last executing test programs: 10.178922868s ago: executing program 3 (id=360): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 10.121079527s ago: executing program 3 (id=362): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000a61a7b8a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setitimer(0x0, 0x0, &(0x7f0000000280)) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000006c0)={0x0, 0x9, 0x7b, "b982553af77c36a014d2392552912e23ca56337d6b957b9ece8c3a3d5524193baf5a28528a77750a5304ac73d102687f9bb2832eacdbfe14cab181e5b045163abf3575b53d5b029d197ae72fc426814f5b706e77a8363c098315a53429744b5096fab4c411ed889d8ce7ad04d09cd8f936cbaee50f8f8b3b4581b0"}, 0x83) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket(0x10, 0x80003, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00', r1}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'gre0\x00'}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000070000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0xe, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r5}, 0x10) clock_gettime(0xeeeeffade9cdb963, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000340)={0x50, 0x0, r7, {0x7, 0x1f, 0xc1da, 0x804a080, 0x0, 0x3, 0x1, 0xfffffffd, 0x0, 0x0, 0x10, 0x3}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) write$9p(r8, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x38, r11, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x2}]}]}]}, 0x38}}, 0x0) sendmsg$TIPC_NL_NET_SET(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x2c, r11, 0x1, 0x80, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xc3}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2805}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000fdc522c6000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 7.745758812s ago: executing program 1 (id=373): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x149442, 0x0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file1\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) epoll_wait(0xffffffffffffffff, &(0x7f00000000c0)=[{}, {}, {}], 0x3, 0x4a) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) io_setup(0x0, &(0x7f0000000300)=0x0) io_cancel(r2, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x8, 0x400, r1, &(0x7f0000000500)="d6560caf760ac3af4d570d73f0b33329e1bb97d10c4914cf57add379a91f83e46a80f5924ac7fbf818354974aad73a89caa6334f5c6ca918d8c52b3432f4987c49bb8bac80b06169bd926450bcb8b1b4eab42ee969f1b8e336c01f34f97715c984fc0912bf07929228b1999b23bd9b2d2db54c1fc166de665ae06a5e0d4057b0af9e1450951dbd4bc3a06cb756ac634c3b1fee9fde132c5292793c282c8e2b1ac46239af5bb3172e17b7cb8ed8756be9daafe96ac8f17cdb007274d75ce79a8ee8310e2fd55de6e550f70bb033cbd8", 0xcf, 0xffffffffffffffff, 0x0, 0x3}, &(0x7f0000000640)) r3 = syz_open_dev$evdev(&(0x7f0000000100), 0x6, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r4, 0x89f4, &(0x7f0000000000)) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000140)={0x15, 0xa2, &(0x7f0000000240)="1931ec6d5ae42a6e42d1d6be280298e735f71514b07eba80ff24f4e0af9a6de57b2f13a036aa4bdedfb4c33809fa41ef0269a77aa49511280202106226c2956a7e97dc2ba9c2def1cdbdbc74babb9694b7b6ef7d693c2de9391f4426214480ddbddc7742874ae67227bd6067a0e0c6a28f49e0eeba07d68120b927af7c4dea142f68ec0cea736097375701e00df1d917bc97b7aff9cac09289faf4afbb9a81228973"}) sendto$inet6(r1, &(0x7f0000000340)='g', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x13, r7, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000000c0)={[0x79, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7a6e, 0x4, 0x20000000000, 0x0, 0x8, 0xc0, 0x0, 0x2], 0x8000000, 0x8340}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x20, 0x10, 0x8, 0x8001, {{0x1e, 0x4, 0x3, 0x3e, 0x78, 0x65, 0x0, 0x9, 0x4, 0x0, @private=0xa010100, @multicast2, {[@lsrr={0x83, 0x1b, 0x3f, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @local, @broadcast, @multicast2, @dev={0xac, 0x14, 0x14, 0x3d}]}, @timestamp_addr={0x44, 0x24, 0x75, 0x1, 0x3, [{@empty, 0x5}, {@multicast2, 0x3}, {@private=0xa010100, 0x10000}, {@empty, 0x3}]}, @timestamp_addr={0x44, 0x14, 0x8c, 0x1, 0x7, [{@rand_addr=0x64010101, 0x480}, {@remote, 0x200}]}, @timestamp={0x44, 0x10, 0x37, 0x0, 0x3, [0x3, 0x1, 0x9]}]}}}}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000440)={@private1, @private2, @empty, 0xe, 0x10, 0x0, 0x600, 0x10000, 0x1000210, r8}) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040961b13000000000000010902240001000000b109040000020300000009211c00000122050009058103ff030c00007de21b71076c9a72bef7e642ad8e4ed0978a3cf51feb3f8ef424ccffb3d498e6c66f7976fc415e491464d719e109b549dd5363c1043cd495f9740624a666a79661bec6371580ceae3124b05b08a481acc4255b5a0da8ea12753341b0c5a12d"], 0x0) shutdown(r1, 0x1) 6.839839452s ago: executing program 3 (id=374): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x1000) ppoll(&(0x7f0000000040)=[{r0, 0x9620}], 0x1, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) close(r1) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x4000) 6.480438279s ago: executing program 1 (id=375): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000002000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e", @ANYRES8], 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000700)={0x2, @sdr={0x52424752, 0x5}}) syz_usb_connect$uac1(0x0, 0xda, &(0x7f0000000940)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc8, 0x3, 0x1, 0xf, 0x0, 0x71, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x4}, [@input_terminal={0xc, 0x24, 0x2, 0x2, 0x200, 0x5, 0x6, 0x104, 0x3, 0x4}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x101, 0x5, 0xa, 0x1, 0x9, 0x5}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x304, 0x5, 0x4, 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0xfa, 0x1, 0x3, 0x9, "9873e2cdb3"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x7, 0x2, 0x1, 0x0, '[', 'f'}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x6, 0x4, 0x5, 0x2, "241a6eed0326"}, @as_header={0x7, 0x24, 0x1, 0x4, 0xe, 0x4}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x39, 0x2, 0x2, 0x7f, "e0ce"}, @as_header={0x7, 0x24, 0x1, 0x81, 0x49, 0x1001}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x8, 0xa, 0x6, {0x7, 0x25, 0x1, 0x0, 0xad}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0x4, 0x7, 0xa, 'Q|', "b5"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x4, 0xfa, 0x7, {0x7, 0x25, 0x1, 0x1b0c61350f6c4d7b, 0x1, 0x3ff}}}}}}}]}}, &(0x7f0000000d00)={0xa, &(0x7f0000000a40)={0xa, 0x6, 0x300, 0x4, 0x1, 0x3, 0xff, 0x6}, 0x13b, &(0x7f0000000a80)={0x5, 0xf, 0x13b, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "3b982d3950f12d66e0d72f59f366c17e"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x6, 0x2}, @generic={0x100, 0x10, 0x1, "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"}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "46e314fab5b398d0283d04b9fe02ec9c"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x4, 0x7, 0xb}]}, 0x5, [{0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x420}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0xc22}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x2809}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x41d}}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x807}}]}) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0x80015b1b, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYRES8=0x0], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newtaction={0x128, 