last executing test programs: 2.511283623s ago: executing program 3 (id=139): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000007bc0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b409000000000008c3111000000000008510000002000000850000000800000095000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000400)='./file0\x00', &(0x7f00000004c0), 0x3, 0x0) setxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) syz_io_uring_setup(0x10278f, 0x0, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/fs/nfs', 0x0, 0x0) mknodat(r5, &(0x7f0000000280)='./file0\x00', 0x800, 0x80000800) read(r2, &(0x7f00000000c0)=""/81, 0x51) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380), 0x101900, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)) 2.360384054s ago: executing program 0 (id=141): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf000000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = socket(0x10, 0x80002, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x5f) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x9) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x7f) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000240)={@random="a5050f0000b5", @random="0000009000", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @local, {[@rr={0x7, 0x3}, @lsrr={0x83, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@multicast1}, {@empty}, {@remote}, {}, {@dev}, {@private}]}]}}}}}}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x1c}, 0x1, 0x0, 0x0, 0x4c0c5}, 0x800) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 2.360011319s ago: executing program 2 (id=142): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) read$msr(r1, &(0x7f00000000c0)=""/234, 0xea) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a45320, &(0x7f00000000c0)={{0x80}, 'port0\x00', 0x3eb, 0x21e2f, 0x3, 0x0, 0x0, 0xc, 0x400, 0x0, 0x9}) openat$sequencer2(0xffffff9c, &(0x7f0000000280), 0x4011, 0x0) ppoll(&(0x7f0000000180)=[{r4}], 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=@delqdisc={0x54, 0x25, 0x0, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x4, 0xd}, {0xfff2, 0x1f}, {0xfff2, 0x3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffffc}, @qdisc_kind_options=@q_qfg={0xffffffffffffff27}, @TCA_RATE={0xff74, 0x5, {0xf, 0x4}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xa25}, @TCA_RATE={0x6, 0x5, {0x8c, 0x1}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x8854) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r2, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)='%+9llu \x00'}, 0x1c) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7fffffff, '\x00', r5, r2, 0x1, 0x53, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x21, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xe80}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x7}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @map_val={0x18, 0x5, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @ldst={0x3, 0x1, 0x6, 0x9, 0xa, 0x6, 0xfffffffffffffffc}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='syzkaller\x00', 0x5, 0x30, &(0x7f0000000380)=""/48, 0x41000, 0x10, '\x00', r5, 0x0, r6, 0x8, &(0x7f0000000400)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0xe, 0x5, 0x8}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000005c0)=[r7, r1, r1, r1, r8, r1, r1, r1, r1], &(0x7f0000000600)=[{0x2, 0x4, 0x5, 0x8}, {0x0, 0x1, 0x0, 0x1}, {0x5, 0x3, 0xd, 0x9}, {0x0, 0x5, 0xa, 0x2}, {0x4, 0x2, 0x10, 0x8}, {0x3, 0x4, 0xd, 0xb}], 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000740)=ANY=[@ANYRES16=r7, @ANYRES16=r3], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r9}, 0x10) r10 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_mreqsrc(r10, 0x0, 0x53, &(0x7f0000000080)={@dev, @local, @broadcast}, &(0x7f00000000c0)=0x6) r11 = gettid() process_vm_writev(r11, 0x0, 0x0, 0x0, 0x0, 0x0) lseek(r2, 0x9, 0x0) 2.339475536s ago: executing program 2 (id=143): r0 = socket$inet6(0x10, 0x2, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000080)={0x80, 0x0, 0x2, 0x80000000, 0xffff, 0xfffffffd}) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000140), 0x4) sendto$inet6(r0, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 2.261256533s ago: executing program 2 (id=145): socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfd, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = inotify_init() inotify_add_watch(r3, 0x0, 0xa50003d1) socket$nl_generic(0x10, 0x3, 0x10) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) accept4(r4, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) 2.176625097s ago: executing program 1 (id=146): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026008f0900000800b7"], 0x2c}}, 0x0) 2.175498137s ago: executing program 1 (id=147): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r0, &(0x7f0000002480)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x80002, 0x88) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r5, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) writev(r5, &(0x7f0000000200)=[{0x0}], 0x1) shutdown(r5, 0x1) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x3a8, 0x2b0, 0x2b0, 0x2b0, 0x138, 0x98, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x408) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 1.611063229s ago: executing program 3 (id=148): pipe2(&(0x7f00000003c0), 0x0) io_uring_setup(0xaab, &(0x7f0000000340)={0x0, 0x40000001}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002100), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000020c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0xa000, 0x1da) read$FUSE(r2, &(0x7f0000000080)={0x2020}, 0x2020) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000001c0), 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mlockall(0x7) mlockall(0x5) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r7, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000180), 0x0) r9 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r9, 0x65, 0x1, &(0x7f00000030c0)=[{}], &(0x7f0000000040)=0x8) 1.498187659s ago: executing program 0 (id=149): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c783, 0x1, 0xfffffffe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x4, 0x7, 0x2}}}}]}, 0x40}}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000001c0)={0x7, 0x4000}, 0x10) write(r3, &(0x7f00000000c0)="240000001e005f0214fffffffffffff80700000001000000000000000500090002000000", 0x24) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x90) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$can_raw(0x1d, 0x3, 0x1) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r5 = dup3(r4, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f0000000180)={0x30}, 0x30) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8, 0x1, 0x1, 0x0, 0xf5}, @NFTA_INNER_EXPR={0x14, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x4}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa0}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x1, 0x80}}}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x2}, @NL80211_ATTR_STA_PLINK_STATE={0x5}]}, 0x38}}, 0x0) getdents64(r6, &(0x7f00000000c0)=""/4, 0x4) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f00000002c0)) 1.490727788s ago: executing program 3 (id=150): open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x600, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x62040200) (fail_nth: 3) 1.360271619s ago: executing program 2 (id=151): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x72, 0x79, 0xbc, 0x8, 0xbfd, 0xf, 0x8907, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xc0, 0xd1, 0x80, 0xa, [{{0x9, 0x4, 0x11, 0x7, 0x0, 0x9d, 0x79, 0x4e, 0x3}}]}}]}}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x809}}, {0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="11931dd95b67b8744af21f7885cc2603810661dfcbe5"]}]}) syz_usb_disconnect(r0) r1 = io_uring_setup(0x7fc5, &(0x7f0000001240)={0x0, 0xfffffffd, 0x0, 0x2, 0x4}) pause() close_range(r1, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r4, 0x4188aea7, &(0x7f0000000040)) r5 = dup3(r4, r2, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000100)={0x0, r5, 0x4, {0x7fff, 0xa4}, 0x6}, 0x1) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="1201010200000020ac051e02400001020301280224000101017009090400a5020301030409210800050122a30109058103100007051b"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r10 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x28301) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f8, &(0x7f0000000600)={'ip6tnl0\x00', 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000600)={0x1, &(0x7f00000005c0)=[{0x34, 0x7, 0x7}]}) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f0000000180), 0x4) ioctl$HIDIOCSFEATURE(r10, 0x4004480d, 0x0) 1.278444066s ago: executing program 3 (id=152): mmap$KVM_VCPU(&(0x7f000000b000/0x3000)=nil, 0x930, 0x3, 0x8010, 0xffffffffffffffff, 0x0) r0 = mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x28031, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000240)="fb4149dd033be3ac2cc4a22332fdaa8de0418df24200000000a6ab8031d1dfd92f0000000001ffffffff9610fbff77521ce10d8f6b69d22627e700", 0x0, 0xffffffffffffffca) socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3f0, 0x3d8, 0x3d8, 0x3f0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x210401, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) socket$key(0xf, 0x3, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) 1.27799332s ago: executing program 3 (id=153): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) r0 = socket(0x40000000015, 0x1, 0x3d) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) syz_open_dev$I2C(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x0, 0x0) recvmmsg(r2, &(0x7f00000008c0), 0x0, 0x40012040, &(0x7f00000000c0)) r3 = openat$cdrom(0xffffff9c, &(0x7f0000000000), 0x8000, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) bind$alg(r4, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) accept4(r4, 0x0, 0x0, 0x800) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$CDROM_GET_CAPABILITY(r3, 0x5331) ioprio_set$uid(0x0, 0x0, 0x4000) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x40, 0x0, 0x7fffffff}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0x40082104, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x200000005c831, 0xffffffffffffffff, 0x0) getsockopt(r0, 0x200000000114, 0x3ff, 0x0, &(0x7f0000000000)) 1.222705995s ago: executing program 0 (id=154): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x11, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r2, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f6304a80500ffffca88faca"], 0xdd12}], 0x1}, 0x10) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x70, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r6, {0xc, 0x4}, {}, {0x5, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x5, 0x8}}}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x400c021}, 0x20040054) 1.216733428s ago: executing program 1 (id=155): timer_create(0x2, 0x0, &(0x7f0000000180)=0x0) timer_settime(r0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x3938700}}, 0x0) timer_delete(r0) (async) timer_delete(r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x1, &(0x7f0000000340)=[{0x5, 0x7, 0xff, 0x71ad}]}) 1.1603827s ago: executing program 1 (id=156): syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0) mq_unlink(0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r0, 0x0, r2, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r1, 0x407, 0x100004) write$eventfd(r1, &(0x7f0000000240), 0xffffff14) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, 0x0, 0x0) 1.109422525s ago: executing program 0 (id=157): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000b40), 0x9, 0x4b442) ioctl$HIDIOCGRDESC(r1, 0x401c5820, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x38fe, 0x0, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) io_uring_enter(r5, 0x2def, 0x4000, 0x0, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r9, 0x10f, 0x81, &(0x7f0000000080), 0x4) sendmmsg$inet(r9, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 1.047446039s ago: executing program 3 (id=158): pipe(&(0x7f00000005c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) bind$inet(r1, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) splice(r0, 0x0, r1, 0x0, 0x7151, 0x0) io_uring_register$IORING_REGISTER_PBUF_STATUS(r0, 0x1a, &(0x7f0000000000)={0xffff4239}, 0x1) syz_usb_connect(0x1, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00040000800000001c0012800b00010067656e65766500000c0002800500270001000033"], 0x3c}}, 0x0) ppoll(&(0x7f0000000200)=[{r2, 0x100}], 0x1, 0x0, 0x0, 0x0) 840.335309ms ago: executing program 0 (id=159): socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfd, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = inotify_init() inotify_add_watch(r3, 0x0, 0xa50003d1) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) accept4(r4, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) 320.030642ms ago: executing program 2 (id=160): r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='timerslack_ns\x00') lseek(r0, 0xd7, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) write$qrtrtun(r1, &(0x7f0000000380)="3af94be9", 0x4) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x600, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000386dd0a00100000004000000060ec97020fc80400fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000000)="7800000018002507b9409b14ffff00000202be04020506056403040c5c0009003f0020010a0000000d0085a168216b46d32345653600648d27000b000a00080049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160008200800000000000000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) mlockall(0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000013c0)=ANY=[@ANYBLOB="1c000000180009000000000000000000020000000000000117b76e"], 0x1c}}, 0x0) sched_setaffinity(r4, 0x0, 0x0) 300.376318ms ago: executing program 1 (id=161): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000140)="070800ff34ffba100008000086dd", 0x46, 0x4044011, &(0x7f0000000000)={0x11, 0x1b, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x7ff}}, '\x00'}) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000180)={0x9, {{0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}}, 0x1, 0x2, [{{0xa, 0x4e20, 0x6, @empty, 0x6}}, {{0xa, 0x4e22, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xa}}]}, 0x18c) 239.620084ms ago: executing program 1 (id=162): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) r0 = socket(0x40000000015, 0x1, 0x3d) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) syz_open_dev$I2C(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x0, 0x0) recvmmsg(r2, &(0x7f00000008c0), 0x0, 0x40012040, &(0x7f00000000c0)) r3 = openat$cdrom(0xffffff9c, &(0x7f0000000000), 0x8000, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) bind$alg(r4, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) accept4(r4, 0x0, 0x0, 0x800) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$CDROM_GET_CAPABILITY(r3, 0x5331) ioprio_set$uid(0x0, 0x0, 0x4000) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x40, 0x0, 0x7fffffff}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0x40082104, 0x0) (fail_nth: 3) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x200000005c831, 0xffffffffffffffff, 0x0) getsockopt(r0, 0x200000000114, 0x3ff, 0x0, &(0x7f0000000000)) 293.954µs ago: executing program 2 (id=163): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000000c0)=0x8041040) sched_setscheduler(0x0, 0x2, 0x0) syz_clone3(0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000bcc000/0x4000)=nil, 0x4000}}) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x769}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ppoll(&(0x7f0000000180)=[{r1, 0x4047, 0x700}], 0x1, 0x0, 0x0, 0x0) (fail_nth: 3) close(r1) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1}}, 0x10) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x10}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0x20000}, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x6559, 0x13580, 0x4000003}, &(0x7f0000000040), &(0x7f0000000140)) 0s ago: executing program 0 (id=164): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) (async) capset(&(0x7f0000000100)={0x20071026, r1}, &(0x7f0000000140)={0x0, 0x9}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r2, 0x4b67, 0x0) (async) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, 0x0) (async) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01400000000000000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff05000700263a3a0914000600626f6e64300000000001000001000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:49912' (ED25519) to the list of known hosts. [ 41.708113][ T5932] cgroup: Unknown subsys name 'net' [ 41.831858][ T5932] cgroup: Unknown subsys name 'cpuset' [ 41.835957][ T5932] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 42.587735][ T5932] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 44.601066][ T5298] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 44.607643][ T5948] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 44.610421][ T5948] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 44.610431][ T5952] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 44.612661][ T5948] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 44.615196][ T5952] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 44.617137][ T5948] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 44.618680][ T5952] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 44.620623][ T5948] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 44.622600][ T5952] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 44.624514][ T5948] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 44.624865][ T5957] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 44.625178][ T5957] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 44.625359][ T5957] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 44.625447][ T5957] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 44.626268][ T5952] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 44.628313][ T5948] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 44.629580][ T5956] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 44.630171][ T67] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 44.630674][ T5952] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 44.632160][ T5948] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 44.636053][ T67] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 44.650925][ T67] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 44.653153][ T67] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 44.790593][ T5953] chnl_net:caif_netlink_parms(): no params data found [ 44.798479][ T5943] chnl_net:caif_netlink_parms(): no params data found [ 44.849327][ T5950] chnl_net:caif_netlink_parms(): no params data found [ 44.882076][ T5946] chnl_net:caif_netlink_parms(): no params data found [ 44.951249][ T5953] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.953755][ T5953] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.956354][ T5953] bridge_slave_0: entered allmulticast mode [ 44.960122][ T5953] bridge_slave_0: entered promiscuous mode [ 45.019953][ T5953] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.022709][ T5953] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.026700][ T5953] bridge_slave_1: entered allmulticast mode [ 45.030378][ T5953] bridge_slave_1: entered promiscuous mode [ 45.033689][ T5943] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.035943][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.038523][ T5943] bridge_slave_0: entered allmulticast mode [ 45.041216][ T5943] bridge_slave_0: entered promiscuous mode [ 45.091494][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.093374][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.095503][ T5943] bridge_slave_1: entered allmulticast mode [ 45.097888][ T5943] bridge_slave_1: entered promiscuous mode [ 45.111515][ T5946] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.114257][ T5946] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.116994][ T5946] bridge_slave_0: entered allmulticast mode [ 45.120117][ T5946] bridge_slave_0: entered promiscuous mode [ 45.124960][ T5953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.137252][ T5950] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.139827][ T5950] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.142061][ T5950] bridge_slave_0: entered allmulticast mode [ 45.144461][ T5950] bridge_slave_0: entered promiscuous mode [ 45.147756][ T5946] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.150903][ T5946] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.153514][ T5946] bridge_slave_1: entered allmulticast mode [ 45.156335][ T5946] bridge_slave_1: entered promiscuous mode [ 45.161569][ T5953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.175516][ T5943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.178293][ T5950] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.180409][ T5950] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.182463][ T5950] bridge_slave_1: entered allmulticast mode [ 45.184940][ T5950] bridge_slave_1: entered promiscuous mode [ 45.215440][ T5943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.267712][ T5950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.271960][ T5946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.276463][ T5953] team0: Port device team_slave_0 added [ 45.287233][ T5950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.291528][ T5946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.295994][ T5953] team0: Port device team_slave_1 added [ 45.299685][ T5943] team0: Port device team_slave_0 added [ 45.335455][ T5943] team0: Port device team_slave_1 added [ 45.350057][ T5950] team0: Port device team_slave_0 added [ 45.389508][ T5950] team0: Port device team_slave_1 added [ 45.392845][ T5946] team0: Port device team_slave_0 added [ 45.395663][ T5953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.398321][ T5953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.407029][ T5953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.411351][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.413828][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.423056][ T5943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.435597][ T5946] team0: Port device team_slave_1 added [ 45.438342][ T5953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.440774][ T5953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.448885][ T5953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.453587][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.456254][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.466066][ T5943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.498884][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.501597][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.511383][ T5946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.515650][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.517625][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.524716][ T5950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.528513][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.531203][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.540841][ T5950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.546236][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.548743][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.558092][ T5946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.605242][ T5953] hsr_slave_0: entered promiscuous mode [ 45.607465][ T5953] hsr_slave_1: entered promiscuous mode [ 45.638630][ T5943] hsr_slave_0: entered promiscuous mode [ 45.640726][ T5943] hsr_slave_1: entered promiscuous mode [ 45.642323][ T5943] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.644284][ T5943] Cannot create hsr debugfs directory [ 45.657888][ T5946] hsr_slave_0: entered promiscuous mode [ 45.662355][ T5946] hsr_slave_1: entered promiscuous mode [ 45.664614][ T5946] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.667325][ T5946] Cannot create hsr debugfs directory [ 45.671172][ T5950] hsr_slave_0: entered promiscuous mode [ 45.673164][ T5950] hsr_slave_1: entered promiscuous mode [ 45.675677][ T5950] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.678090][ T5950] Cannot create hsr debugfs directory [ 45.910945][ T5946] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 45.916453][ T5946] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 45.921283][ T5946] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 45.930662][ T5946] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 45.955536][ T5953] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 45.964335][ T5953] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 45.968489][ T5953] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 45.975270][ T5953] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 45.985283][ T5943] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 45.991868][ T5943] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 45.996009][ T5943] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 46.001522][ T5943] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 46.028517][ T5950] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 46.037098][ T5950] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 46.041901][ T5950] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 46.049679][ T5950] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 46.110154][ T5946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.123823][ T5943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.134639][ T5953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.137616][ T5946] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.144624][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.147351][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.155561][ T5950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.165531][ T219] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.168108][ T219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.173671][ T5953] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.177677][ T5943] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.190495][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.193075][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.196627][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.199241][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.205433][ T5950] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.211971][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.214195][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.217956][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.220507][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.235154][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.237672][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.247129][ T5946] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 46.253342][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.256188][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.308044][ T5953] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 46.354174][ T5946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.378026][ T5946] veth0_vlan: entered promiscuous mode [ 46.383457][ T5946] veth1_vlan: entered promiscuous mode [ 46.398654][ T5953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.404505][ T5950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.413000][ T5946] veth0_macvtap: entered promiscuous mode [ 46.416724][ T5946] veth1_macvtap: entered promiscuous mode [ 46.429997][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.437474][ T5943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.449913][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.455346][ T5946] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.457928][ T5946] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.460813][ T5946] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.463284][ T5946] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.474980][ T5950] veth0_vlan: entered promiscuous mode [ 46.490057][ T5950] veth1_vlan: entered promiscuous mode [ 46.499374][ T5953] veth0_vlan: entered promiscuous mode [ 46.504647][ T5943] veth0_vlan: entered promiscuous mode [ 46.515506][ T5953] veth1_vlan: entered promiscuous mode [ 46.534699][ T5943] veth1_vlan: entered