect, device number 5 [ 57.285196][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 57.291803][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 57.296473][ T11] bond0 (unregistering): Released all slaves [ 57.337864][ T5827] hsr_slave_0: entered promiscuous mode [ 57.340784][ T5827] hsr_slave_1: entered promiscuous mode [ 57.343422][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.345428][ T5827] Cannot create hsr debugfs directory [ 57.447579][ T11] : left promiscuous mode [ 57.599686][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 57.682276][ T5859] netlink: 'syz.2.134': attribute type 10 has an invalid length. [ 57.793522][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.795991][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.798429][ T5841] bridge_slave_0: entered allmulticast mode [ 57.801706][ T5841] bridge_slave_0: entered promiscuous mode [ 57.806774][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.813474][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.815910][ T5841] bridge_slave_1: entered allmulticast mode [ 57.818547][ T5841] bridge_slave_1: entered promiscuous mode [ 57.873714][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.910030][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.980533][ T5841] team0: Port device team_slave_0 added [ 57.992108][ T11] hsr_slave_0: left promiscuous mode [ 57.995284][ T11] hsr_slave_1: left promiscuous mode [ 57.999140][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.001539][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.005743][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.008212][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.035638][ T11] veth1_macvtap: left promiscuous mode [ 58.038593][ T11] veth0_macvtap: left promiscuous mode [ 58.040948][ T11] veth1_vlan: left promiscuous mode [ 58.042834][ T11] veth0_vlan: left promiscuous mode [ 58.162176][ T5363] Bluetooth: hci3: command tx timeout [ 58.479121][ T5363] Bluetooth: hci4: command tx timeout [ 58.742122][ T11] team0 (unregistering): Port device team_slave_1 removed [ 59.243737][ T5841] team0: Port device team_slave_1 added [ 59.297285][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.299588][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.306462][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.316604][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.318503][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.326120][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.406449][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.413435][ T5841] hsr_slave_0: entered promiscuous mode [ 59.413481][ T5902] netlink: 56 bytes leftover after parsing attributes in process `syz.2.143'. [ 59.418333][ T5841] hsr_slave_1: entered promiscuous mode [ 59.421805][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.423805][ T5841] Cannot create hsr debugfs directory [ 59.442242][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.482785][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.487096][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.612321][ T5841] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.646709][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.659069][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.664909][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.667329][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.675788][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.678329][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.754295][ T5841] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.778092][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.796501][ T5827] veth0_vlan: entered promiscuous mode [ 59.809432][ T5827] veth1_vlan: entered promiscuous mode [ 59.845409][ T5827] veth0_macvtap: entered promiscuous mode [ 59.881840][ T5841] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.905657][ T5827] veth1_macvtap: entered promiscuous mode [ 59.930343][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.933896][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.936969][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.940570][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.944243][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.948036][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.952141][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.970778][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.973676][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.976226][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.979481][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.982350][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.985036][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.991973][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.013821][ T5841] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.030404][ T5827] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.033322][ T5827] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.036098][ T5827] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.040375][ T5827] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.093265][ T105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.095307][ T105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.120267][ T105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.123178][ T105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.191002][ T1101] bridge_slave_1: left allmulticast mode [ 60.193235][ T1101] bridge_slave_1: left promiscuous mode [ 60.195958][ T1101] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.213894][ T1101] bridge_slave_0: left allmulticast mode [ 60.216110][ T1101] bridge_slave_0: left promiscuous mode [ 60.218493][ T1101] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.498640][ T1101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 60.516966][ T1101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 60.526579][ T1101] bond0 (unregistering): Released all slaves [ 60.558910][ T5363] Bluetooth: hci4: command tx timeout [ 60.602211][ T5841] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 60.610189][ T5841] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 60.622244][ T5841] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 60.632067][ T5841] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 60.773118][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.792778][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.800180][ T1105] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.802272][ T1105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.858658][ T1105] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.860589][ T1105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.920941][ T5841] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.943698][ T5928] netlink: 36 bytes leftover after parsing attributes in process `syz.2.148'. [ 60.959026][ T1101] hsr_slave_0: left promiscuous mode [ 60.962696][ T1101] hsr_slave_1: left promiscuous mode [ 60.969734][ T1101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.972223][ T1101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.976056][ T1101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.977528][ T5928] netlink: 36 bytes leftover after parsing attributes in process `syz.2.148'. [ 60.978448][ T1101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.982753][ T5928] netlink: 16 bytes leftover after parsing attributes in process `syz.2.148'. [ 60.985896][ T5928] netlink: 36 bytes leftover after parsing attributes in process `syz.2.148'. [ 60.988869][ T5928] netlink: 36 bytes leftover after parsing attributes in process `syz.2.148'. [ 61.011561][ T1101] veth1_macvtap: left promiscuous mode [ 61.013095][ T1101] veth0_macvtap: left promiscuous mode [ 61.014503][ T1101] veth1_vlan: left promiscuous mode [ 61.015882][ T1101] veth0_vlan: left promiscuous mode [ 61.599926][ T1101] team0 (unregistering): Port device team_slave_1 removed [ 61.671464][ T1101] team0 (unregistering): Port device team_slave_0 removed [ 61.890253][ T5935] netlink: 'syz.2.149': attribute type 3 has an invalid length. [ 61.893082][ T5935] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.149'. [ 62.196986][ T5934] netlink: 12 bytes leftover after parsing attributes in process `syz.2.149'. [ 62.204085][ T5934] netlink: 12 bytes leftover after parsing attributes in process `syz.2.149'. [ 62.238746][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.266242][ T5841] veth0_vlan: entered promiscuous mode [ 62.277297][ T5841] veth1_vlan: entered promiscuous mode [ 62.297400][ T5841] veth0_macvtap: entered promiscuous mode [ 62.300613][ T5841] veth1_macvtap: entered promiscuous mode [ 62.307616][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.310844][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.313499][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.316149][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.318550][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.322595][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.325928][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.328935][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.331736][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.334312][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.336962][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.341216][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.344057][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.347506][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.359685][ T5841] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.362297][ T5841] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.365404][ T5841] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.368520][ T5841] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.435983][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.438575][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.460601][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.463179][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.804868][ T1101] IPVS: stop unused estimator thread 0... [ 62.938534][ T1101] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 SYZFAIL: mkdir(syz-tmp) failed (errno 28: No space left on device) loop exited with status 67 SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) [ 64.153052][ T1101] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 SYZFAIL: repeatedly failed to execute the program proc=0 req=127 state=1 status=67 (errno 9: Bad file descriptor) [ 64.225268][ T1101] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.306464][ T1101] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.425766][ T1101] bridge_slave_1: left allmulticast mode [ 64.427431][ T1101] bridge_slave_1: left promiscuous mode [ 64.432090][ T1101] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.437281][ T1101] bridge_slave_0: left allmulticast mode [ 64.440087][ T1101] bridge_slave_0: left promiscuous mode [ 64.442407][ T1101] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.720169][ T1101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 64.726929][ T1101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 64.737549][ T1101] bond0 (unregistering): Released all slaves [ 65.060542][ T1101] hsr_slave_0: left promiscuous mode [ 65.062530][ T1101] hsr_slave_1: left promiscuous mode [ 65.064738][ T1101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.066624][ T1101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.069400][ T1101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.071245][ T1101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.097573][ T1101] veth1_macvtap: left promiscuous mode [ 65.099629][ T1101] veth0_macvtap: left promiscuous mode [ 65.101602][ T1101] veth1_vlan: left promiscuous mode [ 65.103472][ T1101] veth0_vlan: left promiscuous mode [ 65.838178][ T1101] team0 (unregistering): Port device team_slave_1 removed [ 65.901603][ T1101] team0 (unregistering): Port device team_slave_0 removed [ 66.406247][ T5967] bond0: (slave syz_tun): Releasing backup interface [ 66.941316][ T1101] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.012182][ T1101] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.080203][ T1101] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.151591][ T1101] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.235395][ T1101] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.337522][ T1101] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.393350][ T1101] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.480941][ T1101] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.570096][ T1101] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.646765][ T1101] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.730343][ T1101] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.799924][ T1101] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.889171][ T1101] bridge_slave_1: left allmulticast mode [ 67.890676][ T1101] bridge_slave_1: left promiscuous mode [ 67.892174][ T1101] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.900204][ T1101] bridge_slave_0: left allmulticast mode [ 67.902051][ T1101] bridge_slave_0: left promiscuous mode [ 67.903937][ T1101] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.910980][ T1101] bridge_slave_1: left allmulticast mode [ 67.912820][ T1101] bridge_slave_1: left promiscuous mode [ 67.914671][ T1101] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.920625][ T1101] bridge_slave_0: left allmulticast mode [ 67.922589][ T1101] bridge_slave_0: left promiscuous mode [ 67.924555][ T1101] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.929702][ T1101] bridge_slave_1: left allmulticast mode [ 67.931564][ T1101] bridge_slave_1: left promiscuous mode [ 67.933315][ T1101] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.935972][ T1101] bridge_slave_0: left allmulticast mode [ 67.937407][ T1101] bridge_slave_0: left promiscuous mode [ 67.939164][ T1101] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.540448][ T1101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 68.544539][ T1101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 68.547800][ T1101] bond0 (unregistering): Released all slaves [ 68.607816][ T1101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 68.613138][ T1101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 68.617923][ T1101] bond0 (unregistering): Released all slaves [ 68.685744][ T1101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 68.689460][ T1101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 68.692674][ T1101] bond0 (unregistering): Released all slaves [ 69.323325][ T1101] hsr_slave_0: left promiscuous mode [ 69.325243][ T1101] hsr_slave_1: left promiscuous mode [ 69.327089][ T1101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.329990][ T1101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.332287][ T1101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.334179][ T1101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.337910][ T1101] hsr_slave_0: left promiscuous mode [ 69.341396][ T1101] hsr_slave_1: left promiscuous mode [ 69.343106][ T1101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.344999][ T1101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.347270][ T1101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.349677][ T1101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.353323][ T1101] hsr_slave_0: left promiscuous mode [ 69.355097][ T1101] hsr_slave_1: left promiscuous mode [ 69.356818][ T1101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.360142][ T1101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.362288][ T1101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.364130][ T1101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.402300][ T1101] veth1_macvtap: left promiscuous mode [ 69.403770][ T1101] veth0_macvtap: left promiscuous mode [ 69.406192][ T1101] veth1_macvtap: left promiscuous mode [ 69.407639][ T1101] veth0_macvtap: left promiscuous mode [ 69.409154][ T1101] veth1_vlan: left promiscuous mode [ 69.410500][ T1101] veth0_vlan: left promiscuous mode [ 69.412490][ T1101] veth1_macvtap: left promiscuous mode [ 69.413930][ T1101] veth0_macvtap: left promiscuous mode [ 69.415386][ T1101] veth1_vlan: left promiscuous mode [ 69.416769][ T1101] veth0_vlan: left promiscuous mode [ 69.929791][ T1101] team0 (unregistering): Port device team_slave_1 removed [ 70.001431][ T1101] team0 (unregistering): Port device team_slave_0 removed [ 70.888412][ T1373] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.890985][ T1373] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.972238][ T1101] team0 (unregistering): Port device team_slave_1 removed [ 71.030331][ T1101] team0 (unregistering): Port device team_slave_0 removed [ 71.931104][ T1101] team0 (unregistering): Port device team_slave_1 removed [ 71.995936][ T1101] team0 (unregistering): Port device team_slave_0 removed VM DIAGNOSIS: 17:08:59 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff81c7dfdb RDX=ffff8880203ba440 RSI=0000000000000003 RDI=0000000000000001 RBP=ffff88801acb4048 RSP=ffffc90001f4f238 R8 =0000000000000005 R9 =0000000000000003 R10=0000000000000001 R11=0000000000000000 R12=0000000000000002 R13=0000000000000003 R14=0000000000004ff3 R15=0000000000000001 RIP=ffffffff818cb940 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f72001e0 CR3=000000005d90c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000001000008fd RBX=ffff8880203ba440 RCX=0000000000000830 RDX=0000000000000001 RSI=00000000000000fd RDI=0000000000000001 RBP=0000000000000000 RSP=ffffc90000477bc8 R8 =0000000000000000 R9 =fffffbfff2039a31 R10=ffffffff901cd18f R11=0000000000000001 R12=1ffff9200008ef7a R13=ffffc90000477bf0 R14=ffff88802b43fc90 R15=ffffffff8da957c0 RIP=ffffffff813bb068 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000002001f000 CR3=0000000059b60000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000000b274b RBX=0000000000000002 RCX=ffffffff8b130829 RDX=0000000000000000 RSI=ffffffff8b4cc8e0 RDI=ffffffff8bb123a0 RBP=ffffed100376c000 RSP=ffffc90000487e08 R8 =0000000000000001 R9 =ffffed10056c7025 R10=ffff88802b63812b R11=0000000000000000 R12=0000000000000002 R13=ffff88801bb60000 R14=ffffffff901cd188 R15=0000000000000000 RIP=ffffffff8b131c0f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7456f74 CR3=000000002383a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f745bff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff81c552b1 RDX=ffff88801f49c880 RSI=0000000000000000 RDI=0000000000000007 RBP=ffffea00019c1800 RSP=ffffc90002aefaf8 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=ffff88805f4219b0 R14=0000000000000000 R15=ffffea00019c1800 RIP=ffffffff81c552b1 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f744604c CR3=0000000060b98000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f745bff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000