0x30, 0x1, 0x0, 0x0, {}, [{0x114, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x7, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_bpf={0xcc, 0x11, 0x0, 0x0, {{0x8}, {0x18, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x6}]}, {0x90, 0x6, "7bf125833cd15dfa3b329adfa530e084e6d5f96ec04116900956137967162393f518632b71f3e4b277361d12db68d05daf218a92b0e855eef2aa3b5871d5ddaef0c9391201fa71c9d3d480a7f86c8f6453149606aca27511b5744fd6a18f710ec496e24dc4f2a81f64fd0a5bc5dd8518747c2976d139b669f3f387c77322967bc16bda2eda06bf34df6d26a2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900004001000000000000000000000000ffff"], 0x4c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ptype\x00') read$msr(r7, &(0x7f0000000040)=""/59, 0xffb5) r8 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x9, &(0x7f0000000000)=ANY=[@ANYBLOB="180100002020702500000000002020207b1af8ff00000000bfa100b702000008000000b70300000000000085000000000000009500"/72], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0xffffff1f, 0x3, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @remote}, @IFLA_BR_AGEING_TIME={0x8, 0x9}]}}}]}, 0x48}}, 0x0) ftruncate(r6, 0x8) 5.980544087s ago: executing program 3 (id=376): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000380)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="a40000002000000128bd7000ffdbdf251400984504004e8009006d007d2c7b2d00000000"], 0x24}, {&(0x7f0000000580)={0x2f4, 0x11, 0x1, 0x70bd2c, 0x25dfdbfb, "", [@nested={0x1b5, 0x8d, 0x0, 0x1, [@typed={0x8, 0xc5, 0x0, 0x0, @fd}, @generic="51c6b68cf4eb24182ec06972d96b20a47257d673c593752c5a1c9016497a0d2aaaff7dd00c7771e3c0d360527a0b81ec9f7ef771712b5159099b33f27fef45ab9b9ef9723f0fc2356b2cdc4016a9dc84050982fa3d5c3baa6ff13ff96f7e539bfecd746d93ffa6a9186682c1500063e22b0d492e3111b0ade0a29e675f9a6d860fd0dabb8264042aa3d1aa75908a1182406a77ced5aad953f8b6841dad52a4069e01f90a3f168dc658368345d7326a7b29160f04aa670dd49b7482724acebea8a3ebcadb93bab7cd11de74d5d039334102882dd7755a4cda78d36d8dfbf57095710397676389077dbba3a7a880", @generic="d5f964d6c88c3572a61ea76677347b03813ff58c9cf41bb74c68d5c34f42dc4d4cff3be23aaf70c80c28f15cc4069d3ff4259b40fac13074e3fb971525156710ead5b54397733a66d245873ff264abcf8a02faccd750572dfd4d556b88e2b1e183feb33c17ad9554d388c955907dbd673bffa8317a7dde23a32c396c0c8ce1b8d99cdf0b0ad3e1ba214ac19f592ab603847272dd6fa3360acd689e776f055991b1ab91e3da0e983b7f8a3acd88f525be23cf2735", @typed={0x8, 0xce, 0x0, 0x0, @u32=0x7}]}, @generic="c97b3c3489426d1e97eda8bc94b3c97e", @typed={0x14, 0xa9, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @typed={0x8, 0x141, 0x0, 0x0, @uid}, @generic="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"]}, 0x2f4}, {&(0x7f0000000ac0)={0xc8, 0x31, 0x20, 0x70bd27, 0x25dfdbfe, "", [@typed={0x4, 0x3}, @nested={0xb4, 0xa2, 0x0, 0x1, [@typed={0x8, 0x106, 0x0, 0x0, @fd}, @typed={0x8, 0xb9, 0x0, 0x0, @str='GPL\x00'}, @generic="769d17adc1c0f27ae01f465ddf784e56747a57e7804c28be312f854ae5930fdfed2783afead487f9f45906a46641dceb0107c7579ae6c247cb3f8d2440d5cbe947118092e615804a217024de26810a11ad70e1a38bc2bd5936da674e8581b5ee97d64e6fdb221c4ef573d7808fc6c35fd579d70e0fcaf3c65ffd3d567b94e8e5220a23c2af95a4b24ce47685470ad748de8f53f3053e361e1c39012398d18188"]}]}, 0xc8}, {&(0x7f0000000bc0)={0x70, 0x41, 0x400, 0x70bd2d, 0x25dfdbff, "", [@nested={0x5f, 0x23, 0x0, 0x1, [@nested={0x4, 0xf2}, @typed={0xc, 0xf8, 0x0, 0x0, @u64=0x7f}, @typed={0x8, 0xb7, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x31}}, @nested={0x4, 0xe1}, @typed={0x8, 0x136, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x2b}}, @typed={0x8, 0x5, 0x0, 0x0, @u32=0x5}, @nested={0x4, 0xc0}, @generic="a06566788df86bc9465f518d8f224c38ab56137f24d9cfc24f28b5ae39b4e6b9c76f1df512657ddb709b3f"]}]}, 0x70}], 0x4, 0x0, 0x0, 0x2000081}, 0x20048040) chdir(&(0x7f00000000c0)='./file0\x00') fstat(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x1000}}) read$FUSE(r2, &(0x7f0000002300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) socket$key(0xf, 0x3, 0x2) ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, &(0x7f0000000280)={'vxcan1\x00', @ifru_addrs=@sco}) ioperm(0x0, 0x6, 0x2da3b9f3) timer_create(0x38b88a1f4391e3f6, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) map_shadow_stack(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) bind$bt_hci(r8, &(0x7f0000000000)={0x27}, 0x62) socket$nl_route(0x10, 0x3, 0x0) mknodat$null(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x2000, 0x103) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="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"], 0x68}, 0x1, 0x0, 0x0, 0x4880}, 0x40090) write$FUSE_INIT(r2, &(0x7f00000001c0)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0x0, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000004340)="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", 0x2000, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x78, 0x0, 0x2, {0x4, 0x0, 0x0, {0x6, 0xffffffffffffefff, 0x80000000004, 0x7ffffdff, 0xe, 0xabdf, 0xe2f20003, 0xff, 0xc, 0x6000, 0x3fc, r4, r5, 0xea, 0x27c}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_xen(&(0x7f0000000100), &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=xen,version=9p2000,dfltuid=', @ANYRESHEX=r1, @ANYBLOB=',version=9p2000.L,defcontext=root,fowner=', @ANYRESDEC=r4, @ANYBLOB="2c6d322173757265d6da"]) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x62881, 0x19d) 5.057488241s ago: executing program 3 (id=380): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x500, 0x0, 0x25, 0x148, 0x0, 0x60, 0x46c, 0x2a8, 0x2a8, 0x46c, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @local, 0xffffffff, 0xff000000, 'bridge_slave_1\x00', 'veth1\x00', {0xff}, {0xff}, 0x73, 0x2, 0x48}, 0x7f000000, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xcc, 0x12c, 0x0, {}, [@inet=@rpfilter={{0x24}, {0xa}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x0, 0x2}}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x55c) 4.876997272s ago: executing program 2 (id=381): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x40) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000540)=""/32, 0x20, 0x1, 0x0, 0x0, 0xffffffff}}, 0x11c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) openat$vicodec0(0xffffff9c, &(0x7f0000000200), 0x2, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r3, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0xe000) r4 = creat(0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x50) dup2(r3, r4) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000003c0), 0x180884c, &(0x7f0000000100)=ANY=[@ANYBLOB="7472bef564712a5a06277d6f616e7361eb5471db4a56b19b0f08d7251febee53ee2bf6fd564e4a61574360b7e46abceeba0b31ef9629640be61e53e1fa1076a92e60153a033bf98c5b26936a90c6d5baef97444ac2f21da7ff73e94ab09daf28d8dee51a83765512f1c01698ead605d30d4ea9d35a7f6edcca0dc272a7c773be", @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',\x00']) close(r0) 4.590220462s ago: executing program 3 (id=382): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x1000) ppoll(&(0x7f0000000040)=[{r0, 0x9620}], 0x1, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x4000) (fail_nth: 14) 4.48143314s ago: executing program 32 (id=382): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x1000) ppoll(&(0x7f0000000040)=[{r0, 0x9620}], 