last executing test programs: 4m13.112963721s ago: executing program 1 (id=2): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={0x1c, 0x1d, 0x21, 0x70bd27, 0x2, {0x7}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x22000044}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x4e2080, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f0000000400)={0x1, 0x0, [{0x7, 0x7, 0x1, 0x100, 0x8f, 0x2, 0x7}]}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000280)={0x2, 0x0, [{0xb, 0x5, 0x1, 0x400, 0x1, 0x2, 0x3}, {0x40000000, 0xd, 0x6, 0x3, 0x2, 0x3}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 4m11.8444333s ago: executing program 1 (id=7): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000140)=[{}], 0x1, 0x6, &(0x7f00000001c0)={[0x7]}, 0xffffffffffffff63) r2 = syz_open_dev$loop(0x0, 0xffffffff7ffffffd, 0x1608e2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3f}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x60}}, 0x20050800) ioctl$LOOP_SET_STATUS(r2, 0x1260, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) setfsuid(0xffffffffffffffff) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x33}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x2}) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000200)) r4 = open(&(0x7f0000000100)='./file1\x00', 0x147842, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r5 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0x20000a, 0x20002f6}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$unix(r4, &(0x7f0000000ac0)={&(0x7f0000000300)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000000a00)=[{&(0x7f0000000440)="6d490959870c222fdf4021d5f8f268766392d4660fceb77e3b2d6007", 0x1c}, {&(0x7f0000000480)="def55889fabfd3a8059aa9e18abbb6a248", 0x11}, {&(0x7f00000004c0)="a2fa69aa1e38fa1ed7633fa1e24dae8cf723e4081324b2d4f5cb60ade7ad295afa90c4a8f362efa89a6dc78196890c4af29f790e989678cc039b790174b7bb087989299f42bd797211869ef86a12fa8041c392593b33da18d4ea93d128b1aaba83d96d660c7c72573bef6a961fde8b27b4dc06335b78eee39658c0e5fb582729a7777bfa5925639166058f834c1f07a30db62f4356fa1e56c9a0029dba54e3f0f13041897c94104a39bd175e5859258729c2d3907574a42139107cb1e3c8fca1254852866896712db2ae", 0xca}, {&(0x7f00000005c0)="3931c94e07a8a42216db165c56358f34b537dcf880fe82301108ee0122da2273efb97fc1e2ff5ee725d5cecfd558de", 0x2f}, {&(0x7f0000000600)="46c77daac6b09e49ae40263111ad8d78a9ca80bfb20b2aaedc2cb5137e1eb1fc442d62bb9636afe0bc29b217545d9d08182c6b5658b0b0872adbb4a78da9ced6f83ac7edc5547441202d9de11aa584377bea472bb21d6a5070a04230c785d64609c2b2ccb011b272b0e78dbba879d980e31b57040c211703a1fd19254c2b07b64fbb0069b1e824fe9edf054767e2735b10", 0x91}, {&(0x7f00000006c0)="d25c95d952ce6cca824165efd60c028fa3a70a41617c3fe6f23cf35a26055341d95f480171254f9b2db63419697d96b61b443fdc79d0898a5a52c04f66c812", 0x3f}, {&(0x7f0000000700)="f92f66", 0x3}, {&(0x7f0000000840)="5937cd417a466f700f6d9119a3c6c2beb213b66f4e2c6404c3d781fa95c4888c33db121c99578fc3d754d8c2d24391684aafc4e57fa818aee8137b583c5fe6ba2d1ad68202528de2e1eb6ad0b125a87bf48243d1aa3c30721471dc41c32279293253f69213ec3eff5d4a5a68b5976a4ad5d6f3a19a353098e38c6f60f790dc82fdf333c3730d2c34c6421d24666ca3deae3300a103527774a373a11a4b54553c3f03e5cad5bbd013a5b78fd0a5999326c1e2c2bec9442a09f4a69d71af65a33fd1f46ddc5136ad627b0537aeae3d613df334eb1f73b07a689c2019627d50e7d606", 0xe1}, {&(0x7f0000000940)="0e020c879c514e2c97cae5", 0xb}, {0x0}], 0xa, 0x0, 0x0, 0x20000040}, 0x4000000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) close(r1) 4m10.704821688s ago: executing program 1 (id=9): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x7, @empty, 0x3aa7}, @ib={0x1b, 0xffff, 0x0, {}, 0x0, 0xfffffffffffffffc, 0x6}}}, 0x118) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x3, 0x6, 0xf0, 0x8, 0x4}}) syz_open_dev$loop(&(0x7f0000000240), 0x4, 0x101001) socket(0x10, 0x80002, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_pidfd_open(0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x20001, 0xcb) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r3}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x10, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100}, 0x94) 3m55.595512478s ago: executing program 32 (id=9): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x7, @empty, 0x3aa7}, @ib={0x1b, 0xffff, 0x0, {}, 0x0, 0xfffffffffffffffc, 0x6}}}, 0x118) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x3, 0x6, 0xf0, 0x8, 0x4}}) syz_open_dev$loop(&(0x7f0000000240), 0x4, 0x101001) socket(0x10, 0x80002, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_pidfd_open(0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x20001, 0xcb) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r3}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x10, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100}, 0x94) 20.306769718s ago: executing program 4 (id=756): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) syz_open_dev$loop(0x0, 0x4, 0x101001) socket(0x10, 0x80002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_pidfd_open(0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x20001, 0xcb) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000010000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x10, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100}, 0x94) 16.856032056s ago: executing program 4 (id=763): gettid() fsopen(0x0, 0x0) r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$sock(r3, &(0x7f00000044c0), 0x4000000000001c0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 11.07703135s ago: executing program 3 (id=774): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x70}, 0x1, 0x0, 0x0, 0x840}, 0x0) 10.88235626s ago: executing program 2 (id=775): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = syz_clone(0x200, 0x0, 0xfffffffffffffcdd, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x8, r1) wait4(0x0, 0x0, 0x0, 0x0) 10.417553885s ago: executing program 3 (id=778): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) rt_sigprocmask(0x2, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8) r2 = gettid() r3 = getpid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, 0x24, 0x0) getxattr(&(0x7f0000000140)='./bus\x00', &(0x7f00000001c0)=@known='system.posix_acl_access\x00', 0x0, 0x0) rt_tgsigqueueinfo(r3, r2, 0x5, &(0x7f0000000840)={0x2, 0xffffffff, 0xfffff7ff}) rt_tgsigqueueinfo(r3, r2, 0x1b, &(0x7f0000000280)={0xc, 0x0, 0x4}) rt_sigprocmask(0x2, &(0x7f00000001c0)={[0x7]}, 0x0, 0x8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) close(r4) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) r6 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r6, 0x0, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000009b00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000400)="f4e1", 0x2}], 0x1, &(0x7f0000000640)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @loopback}}}], 0x38}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000009440)}}, {{0x0, 0x0, 0x0}}], 0x4, 0x40028d0) add_key$user(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x2}, &(0x7f00000005c0)="79cf", 0x2, 0x0) 10.187138654s ago: executing program 2 (id=779): openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x0) 9.146504877s ago: executing program 2 (id=785): r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/rt6_stats\x00') pread64(r0, &(0x7f00000000c0)=""/144, 0x90, 0x3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="b7000000000000006111900000e1f90006000000000000009500000000000000650881f86b2cc338df645e9fe3e06088f59a1804a0411223122b5edcdd5f6cd0ac52cd010001000000000042db7732b4e7f5318f7d072f289968935fe5143706d8a9dacef4e6fa9f392c0565078eba"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) socket$kcm(0x2, 0xa, 0x2) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_ethernet(0x9c, &(0x7f0000000500)=ANY=[@ANYBLOB="0180c2000001aab1aaaaaaaa3388a801008100110086dd65795382005e210100000000000000000000000000000000ff010000000000000000000000000001730201400000000000000000000000000000ffff000000004e244e2104419078a897c45f04021920e8ddf55627382a42ccb6c3dc3e79f2bb5e4a1ad8aa2bb0b07db321cc789c4471c04026066b12831ca465a624e20da03d6065"], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x3c, r4, 0x1, 0xffffbffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c1937}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10001}]}, 0x3c}}, 0x20000000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81e8943c, &(0x7f0000000c00)) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20048045) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x24002801}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x4e22, 0x3, 'rr\x00', 0x1e, 0x4, 0x68}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010101, 0x4e21, 0x3, 'lc\x00', 0x11, 0x3240, 0x3d}, {@loopback, 0x4e23, 0x4, 0x8628, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r6, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffc}}, 0x44) 7.121922758s ago: executing program 4 (id=788): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x70}, 0x1, 0x0, 0x0, 0x840}, 0x0) 5.872275276s ago: executing program 2 (id=791): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a", 0x10) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000140)=0x4) 5.871604595s ago: executing program 5 (id=792): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0x100000000, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000840)={'#! ', './file0', [], 0xa, "5775ebb77549afc496bc5cc558c52be63e203db628daa190b16cc7216b9bfb1b0bd22d03f5e1cd7a3da150be3434e1d6c83af706cea87fffe560d236a8c26a760289f80eaa398ae77b0d26197822dd25b01733bd602efae482eced2ed31ee6ce67c841c25dfefcd739990462ff3626423e0e3ba7a4d4a86469f8cf3ac3d81d4f63be7d17a6caf4a8b071298bc35fdea671ea0025460ccfed3040fe1945a0d089bba38204ca6631e158a7717cf420623fad22082e3ae1b8e38748772095513a3f5028fb76790ef01caab610421c1ae48ffd68b5aefd4f399b8d28edddd9dde0d8afa1fd2df0d8c6ebbcf9493daea96589ee90969516953c83d70124dc91b26e3287986fdc096eda61a819b88e28facf71a064600e69747ab08f0379afde05c2b558f6058e2ef5c3a36ab3171bd99960ebb980380b7f76f8fce6987cf5eafb1384cefd64e1d214b14cff8f9ae739db32fb1e54d01856a3b277c3f02aeebe7f58f0708f4487afe3674a0a412461a9de083979f9c380a9336893f77c19f740aed24764a0165a52fa2d8152bb55f49fe1c1a52977f9244fdf648ef55acdbaab7827a33e5c66592b97b2b4ccf4d642d75a23a0bf43cb9dd6d4156cc58636f4d68d0370d827d0c6a0b0a3fb818e36d6716a49ec3bac8da32f9a8bd74c499768a4c62822d018ef9f7982ddf15e655670f9cec0162460e4b9a83a5f1cfd99dcb5dfe680039d9b9ee28132545ce12ff1f32c6ecf9181688260da9d4d610567eacf0c399e85c974fc752333c7d0ac1ba8e0213f07884fc77b0ba82aa058e596f04b7d44b409cd4a1fab3b3c0d4217493196f62e2cf9e4d9834e7f966ca42b76100ef5f6fa89700a0b4661056849331fb583b3e9659711ae466c61507319b7d1638ffca5f9130ca7fdb86276ada534473b4d2c21859a825ba6e502d2f912e224f1fdb70a57c42e2185a45edac6e09c1c7446dc889dd8ba711ac687257b35a1b923a960be298b680106299cd3ac4e06cae9352bfdd0427e13ce759b48140df351c8f9ae8fb9acabb9c3346e23433c4875d45ac7836d990cd13d35ac48700e315d7e9b11ca587cb9a764af1fda1bb8c36f15d1d642252e26a5c9d9c33a16dca4584f864467ad20b97ddffc6fcbbaf71716aa07e9f0c99bee7e22fac55dcf54f99af981bd0217b72a4cf46ce46f165d512fd49ff4e3cea29a63e0354177bfe5433b25c3496461b39153b68cbc5af714bde4043909c4679aedd01875badbb6f74cadcf9488769ebe8e173c746225f3decccfed3d295d90b29444b27c2e5a72943eb03d254940a65398e63d78f9b41ef8a17c0c2bd8e9057619ff39dc47105189d0c70a32c535790e68fff9c9a9ef708576c51bcc8868f8a2842b82af5c0466a3cb1fc229e3fd4434e2956d206fc8ca66c8494567db7034e223a4dd1313d3b2399616307fd3ef27acf673"}, 