promiscuous mode [ 46.542463][ T219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.545445][ T219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.553154][ T5953] veth0_macvtap: entered promiscuous mode [ 46.555845][ T5950] veth0_macvtap: entered promiscuous mode [ 46.562851][ T5950] veth1_macvtap: entered promiscuous mode [ 46.568342][ T5953] veth1_macvtap: entered promiscuous mode [ 46.580896][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.581012][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.583581][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.586841][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.593230][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.599606][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.603284][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.607394][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.614349][ T5950] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.616972][ T5950] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.620538][ T5950] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.623647][ T5950] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.627915][ T5953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.631291][ T5953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.634220][ T5953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.637221][ T5953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.641632][ T5953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.644865][ T5953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.648004][ T5953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.649425][ T67] Bluetooth: hci2: command tx timeout [ 46.651077][ T5944] Bluetooth: hci0: command tx timeout [ 46.651784][ T5953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.651794][ T5953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.652398][ T5953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.653574][ T5943] veth0_macvtap: entered promiscuous mode [ 46.669494][ T5953] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.671950][ T5953] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.674444][ T5953] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.677108][ T5953] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.686993][ T5946] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 46.693330][ T5943] veth1_macvtap: entered promiscuous mode [ 46.719353][ T5944] Bluetooth: hci3: command tx timeout [ 46.719694][ T67] Bluetooth: hci1: command tx timeout [ 46.721532][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.725890][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.728589][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.731750][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.734651][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.737553][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.742805][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.754102][ T1170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.756896][ T1170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.761222][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.764157][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.766901][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.770236][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.773001][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.775973][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.779419][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.789783][ T5943] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.793225][ T5943] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.796549][ T5943] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.800093][ T5943] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.813903][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.818324][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.823052][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.825696][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.853686][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.856578][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.862161][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.864457][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.878413][ T219] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.893247][ T219] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.013062][ T6018] befs: (nullb0): No write support. Marking filesystem read-only [ 47.016331][ T6018] befs: (nullb0): invalid magic header [ 47.235364][ T6022] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 47.275075][ T6006] ax25_connect(): syz.1.2 uses autobind, please contact jreuter@yaina.de [ 47.905769][ T6017] befs: (nullb0): No write support. Marking filesystem read-only [ 47.909247][ T6017] befs: (nullb0): invalid magic header [ 47.931110][ T6017] ax25_connect(): syz.0.1 uses autobind, please contact jreuter@yaina.de [ 47.954672][ T6030] sp0: Synchronizing with TNC [ 48.053385][ T6030] [U] [ 48.719087][ T67] Bluetooth: hci0: command tx timeout [ 48.728950][ T67] Bluetooth: hci2: command tx timeout [ 48.799406][ T67] Bluetooth: hci3: command tx timeout [ 48.808965][ T67] Bluetooth: hci1: command tx timeout [ 48.855069][ T6036] befs: (nullb0): No write support. Marking filesystem read-only [ 48.857486][ T6036] befs: (nullb0): invalid magic header [ 48.890282][ T6037] befs: (nullb0): No write support. Marking filesystem read-only [ 48.891321][ T6036] ax25_connect(): syz.2.7 uses autobind, please contact jreuter@yaina.de [ 48.892749][ T6037] befs: (nullb0): invalid magic header [ 48.896550][ T6040] befs: (nullb0): No write support. Marking filesystem read-only [ 48.899390][ T6040] befs: (nullb0): invalid magic header [ 48.902938][ T6037] ax25_connect(): syz.3.8 uses autobind, please contact jreuter@yaina.de [ 48.904564][ T6040] ax25_connect(): syz.0.9 uses autobind, please contact jreuter@yaina.de [ 49.200674][ T6044] ======================================================= [ 49.200674][ T6044] WARNING: The mand mount option has been deprecated and [ 49.200674][ T6044] and is ignored by this kernel. Remove the mand [ 49.200674][ T6044] option from the mount to silence this warning. [ 49.200674][ T6044] ======================================================= [ 49.332996][ T6053] befs: (nullb0): No write support. Marking filesystem read-only [ 49.337464][ T6053] befs: (nullb0): invalid magic header [ 49.356490][ T6053] ax25_connect(): syz.2.10 uses autobind, please contact jreuter@yaina.de [ 50.032916][ T6065] Zero length message leads to an empty skb [ 50.317138][ T6069] process 'syz.0.14' launched './file0' with NULL argv: empty string added [ 50.349352][ T6069] misc userio: No port type given on /dev/userio [ 50.438927][ T6002] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 50.608951][ T6002] usb 7-1: Using ep0 maxpacket: 16 [ 50.612733][ T6002] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 50.616529][ T6002] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 50.620690][ T6002] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 50.624111][ T6002] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 50.636255][ T6002] usb 7-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 50.638897][ T6002] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.641547][ T6002] usb 7-1: Product: syz [ 50.642840][ T6002] usb 7-1: Manufacturer: syz [ 50.644156][ T6002] usb 7-1: SerialNumber: syz [ 50.650771][ T6002] usb 7-1: config 0 descriptor?? [ 50.653792][ T6065] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 50.666558][ T6002] port100 7-1:0.0: NFC: Could not get supported command types [ 50.798941][ T5944] Bluetooth: hci2: command tx timeout [ 50.800591][ T67] Bluetooth: hci0: command tx timeout [ 50.901380][ T6061] usb 7-1: USB disconnect, device number 2 [ 50.958889][ T67] Bluetooth: hci1: command tx timeout [ 50.960775][ T67] Bluetooth: hci3: command tx timeout [ 51.257188][ T6081] befs: (nullb0): No write support. Marking filesystem read-only [ 51.259927][ T6081] befs: (nullb0): invalid magic header [ 51.272497][ T6081] ax25_connect(): syz.0.16 uses autobind, please contact jreuter@yaina.de [ 51.545493][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 51.548453][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 51.853043][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 52.879589][ T5944] Bluetooth: hci0: command tx timeout [ 52.879631][ T67] Bluetooth: hci2: command tx timeout [ 53.038950][ T67] Bluetooth: hci3: command tx timeout [ 53.038967][ T5944] Bluetooth: hci1: command tx timeout [ 53.138521][ T6100] misc userio: No port type given on /dev/userio [ 53.342760][ T6108] befs: (nullb0): No write support. Marking filesystem read-only [ 53.345877][ T6108] befs: (nullb0): invalid magic header [ 53.361605][ T6108] ax25_connect(): syz.0.22 uses autobind, please contact jreuter@yaina.de [ 53.648001][ T6107] befs: (nullb0): No write support. Marking filesystem read-only [ 53.650183][ T6107] befs: (nullb0): invalid magic header [ 53.654673][ T6107] ax25_connect(): syz.3.24 uses autobind, please contact jreuter@yaina.de [ 54.387744][ T6120] befs: (nullb0): No write support. Marking filesystem read-only [ 54.391340][ T6120] befs: (nullb0): invalid magic header [ 54.407288][ T6120] ax25_connect(): syz.0.25 uses autobind, please contact jreuter@yaina.de [ 54.694815][ T6121] befs: (nullb0): No write support. Marking filesystem read-only [ 54.697413][ T6121] befs: (nullb0): invalid magic header [ 54.709034][ T6121] ax25_connect(): syz.3.26 uses autobind, please contact jreuter@yaina.de [ 55.561245][ T6130] misc userio: No port type given on /dev/userio [ 55.768878][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 55.948773][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 55.948878][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 55.958980][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 55.998980][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 56.010347][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 56.063178][ T6136] befs: (nullb0): No write support. Marking filesystem read-only [ 56.066115][ T6136] befs: (nullb0): invalid magic header [ 56.081916][ T6136] ax25_connect(): syz.1.30 uses autobind, please contact jreuter@yaina.de [ 56.562730][ T6145] misc userio: No port type given on /dev/userio [ 56.898960][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 57.378943][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 57.617707][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 57.654363][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 57.671400][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 57.685130][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 57.713613][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 57.741350][ T9] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 57.751555][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.767608][ T9] usb 5-1: Product: syz [ 57.777883][ T9] usb 5-1: Manufacturer: syz [ 57.780148][ T9] usb 5-1: SerialNumber: syz [ 57.785875][ T9] usb 5-1: config 0 descriptor?? [ 57.789971][ T6154] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 57.837733][ T9] port100 5-1:0.0: NFC: Could not get supported command types [ 58.196681][ T6164] 9pnet: Could not find request transport: unix [ 58.196681][ T6164] 'xfAoDTޠYCQP [ 58.196681][ T6164] 6!lndvyTKcOK0ԫb[Aux$M [ 58.722051][ T6174] misc userio: Invalid payload size [ 58.820699][ T6177] befs: (nullb0): No write support. Marking filesystem read-only [ 58.823417][ T6177] befs: (nullb0): invalid magic header [ 58.837627][ T6177] ax25_connect(): syz.3.38 uses autobind, please contact jreuter@yaina.de [ 59.449032][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 59.641729][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 59.655159][ T6187] misc userio: No port type given on /dev/userio [ 59.711715][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 59.714973][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 59.717748][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 59.720508][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 59.726167][ T9] usb 6-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 59.728758][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.731153][ T9] usb 6-1: Product: syz [ 59.732402][ T9] usb 6-1: Manufacturer: syz [ 59.733796][ T9] usb 6-1: SerialNumber: syz [ 59.736424][ T9] usb 6-1: config 0 descriptor?? [ 59.739384][ T6180] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 59.746932][ T9] port100 6-1:0.0: NFC: Could not get supported command types [ 60.170820][ T5985] usb 5-1: USB disconnect, device number 2 [ 60.355046][ T6191] misc userio: No port type given on /dev/userio [ 61.269152][ T9] usb 6-1: USB disconnect, device number 2 [ 63.671703][ T6233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.55'. [ 63.681814][ T40] audit: type=1326 audit(1742955016.033:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6232 comm="syz.2.55" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 63.700091][ T40] audit: type=1326 audit(1742955016.043:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6232 comm="syz.2.55" exe="/syz-executor" sig=0 arch=40000003 syscall=152 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 63.719055][ T40] audit: type=1326 audit(1742955016.053:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6232 comm="syz.2.55" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 63.735019][ T40] audit: type=1326 audit(1742955016.063:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6232 comm="syz.2.55" exe="/syz-executor" sig=0 arch=40000003 syscall=152 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 63.742075][ T40] audit: type=1326 audit(1742955016.073:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6232 comm="syz.2.55" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 63.751641][ T40] audit: type=1326 audit(1742955016.083:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6232 comm="syz.2.55" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 63.757700][ T40] audit: type=1326 audit(1742955016.083:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6232 comm="syz.2.55" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 63.763924][ T40] audit: type=1326 audit(1742955016.083:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6232 comm="syz.2.55" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 63.769916][ T40] audit: type=1326 audit(1742955016.083:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6232 comm="syz.2.55" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 63.777684][ T40] audit: type=1326 audit(1742955016.083:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6232 comm="syz.2.55" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 65.045170][ T6249] befs: (nullb0): No write support. Marking filesystem read-only [ 65.048014][ T6249] befs: (nullb0): invalid magic header [ 65.458968][ T6258] misc userio: Invalid payload size [ 66.138683][ T6263] befs: (nullb0): No write support. Marking filesystem read-only [ 66.142347][ T6263] befs: (nullb0): invalid magic header [ 67.466706][ T6278] misc userio: No port type given on /dev/userio [ 68.240490][ T6287] befs: (nullb0): No write support. Marking filesystem read-only [ 68.243488][ T6287] befs: (nullb0): invalid magic header [ 68.247974][ T6287] ax25_connect(): syz.1.68 uses autobind, please contact jreuter@yaina.de [ 68.513226][ T6294] befs: (nullb0): No write support. Marking filesystem read-only [ 68.515994][ T6294] befs: (nullb0): invalid magic header [ 69.127522][ T6306] befs: (nullb0): No write support. Marking filesystem read-only [ 69.130191][ T6306] befs: (nullb0): invalid magic header [ 69.141907][ T6306] ax25_connect(): syz.1.74 uses autobind, please contact jreuter@yaina.de [ 70.141450][ T6312] befs: (nullb0): No write support. Marking filesystem read-only [ 70.144238][ T6312] befs: (nullb0): invalid magic header [ 70.261192][ T6319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.78'. [ 70.272701][ T40] kauditd_printk_skb: 28 callbacks suppressed [ 70.272713][ T40] audit: type=1326 audit(1742955022.623:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6318 comm="syz.1.78" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f10579 code=0x7ffc0000 [ 70.283001][ T40] audit: type=1326 audit(1742955022.623:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6318 comm="syz.1.78" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f10579 code=0x7ffc0000 [ 70.290810][ T40] audit: type=1326 audit(1742955022.623:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6318 comm="syz.1.78" exe="/syz-executor" sig=0 arch=40000003 syscall=152 compat=1 ip=0xf7f10579 code=0x7ffc0000 [ 70.297341][ T40] audit: type=1326 audit(1742955022.633:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6318 comm="syz.1.78" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f10579 code=0x7ffc0000 [ 70.303767][ T40] audit: type=1326 audit(1742955022.633:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6318 comm="syz.1.78" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f10579 code=0x7ffc0000 [ 70.318937][ T40] audit: type=1326 audit(1742955022.663:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6318 comm="syz.1.78" exe="/syz-executor" sig=0 arch=40000003 syscall=152 compat=1 ip=0xf7f10579 code=0x7ffc0000 [ 70.326936][ T40] audit: type=1326 audit(1742955022.673:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6318 comm="syz.1.78" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f10579 code=0x7ffc0000 [ 70.333878][ T40] audit: type=1326 audit(1742955022.673:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6318 comm="syz.1.78" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f10579 code=0x7ffc0000 [ 70.354602][ T40] audit: type=1326 audit(1742955022.703:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6318 comm="syz.1.78" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7f10579 code=0x7ffc0000 [ 70.364376][ T40] audit: type=1326 audit(1742955022.703:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6318 comm="syz.1.78" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7f10579 code=0x7ffc0000 [ 70.730993][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.733009][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.838659][ T6332] misc userio: No port type given on /dev/userio [ 70.949041][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 71.098978][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 71.107389][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 71.111362][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 71.114298][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 71.117154][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 71.125121][ T9] usb 6-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 71.127655][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.130357][ T9] usb 6-1: Product: syz [ 71.131817][ T9] usb 6-1: Manufacturer: syz [ 71.133741][ T9] usb 6-1: SerialNumber: syz [ 71.138002][ T9] usb 6-1: config 0 descriptor?? [ 71.142283][ T6331] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 71.148040][ T9] port100 6-1:0.0: NFC: Could not get supported command types [ 71.287256][ T6347] netlink: 'syz.0.88': attribute type 1 has an invalid length. [ 71.301704][ T6347] bond2: entered promiscuous mode [ 71.303329][ T6347] 8021q: adding VLAN 0 to HW filter on device bond2 [ 71.324257][ T6347] veth3: entered promiscuous mode [ 71.325704][ T6347] veth3: entered allmulticast mode [ 71.328515][ T6347] bond2: (slave veth3): making interface the new active one [ 71.334100][ T6347] bond2: (slave veth3): Enslaving as an active interface with an up link [ 72.370667][ T6353] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 72.372717][ T6353] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 72.381194][ T6353] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 72.384150][ T6353] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 72.386434][ T6353] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 72.389739][ T6353] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 72.392594][ T6353] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 72.394379][ T6353] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 72.400188][ T6353] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 72.408597][ T6353] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 72.412090][ T6353] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 72.418227][ T6353] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 72.566105][ T6365] netlink: 12 bytes leftover after parsing attributes in process `syz.0.95'. [ 73.418998][ T9] usb 6-1: USB disconnect, device number 3 [ 73.526940][ T6381] misc userio: No port type given on /dev/userio [ 73.838971][ T5944] Bluetooth: hci0: command 0x0c1a tx timeout [ 73.973329][ T6385] misc userio: No port type given on /dev/userio [ 74.158358][ T6389] 9pnet_fd: Insufficient options for proto=fd [ 74.398999][ T5944] Bluetooth: hci2: command 0x0c1a tx timeout [ 74.399011][ T67] Bluetooth: hci1: command 0x0c1a tx timeout [ 74.478915][ T67] Bluetooth: hci3: command 0x0c1a tx timeout [ 74.853301][ T6398] o2cb: This node has not been configured. [ 74.855017][ T6398] o2cb: Cluster check failed. Fix errors before retrying. [ 74.856971][ T6398] (syz.3.105,6398,1):user_dlm_register:674 ERROR: status = -22 [ 74.859161][ T6398] (syz.3.105,6398,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 75.005691][ T6400] sp0: Synchronizing with TNC [ 75.009551][ T6399] [U] [ 75.548938][ T6170] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 75.708980][ T6170] usb 6-1: Using ep0 maxpacket: 16 [ 75.717502][ T6170] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 75.722507][ T6170] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 75.727889][ T6170] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 75.732291][ T6170] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 75.741227][ T6170] usb 6-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 75.745505][ T6170] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.748652][ T6170] usb 6-1: Product: syz [ 75.758774][ T6170] usb 6-1: Manufacturer: syz [ 75.762516][ T6170] usb 6-1: SerialNumber: syz [ 75.775247][ T6170] usb 6-1: config 0 descriptor?? [ 75.779161][ T6409] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 75.787227][ T6170] port100 6-1:0.0: NFC: Could not get supported command types [ 75.849481][ T64] cfg80211: failed to load regulatory.db [ 75.919127][ T67] Bluetooth: hci0: command 0x0c1a tx timeout [ 76.366730][ T6422] input: syz0 as /devices/virtual/input/input5 [ 76.456816][ T6429] 9pnet_fd: p9_fd_create_unix (6429): problem connecting socket: qY3aK: -111 [ 76.470610][ T6428] misc userio: No port type given on /dev/userio [ 76.478533][ T6429] Driver unsupported XDP return value 0 on prog (id 6) dev N/A, expect packet loss! [ 76.480091][ T67] Bluetooth: hci1: command 0x0c1a tx timeout [ 76.490671][ T67] Bluetooth: hci2: command 0x0c1a tx timeout [ 76.509301][ T6170] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 76.559572][ T67] Bluetooth: hci3: command 0x0c1a tx timeout [ 76.585021][ T6434] infiniband syz0: set active [ 76.587788][ T6434] infiniband syz0: added syz_tun [ 76.598154][ T6438] o2cb: This node has not been configured. [ 76.600633][ T6438] o2cb: Cluster check failed. Fix errors before retrying. [ 76.602966][ T6438] (syz.2.117,6438,0):user_dlm_register:674 ERROR: status = -22 [ 76.605801][ T6438] (syz.2.117,6438,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 76.608605][ T6434] RDS/IB: syz0: added [ 76.614117][ T6434] smc: adding ib device syz0 with port count 1 [ 76.616630][ T6434] smc: ib device syz0 port 1 has pnetid [ 76.807607][ T6443] netlink: 36 bytes leftover after parsing attributes in process `syz.3.118'. [ 76.853365][ T6456] input: syz0 as /devices/virtual/input/input6 [ 77.108981][ T5984] usb 8-1: new low-speed USB device number 2 using dummy_hcd [ 77.321056][ T5984] usb 8-1: config 1 interface 0 altsetting 144 endpoint 0x1 is Bulk; changing to Interrupt [ 77.329538][ T5984] usb 8-1: config 1 interface 0 altsetting 144 endpoint 0x82 is Bulk; changing to Interrupt [ 77.337482][ T5984] usb 8-1: config 1 interface 0 has no altsetting 0 [ 77.367914][ T5984] usb 8-1: string descriptor 0 read error: -22 [ 77.377604][ T5984] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 77.386506][ T5984] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.395389][ T6443] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 77.397459][ T6443] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 77.607737][ T6443] usb usb8: usbfs: process 6443 (syz.3.118) did not claim interface 0 before use [ 77.611826][ T6170] usb 8-1: USB disconnect, device number 2 [ 77.998987][ T67] Bluetooth: hci0: command 0x0c1a tx timeout [ 78.168932][ T34] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 78.318979][ T34] usb 7-1: Using ep0 maxpacket: 16 [ 78.322658][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 78.325668][ T34] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 78.328433][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 78.331320][ T34] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 78.336766][ T34] usb 7-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 78.340178][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.342568][ T34] usb 7-1: Product: syz [ 78.343744][ T34] usb 7-1: Manufacturer: syz [ 78.345053][ T34] usb 7-1: SerialNumber: syz [ 78.347354][ T34] usb 7-1: config 0 descriptor?? [ 78.382390][ T6468] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 78.389666][ T34] port100 7-1:0.0: NFC: Could not get supported command types [ 78.531526][ T6170] usb 6-1: USB disconnect, device number 4 [ 78.569253][ T67] Bluetooth: hci2: command 0x0c1a tx timeout [ 78.571032][ T67] Bluetooth: hci1: command 0x0c1a tx timeout [ 78.638976][ T5944] Bluetooth: hci3: command 0x0c1a tx timeout [ 78.651101][ T5984] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 78.799029][ T5984] usb 8-1: Using ep0 maxpacket: 16 [ 78.810659][ T5984] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 78.814268][ T5984] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 78.817090][ T5984] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 78.820098][ T5984] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 78.828179][ T5984] usb 8-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 78.832970][ T5984] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.835142][ T5984] usb 8-1: Product: syz [ 78.836509][ T5984] usb 8-1: Manufacturer: syz [ 78.838103][ T5984] usb 8-1: SerialNumber: syz [ 78.841445][ T5984] usb 8-1: config 0 descriptor?? [ 78.844876][ T6474] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 78.849855][ T5984] port100 8-1:0.0: NFC: Could not get supported command types [ 78.998155][ T6170] usb 7-1: USB disconnect, device number 3 [ 79.129928][ T34] usb 8-1: USB disconnect, device number 3 [ 93.833705][ T6503] Bluetooth: MGMT ver 1.23 [ 93.841673][ T6502] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.612592][ T6519] input: syz0 as /devices/virtual/input/input7 [ 94.767623][ T6532] misc userio: No port type given on /dev/userio [ 95.247067][ T6539] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 95.639532][ T6567] sctp: [Deprecated]: syz.2.137 (pid 6567) Use of struct sctp_assoc_value in delayed_ack socket option. [ 95.639532][ T6567] Use struct sctp_sack_info instead [ 95.841607][ T40] kauditd_printk_skb: 32 callbacks suppressed [ 95.841617][ T40] audit: type=1326 audit(1742955048.193:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6570 comm="syz.1.138" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f10579 code=0x0 [ 96.396134][ T6594] netlink: 'syz.0.140': attribute type 10 has an invalid length. [ 96.400324][ T6594] netlink: 40 bytes leftover after parsing attributes in process `syz.0.140'. [ 96.403962][ T6594] dummy0: entered promiscuous mode [ 96.406115][ T6594] bridge0: port 3(dummy0) entered blocking state [ 96.407958][ T6594] bridge0: port 3(dummy0) entered disabled state [ 96.410155][ T6594] dummy0: entered allmulticast mode [ 96.412326][ T6594] bridge0: port 3(dummy0) entered blocking state [ 96.414290][ T6594] bridge0: port 3(dummy0) entered forwarding state [ 97.254420][ T40] audit: type=1326 audit(1742955049.603:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6618 