0x1, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x4000) (fail_nth: 14) 4.22529651s ago: executing program 0 (id=387): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb0}, [], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000002000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e", @ANYRES8], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80015b1b, 0x0) 4.069625924s ago: executing program 2 (id=388): socket$packet(0x11, 0xa, 0x300) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x80, 0x50000022, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x44000) syz_emit_ethernet(0x57, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x44, 0x2, 0x6, 0x201, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x44}}, 0x8000) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x17, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x12c}, 0x1, 0x0, 0x0, 0x4884}, 0x20050800) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000100)={0x18, 0x0, {0x1, @random="64d0aaedaeb6", 'macvlan1\x00'}}, 0x1e) sendmmsg$sock(r6, &(0x7f0000001dc0), 0x213, 0x0) socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000040)) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000004300000080050000000015", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r8, @ANYBLOB="00001f0000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7020000030000008500000086000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000000)={0xfff}, 0x10) write(r10, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, 0x0, 0x80) 3.952316289s ago: executing program 2 (id=389): socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f00009ed000/0x1000)=nil, 0x1000, 0x2000002, 0x3032, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000002380)=[0x0], 0x1}) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) r1 = getpid() syz_pidfd_open(r1, 0x0) socket$inet6(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340), &(0x7f0000000400)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) r6 = openat$fuse(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r6, &(0x7f0000001880)={0x2020}, 0x2020) write$tun(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000200bbbbbbbbbb9d00000000000008004525001414142964010100"/38], 0x26) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000006000084000000000000000002000000000019010000000002000000c8000000020000000400000189aabe0004000000050000fd800000000000"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.397966595s ago: executing program 1 (id=390): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) syz_open_dev$dri(0x0, 0x1f, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x200008, @loopback, 0x39}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002800)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x2, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8094}, 0x4) 2.719812817s ago: executing program 0 (id=391): syz_open_dev$dri(0x0, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0, 0x0, 0x40000}, 0x18) syz_usb_connect(0x1, 0xfffffffffffffd22, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000340)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/62, 0x0, 0xffff1004}) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f0000000380)=0x5, 0x4) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) syz_io_uring_setup(0x43fe, &(0x7f0000000300)={0x0, 0x624d, 0x400, 0x2}, &(0x7f0000000100), &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000200)=0x9, 0x8, 0x0) 2.444167801s ago: executing program 1 (id=392): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a0f0000}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) prlimit64(r0, 0x6, &(0x7f0000000180)={0x101, 0xffffffff}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r6, 0x5412, &(0x7f0000000640)=0x13) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004400000016f800000000000000000000010000000900010073797a30000000000900020073797a310000000018000380080001400000000004000380080002400000000064000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000003800038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000140000001000010000000000000000000000000a"], 0xf0}}, 0x0) ioctl$TCSETA(r6, 0x5406, &(0x7f0000000080)={0x2, 0xfa, 0xff92, 0x200a, 0x34, "000401600c00"}) 1.910543142s ago: executing program 0 (id=393): socket$inet(0x2, 0x4000000000000001, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x4000010, 0xffffffffffffffff, 0xb4552000) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000040)="b9", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0xfffffffd, @private2, 0x400}, 0x1c) listen(r0, 0x100101) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000500)={0xde}, 0x8) accept4(r0, 0x0, 0x0, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x40}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r2 = userfaultfd(0x80001) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x108, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x14, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}}, @printk={@ld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2002, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x59}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) 1.67936593s ago: executing program 2 (id=394): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=ANY=[@ANYBLOB="1c000000040601010000001f00000000000000000500010007"], 0x1c}}, 0x0) 1.599951231s ago: executing program 2 (id=395): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000780)={0x2, 0x0, @ioapic={0x10000, 0x0, 0x4, 0xefffffff, 0x0, [{0x2, 0x8, 0xfc, '\x00', 0x3}, {0x4, 0x9, 0xfc, '\x00', 0x7c}, {0xfc, 0x12, 0x4, '\x00', 0x1}, {0x11, 0xb, 0x0, '\x00', 0xea}, {}, {0xfe, 0x0, 0x1, '\x00', 0x2}, {0x1f, 0x1, 0x2}, {0xfd, 0x0, 0x7, '\x00', 0x2}, {0x0, 0xf, 0xf7, '\x00', 0xfc}, {0xa8, 0x6, 0x0, '\x00', 0x11}, {0xb}, {0x9, 0x9, 0x42, '\x00', 0xff}, {0x0, 0x0, 0x2, '\x00', 0x1}, {0x2, 0x0, 0x6}, {0xff, 0x9, 0x0, '\x00', 0x49}, {0x1, 0x1, 0x80}, {0x3, 0x0, 0x0, '\x00', 0x84}, {0x2, 0x2, 0x6, '\x00', 0x10}, {0x48, 0x4, 0xd, '\x00', 0xfd}, {0x8, 0xc0, 0x3}, {0x4, 0x12, 0x3, '\x00', 0x25}, {0xfd, 0x9, 0x0, '\x00', 0x5}, {0x2, 0x2, 0x9}, {0x9, 0xff, 0x3, '\x00', 0x7}]}}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01002cbd701cfe9ffa651300000008fe0003", @ANYRES32=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x800) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), 0xffffffffffffffff) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100"], 0x40) sendmsg$NL80211_CMD_NEW_STATION(r6, 0x0, 0x40801) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7078, 0x1000, 0x400007, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23457, 0x0, 0x0, 0x1}) io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}]}, 0x50}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0xc, &(0x7f00000004c0)=0xa, 0x0, 0x4) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=ANY=[@ANYBLOB="1c0000000406010100000000000000000000000005000100070000000e90f2308f36cbfdfa7523f9b037a31ba5656f9836866837eae2c90372b8d07ee36312e866bd2e0c29488c6dcfc30c9e84fd9b40e6480d44e753a443ed568095000342a443f55e2b2289a6df7f2967dd17a3b8622e0b760466b297dd901601f7ef9e95d28f4ae819949dfdae6aa7d493c4b6cc3604cb9e2409f2b2d9777382b0fb635efd2c625879578b939578c6c865f16a5f8446ebd7096c3300"/196], 0x1c}}, 0x0) r12 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r12, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x1, 