0x40d) 5.751237448s ago: executing program 4 (id=793): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x22000044}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x4e2080, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f0000000400)={0x1, 0x0, [{0x7, 0x7, 0x1, 0x100, 0x8f, 0x2, 0x7}]}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 5.441390641s ago: executing program 3 (id=797): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={0x1c, 0x1d, 0x21, 0x70bd27, 0x2, {0x7}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x22000044}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x4e2080, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, &(0x7f0000000400)={0x1, 0x0, [{0x7, 0x7, 0x1, 0x100, 0x8f, 0x2, 0x7}]}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000280)={0x3, 0x0, [{0xb, 0x5, 0x1, 0x400, 0x1, 0x2, 0x3}, {0xc0000001, 0xcb7, 0x3, 0x73, 0x3}, {0x40000000, 0xd, 0x6, 0x3, 0x2, 0x3}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 5.379301125s ago: executing program 2 (id=798): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 4.879081283s ago: executing program 5 (id=809): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x200}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) 4.530812939s ago: executing program 5 (id=813): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x200}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) openat2(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) 4.506582707s ago: executing program 4 (id=814): openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x40480, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x20000044) mknod(&(0x7f0000000040)='./file0\x00', 0x800141f, 0x4) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.368526593s ago: executing program 5 (id=815): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114e3712d87744938848f24a13cb604000000000000000000000000000000c7aa5035897b20a6c23f1fc4af2990c07f784b985a3de7740bd33848702930", 0x122}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c84", 0x17}], 0x3}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb6648df7dbbd18fa5533a6b0acc138c81a8acbcb2fb79a7d7857d41bca238e0548c5e955d74bbb106fe965274cbb3a29b895df0b4e028b6d65c115b81328e0b660253f1c9a359dde67917fa232e2f566483ddbb93ff9b103c1cac356c9f0f6ab5fe77ea4610f71ec6dc988fddf29b8d0b6aaa82752580b62b5f51800d10077f07319b6ffeff06e4dea184fd7a0a0f4d441763e30d1bc475502a1de1ffbc0e30c", 0x160}, {&(0x7f0000000fc0)="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", 0x1e9}], 0x2}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 3.355142635s ago: executing program 4 (id=817): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={0x14, 0x1d, 0x21, 0x70bd27, 0x2, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x22000044}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x4e2080, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000280)={0x3, 0x0, [{0x80000008, 0x3, 0x0, 0x81, 0xd5, 0x4, 0x4}, {0xb, 0x5, 0x1, 0x400, 0x1, 0x2, 0x3}, {0x40000000, 0xd, 0x6, 0x3, 0x2, 0x3}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.12861945s ago: executing program 3 (id=819): r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/rt6_stats\x00') pread64(r0, &(0x7f00000000c0)=""/144, 0x90, 0x3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="b7000000000000006111900000e1f90006000000000000009500000000000000650881f86b2cc338df645e9fe3e06088f59a1804a0411223122b5edcdd5f6cd0ac52cd010001000000000042db7732b4e7f5318f7d072f289968935fe5143706d8a9dacef4e6fa9f392c0565078eba"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) socket$kcm(0x2, 0xa, 0x2) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_ethernet(0x9c, &(0x7f0000000500)=ANY=[@ANYBLOB="0180c2000001aab1aaaaaaaa3388a801008100110086dd65795382005e210100000000000000000000000000000000ff010000000000000000000000000001730201400000000000000000000000000000ffff000000004e244e2104419078a897c45f04021920e8ddf55627382a42ccb6c3dc3e79f2bb5e4a1ad8aa2bb0b07db321cc789c4471c04026066b12831ca465a624e20da03d6065"], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81e8943c, &(0x7f0000000c00)) sendmsg$NFT_BATCH(r3, 0x0, 0x20048045) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x24002801}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x4e22, 0x3, 'rr\x00', 0x1e, 0x4, 0x68}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010101, 0x4e21, 0x3, 'lc\x00', 0x11, 0x3240, 0x3d}, {@loopback, 0x4e23, 0x4, 0x8628, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffc}}, 0x44) 3.027309758s ago: executing program 5 (id=820): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0x100000000, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000840)={'#! ', './file0', [], 0xa, "5775ebb77549afc496bc5cc558c52be63e203db628daa190b16cc7216b9bfb1b0bd22d03f5e1cd7a3da150be3434e1d6c83af706cea87fffe560d236a8c26a760289f80eaa398ae77b0d26197822dd25b01733bd602efae482eced2ed31ee6ce67c841c25dfefcd739990462ff3626423e0e3ba7a4d4a86469f8cf3ac3d81d4f63be7d17a6caf4a8b071298bc35fdea671ea0025460ccfed3040fe1945a0d089bba38204ca6631e158a7717cf420623fad22082e3ae1b8e38748772095513a3f5028fb76790ef01caab610421c1ae48ffd68b5aefd4f399b8d28edddd9dde0d8afa1fd2df0d8c6ebbcf9493daea96589ee90969516953c83d70124dc91b26e3287986fdc096eda61a819b88e28facf71a064600e69747ab08f0379afde05c2b558f6058e2ef5c3a36ab3171bd99960ebb980380b7f76f8fce6987cf5eafb1384cefd64e1d214b14cff8f9ae739db32fb1e54d01856a3b277c3f02aeebe7f58f0708f4487afe3674a0a412461a9de083979f9c380a9336893f77c19f740aed24764a0165a52fa2d8152bb55f49fe1c1a52977f9244fdf648ef55acdbaab7827a33e5c66592b97b2b4ccf4d642d75a23a0bf43cb9dd6d4156cc58636f4d68d0370d827d0c6a0b0a3fb818e36d6716a49ec3bac8da32f9a8bd74c499768a4c62822d018ef9f7982ddf15e655670f9cec0162460e4b9a83a5f1cfd99dcb5dfe680039d9b9ee28132545ce12ff1f32c6ecf9181688260da9d4d610567eacf0c399e85c974fc752333c7d0ac1ba8e0213f07884fc77b0ba82aa058e596f04b7d44b409cd4a1fab3b3c0d4217493196f62e2cf9e4d9834e7f966ca42b76100ef5f6fa89700a0b4661056849331fb583b3e9659711ae466c61507319b7d1638ffca5f9130ca7fdb86276ada534473b4d2c21859a825ba6e502d2f912e224f1fdb70a57c42e2185a45edac6e09c1c7446dc889dd8ba711ac687257b35a1b923a960be298b680106299cd3ac4e06cae9352bfdd0427e13ce759b48140df351c8f9ae8fb9acabb9c3346e23433c4875d45ac7836d990cd13d35ac48700e315d7e9b11ca587cb9a764af1fda1bb8c36f15d1d642252e26a5c9d9c33a16dca4584f864467ad20b97ddffc6fcbbaf71716aa07e9f0c99bee7e22fac55dcf54f99af981bd0217b72a4cf46ce46f165d512fd49ff4e3cea29a63e0354177bfe5433b25c3496461b39153b68cbc5af714bde4043909c4679aedd01875badbb6f74cadcf9488769ebe8e173c746225f3decccfed3d295d90b29444b27c2e5a72943eb03d254940a65398e63d78f9b41ef8a17c0c2bd8e9057619ff39dc47105189d0c70a32c535790e68fff9c9a9ef708576c51bcc8868f8a2842b82af5c0466a3cb1fc229e3fd4434e2956d206fc8ca66c8494567db7034e223a4dd1313d3b2399616307fd3ef27acf673"}, 0x40d) 1.333808201s ago: executing program 0 (id=822): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, 0x0, 0x0) socket$inet(0x2, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 659.156642ms ago: executing program 3 (id=823): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x200}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) 646.581056ms ago: executing program 5 (id=824): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) rt_sigprocmask(0x2, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8) r2 = gettid() r3 = getpid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, 0x24, 0x0) getxattr(&(0x7f0000000140)='./bus\x00', &(0x7f00000001c0)=@known='system.posix_acl_access\x00', 0x0, 0x0) rt_tgsigqueueinfo(r3, r2, 0x5, &(0x7f0000000840)={0x2, 0xffffffff, 0xfffff7ff}) rt_tgsigqueueinfo(r3, r2, 0x1b, &(0x7f0000000280)={0xc, 0x0, 0x4}) rt_sigprocmask(0x2, &(0x7f00000001c0)={[0x7]}, 0x0, 0x8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) close(r4) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) r6 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r6, 0x0, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) add_key$user(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x2}, &(0x7f00000005c0)="79cf", 0x2, 0x0) 540.032553ms ago: executing program 0 (id=825): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x200}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) openat2(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) 365.035144ms ago: executing program 0 (id=826): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8000) socket$nl_xfrm(0x10, 0x3, 0x6) bind$inet6(0xffffffffffffffff, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000006bc0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x8080, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000180)='L', 0x1}], 0x1}}], 0x1, 0x4040001) 340.130125ms ago: executing program 3 (id=827): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) rt_sigprocmask(0x2, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8) r2 = gettid() r3 = getpid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, 0x24, 0x0) getxattr(&(0x7f0000000140)='./bus\x00', &(0x7f00000001c0)=@known='system.posix_acl_access\x00', 0x0, 0x0) rt_tgsigqueueinfo(r3, r2, 0x5, &(0x7f0000000840)={0x2, 0xffffffff, 0xfffff7ff}) rt_tgsigqueueinfo(r3, r2, 0x1b, &(0x7f0000000280)={0xc, 0x0, 0x4}) rt_sigprocmask(0x2, &(0x7f00000001c0)={[0x7]}, 0x0, 0x8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) close(r4) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) r6 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r6, 0x0, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000009b00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000400)="f4e1", 0x2}], 0x1, &(0x7f0000000640)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @loopback}}}], 0x38}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000009440)}}, {{0x0, 0x0, 0x0}}], 0x4, 0x40028d0) r7 