comm="syz.3.148" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 97.262108][ T40] audit: type=1326 audit(1742955049.603:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6618 comm="syz.3.148" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 97.268279][ T40] audit: type=1326 audit(1742955049.603:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6618 comm="syz.3.148" exe="/syz-executor" sig=0 arch=40000003 syscall=152 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 97.274306][ T40] audit: type=1326 audit(1742955049.613:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6618 comm="syz.3.148" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 97.282980][ T40] audit: type=1326 audit(1742955049.613:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6618 comm="syz.3.148" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 97.289753][ T40] audit: type=1326 audit(1742955049.643:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6618 comm="syz.3.148" exe="/syz-executor" sig=0 arch=40000003 syscall=152 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 97.297724][ T40] audit: type=1326 audit(1742955049.643:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6618 comm="syz.3.148" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 97.297754][ T40] audit: type=1326 audit(1742955049.643:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6618 comm="syz.3.148" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 97.319440][ T40] audit: type=1326 audit(1742955049.673:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6618 comm="syz.3.148" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7f96579 code=0x7ffc0000 [ 97.465549][ T6621] FAULT_INJECTION: forcing a failure. [ 97.465549][ T6621] name failslab, interval 1, probability 0, space 0, times 1 [ 97.469207][ T6621] CPU: 1 UID: 0 PID: 6621 Comm: syz.3.150 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 97.469221][ T6621] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 97.469227][ T6621] Call Trace: [ 97.469231][ T6621] [ 97.469235][ T6621] dump_stack_lvl+0x16c/0x1f0 [ 97.469252][ T6621] should_fail_ex+0x512/0x640 [ 97.469264][ T6621] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 97.469279][ T6621] should_failslab+0xc2/0x120 [ 97.469294][ T6621] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 97.469308][ T6621] ? copy_pid_ns+0x2bf/0xce0 [ 97.469319][ T6621] copy_pid_ns+0x2bf/0xce0 [ 97.469328][ T6621] ? __pfx_copy_pid_ns+0x10/0x10 [ 97.469338][ T6621] ? copy_mnt_ns+0xac/0xac0 [ 97.469347][ T6621] ? trace_kmem_cache_alloc+0x28/0xc0 [ 97.469356][ T6621] ? trace_cap_capable+0x18d/0x200 [ 97.469368][ T6621] ? copy_ipcs+0xb6/0x610 [ 97.469380][ T6621] create_new_namespaces+0x2aa/0xad0 [ 97.469395][ T6621] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 97.469408][ T6621] ksys_unshare+0x45b/0xa40 [ 97.469422][ T6621] ? __pfx_ksys_unshare+0x10/0x10 [ 97.469434][ T6621] ? xfd_validate_state+0x5d/0x180 [ 97.469445][ T6621] ? rcu_is_watching+0x12/0xc0 [ 97.469456][ T6621] __ia32_sys_unshare+0x30/0x40 [ 97.469469][ T6621] __do_fast_syscall_32+0x73/0x120 [ 97.469483][ T6621] do_fast_syscall_32+0x32/0x80 [ 97.469496][ T6621] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 97.469508][ T6621] RIP: 0023:0xf7f96579 [ 97.469516][ T6621] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 97.469525][ T6621] RSP: 002b:00000000f50b655c EFLAGS: 00000296 ORIG_RAX: 0000000000000136 [ 97.469534][ T6621] RAX: ffffffffffffffda RBX: 0000000062040200 RCX: 0000000000000000 [ 97.469540][ T6621] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 97.469546][ T6621] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 97.469551][ T6621] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 97.469556][ T6621] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 97.469565][ T6621] [ 97.668987][ T5984] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 97.818901][ T5984] usb 7-1: Using ep0 maxpacket: 8 [ 97.822605][ T5984] usb 7-1: unable to get BOS descriptor or descriptor too short [ 97.825433][ T5984] usb 7-1: config 192 has an invalid interface number: 17 but max is 0 [ 97.827700][ T5984] usb 7-1: config 192 has no interface number 0 [ 97.830115][ T5984] usb 7-1: config 192 interface 17 has no altsetting 0 [ 97.835291][ T5984] usb 7-1: New USB device found, idVendor=0bfd, idProduct=000f, bcdDevice=89.07 [ 97.837766][ T5984] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.840802][ T5984] usb 7-1: Product: syz [ 97.841917][ T5984] usb 7-1: SerialNumber: syz [ 98.028897][ T6170] usb 8-1: new low-speed USB device number 4 using dummy_hcd [ 98.054014][ T5984] kvaser_usb 7-1:192.17: error -ENODEV: Cannot get usb endpoint(s) [ 98.060304][ T5984] usb 7-1: USB disconnect, device number 4 [ 98.180162][ T6170] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.182947][ T6170] usb 8-1: config 0 has no interfaces? [ 98.184461][ T6170] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 98.186971][ T6170] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.191088][ T6170] usb 8-1: config 0 descriptor?? [ 98.310235][ T6652] netlink: 'syz.2.151': attribute type 1 has an invalid length. [ 98.316764][ T6652] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.323740][ T6652] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.325756][ T6652] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 98.329200][ T6652] bond1: (slave vcan1): Error -95 calling set_mac_address [ 98.398965][ T5944] Bluetooth: hci2: command 0x0c1a tx timeout [ 98.485667][ T6656] syz.2.160 uses obsolete (PF_INET,SOCK_PACKET) [ 98.628081][ T6662] FAULT_INJECTION: forcing a failure. [ 98.628081][ T6662] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 98.632033][ T6662] CPU: 0 UID: 0 PID: 6662 Comm: syz.1.162 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 98.632056][ T6662] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 98.632062][ T6662] Call Trace: [ 98.632066][ T6662] [ 98.632070][ T6662] dump_stack_lvl+0x16c/0x1f0 [ 98.632086][ T6662] should_fail_ex+0x512/0x640 [ 98.632098][ T6662] _copy_to_user+0x32/0xd0 [ 98.632111][ T6662] simple_read_from_buffer+0xe0/0x170 [ 98.632124][ T6662] proc_fail_nth_read+0x197/0x270 [ 98.632137][ T6662] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 98.632150][ T6662] ? rw_verify_area+0xcf/0x680 [ 98.632161][ T6662] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 98.632174][ T6662] vfs_read+0x1de/0xc70 [ 98.632206][ T6662] ? fdget_pos+0x2a2/0x370 [ 98.632220][ T6662] ? __pfx___mutex_lock+0x10/0x10 [ 98.632233][ T6662] ? __pfx_vfs_read+0x10/0x10 [ 98.632248][ T6662] ? __fget_files+0x20e/0x3c0 [ 98.632264][ T6662] ksys_read+0x12a/0x240 [ 98.632276][ T6662] ? __pfx_ksys_read+0x10/0x10 [ 98.632288][ T6662] ? __secure_computing+0x28e/0x3b0 [ 98.632302][ T6662] __do_fast_syscall_32+0x73/0x120 [ 98.632315][ T6662] do_fast_syscall_32+0x32/0x80 [ 98.632328][ T6662] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 98.632340][ T6662] RIP: 0023:0xf7f10579 [ 98.632348][ T6662] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 98.632357][ T6662] RSP: 002b:00000000f5015590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 98.632366][ T6662] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 00000000f5015620 [ 98.632372][ T6662] RDX: 000000000000000f RSI: 00000000f739cff4 RDI: 0000000000000000 [ 98.632377][ T6662] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 98.632382][ T6662] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 98.632388][ T6662] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 98.632397][ T6662] [ 98.853001][ T6667] capability: warning: `syz.0.164' uses deprecated v2 capabilities in a way that may be insecure [ 98.858686][ T6666] netlink: 12 bytes leftover after parsing attributes in process `syz.0.164'. [ 98.862688][ T6664] FAULT_INJECTION: forcing a failure. [ 98.862688][ T6664] name failslab, interval 1, probability 0, space 0, times 0 [ 98.867295][ T6664] CPU: 3 UID: 0 PID: 6664 Comm: syz.2.163 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 98.867314][ T6664] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 98.867323][ T6664] Call Trace: [ 98.867328][ T6664] [ 98.867334][ T6664] dump_stack_lvl+0x16c/0x1f0 [ 98.867357][ T6664] should_fail_ex+0x512/0x640 [ 98.867372][ T6664] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 98.867394][ T6664] should_failslab+0xc2/0x120 [ 98.867416][ T6664] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 98.867437][ T6664] ? mas_alloc_nodes+0x18b/0x8b0 [ 98.867456][ T6664] mas_alloc_nodes+0x18b/0x8b0 [ 98.867474][ T6664] mas_node_count_gfp+0x105/0x130 [ 98.867491][ T6664] mas_preallocate+0x53e/0xcd0 [ 98.867514][ T6664] ? __pfx_mas_preallocate+0x10/0x10 [ 98.867540][ T6664] ? __asan_memset+0x23/0x50 [ 98.867558][ T6664] commit_merge+0x6a8/0xe60 [ 98.867581][ T6664] ? __pfx_commit_merge+0x10/0x10 [ 98.867603][ T6664] ? dup_anon_vma.constprop.0+0x74/0x330 [ 98.867624][ T6664] vma_merge_existing_range+0xedd/0x2070 [ 98.867648][ T6664] ? __pfx_vma_merge_existing_range+0x10/0x10 [ 98.867673][ T6664] vma_modify.constprop.0+0x87/0x410 [ 98.867696][ T6664] vma_modify_flags_uffd+0x23f/0x2e0 [ 98.867716][ T6664] ? __pfx_vma_modify_flags_uffd+0x10/0x10 [ 98.867747][ T6664] userfaultfd_clear_vma+0x91/0x130 [ 98.867764][ T6664] userfaultfd_release_all+0x2ad/0x4b0 [ 98.867782][ T6664] ? __pfx_userfaultfd_release_all+0x10/0x10 [ 98.867801][ T6664] ? __lock_acquire+0xaa4/0x1ba0 [ 98.867823][ T6664] ? __pfx_userfaultfd_release+0x10/0x10 [ 98.867841][ T6664] userfaultfd_release+0xf3/0x1c0 [ 98.867856][ T6664] ? __pfx_userfaultfd_release+0x10/0x10 [ 98.867872][ T6664] ? __pfx___might_resched+0x10/0x10 [ 98.867890][ T6664] ? evm_file_release+0xd0/0x200 [ 98.867906][ T6664] __fput+0x3ff/0xb70 [ 98.867919][ T6664] ? _raw_spin_unlock_irq+0x23/0x50 [ 98.867938][ T6664] task_work_run+0x14d/0x240 [ 98.867952][ T6664] ? __pfx_task_work_run+0x10/0x10 [ 98.867967][ T6664] ? ksys_write+0x1b9/0x240 [ 98.867985][ T6664] ? __pfx_ksys_write+0x10/0x10 [ 98.868005][ T6664] syscall_exit_to_user_mode+0x27b/0x2a0 [ 98.868026][ T6664] __do_fast_syscall_32+0x80/0x120 [ 98.868046][ T6664] do_fast_syscall_32+0x32/0x80 [ 98.868065][ T6664] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 98.868084][ T6664] RIP: 0023:0xf7ff7579 [ 98.868095][ T6664] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 98.868108][ T6664] RSP: 002b:00000000f511655c EFLAGS: 00000296 ORIG_RAX: 0000000000000135 [ 98.868121][ T6664] RAX: 0000000000000001 RBX: 0000000080000180 RCX: 0000000000000001 [ 98.868130][ T6664] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 98.868138][ T6664] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 98.868145][ T6664] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 98.868154][ T6664] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 98.868171][ T6664] [ 98.868203][ T6664] BUG: unable to handle page fault for address: fffffffffffffff4 [ 98.961392][ T6664] #PF: supervisor read access in kernel mode [ 98.964115][ T6664] #PF: error_code(0x0000) - not-present page [ 98.967256][ T6664] PGD df86067 P4D df86067 PUD df88067 PMD 0 [ 98.969417][ T6664] Oops: Oops: 0000 [#1] SMP KASAN NOPTI [ 98.971391][ T6664] CPU: 3 UID: 0 PID: 6664 Comm: syz.2.163 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 98.975433][ T6664] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 98.979242][ T6664] RIP: 0010:vma_merge_existing_range+0x265/0x2070 [ 98.981640][ T6664] Code: e8 70 d2 ac ff 48 8b 14 24 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 1b 19 00 00 48 8b 04 24 48 8b 74 24 08 <4c> 8b 38 4c 89 ff e8 e0 cc ac ff 48 8b 44 24 08 49 39 c7 0f 83 db [ 98.988443][ T6664] RSP: 0018:ffffc9000eacf990 EFLAGS: 00010246 [ 98.990604][ T6664] RAX: fffffffffffffff4 RBX: ffffc9000eacfae8 RCX: ffffffff820e2aa4 [ 98.993406][ T6664] RDX: 1ffffffffffffffe RSI: 0000000080c2a000 RDI: 0000000000000005 [ 98.996215][ T6664] RBP: 0000000080ce2000 R08: 0000000000000005 R09: 0000000000000000 [ 98.999030][ T6664] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 99.001828][ T6664] R13: ffffc9000eacfb08 R14: ffff88806e8e2c98 R15: ffff8880697e3c00 [ 99.004640][ T6664] FS: 0000000000000000(0000) GS:ffff888097f5a000(0063) knlGS:00000000f5116b40 [ 99.007432][ T6664] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 99.009280][ T6664] CR2: fffffffffffffff4 CR3: 000000006b176000 CR4: 0000000000352ef0 [ 99.011476][ T6664] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 99.013671][ T6664] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 99.015839][ T6664] Call Trace: [ 99.016788][ T6664] [ 99.017637][ T6664] ? __die+0x1e/0x60 [ 99.018748][ T6664] ? page_fault_oops+0x3b5/0xb80 [ 99.020142][ T6664] ? __pfx_page_fault_oops+0x10/0x10 [ 99.021609][ T6664] ? find_held_lock+0x2b/0x80 [ 99.022959][ T6664] ? is_prefetch.constprop.0+0x9c/0x510 [ 99.024526][ T6664] ? search_bpf_extables+0x1c2/0x320 [ 99.025968][ T6664] ? bpf_ksym_find+0x124/0x1c0 [ 99.027309][ T6664] ? __pfx_is_prefetch.constprop.0+0x10/0x10 [ 99.029268][ T6664] ? fixup_exception+0x10c/0xaf0 [ 99.030819][ T6664] ? kernelmode_fixup_or_oops.constprop.0+0xb8/0xe0 [ 99.032669][ T6664] ? __bad_area_nosemaphore+0x399/0x6a0 [ 99.034239][ T6664] ? spurious_kernel_fault+0x233/0x3c0 [ 99.035760][ T6664] ? do_kern_addr_fault+0x5b/0x80 [ 99.037414][ T6664] ? exc_page_fault+0xb1/0xc0 [ 99.038979][ T6664] ? asm_exc_page_fault+0x26/0x30 [ 99.040379][ T6664] ? vma_merge_existing_range+0x9c4/0x2070 [ 99.042162][ T6664] ? vma_merge_existing_range+0x265/0x2070 [ 99.044023][ T6664] ? __pfx_vma_merge_existing_range+0x10/0x10 [ 99.045823][ T6664] vma_modify.constprop.0+0x87/0x410 [ 99.047429][ T6664] vma_modify_flags_uffd+0x23f/0x2e0 [ 99.049189][ T6664] ? __pfx_vma_modify_flags_uffd+0x10/0x10 [ 99.050978][ T6664] userfaultfd_clear_vma+0x91/0x130 [ 99.052263][ T6664] userfaultfd_release_all+0x2ad/0x4b0 [ 99.054006][ T6664] ? __pfx_userfaultfd_release_all+0x10/0x10 [ 99.055670][ T6664] ? __lock_acquire+0xaa4/0x1ba0 [ 99.057018][ T6664] ? __pfx_userfaultfd_release+0x10/0x10 [ 99.058524][ T6664] userfaultfd_release+0xf3/0x1c0 [ 99.059856][ T6664] ? __pfx_userfaultfd_release+0x10/0x10 [ 99.061567][ T6664] ? __pfx___might_resched+0x10/0x10 [ 99.063007][ T6664] ? evm_file_release+0xd0/0x200 [ 99.064690][ T6664] __fput+0x3ff/0xb70 [ 99.066034][ T6664] ? _raw_spin_unlock_irq+0x23/0x50 [ 99.067737][ T6664] task_work_run+0x14d/0x240 [ 99.069238][ T6664] ? __pfx_task_work_run+0x10/0x10 [ 99.070848][ T6664] ? ksys_write+0x1b9/0x240 [ 99.072398][ T6664] ? __pfx_ksys_write+0x10/0x10 [ 99.073911][ T6664] syscall_exit_to_user_mode+0x27b/0x2a0 [ 99.075797][ T6664] __do_fast_syscall_32+0x80/0x120 [ 99.077434][ T6664] do_fast_syscall_32+0x32/0x80 [ 99.079071][ T6664] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 99.080957][ T6664] RIP: 0023:0xf7ff7579 [ 99.082051][ T6664] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 99.087334][ T6664] RSP: 002b:00000000f511655c EFLAGS: 00000296 ORIG_RAX: 0000000000000135 [ 99.090094][ T6664] RAX: 0000000000000001 RBX: 0000000080000180 RCX: 0000000000000001 [ 99.092580][ T6664] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 99.095027][ T6664] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 99.097530][ T6664] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 99.100273][ T6664] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 99.103073][ T6664] [ 99.104217][ T6664] Modules linked in: [ 99.105674][ T6664] CR2: fffffffffffffff4 [ 99.107130][ T6664] ---[ end trace 0000000000000000 ]--- [ 99.108792][ T6664] RIP: 0010:vma_merge_existing_range+0x265/0x2070 [ 99.110944][ T6664] Code: e8 70 d2 ac ff 48 8b 14 24 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 1b 19 00 00 48 8b 04 24 48 8b 74 24 08 <4c> 8b 38 4c 89 ff e8 e0 cc ac ff 48 8b 44 24 08 49 39 c7 0f 83 db [ 99.116927][ T6664] RSP: 0018:ffffc9000eacf990 EFLAGS: 00010246 [ 99.118980][ T6664] RAX: fffffffffffffff4 RBX: ffffc9000eacfae8 RCX: ffffffff820e2aa4 [ 99.121520][ T6664] RDX: 1ffffffffffffffe RSI: 0000000080c2a000 RDI: 0000000000000005 [ 99.123866][ T6664] RBP: 0000000080ce2000 R08: 0000000000000005 R09: 0000000000000000 [ 99.126395][ T6664] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 99.128963][ T6664] R13: ffffc9000eacfb08 R14: ffff88806e8e2c98 R15: ffff8880697e3c00 [ 99.131558][ T6664] FS: 0000000000000000(0000) GS:ffff888097f5a000(0063) knlGS:00000000f5116b40 [ 99.134450][ T6664] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 99.136613][ T6664] CR2: fffffffffffffff4 CR3: 000000006b176000 CR4: 0000000000352ef0 [ 99.139252][ T6664] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 99.141675][ T6664] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 99.144273][ T6664] Kernel panic - not syncing: Fatal exception [ 99.146801][ T6664] Kernel Offset: disabled [ 99.148120][ T6664] Rebooting in 86400 seconds.. VM DIAGNOSIS: 02:10:51 Registers: info registers vcpu 0 CPU#0 RAX=000000000021adc4 RBX=0000000000000000 RCX=ffffffff8b5b82f9 RDX=ffffed10056865be RSI=ffffffff8100153f RDI=ffffffff819161d1 RBP=fffffbfff1bd2ee8 RSP=ffffffff8de07dd0 R8 =0000000000000000 R9 =ffffed10056865bd R10=ffff88802b432deb R11=0000000000000001 R12=0000000000000000 R13=ffffffff8de97740 R14=ffffffff90629210 R15=0000000000000000 RIP=ffffffff810019b6 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097c5a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f5015da4 CR3=000000006b176000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000ff000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000001000008fb RBX=0000000000000001 RCX=0000000000000830 RDX=0000000000000001 RSI=00000000000000fb RDI=0000000000000001 RBP=0000000000000000 RSP=ffffc9002069fa78 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000000 R13=ffffc9002069fca0 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81683d08 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097d5a000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000080022000 CR3=000000006d440000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000ff000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88802b741220 RCX=ffffc9000c402000 RDX=0000000000080000 RSI=ffffffff81aed233 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc90020b57ac0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=000000000000001e R12=ffffed10056e8245 R13=0000000000000001 R14=dffffc0000000000 R15=ffff88802b63b140 RIP=ffffffff81aed23a RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097e5a000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000800003c0 CR3=000000006ed6c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000036 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85413635 RDI=ffffffff9ab72ba0 RBP=ffffffff9ab72b60 RSP=ffffc9000eacf220 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=727265203a465023 R12=0000000000000000 R13=0000000000000036 R14=ffffffff9ab72b60 R15=ffffffff854135d0 RIP=ffffffff8541365f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097f5a000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=fffffffffffffff4 CR3=000000006b176000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000