0x1ae, [0x0, 0x80000200, 0x80000230, 0x8000037e], 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]}, 0x1fe) socket$nl_generic(0x10, 0x3, 0x10) 1.503177272s ago: executing program 1 (id=396): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000280)=0x40, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x8}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x7}]}}]}, 0x48}}, 0x0) 1.348931776s ago: executing program 2 (id=397): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x81, 0x7f, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x800) recvmsg$unix(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)=[{0x0}, {0x0}, {&(0x7f00000015c0)=""/65, 0x41}, {&(0x7f0000001640)=""/4, 0x4}], 0x4}, 0x42) fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) openat$sysctl(0xffffff9c, 0x0, 0x1, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/6, 0x6) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) set_mempolicy(0x6, &(0x7f0000000180)=0x472, 0x9) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa}, 0x1c) 1.038063574s ago: executing program 0 (id=398): syz_emit_ethernet(0xffffffffffffffa9, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0xff, @remote, @local, {[], @echo_request={0x80, 0x0, 0x0, 0x7, 0x0, "9fd50af994e10d578bd5212e6ebc210c23041bfc2d052c12ac5b5b8eb27adcac4f1cc6d1a4535e6f164ed3d49dfd722816bc75917771da0b925cc824dbe3225f1aa2642c058e11f67609fa4f83d9f9002d54203c34a71c8cd3a9ddcfbd4890d1b77b361cd5012242d9dee89776b19d1a0df8dbb2e5d114f0f5a5a540f9960f05ad70b23339d17e026e88e01f47d355c01f2449c3155d93cd20c5803d8fa1b232d96be2ba95abbccd1f3b1f0c2b01588d5351ecb665a8c4592644b87b053824c0125da4dc"}}}}}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x15, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)=@generic={&(0x7f0000000080)='./file0\x00', r1}, 0x18) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x2, 0x2, "567b7f", 0xd, 0x48}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'lo\x00', 0x800}) 1.036892713s ago: executing program 0 (id=399): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0cc5640, &(0x7f0000000000)={0xa, @raw_data="5499691b9331ff660dcfbb4a4030d50162cec25135f460c6161836e6518ff2908cb455fe96a102cf242d1f2e85dfec97edc39a9e5bca0237c72f37dbae62ac536d93baa88740ae6ae52186ab3061b5c60b4563d6d937e1fbd7690ebb5d85aaa7e08eff2443a8e756d865d4b5f2d75653f9c721651d846cf0d3421e61c586a41932b5b1b1b0d4645a0300158a08a46a4d5d52d3645b6fa2050ad4a24811080830fc961f45ecdfc75afd64646810d2877936142bbceb185f9ada1bb4a58e52ec49ab01c7da28c8868e"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, 0x0, 0x4002080) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0xa026}]) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r5 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1a1}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0xd8, 0x17, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x80, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pimreg\x00'}, {0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'pimreg\x00'}, {0x14, 0x1, 'netdevsim0\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000440)=[@sack_perm, @timestamp, @timestamp, @sack_perm, @timestamp, @mss={0x2, 0x5}, @mss={0x2, 0x18c1}, @window={0x3, 0x8001, 0x4}, @sack_perm, @mss={0x2, 0x3}], 0xa) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000140)='cdg\x00', 0x4) 1.02049482s ago: executing program 4 (id=384): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) socket$isdn_base(0x22, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) socket$inet6(0xa, 0x802, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async) r1 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x200008, @loopback, 0x39}, 0x1c) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000010c0)={@in={{0x2, 0x4e23, @local}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) sendto$inet6(r4, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x0) (async) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x1c9, 0x12) syz_pidfd_open(r0, 0x0) 973.707629ms ago: executing program 4 (id=400): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x50d080) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0xa002, 0x0) syz_open_dev$vim2m(&(0x7f0000000180), 0x3, 0x2) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600)={0x11, 0x3, 0x2, 0xffffffffffffffff, 0xfffffffffffffffe, 0x9, 0x2, 0x8}, 0x0, &(0x7f0000000400)={0x7fc, 0x2, 0x800000, 0x0, 0x5, 0xc3ad}, 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000040)={0x9, 0x9, 0x8f, 0x80000001, 0xa, "02fb69fbefd33283c92dd32687b75b969b2fb7", 0x5b6, 0x2}) ioctl$TIOCSETD(r0, 0x5423, 0x0) syz_emit_ethernet(0xf87, &(0x7f0000001480)=ANY=[@ANYRES16=r1], 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r4 = socket(0xb, 0x2, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) sendmsg$sock(r5, &(0x7f0000000800)={&(0x7f0000000340)=@un=@abs={0x0, 0x0, 0x4e20}, 0x80, 0x0, 0x0, &(0x7f00000007c0)=[@timestamping={{0x10, 0x1, 0x51, 0x7}}], 0x10}, 0x48040) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty, 0x4}}}, 0x104) setsockopt$inet6_group_source_req(r4, 0x29, 0x2f, &(0x7f0000000200)={0x5, {{0xa, 0x4e22, 0x0, @mcast1={0xff, 0x7}, 0x4}}, {{0xa, 0x0, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xf06}}}, 0x104) close(r4) syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x30048055}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c000900080000", @ANYRES32], 0x4c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0xc046) prlimit64(0x0, 0xe, 0x0, 0x0) 59.091266ms ago: executing program 0 (id=401): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r2}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], 0x0, 0xd5, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x7b, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r5, 0x84, 0x80, &(0x7f00000002c0)="1af3050000f2bd5b", 0x8) sendto$inet6(r5, &(0x7f0000000180)="d6", 0x1, 0x40800, &(0x7f0000000280)={0xa, 0x4e23, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0xff}, 0x1c) ioctl$KIOCSOUND(r4, 0x4b2f, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)) write$cgroup_devices(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="1e78f834f643b958e6c1e7eae2d4ddec035fe76eb5761f79b1eb5b997d6bc0003c5c9801088463"], 0xffdd) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f0000000540)={0x79, 0x0, 0xf5b}) 58.460057ms ago: executing program 1 (id=402): socket$packet(0x11, 0xa, 0x300) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x44000) syz_emit_ethernet(0x6a, &(0x7f0000000640)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x34, 0x3c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[@hopopts={0x33, 0x3, '\x00', [@calipso={0x7, 0x8}, @calipso={0x7, 0x8}, @ra]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x44, 0x2, 0x6, 0x201, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x44}}, 0x8000) r2 = socket(0x10, 0x3, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000100)={0x18, 0x0, {0x1, @random="64d0aaedaeb6", 'macvlan1\x00'}}, 0x1e) sendmmsg$sock(r3, &(0x7f0000001dc0), 0x213, 0x0) socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, 0x0, 0x80) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 0s ago: executing program 4 (id=403): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2000000, 