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x2}, &(0x7f00000005c0)="79cf", 0x2, r7) 230.192504ms ago: executing program 0 (id=828): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0xc40) 228.379016ms ago: executing program 2 (id=829): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x22000044}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x4e2080, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000280)={0x3, 0x0, [{0x80000008, 0x3, 0x0, 0x81, 0xd5, 0x4, 0x4}, {0xb, 0x5, 0x1, 0x400, 0x1, 0x2, 0x3}, {0x40000000, 0xd, 0x6, 0x3, 0x2, 0x3}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 63.477963ms ago: executing program 0 (id=830): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114e3712d87744938848f24a13cb604000000000000000000000000000000c7aa5035897b20a6c23f1fc4af2990c07f784b985a3de7740bd33848702930", 0x122}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c84", 0x17}], 0x3}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb6648df7dbbd18fa5533a6b0acc138c81a8acbcb2fb79a7d7857d41bca238e0548c5e955d74bbb106fe965274cbb3a29b895df0b4e028b6d65c115b81328e0b660253f1c9a359dde67917fa232e2f566483ddbb93ff9b103c1cac356c9f0f6ab5fe77ea4610f71ec6dc988fddf29b8d0b6aaa82752580b62b5f51800d10077f07319b6ffeff06e4dea184fd7a0a0f4d441763e30d1bc475502a1de1ffbc0e30c", 0x160}, {&(0x7f0000000fc0)="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", 0x1e9}], 0x2}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 0s ago: executing program 0 (id=831): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "f19f00", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_type(r3, 0x0, 0x2, 0x0) write$cgroup_type(r4, 0x0, 0x0) r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) mkdir(0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r6, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x4, 0x3c8, 0xe8, 0x1d0, 0x1d0, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@remote, @multicast2, 0x0, 0x0, 0x7, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x100}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xfc, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bond_slave_1\x00', 'ipvlan1\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.230' (ED25519) to the list of known hosts. [ 71.920641][ T5800] cgroup: Unknown subsys name 'net' [ 72.144314][ T5800] cgroup: Unknown subsys name 'cpuset' [ 72.207003][ T5800] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.849547][ T5800] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.162338][ T5821] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.199210][ T5827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.210102][ T5827] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.224426][ T5827] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.248944][ T5827] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.259639][ T5827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.281512][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.282363][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.288455][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.304627][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.312095][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.313444][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.314377][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.315715][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.316057][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.317078][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.318568][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.319038][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.325262][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.341739][ T5821] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.352170][ T5821] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.403881][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.425862][ T5135] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.434075][ T5135] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.443964][ T5135] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.351464][ T5815] chnl_net:caif_netlink_parms(): no params data found [ 77.363565][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 77.426185][ T5816] chnl_net:caif_netlink_parms(): no params data found [ 77.489498][ T5817] chnl_net:caif_netlink_parms(): no params data found [ 77.560289][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 77.755144][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.756241][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.758233][ T5815] bridge_slave_0: entered allmulticast mode [ 77.761668][ T5815] bridge_slave_0: entered promiscuous mode [ 77.783452][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.783555][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.783660][ T5818] bridge_slave_0: entered allmulticast mode [ 77.785076][ T5818] bridge_slave_0: entered promiscuous mode [ 77.830136][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.830242][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.830396][ T5815] bridge_slave_1: entered allmulticast mode [ 77.832048][ T5815] bridge_slave_1: entered promiscuous mode [ 77.853506][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.853617][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.854114][ T5818] bridge_slave_1: entered allmulticast mode [ 77.859771][ T5818] bridge_slave_1: entered promiscuous mode [ 77.861552][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.861659][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.862531][ T5816] bridge_slave_0: entered allmulticast mode [ 77.865270][ T5816] bridge_slave_0: entered promiscuous mode [ 77.940964][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.941074][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.941170][ T5816] bridge_slave_1: entered allmulticast mode [ 77.942572][ T5816] bridge_slave_1: entered promiscuous mode [ 77.983726][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.983840][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.983998][ T5817] bridge_slave_0: entered allmulticast mode [ 77.985687][ T5817] bridge_slave_0: entered promiscuous mode [ 78.040891][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.041116][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.041254][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.041406][ T5817] bridge_slave_1: entered allmulticast mode [ 78.043257][ T5817] bridge_slave_1: entered promiscuous mode [ 78.048188][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.070683][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.070795][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.070933][ T5819] bridge_slave_0: entered allmulticast mode [ 78.074472][ T5819] bridge_slave_0: entered promiscuous mode [ 78.119178][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.137181][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.140267][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.140427][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.140540][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.140687][ T5819] bridge_slave_1: entered allmulticast mode [ 78.142502][ T5819] bridge_slave_1: entered promiscuous mode [ 78.202650][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.349255][ T5826] Bluetooth: hci1: command tx timeout [ 78.370359][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.409531][ T5815] team0: Port device team_slave_0 added [ 78.413960][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.416123][ T5818] team0: Port device team_slave_0 added [ 78.427384][ T5826] Bluetooth: hci2: command tx timeout [ 78.450739][ T5815] team0: Port device team_slave_1 added [ 78.453408][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.474194][ T5818] team0: Port device team_slave_1 added [ 78.475803][ T5816] team0: Port device team_slave_0 added [ 78.500493][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.507805][ T5826] Bluetooth: hci3: command tx timeout [ 78.507928][ T5826] Bluetooth: hci0: command tx timeout [ 78.508005][ T5826] Bluetooth: hci4: command tx timeout [ 78.552325][ T5816] team0: Port device team_slave_1 added [ 78.579211][ T5817] team0: Port device team_slave_0 added [ 78.620268][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.620280][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.620293][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.642086][ T5817] team0: Port device team_slave_1 added [ 78.643189][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.643201][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.643224][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.665644][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.665663][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.665686][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.672404][ T5819] team0: Port device team_slave_0 added [ 78.693453][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.693472][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.693495][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.699057][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.699073][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.699095][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.720029][ T5819] team0: Port device team_slave_1 added [ 78.758450][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.758468][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.758492][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.790439][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.790457][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.790481][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.831315][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.831335][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.831358][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.857554][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.857571][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.857595][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.918020][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.918038][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.918061][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.970792][ T5815] hsr_slave_0: entered promiscuous mode [ 78.972261][ T5815] hsr_slave_1: entered promiscuous mode [ 79.002222][ T5818] hsr_slave_0: entered promiscuous mode [ 79.005528][ T5818] hsr_slave_1: entered promiscuous mode [ 79.007375][ T5818] debugfs: 'hsr0' already exists in 'hsr' [ 79.007490][ T5818] Cannot create hsr debugfs directory [ 79.062378][ T5816] hsr_slave_0: entered promiscuous mode [ 79.063634][ T5816] hsr_slave_1: entered promiscuous mode [ 79.064638][ T5816] debugfs: 'hsr0' already exists in 'hsr' [ 79.064660][ T5816] Cannot create hsr debugfs directory [ 79.138987][ T5817] hsr_slave_0: entered promiscuous mode [ 79.140811][ T5817] hsr_slave_1: entered promiscuous mode [ 79.141310][ T5817] debugfs: 'hsr0' already exists in 'hsr' [ 79.141328][ T5817] Cannot create hsr debugfs directory [ 79.222006][ T5819] hsr_slave_0: entered promiscuous mode [ 79.222780][ T5819] hsr_slave_1: entered promiscuous mode [ 79.223283][ T5819] debugfs: 'hsr0' already exists in 'hsr' [ 79.223299][ T5819] Cannot create hsr debugfs directory [ 80.281368][ T5815] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.343305][ T5815] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.350500][ T5815] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.383493][ T5815] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.384583][ T5815] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.404886][ T5815] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.425061][ T5815] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.426571][ T5823] Bluetooth: hci1: command tx timeout [ 80.461280][ T5815] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.506953][ T5823] Bluetooth: hci2: command tx timeout [ 80.560715][ T5816] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.596666][ T5826] Bluetooth: hci0: command tx timeout [ 80.596699][ T5826] Bluetooth: hci3: command tx timeout [ 80.596744][ T5823] Bluetooth: hci4: command tx timeout [ 80.600546][ T5816] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.605552][ T5816] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.671042][ T5816] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.677286][ T5816] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.710223][ T5816] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.732903][ T5816] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.769236][ T5816] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.905396][ T5817] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.930734][ T5817] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.935733][ T5817] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.959780][ T5817] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.963315][ T5817] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.000791][ T5817] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.025379][ T5817] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.059699][ T5817] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.215500][ T5819] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.252064][ T5819] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.264605][ T5819] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.296853][ T5819] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.303352][ T5819] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.332605][ T5819] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.365800][ T5819] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.391606][ T5819] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.443101][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.525486][ T5818] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.563050][ T5818] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.594573][ T5818] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.624327][ T5818] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.645178][ T5818] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.674965][ T5818] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.702565][ T5818] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.742375][ T5818] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.746051][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.788114][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.838750][ T1057] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.838968][ T1057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.884673][ T103] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.884761][ T103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.931907][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.965070][ T103] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.965436][ T103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.012429][ T103] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.012551][ T103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.038713][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.132878][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.179774][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.179988][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.188244][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.245594][ T1550] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.245685][ T1550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.397695][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.424490][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.473657][ T1436] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.473797][ T1436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.506639][ T59] Bluetooth: hci1: command tx timeout [ 82.543280][ T1550] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.543382][ T1550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.587455][ T59] Bluetooth: hci2: command tx timeout [ 82.645666][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.666561][ T59] Bluetooth: hci3: command tx timeout [ 82.667316][ T59] Bluetooth: hci4: command tx timeout [ 82.667340][ T59] Bluetooth: hci0: command tx timeout [ 82.704890][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.705017][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.714484][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.753006][ T1550] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.753164][ T1550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.911709][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.173400][ T5815] veth0_vlan: entered promiscuous mode [ 83.239982][ T5815] veth1_vlan: entered promiscuous mode [ 83.295942][ T5816] veth0_vlan: entered promiscuous mode [ 83.314562][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.353905][ T5816] veth1_vlan: entered promiscuous mode [ 83.423117][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.465365][ T5815] veth0_macvtap: entered promiscuous mode [ 83.502273][ T5815] veth1_macvtap: entered promiscuous mode [ 83.605307][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.614339][ T5816] veth0_macvtap: entered promiscuous mode [ 83.628683][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.661010][ T5816] veth1_macvtap: entered promiscuous mode [ 83.677211][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.729147][ T42] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.753153][ T42] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.771204][ T42] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.790231][ T42] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.791792][ T5819] veth0_vlan: entered promiscuous mode [ 83.808730][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.910251][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.023024][ T5819] veth1_vlan: entered promiscuous mode [ 84.166060][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.194355][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.202985][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.213556][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.233153][ T5818] veth0_vlan: entered promiscuous mode [ 84.432348][ T5818] veth1_vlan: entered promiscuous mode [ 84.467239][ T5817] veth0_vlan: entered promiscuous mode [ 84.500315][ T1550] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.500340][ T1550] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.590792][ T5826] Bluetooth: hci1: command tx timeout [ 84.621409][ T5819] veth0_macvtap: entered promiscuous mode [ 84.653727][ T5817] veth1_vlan: entered promiscuous mode [ 84.666737][ T5826] Bluetooth: hci2: command tx timeout [ 84.683685][ T5819] veth1_macvtap: entered promiscuous mode [ 84.700157][ T1057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.700176][ T1057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.747260][ T5826] Bluetooth: hci0: command tx timeout [ 84.747290][ T5826] Bluetooth: hci4: command tx timeout [ 84.747309][ T5826] Bluetooth: hci3: command tx timeout [ 84.799546][ T3287] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.799576][ T3287] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.849529][ T5818] veth0_macvtap: entered promiscuous mode [ 84.855031][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.915410][ T3287] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.915432][ T3287] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.916269][ T5818] veth1_macvtap: entered promiscuous mode [ 84.929608][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.982305][ T1057] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.984551][ T5817] veth0_macvtap: entered promiscuous mode [ 84.989726][ T1057] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.997658][ T42] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.024163][ T1057] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.028589][ T5817] veth1_macvtap: entered promiscuous mode [ 85.038337][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.137453][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.375938][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.392912][ T1057] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.501843][ T1057] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.522460][ T1057] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.562323][ T1057] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.564672][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.748048][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.748068][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.810790][ T1550] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.827352][ T1550] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.842697][ T5937] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 85.922881][ T1550] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.960700][ T1550] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.452781][ T1550] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.452802][ T1550] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.572468][ T5940] Zero length message leads to an empty skb [ 86.719136][ T820] cfg80211: failed to load regulatory.db [ 86.935380][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.935400][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.085793][ T103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.085815][ T103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.643401][ T103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.643421][ T103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.074322][ T1057] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.074336][ T1057] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.566354][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 90.087382][ T5969] ======================================================= [ 90.087382][ T5969] WARNING: The mand mount option has been deprecated and [ 90.087382][ T5969] and is ignored by this kernel. Remove the mand [ 90.087382][ T5969] option from the mount to silence this warning. [ 90.087382][ T5969] ======================================================= [ 94.116351][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 94.156345][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 98.283328][ T36] audit: type=1326 audit(1776739282.636:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6009 comm="syz.2.