0xe2001) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x104080) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000000c0), 0x199878, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@uname={'uname', 0x3d, '9p\x00'}}, {@afid={'afid', 0x3d, 0x5}}, {@posixacl}, {@cache_fscache}, {@afid={'afid', 0x3d, 0x8000000000000000}}, {@privport}, {@directio}, {@access_any}, {@debug={'debug', 0x3d, 0x800}}], [{@dont_hash}]}}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x41e43, 0x8) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x7de, 0x0, 0x0, 0x0, 0x0, 0x14, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1cd0a474993dec8aa80000000000000000150b88ea890000000500", [0x0, 0x6]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) openat$sndtimer(0xffffff9c, &(0x7f0000000040), 0x408000) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:55729' (ED25519) to the list of known hosts. [ 41.326296][ T5855] cgroup: Unknown subsys name 'net' [ 41.471051][ T5855] cgroup: Unknown subsys name 'cpuset' [ 41.475028][ T5855] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 42.372384][ T5855] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.685543][ T5304] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 45.689671][ T5304] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 45.693451][ T5304] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 45.694007][ T5945] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 45.697091][ T5304] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 45.698689][ T5949] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 45.699461][ T5949] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 45.700245][ T5945] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 45.700502][ T5945] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 45.701421][ T5945] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 45.702320][ T5945] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 45.703021][ T5304] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 45.705116][ T63] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 45.723670][ T63] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 45.726405][ T63] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 45.739948][ T5944] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 45.743597][ T5944] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 45.746790][ T5944] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 45.750459][ T5944] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 45.753504][ T5944] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.002272][ T5937] chnl_net:caif_netlink_parms(): no params data found [ 46.056990][ T5940] chnl_net:caif_netlink_parms(): no params data found [ 46.165901][ T5951] chnl_net:caif_netlink_parms(): no params data found [ 46.190372][ T5946] chnl_net:caif_netlink_parms(): no params data found [ 46.227842][ T5937] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.230631][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.233236][ T5937] bridge_slave_0: entered allmulticast mode [ 46.236211][ T5937] bridge_slave_0: entered promiscuous mode [ 46.308874][ T5937] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.311943][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.314820][ T5937] bridge_slave_1: entered allmulticast mode [ 46.317466][ T5937] bridge_slave_1: entered promiscuous mode [ 46.392266][ T5940] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.395313][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.398596][ T5940] bridge_slave_0: entered allmulticast mode [ 46.402403][ T5940] bridge_slave_0: entered promiscuous mode [ 46.419112][ T5937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.423101][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.426167][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.429329][ T5940] bridge_slave_1: entered allmulticast mode [ 46.433170][ T5940] bridge_slave_1: entered promiscuous mode [ 46.524679][ T5937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.540988][ T5951] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.543217][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.545480][ T5951] bridge_slave_0: entered allmulticast mode [ 46.548130][ T5951] bridge_slave_0: entered promiscuous mode [ 46.550875][ T5946] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.553528][ T5946] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.555880][ T5946] bridge_slave_0: entered allmulticast mode [ 46.562101][ T5946] bridge_slave_0: entered promiscuous mode [ 46.620288][ T5951] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.622628][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.625701][ T5951] bridge_slave_1: entered allmulticast mode [ 46.629735][ T5951] bridge_slave_1: entered promiscuous mode [ 46.652215][ T5946] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.655277][ T5946] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.658429][ T5946] bridge_slave_1: entered allmulticast mode [ 46.662265][ T5946] bridge_slave_1: entered promiscuous mode [ 46.667462][ T5937] team0: Port device team_slave_0 added [ 46.671818][ T5940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.733582][ T5937] team0: Port device team_slave_1 added [ 46.737909][ T5940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.743405][ T5951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.748390][ T5946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.797011][ T5951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.801270][ T5946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.805975][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.808941][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.819001][ T5937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.872633][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.874897][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.882727][ T5937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.890289][ T5940] team0: Port device team_slave_0 added [ 46.942543][ T5940] team0: Port device team_slave_1 added [ 46.947430][ T5951] team0: Port device team_slave_0 added [ 46.958659][ T5946] team0: Port device team_slave_0 added [ 46.978234][ T5951] team0: Port device team_slave_1 added [ 47.000264][ T5946] team0: Port device team_slave_1 added [ 47.072899][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.075699][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.085691][ T5940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.115010][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.117184][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.126959][ T5951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.145734][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.147983][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.156156][ T5940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.162456][ T5937] hsr_slave_0: entered promiscuous mode [ 47.164792][ T5937] hsr_slave_1: entered promiscuous mode [ 47.167495][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.169939][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.177824][ T5951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.181880][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.184061][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.192174][ T5946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.219555][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.222366][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.232612][ T5946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.324469][ T5951] hsr_slave_0: entered promiscuous mode [ 47.326770][ T5951] hsr_slave_1: entered promiscuous mode [ 47.329078][ T5951] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.331781][ T5951] Cannot create hsr debugfs directory [ 47.351627][ T5940] hsr_slave_0: entered promiscuous mode [ 47.353919][ T5940] hsr_slave_1: entered promiscuous mode [ 47.356040][ T5940] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.358499][ T5940] Cannot create hsr debugfs directory [ 47.424723][ T5946] hsr_slave_0: entered promiscuous mode [ 47.427011][ T5946] hsr_slave_1: entered promiscuous mode [ 47.429729][ T5946] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.432142][ T5946] Cannot create hsr debugfs directory [ 47.727658][ T5937] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.728788][ T5944] Bluetooth: hci1: command tx timeout [ 47.729948][ T63] Bluetooth: hci0: command tx timeout [ 47.739898][ T5937] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.750113][ T5937] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.758584][ T5937] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.777709][ T5951] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.783525][ T5951] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.787628][ T5951] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.794391][ T5951] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.808514][ T63] Bluetooth: hci3: command tx timeout [ 47.808545][ T5944] Bluetooth: hci2: command tx timeout [ 47.835886][ T5940] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.841994][ T5940] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.856314][ T5940] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.863184][ T5940] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.931202][ T5946] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.936107][ T5946] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.955229][ T5946] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.961797][ T5946] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.980149][ T5937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.019601][ T5937] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.040312][ T5951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.046547][ T101] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.049075][ T101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.066389][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.068740][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.084792][ T5951] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.093472][ T5940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.112869][ T1138] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.115196][ T1138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.126746][ T5940] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.137313][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.140440][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.158998][ T5946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.171625][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.173840][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.190123][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.192371][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.214113][ T5946] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.225962][ T1138] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.229024][ T1138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.242982][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.245324][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.366106][ T5937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.375971][ T5951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.402096][ T5937] veth0_vlan: entered promiscuous mode [ 48.412753][ T5937] veth1_vlan: entered promiscuous mode [ 48.422539][ T5951] veth0_vlan: entered promiscuous mode [ 48.432422][ T5951] veth1_vlan: entered promiscuous mode [ 48.437838][ T5940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.456849][ T5946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.467991][ T5937] veth0_macvtap: entered promiscuous mode [ 48.472301][ T5937] veth1_macvtap: entered promiscuous mode [ 48.493696][ T5951] veth0_macvtap: entered promiscuous mode [ 48.496956][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.504775][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.515605][ T5951] veth1_macvtap: entered promiscuous mode [ 48.523419][ T5937] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.526154][ T5937] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.529216][ T5937] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.531807][ T5937] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.543665][ T5940] veth0_vlan: entered promiscuous mode [ 48.550647][ T5946] veth0_vlan: entered promiscuous mode [ 48.558953][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.567347][ T5946] veth1_vlan: entered promiscuous mode [ 48.571654][ T5940] veth1_vlan: entered promiscuous mode [ 48.583218][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.603692][ T5951] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.606490][ T5951] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.610089][ T5951] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.612839][ T5951] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.638487][ T101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.640999][ T101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.651568][ T5946] veth0_macvtap: entered promiscuous mode [ 48.667419][ T5946] veth1_macvtap: entered promiscuous mode [ 48.676378][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.678010][ T5940] veth0_macvtap: entered promiscuous mode [ 48.680732][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.688709][ T5940] veth1_macvtap: entered promiscuous mode [ 48.715660][ T1065] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.717265][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.719583][ T5937] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.723965][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.725965][ T1065] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.740771][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.744634][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.764664][ T5946] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.767355][ T5946] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.770713][ T5946] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.773431][ T5946] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.781190][ T5940] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.784864][ T5940] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.788685][ T5940] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.792893][ T5940] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.802016][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.805181][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.854476][ T1065] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.856954][ T1065] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.895150][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.899361][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.915683][ T1065] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.918409][ T1065] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.926685][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.937668][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.961778][ T6010] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 48.970564][ T6010] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 48.998322][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.001407][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.008345][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.225586][ T6026] FAULT_INJECTION: forcing a failure. [ 49.225586][ T6026] name failslab, interval 1, probability 0, space 0, times 1 [ 49.229609][ T6026] CPU: 1 UID: 0 PID: 6026 Comm: syz.0.1 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 49.229625][ T6026] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 49.229631][ T6026] Call Trace: [ 49.229635][ T6026] [ 49.229640][ T6026] dump_stack_lvl+0x16c/0x1f0 [ 49.229656][ T6026] should_fail_ex+0x512/0x640 [ 49.229672][ T6026] ? __kmalloc_noprof+0xbf/0x510 [ 49.229685][ T6026] ? constrain_params_by_rules+0x175/0xca0 [ 49.229702][ T6026] should_failslab+0xc2/0x120 [ 49.229716][ T6026] __kmalloc_noprof+0xd2/0x510 [ 49.229731][ T6026] constrain_params_by_rules+0x175/0xca0 [ 49.229750][ T6026] ? lockdep_hardirqs_on+0x7c/0x110 [ 49.229763][ T6026] ? stack_depot_save_flags+0x3e0/0xa40 [ 49.229779][ T6026] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 49.229799][ T6026] ? __kasan_kmalloc+0xaa/0xb0 [ 49.229810][ T6026] ? snd_pcm_oss_get_formats+0x16e/0x340 [ 49.229825][ T6026] ? snd_pcm_oss_ioctl+0x2efb/0x37a0 [ 49.229841][ T6026] ? __ia32_compat_sys_ioctl+0x23f/0x370 [ 49.229862][ T6026] ? rcu_is_watching+0x12/0xc0 [ 49.229876][ T6026] ? snd_interval_refine+0x2fa/0x580 [ 49.229890][ T6026] snd_pcm_hw_refine+0x7de/0xad0 [ 49.229909][ T6026] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 49.229931][ T6026] ? __asan_memset+0x23/0x50 [ 49.229941][ T6026] ? _snd_pcm_hw_params_any+0x1dd/0x2a0 [ 49.229958][ T6026] snd_pcm_oss_get_formats+0x197/0x340 [ 49.229974][ T6026] ? __pfx_snd_pcm_oss_get_formats+0x10/0x10 [ 49.229990][ T6026] ? __might_fault+0x13b/0x190 [ 49.230006][ T6026] snd_pcm_oss_ioctl+0x2efb/0x37a0 [ 49.230023][ T6026] ? find_held_lock+0x2b/0x80 [ 49.230037][ T6026] ? hook_file_ioctl_common+0x145/0x410 [ 49.230048][ T6026] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 49.230066][ T6026] ? __fget_files+0x20e/0x3c0 [ 49.230076][ T6026] ? __fput_deferred+0x370/0x370 [ 49.230092][ T6026] ? __pfx_snd_pcm_oss_ioctl_compat+0x10/0x10 [ 49.230110][ T6026] __ia32_compat_sys_ioctl+0x23f/0x370 [ 49.230128][ T6026] __do_fast_syscall_32+0x7c/0x3a0 [ 49.230142][ T6026] do_fast_syscall_32+0x32/0x80 [ 49.230155][ T6026] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 49.230169][ T6026] RIP: 0023:0xf709e579 [ 49.230177][ T6026] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 49.230187][ T6026] RSP: 002b:00000000f506d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 49.230197][ T6026] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0045005 [ 49.230204][ T6026] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 49.230210][ T6026] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 49.230216][ T6026] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 49.230222][ T6026] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 49.230235][ T6026] [ 49.348507][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.486232][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 49.808771][ T5944] Bluetooth: hci0: command tx timeout [ 49.809108][ T63] Bluetooth: hci1: command tx timeout [ 49.888190][ T63] Bluetooth: hci2: command tx timeout [ 49.898282][ T63] Bluetooth: hci3: command tx timeout [ 49.956132][ T6033] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 49.956132][ T6033] program syz.0.11 not setting count and/or reply_len properly [ 49.979884][ T6033] syz.0.11: attempt to access beyond end of device [ 49.979884][ T6033] nbd0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 49.985390][ T6033] syz.0.11: attempt to access beyond end of device [ 49.985390][ T6033] nbd0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 49.991283][ T6033] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 49.994945][ T6033] syz.0.11: attempt to access beyond end of device [ 49.994945][ T6033] nbd0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 49.999816][ T6033] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 50.003410][ T6033] syz.0.11: attempt to access beyond end of device [ 50.003410][ T6033] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 50.007408][ T6033] syz.0.11: attempt to access beyond end of device [ 50.007408][ T6033] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 50.012464][ T6033] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 50.015631][ T6033] syz.0.11: attempt to access beyond end of device [ 50.015631][ T6033] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 50.020478][ T6033] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 50.024107][ T6033] syz.0.11: attempt to access beyond end of device [ 50.024107][ T6033] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 50.028223][ T6033] syz.0.11: attempt to access beyond end of device [ 50.028223][ T6033] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 50.032186][ T6033] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 50.035876][ T6033] syz.0.11: attempt to access beyond end of device [ 50.035876][ T6033] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 50.050123][ T6033] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 50.053408][ T6033] syz.0.11: attempt to access beyond end of device [ 50.053408][ T6033] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 50.057646][ T6033] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 50.061325][ T6033] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 50.064262][ T6033] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 50.240921][ T6037] dummy0: entered promiscuous mode [ 50.242878][ T6037] macsec1: entered promiscuous mode [ 50.244666][ T6037] macsec1: entered allmulticast mode [ 50.246322][ T6037] dummy0: entered allmulticast mode [ 50.250420][ T6037] dummy0: left allmulticast mode [ 50.252457][ T6037] dummy0: left promiscuous mode [ 50.316312][ T6047] netlink: 88 bytes leftover after parsing attributes in process `syz.0.16'. [ 50.546599][ T6031] process 'syz.1.10' launched '/dev/fd/8' with NULL argv: empty string added [ 51.020157][ T837] cfg80211: failed to load regulatory.db [ 51.068311][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 51.074248][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 51.078260][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 51.265037][ T6070] xt_CT: You must specify a L4 protocol and not use inversions on it [ 51.328419][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 51.688175][ T6006] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 51.761089][ T6078] loop6: detected capacity change from 0 to 524287999 [ 51.844989][ T6079] netlink: 