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f412973c819 code=0x7fc00000 [ 99.586984][ T36] audit: type=1326 audit(1776739284.046:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6009 comm="syz.2.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f412973c819 code=0x7fc00000 [ 105.824729][ T5826] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 106.639994][ T5826] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 106.699984][ T5826] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 106.713302][ T5826] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 106.716920][ T5826] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 107.696328][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 107.716338][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 107.726324][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 107.736328][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 107.746324][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 107.756326][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 107.766329][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.435493][ T59] Bluetooth: hci5: command tx timeout [ 112.231449][ T59] Bluetooth: hci5: command tx timeout [ 114.268149][ T59] Bluetooth: hci5: command tx timeout [ 114.890318][ T5825] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 116.348523][ T59] Bluetooth: hci5: command tx timeout [ 116.364499][ T5825] usb 4-1: Using ep0 maxpacket: 16 [ 116.417664][ T5825] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.417708][ T5825] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 116.417731][ T5825] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 116.420992][ T5825] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 116.421017][ T5825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.421035][ T5825] usb 4-1: Product: syz [ 116.421048][ T5825] usb 4-1: Manufacturer: syz [ 116.421061][ T5825] usb 4-1: SerialNumber: syz [ 116.877586][ T1436] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.379276][ T5825] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 117.379327][ T5825] cdc_ncm 4-1:1.0: bind() failure [ 117.821779][ T5825] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 117.825475][ T5825] cdc_ncm 4-1:1.1: bind() failure [ 119.149362][ T5825] usb 4-1: USB disconnect, device number 2 [ 119.371646][ T1436] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.589378][ T1436] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.254155][ T6152] overlayfs: failed to resolve './file1': -2 [ 123.592551][ T1436] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.213813][ T6049] chnl_net:caif_netlink_parms(): no params data found [ 126.312073][ T6049] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.312970][ T6049] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.313208][ T6049] bridge_slave_0: entered allmulticast mode [ 126.317208][ T6049] bridge_slave_0: entered promiscuous mode [ 126.355146][ T6049] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.355281][ T6049] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.355511][ T6049] bridge_slave_1: entered allmulticast mode [ 126.370346][ T6049] bridge_slave_1: entered promiscuous mode [ 126.729088][ T6049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.773165][ T6049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.173636][ T6049] team0: Port device team_slave_0 added [ 127.513419][ T6049] team0: Port device team_slave_1 added [ 132.341905][ T6049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.341968][ T6049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 132.342037][ T6049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.429557][ T6049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.429576][ T6049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 132.429601][ T6049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.761337][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.764785][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.251084][ T1436] bridge_slave_1: left allmulticast mode [ 133.251207][ T1436] bridge_slave_1: left promiscuous mode [ 133.257023][ T1436] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.602147][ T1436] bridge_slave_0: left allmulticast mode [ 133.602177][ T1436] bridge_slave_0: left promiscuous mode [ 133.602401][ T1436] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.066538][ T5826] Bluetooth: hci5: command 0x0405 tx timeout [ 137.505062][ T1436] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.579620][ T1436] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.602199][ T1436] bond0 (unregistering): Released all slaves [ 137.726124][ T6049] hsr_slave_0: entered promiscuous mode [ 137.750401][ T6262] devpts: Bad value for 'uid' [ 137.750421][ T6262] devpts: Bad value for 'uid' [ 137.753593][ T6049] hsr_slave_1: entered promiscuous mode [ 137.754109][ T6049] debugfs: 'hsr0' already exists in 'hsr' [ 137.754124][ T6049] Cannot create hsr debugfs directory [ 141.856657][ T6291] kvm: kvm [6290]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x1000060e6 [ 141.861763][ T6291] kvm: kvm [6290]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x70c9 [ 141.867064][ T6291] kvm: kvm [6290]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x3043 [ 142.794245][ T5480] 8021q: adding VLAN 0 to HW filter on device eth1 [ 143.004250][ T6308] fuse: Unknown parameter 'group_id00000000000000000000' [ 147.403145][ T5480] 8021q: adding VLAN 0 to HW filter on device eth2 [ 148.896070][ T1436] hsr_slave_0: left promiscuous mode [ 148.939430][ T1436] hsr_slave_1: left promiscuous mode [ 149.047464][ T1436] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.087655][ T1436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.098805][ T6367] syz.4.112 uses obsolete (PF_INET,SOCK_PACKET) [ 149.417027][ T1436] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.417096][ T1436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.576075][ T6370] binder: 6366:6370 ioctl 81e8943c 200000000c00 returned -22 [ 149.853419][ T5901] IPVS: starting estimator thread 0... [ 149.990078][ T6371] IPVS: using max 11 ests per chain, 26400 per kthread [ 150.552531][ T6373] fuse: Unknown parameter 'group_id00000000000000000000' [ 150.711728][ T1436] veth1_macvtap: left promiscuous mode [ 150.714020][ T1436] veth0_macvtap: left promiscuous mode [ 150.714349][ T1436] veth1_vlan: left promiscuous mode [ 150.748165][ T1436] veth0_vlan: left promiscuous mode [ 150.777721][ T59] block nbd0: Receive control failed (result -32) [ 150.989557][ T6369] nbd0: detected capacity change from 0 to 128 [ 151.025128][ T5958] block nbd0: Dead connection, failed to find a fallback [ 151.025151][ T5958] block nbd0: shutting down sockets [ 151.025198][ T5958] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 151.025246][ T5958] Buffer I/O error on dev nbd0, logical block 0, async page read [ 151.883418][ T5958] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 151.883452][ T5958] Buffer I/O error on dev nbd0, logical block 0, async page read [ 151.908227][ T5958] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 151.908260][ T5958] Buffer I/O error on dev nbd0, logical block 0, async page read [ 151.908460][ T5958] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 151.908483][ T5958] Buffer I/O error on dev nbd0, logical block 0, async page read [ 151.911496][ T5958] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 151.911525][ T5958] Buffer I/O error on dev nbd0, logical block 0, async page read [ 151.911805][ T5958] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 151.911826][ T5958] Buffer I/O error on dev nbd0, logical block 0, async page read [ 151.911991][ T5958] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 151.912012][ T5958] Buffer I/O error on dev nbd0, logical block 0, async page read [ 151.912158][ T5958] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 151.912179][ T5958] Buffer I/O error on dev nbd0, logical block 0, async page read [ 151.912269][ T5958] ldm_validate_partition_table(): Disk read failed. [ 151.912335][ T5958] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 151.912357][ T5958] Buffer I/O error on dev nbd0, logical block 0, async page read [ 151.912500][ T5958] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 151.912522][ T5958] Buffer I/O error on dev nbd0, logical block 0, async page read [ 151.912929][ T5958] Dev nbd0: unable to read RDB block 0 [ 151.913606][ T5958] nbd0: unable to read partition table [ 152.302839][ T5958] ldm_validate_partition_table(): Disk read failed. [ 152.349066][ T5958] Dev nbd0: unable to read RDB block 0 [ 152.349666][ T5958] nbd0: unable to read partition table [ 157.298455][ T6423] fuse: Bad value for 'user_id' [ 157.298468][ T6423] fuse: Bad value for 'user_id' [ 157.362833][ T1436] team0 (unregistering): Port device team_slave_1 removed [ 157.389016][ T1436] team0 (unregistering): Port device team_slave_0 removed [ 157.691133][ T6421] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 157.802572][ T6049] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 161.494143][ T6049] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 161.498768][ T6049] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 161.844202][ T6440] overlayfs: missing 'lowerdir' [ 161.861047][ T6049] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 161.884434][ T6049] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 162.965778][ T6049] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 162.971320][ T6049] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 163.235020][ T6049] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 165.604173][ T6463] devpts: Bad value for 'uid' [ 165.604193][ T6463] devpts: Bad value for 'uid' [ 165.636119][ T6455] comedi comedi3: reset error (fatal) [ 166.688520][ T6482] fuse: Bad value for 'user_id' [ 166.688541][ T6482] fuse: Bad value for 'user_id' [ 167.346821][ T5826] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 167.454987][ T5826] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 167.456055][ T5826] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 167.647264][ T6495] hub 8-0:1.0: USB hub found [ 167.657367][ T6495] hub 8-0:1.0: 1 port detected [ 168.375298][ T5826] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 168.376154][ T5826] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 169.255123][ T6502] overlayfs: missing 'lowerdir' [ 172.971617][ T5826] Bluetooth: hci1: command tx timeout [ 174.730632][ T5480] 8021q: adding VLAN 0 to HW filter on device eth3 [ 174.858578][ T6537] fuse: Bad value for 'user_id' [ 174.858592][ T6537] fuse: Bad value for 'user_id' [ 174.997297][ T5826] Bluetooth: hci1: command tx timeout [ 175.261920][ T6544] overlayfs: missing 'lowerdir' [ 177.708374][ T5826] Bluetooth: hci1: command tx timeout [ 179.840911][ T5826] Bluetooth: hci1: command tx timeout [ 181.786471][ T5901] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 181.924082][ T5480] 8021q: adding VLAN 0 to HW filter on device eth4 [ 182.006853][ T5901] usb 3-1: Using ep0 maxpacket: 16 [ 182.039368][ T5901] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.039413][ T5901] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 182.039436][ T5901] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 182.048076][ T5901] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 182.048106][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.048125][ T5901] usb 3-1: Product: syz [ 182.048139][ T5901] usb 3-1: Manufacturer: syz [ 182.048153][ T5901] usb 3-1: SerialNumber: syz [ 182.506583][ T59] Bluetooth: hci1: command 0x0405 tx timeout [ 182.818543][ T6610] netlink: 'syz.4.166': attribute type 1 has an invalid length. [ 183.632558][ T5901] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 183.632614][ T5901] cdc_ncm 3-1:1.0: bind() failure [ 183.701313][ T6610] 8021q: adding VLAN 0 to HW filter on device bond1 [ 183.821866][ T5901] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 183.821914][ T5901] cdc_ncm 3-1:1.1: bind() failure [ 183.888272][ T5901] usb 3-1: USB disconnect, device number 2 [ 183.906636][ T6613] bond1: (slave gretap1): making interface the new active one [ 183.928946][ T6629] overlayfs: missing 'lowerdir' [ 183.950038][ T6613] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 184.002033][ T6613] syz.4.166 (6613) used greatest stack depth: 18912 bytes left [ 184.616451][ T6209] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 184.655390][ T6489] chnl_net:caif_netlink_parms(): no params data found [ 184.783707][ T6209] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 184.783746][ T6209] usb 3-1: can't read configurations, error -61 [ 185.056502][ T6209] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 185.251990][ T6209] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 185.252028][ T6209] usb 3-1: can't read configurations, error -61 [ 185.252491][ T6209] usb usb3-port1: attempt power cycle [ 185.832915][ T6664] overlayfs: missing 'lowerdir' [ 185.880495][ T6209] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 185.924974][ T6209] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 185.925014][ T6209] usb 3-1: can't read configurations, error -61 [ 186.066526][ T6209] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 186.095835][ T6209] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 186.095872][ T6209] usb 3-1: can't read configurations, error -61 [ 186.112922][ T6209] usb usb3-port1: unable to enumerate USB device [ 188.705822][ T6489] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.705953][ T6489] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.706184][ T6489] bridge_slave_0: entered allmulticast mode [ 188.718503][ T6489] bridge_slave_0: entered promiscuous mode [ 189.125165][ T6489] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.125300][ T6489] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.125596][ T6489] bridge_slave_1: entered allmulticast mode [ 189.141429][ T6489] bridge_slave_1: entered promiscuous mode [ 189.470335][ T6489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.523763][ T6489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.710015][ T6489] team0: Port device team_slave_0 added [ 189.713540][ T6489] team0: Port device team_slave_1 added [ 189.912865][ T6489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.912884][ T6489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.912908][ T6489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.987049][ T6489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.987069][ T6489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.987095][ T6489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.994717][ T6489] hsr_slave_0: entered promiscuous mode [ 191.999475][ T6489] hsr_slave_1: entered promiscuous mode [ 192.000286][ T6489] debugfs: 'hsr0' already exists in 'hsr' [ 192.000306][ T6489] Cannot create hsr debugfs directory [ 192.165979][ T6730] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 192.166038][ T6730] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 192.358548][ T1057] bridge_slave_1: left allmulticast mode [ 192.358580][ T1057] bridge_slave_1: left promiscuous mode [ 192.358831][ T1057] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.433575][ T1057] bridge_slave_0: left allmulticast mode [ 192.433605][ T1057] bridge_slave_0: left promiscuous mode [ 192.433868][ T1057] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.704701][ T1057] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 194.391017][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.413454][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.542176][ T1057] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 195.201912][ T1057] bond0 (unregistering): Released all slaves [ 195.571372][ T6777] binder: 6773:6777 ioctl 81e8943c 200000000c00 returned -22 [ 195.950735][ T6209] IPVS: starting estimator thread 0... [ 196.037183][ T6778] IPVS: using max 8 ests per chain, 19200 per kthread [ 200.140601][ T1057] hsr_slave_0: left promiscuous mode [ 200.862681][ T1057] hsr_slave_1: left promiscuous mode [ 200.863926][ T1057] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.041548][ T1057] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.525263][ T5821] Bluetooth: hci2: command 0x0406 tx timeout [ 202.525971][ T5821] Bluetooth: hci0: command 0x0406 tx timeout [ 202.526084][ T5821] Bluetooth: hci3: command 0x0406 tx timeout [ 202.526108][ T5821] Bluetooth: hci4: command 0x0406 tx timeout [ 207.781658][ T1057] team0 (unregistering): Port device team_slave_1 removed [ 207.947162][ T1057] team0 (unregistering): Port device team_slave_0 removed [ 216.226825][ T6961] fuse: Unknown parameter 'user_id00000000000000000000' [ 216.240578][ T5480] 8021q: adding VLAN 0 to HW filter on device eth5 [ 220.614000][ T6489] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 220.651333][ T6489] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 220.652526][ T6489] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 220.797261][ T6489] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 220.805485][ T6489] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 220.893872][ T6489] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 220.903830][ T6489] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 220.999476][ T6489] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 222.248715][ T6489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.312094][ T6489] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.430047][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.430124][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.781612][ T7067] binder: 7059:7067 ioctl 81e8943c 200000000c00 returned -22 [ 223.148541][ T54] IPVS: starting estimator thread 0... [ 224.366866][ T7069] IPVS: using max 8 ests per chain, 19200 per kthread [ 224.692999][ T3287] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.693126][ T3287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.155400][ T7085] fuse: Bad value for 'fd' [ 227.338778][ T5834] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 227.362612][ T5834] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 227.402805][ T5834] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 227.406848][ T5834] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 227.410309][ T5834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 229.559676][ T5823] Bluetooth: hci5: command tx timeout [ 231.628860][ T5823] Bluetooth: hci5: command tx timeout [ 233.706531][ T5823] Bluetooth: hci5: command tx timeout [ 235.551562][ T7102] chnl_net:caif_netlink_parms(): no params data found [ 235.787440][ T5823] Bluetooth: hci5: command tx timeout [ 237.052864][ T7102] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.053015][ T7102] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.053190][ T7102] bridge_slave_0: entered allmulticast mode [ 237.055232][ T7102] bridge_slave_0: entered promiscuous mode [ 237.060269][ T7102] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.060477][ T7102] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.060655][ T7102] bridge_slave_1: entered allmulticast mode [ 237.063034][ T7102] bridge_slave_1: entered promiscuous mode [ 237.252261][ T7102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.269160][ T7102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.601765][ T7281] binder: 7274:7281 ioctl 81e8943c 200000000c00 returned -22 [ 239.263830][ T5823] block nbd1: Receive control failed (result -32) [ 240.949185][ T7276] nbd1: detected capacity change from 0 to 128 [ 240.980365][ T6089] block nbd1: Dead connection, failed to find a fallback [ 240.980392][ T6089] block nbd1: shutting down sockets [ 240.980405][ T6089] blk_print_req_error: 27 callbacks suppressed [ 240.980416][ T6089] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 240.980448][ T6089] buffer_io_error: 27 callbacks suppressed [ 240.980458][ T6089] Buffer I/O error on dev nbd1, logical block 0, async page read [ 240.980615][ T6089] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 240.980637][ T6089] Buffer I/O error on dev nbd1, logical block 0, async page read [ 240.980775][ T6089] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 240.980796][ T6089] Buffer I/O error on dev nbd1, logical block 0, async page read [ 240.980931][ T6089] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 240.980952][ T6089] Buffer I/O error on dev nbd1, logical block 0, async page read [ 240.981091][ T6089] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 240.981112][ T6089] Buffer I/O error on dev nbd1, logical block 0, async page read [ 240.981269][ T6089] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 240.981289][ T6089] Buffer I/O error on dev nbd1, logical block 0, async page read [ 240.981448][ T6089] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 240.982772][ T6089] Buffer I/O error on dev nbd1, logical block 0, async page read [ 240.982946][ T6089] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 240.982967][ T6089] Buffer I/O error on dev nbd1, logical block 0, async page read [ 240.983139][ T6089] ldm_validate_partition_table(): Disk read failed. [ 240.983214][ T6089] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 240.983235][ T6089] Buffer I/O error on dev nbd1, logical block 0, async page read [ 240.983373][ T6089] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 240.983393][ T6089] Buffer I/O error on dev nbd1, logical block 0, async page read [ 240.983728][ T6089] Dev nbd1: unable to read RDB block 0 [ 240.984349][ T6089] nbd1: unable to read partition table [ 240.989029][ T6089] ldm_validate_partition_table(): Disk read failed. [ 240.989863][ T6089] Dev nbd1: unable to read RDB block 0 [ 240.990481][ T6089] nbd1: unable to read partition table [ 241.282070][ T7102] team0: Port device team_slave_0 added [ 242.162563][ T7102] team0: Port device team_slave_1 added [ 244.319069][ T7102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.319087][ T7102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 244.319112][ T7102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.646523][ T7102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.646545][ T7102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 244.646572][ T7102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.526607][ T7102] hsr_slave_0: entered promiscuous mode [ 245.527447][ T7102] hsr_slave_1: entered promiscuous mode [ 245.529362][ T7102] debugfs: 'hsr0' already exists in 'hsr' [ 245.529380][ T7102] Cannot create hsr debugfs directory [ 247.111273][ T5834] Bluetooth: hci5: command 0x0405 tx timeout [ 247.386823][ T3287] bridge_slave_1: left allmulticast mode [ 247.386852][ T3287] bridge_slave_1: left promiscuous mode [ 247.387106][ T3287] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.470011][ T3287] bridge_slave_0: left allmulticast mode [ 247.470043][ T3287] bridge_slave_0: left promiscuous mode [ 247.475224][ T3287] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.065976][ T7377] overlayfs: failed to resolve './file1': -2 [ 250.111052][ T7379] devpts: Bad value for 'uid' [ 250.111072][ T7379] devpts: Bad value for 'uid' [ 251.007480][ T3287] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.088715][ T3287] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.131060][ T3287] bond0 (unregistering): Released all slaves [ 251.699682][ T3287] hsr_slave_0: left promiscuous mode [ 251.724889][ T3287] hsr_slave_1: left promiscuous mode [ 251.726847][ T3287] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.767357][ T3287] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.380268][ T7471] devpts: Bad value for 'uid' [ 254.380289][ T7471] devpts: Bad value for 'uid' [ 254.448125][ T7473] fuse: Unknown parameter '0x0000000000000004' [ 254.749758][ T3287] team0 (unregistering): Port device team_slave_1 removed [ 254.903861][ T7482] devpts: Bad value for 'uid' [ 254.903882][ T7482] devpts: Bad value for 'uid' [ 255.164662][ T3287] team0 (unregistering): Port device team_slave_0 removed [ 255.669136][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.669204][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.869693][ T7556] fuse: Unknown parameter 'fd0x0000000000000004' [ 261.080255][ T7591] fuse: Bad value for 'fd' [ 261.174611][ T5480] 8021q: adding VLAN 0 to HW filter on device eth5 [ 263.101703][ T7102] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 263.163609][ T7102] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 263.167894][ T7102] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 263.218953][ T7102] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 263.219769][ T7102] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 263.275744][ T7102] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 263.279353][ T7102] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 263.338158][ T7102] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 263.811977][ T7102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.099777][ T7102] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.172473][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.172757][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.455620][ T103] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.476931][ T103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.416026][ T7102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.264680][ T7758] devpts: Bad value for 'uid' [ 267.264702][ T7758] devpts: Bad value for 'uid' [ 267.790438][ T7102] veth0_vlan: entered promiscuous mode [ 267.801392][ T7102] veth1_vlan: entered promiscuous mode [ 268.037692][ T7102] veth0_macvtap: entered promiscuous mode [ 268.652939][ T7102] veth1_macvtap: entered promiscuous mode [ 268.723083][ T7102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.848870][ T7102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.878396][ T1367] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.878634][ T1367] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.878670][ T1367] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.878704][ T1367] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.995337][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.995360][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.139796][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.139819][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.396008][ T7806] fuse: Bad value for 'fd' [ 283.146014][ T7931] overlayfs: failed to resolve './file1': -2 [ 288.449737][ T8005] random: crng reseeded on system resumption [ 290.741345][ T8033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.630'. [ 293.469664][ T8055] syz.5.641 (8055) used greatest stack depth: 18072 bytes left [ 293.775525][ T8074] binder: 8068:8074 ioctl 81e8943c 200000000c00 returned -22 [ 295.787819][ T8092] random: crng reseeded on system resumption [ 314.262736][ T8299] random: crng reseeded on system resumption [ 317.078363][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.078438][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.769656][ T8364] binder: 8357:8364 ioctl 81e8943c 200000000c00 returned -22 [ 320.875828][ T8374] devpts: Bad value for 'uid' [ 320.875841][ T8374] devpts: Bad value for 'uid' [ 321.450894][ T5834] block nbd2: Receive control failed (result -32) [ 321.526489][ T8358] nbd2: detected capacity change from 0 to 128 [ 321.527693][ T5958] block nbd2: Dead connection, failed to find a fallback [ 321.527709][ T5958] block nbd2: shutting down sockets [ 321.527717][ T5958] blk_print_req_error: 27 callbacks suppressed [ 321.527724][ T5958] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 321.527736][ T5958] buffer_io_error: 27 callbacks suppressed [ 321.527741][ T5958] Buffer I/O error on dev nbd2, logical block 0, async page read [ 321.527833][ T5958] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 321.527851][ T5958] Buffer I/O error on dev nbd2, logical block 0, async page read [ 321.527961][ T5958] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 321.527982][ T5958] Buffer I/O error on dev nbd2, logical block 0, async page read [ 321.528075][ T5958] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 321.528098][ T5958] Buffer I/O error on dev nbd2, logical block 0, async page read [ 321.528177][ T5958] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 321.528188][ T5958] Buffer I/O error on dev nbd2, logical block 0, async page read [ 321.528278][ T5958] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 321.528289][ T5958] Buffer I/O error on dev nbd2, logical block 0, async page read [ 321.528383][ T5958] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 321.528395][ T5958] Buffer I/O error on dev nbd2, logical block 0, async page read [ 321.528473][ T5958] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 321.528484][ T5958] Buffer I/O error on dev nbd2, logical block 0, async page read [ 321.528531][ T5958] ldm_validate_partition_table(): Disk read failed. [ 321.528569][ T5958] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 321.528580][ T5958] Buffer I/O error on dev nbd2, logical block 0, async page read [ 321.528657][ T5958] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 321.528668][ T5958] Buffer I/O error on dev nbd2, logical block 0, async page read [ 321.529213][ T5958] Dev nbd2: unable to read RDB block 0 [ 321.529575][ T5958] nbd2: unable to read partition table [ 321.756929][ T5958] ldm_validate_partition_table(): Disk read failed. [ 321.757494][ T5958] Dev nbd2: unable to read RDB block 0 [ 321.781272][ T5958] nbd2: unable to read partition table [ 323.204627][ T5834] block nbd3: Receive control failed (result -32) [ 323.309854][ T8388] nbd3: detected capacity change from 0 to 128 [ 323.728228][ T5958] block nbd3: Dead connection, failed to find a fallback [ 323.728255][ T5958] block nbd3: shutting down sockets [ 323.817584][ T5958] ldm_validate_partition_table(): Disk read failed. [ 323.995944][ T5958] Dev nbd3: unable to read RDB block 0 [ 324.141774][ T5958] nbd3: unable to read partition table [ 324.867261][ T5958] ldm_validate_partition_table(): Disk read failed. [ 324.867560][ T5958] Dev nbd3: unable to read RDB block 0 [ 324.876158][ T5958] nbd3: unable to read partition table [ 324.959843][ T8399] netlink: 24 bytes leftover after parsing attributes in process `syz.2.766'. [ 326.395244][ T5958] ldm_validate_partition_table(): Disk read failed. [ 326.395773][ T5958] Dev nbd3: unable to read RDB block 0 [ 326.634384][ T5958] blk_print_req_error: 78 callbacks suppressed [ 326.634405][ T5958] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 326.634431][ T5958] buffer_io_error: 78 callbacks suppressed [ 326.634441][ T5958] Buffer I/O error on dev nbd3, logical block 0, async page read [ 326.634644][ T5958] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 326.634666][ T5958] Buffer I/O error on dev nbd3, logical block 0, async page read [ 326.634754][ T5958] nbd3: unable to read partition table [ 326.696716][ T5958] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 326.696747][ T5958] Buffer I/O error on dev nbd3, logical block 0, async page read [ 326.696979][ T5958] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 326.697001][ T5958] Buffer I/O error on dev nbd3, logical block 0, async page read [ 326.697140][ T5958] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 326.697160][ T5958] Buffer I/O error on dev nbd3, logical block 0, async page read [ 326.697301][ T5958] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 326.697321][ T5958] Buffer I/O error on dev nbd3, logical block 0, async page read [ 326.697454][ T5958] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 326.697473][ T5958] Buffer I/O error on dev nbd3, logical block 0, async page read [ 326.697628][ T5958] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 326.697648][ T5958] Buffer I/O error on dev nbd3, logical block 0, async page read [ 326.697792][ T5958] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 326.697851][ T5958] Buffer I/O error on dev nbd3, logical block 0, async page read [ 326.697990][ T5958] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 326.698011][ T5958] Buffer I/O error on dev nbd3, logical block 0, async page read [ 326.698094][ T5958] ldm_validate_partition_table(): Disk read failed. [ 326.698711][ T5958] Dev nbd3: unable to read RDB block 0 [ 326.699310][ T5958] nbd3: unable to read partition table [ 329.198769][ T5825] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 329.409237][ T5825] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 329.409268][ T5825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.409295][ T5825] usb 4-1: Product: syz [ 329.409308][ T5825] usb 4-1: Manufacturer: syz [ 329.409321][ T5825] usb 4-1: SerialNumber: syz [ 329.473443][ T5825] usb 4-1: config 0 descriptor?? [ 330.060447][ T8454] binder: 8449:8454 ioctl 81e8943c 200000000c00 returned -22 [ 330.160376][ T5825] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 331.620262][ T5825] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 331.717816][ T5834] block nbd4: Receive control failed (result -32) [ 331.806701][ T8453] nbd4: detected capacity change from 0 to 128 [ 331.810997][ T5825] usb 4-1: USB disconnect, device number 3 [ 331.860194][ T5960] block nbd4: Dead connection, failed to find a fallback [ 331.860220][ T5960] block nbd4: shutting down sockets [ 331.860232][ T5960] blk_print_req_error: 13 callbacks suppressed [ 331.860243][ T5960] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 331.860266][ T5960] buffer_io_error: 13 callbacks suppressed [ 331.860276][ T5960] Buffer I/O error on dev nbd4, logical block 0, async page read [ 331.860432][ T5960] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 331.860455][ T5960] Buffer I/O error on dev nbd4, logical block 0, async page read [ 331.860588][ T5960] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 331.860610][ T5960] Buffer I/O error on dev nbd4, logical block 0, async page read [ 331.860752][ T5960] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 331.860773][ T5960] Buffer I/O error on dev nbd4, logical block 0, async page read [ 331.860903][ T5960] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 331.860922][ T5960] Buffer I/O error on dev nbd4, logical block 0, async page read [ 331.865501][ T5960] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 331.865530][ T5960] Buffer I/O error on dev nbd4, logical block 0, async page read [ 332.070705][ T5960] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 332.070734][ T5960] Buffer I/O error on dev nbd4, logical block 0, async page read [ 332.070870][ T5960] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 332.070890][ T5960] Buffer I/O error on dev nbd4, logical block 0, async page read [ 332.070972][ T5960] ldm_validate_partition_table(): Disk read failed. [ 332.071034][ T5960] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 332.071053][ T5960] Buffer I/O error on dev nbd4, logical block 0, async page read [ 332.071187][ T5960] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 332.071207][ T5960] Buffer I/O error on dev nbd4, logical block 0, async page read [ 332.071566][ T5960] Dev nbd4: unable to read RDB block 0 [ 332.828353][ T5960] nbd4: unable to read partition table [ 333.041821][ T5958] ldm_validate_partition_table(): Disk read failed. [ 333.042410][ T5958] Dev nbd4: unable to read RDB block 0 [ 333.043061][ T5958] nbd4: unable to read partition table [ 333.096733][ T5958] ldm_validate_partition_table(): Disk read failed. [ 333.097263][ T5958] Dev nbd4: unable to read RDB block 0 [ 333.104513][ T5958] nbd4: unable to read partition table [ 333.686408][ T5825] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 333.855972][ T5825] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 333.856001][ T5825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.856020][ T5825] usb 3-1: Product: syz [ 333.856033][ T5825] usb 3-1: Manufacturer: syz [ 333.856047][ T5825] usb 3-1: SerialNumber: syz [ 333.939786][ T5825] usb 3-1: config 0 descriptor?? [ 334.207240][ T5825] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 335.892955][ T8535] binder: 8531:8535 ioctl 81e8943c 200000000c00 returned -22 [ 337.715469][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 337.734100][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 338.035893][ T5825] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 338.166020][ T5825] usb 3-1: USB disconnect, device number 7 [ 338.716371][ T6209] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 338.776519][ T5901] BUG: kernel NULL pointer dereference, address: 0000000000000010 [ 338.776538][ T5901] #PF: supervisor read access in kernel mode [ 338.776549][ T5901] #PF: error_code(0x0000) - not-present page [ 338.776559][ T5901] PGD 800000003b964067 P4D 800000003b964067 PUD 0 [ 338.776598][ T5901] Oops: Oops: 0000 [#1] SMP KASAN PTI [ 338.776625][ T5901] CPU: 0 UID: 0 PID: 5901 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 338.776647][ T5901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 338.776659][ T5901] Workqueue: usb_hub_wq hub_event [ 338.776692][ T5901] RIP: 0010:kcov_remote_start+0x2a1/0x710 [ 338.776723][ T5901] Code: 8e 8d 4c 8b b8 08 84 72 92 bd 00 00 04 00 eb 4f 41 8b ae a4 00 00 00 49 c7 c7 a0 56 02 8e 4d 8b 3f 49 81 ff a0 56 02 8e 74 4c <41> 39 6f 10 75 ee 4c 89 ff e8 a1 dc e6 02 84 c0 74 0e 49 8b 07 49 [ 338.776737][ T5901] RSP: 0018:ffffc900058c77c8 EFLAGS: 00010207 [ 338.776753][ T5901] RAX: 0000000000000000 RBX: ffff888061921ec0 RCX: 0000000000000000 [ 338.776766][ T5901] RDX: 00000000cdaf7500 RSI: 0000000000000001 RDI: ffffffff8ba73e00 [ 338.776778][ T5901] RBP: 0000000000100000 R08: ffffffff8b2e6740 R09: ffffffff8dfc80c0 [ 338.776791][ T5901] R10: dffffc0000000000 R11: fffffbfff1f1771f R12: 0000000000000002 [ 338.776804][ T5901] R13: 0000000000000001 R14: ffff888024fbee00 R15: 0000000000000000 [ 338.776816][ T5901] FS: 0000000000000000(0000) GS:ffff888126101000(0000) knlGS:0000000000000000 [ 338.776832][ T5901] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 338.776845][ T5901] CR2: 0000000000000010 CR3: 000000004585e000 CR4: 00000000003526f0 [ 338.776860][ T5901] Call Trace: [ 338.776867][ T5901] [ 338.776877][ T5901] hub_event+0x150/0x4f60 [ 338.776899][ T5901] ? __lock_acquire+0x6b5/0x2cf0 [ 338.776920][ T5901] ? look_up_lock_class+0x57/0x110 [ 338.776951][ T5901] ? __lock_acquire+0x6b5/0x2cf0 [ 338.776977][ T5901] ? lock_acquire+0x106/0x350 [ 338.776998][ T5901] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 338.777017][ T5901] ? __pfx_hub_event+0x10/0x10 [ 338.777037][ T5901] ? process_scheduled_works+0xa70/0x1860 [ 338.777068][ T5901] ? process_scheduled_works+0xa70/0x1860 [ 338.777095][ T5901] ? process_scheduled_works+0xa70/0x1860 [ 338.777123][ T5901] process_scheduled_works+0xb5d/0x1860 [ 338.777161][ T5901] ? __pfx_process_scheduled_works+0x10/0x10 [ 338.777189][ T5901] ? assign_work+0x3d5/0x5e0 [ 338.777218][ T5901] worker_thread+0xa53/0xfc0 [ 338.777244][ T5901] kthread+0x388/0x470 [ 338.777265][ T5901] ? __pfx_worker_thread+0x10/0x10 [ 338.777295][ T5901] ? __pfx_kthread+0x10/0x10 [ 338.777316][ T5901] ret_from_fork+0x514/0xb70 [ 338.777333][ T5901] ? __pfx_ret_from_fork+0x10/0x10 [ 338.777350][ T5901] ? __switch_to+0xc79/0x1410 [ 338.777375][ T5901] ? __pfx_kthread+0x10/0x10 [ 338.777396][ T5901] ret_from_fork_asm+0x1a/0x30 [ 338.777422][ T5901] [ 338.777428][ T5901] Modules linked in: [ 338.777451][ T5901] CR2: 0000000000000010 [ 338.777464][ T5901] ---[ end trace 0000000000000000 ]--- [ 338.777473][ T5901] RIP: 0010:kcov_remote_start+0x2a1/0x710 [ 338.777502][ T5901] Code: 8e 8d 4c 8b b8 08 84 72 92 bd 00 00 04 00 eb 4f 41 8b ae a4 00 00 00 49 c7 c7 a0 56 02 8e 4d 8b 3f 49 81 ff a0 56 02 8e 74 4c <41> 39 6f 10 75 ee 4c 89 ff e8 a1 dc e6 02 84 c0 74 0e 49 8b 07 49 [ 338.777517][ T5901] RSP: 0018:ffffc900058c77c8 EFLAGS: 00010207 [ 338.777532][ T5901] RAX: 0000000000000000 RBX: ffff888061921ec0 RCX: 0000000000000000 [ 338.777544][ T5901] RDX: 00000000cdaf7500 RSI: 0000000000000001 RDI: ffffffff8ba73e00 [ 338.777557][ T5901] RBP: 0000000000100000 R08: ffffffff8b2e6740 R09: ffffffff8dfc80c0 [ 338.777571][ T5901] R10: dffffc0000000000 R11: fffffbfff1f1771f R12: 0000000000000002 [ 338.777588][ T5901] R13: 0000000000000001 R14: ffff888024fbee00 R15: 0000000000000000 [ 338.777600][ T5901] FS: 0000000000000000(0000) GS:ffff888126101000(0000) knlGS:0000000000000000 [ 338.777616][ T5901] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 338.777628][ T5901] CR2: 0000000000000010 CR3: 000000004585e000 CR4: 00000000003526f0 [ 338.777645][ T5901] Kernel panic - not syncing: Fatal exception [ 338.778015][ T5901] Kernel Offset: disabled