'syz.2.24': attribute type 12 has an invalid length. [ 51.888194][ T63] Bluetooth: hci0: command tx timeout [ 51.898214][ T63] Bluetooth: hci1: command tx timeout [ 51.978195][ T63] Bluetooth: hci3: command tx timeout [ 51.978200][ T5944] Bluetooth: hci2: command tx timeout [ 52.058364][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 52.118306][ T6006] usb 8-1: Using ep0 maxpacket: 8 [ 52.127877][ T6006] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 52.131718][ T6006] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 52.135966][ T6006] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 52.139850][ T6006] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.338560][ T6084] Zero length message leads to an empty skb [ 52.475505][ T6085] bridge_slave_0: left allmulticast mode [ 52.477373][ T6085] bridge_slave_0: left promiscuous mode [ 52.480726][ T6085] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.525746][ T6085] bridge_slave_1: left allmulticast mode [ 52.527860][ T6085] bridge_slave_1: left promiscuous mode [ 52.533357][ T6006] usb 8-1: USB disconnect, device number 2 [ 52.546221][ T6085] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.574163][ T6090] syz.1.27 uses obsolete (PF_INET,SOCK_PACKET) [ 52.584084][ T6085] bond0: (slave bond_slave_0): Releasing backup interface [ 52.616055][ T6085] bond0: (slave bond_slave_1): Releasing backup interface [ 52.657948][ T6085] team0: Port device team_slave_0 removed [ 52.694742][ T6085] team0: Port device team_slave_1 removed [ 52.698631][ T6085] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.701215][ T6085] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.731627][ T6085] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.734853][ T6085] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.167005][ T6112] syzkaller0: entered promiscuous mode [ 53.169044][ T6112] syzkaller0: entered allmulticast mode [ 53.687337][ T6145] delete_channel: no stack [ 53.737126][ T6146] delete_channel: no stack [ 53.742538][ T6146] delete_channel: no stack [ 53.744514][ T6146] delete_channel: no stack [ 53.746597][ T6146] delete_channel: no stack [ 53.750619][ T6146] delete_channel: no stack [ 53.754179][ T6146] delete_channel: no stack [ 53.756330][ T6146] delete_channel: no stack [ 53.760939][ T6146] delete_channel: no stack [ 53.763618][ T6146] delete_channel: no stack [ 53.768512][ T6146] delete_channel: no stack [ 53.772795][ T6146] delete_channel: no stack [ 53.777334][ T6146] delete_channel: no stack [ 53.784680][ T6146] delete_channel: no stack [ 53.787410][ T6146] delete_channel: no stack [ 53.789987][ T6146] delete_channel: no stack [ 53.791758][ T6146] delete_channel: no stack [ 53.795038][ T6146] delete_channel: no stack [ 53.796699][ T6146] delete_channel: no stack [ 53.799622][ T6146] delete_channel: no stack [ 53.801169][ T6146] delete_channel: no stack [ 53.805304][ T6146] delete_channel: no stack [ 53.809969][ T6146] delete_channel: no stack [ 53.811682][ T6146] delete_channel: no stack [ 53.814497][ T6146] delete_channel: no stack [ 53.818455][ T6146] delete_channel: no stack [ 53.820276][ T6146] delete_channel: no stack [ 53.824711][ T6146] delete_channel: no stack [ 53.828681][ T6146] delete_channel: no stack [ 53.830266][ T6146] delete_channel: no stack [ 53.833171][ T6146] delete_channel: no stack [ 53.834665][ T6146] delete_channel: no stack [ 53.837501][ T6146] delete_channel: no stack [ 53.969339][ T63] Bluetooth: hci1: command tx timeout [ 53.970263][ T5944] Bluetooth: hci0: command tx timeout [ 54.050274][ T5944] Bluetooth: hci3: command tx timeout [ 54.058715][ T5944] Bluetooth: hci2: command tx timeout [ 54.302451][ T40] audit: type=1326 audit(1748723462.958:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6160 comm="syz.3.44" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 54.310699][ T40] audit: type=1326 audit(1748723462.958:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6160 comm="syz.3.44" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 54.326067][ T40] audit: type=1326 audit(1748723462.958:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6160 comm="syz.3.44" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 54.338766][ T40] audit: type=1326 audit(1748723462.958:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6160 comm="syz.3.44" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 54.345066][ T40] audit: type=1326 audit(1748723462.958:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6160 comm="syz.3.44" exe="/syz-executor" sig=0 arch=40000003 syscall=307 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 54.353923][ T40] audit: type=1326 audit(1748723462.958:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6160 comm="syz.3.44" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 54.360971][ T40] audit: type=1326 audit(1748723462.958:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6160 comm="syz.3.44" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 54.367343][ T40] audit: type=1326 audit(1748723462.958:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6160 comm="syz.3.44" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 54.374187][ T6165] netlink: 156 bytes leftover after parsing attributes in process `syz.1.46'. [ 54.375048][ T40] audit: type=1326 audit(1748723462.968:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6160 comm="syz.3.44" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 54.386300][ T6167] input: syz0 as /devices/virtual/input/input8 [ 54.424468][ T6169] FAULT_INJECTION: forcing a failure. [ 54.424468][ T6169] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 54.429632][ T6169] CPU: 0 UID: 0 PID: 6169 Comm: syz.1.49 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 54.429647][ T6169] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 54.429654][ T6169] Call Trace: [ 54.429658][ T6169] [ 54.429662][ T6169] dump_stack_lvl+0x16c/0x1f0 [ 54.429680][ T6169] should_fail_ex+0x512/0x640 [ 54.429698][ T6169] should_fail_alloc_page+0xe7/0x130 [ 54.429714][ T6169] prepare_alloc_pages+0x3c2/0x610 [ 54.429731][ T6169] ? rcu_is_watching+0x12/0xc0 [ 54.429747][ T6169] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 54.429761][ T6169] ? __lock_acquire+0xb8a/0x1c90 [ 54.429777][ T6169] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 54.429790][ T6169] ? do_raw_spin_lock+0x12c/0x2b0 [ 54.429803][ T6169] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 54.429815][ T6169] ? find_held_lock+0x2b/0x80 [ 54.429834][ T6169] ? __lock_acquire+0xb8a/0x1c90 [ 54.429843][ T6169] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 54.429858][ T6169] ? policy_nodemask+0xea/0x4e0 [ 54.429873][ T6169] alloc_pages_mpol+0x1fb/0x550 [ 54.429887][ T6169] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 54.429904][ T6169] folio_alloc_mpol_noprof+0x36/0x2f0 [ 54.429921][ T6169] shmem_alloc_folio+0x135/0x160 [ 54.429932][ T6169] shmem_alloc_and_add_folio+0x499/0xc20 [ 54.429948][ T6169] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 54.429961][ T6169] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 54.429977][ T6169] shmem_get_folio_gfp+0x67f/0x1600 [ 54.429992][ T6169] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 54.430009][ T6169] shmem_read_folio_gfp+0xa4/0x120 [ 54.430022][ T6169] ? __pfx_shmem_read_folio_gfp+0x10/0x10 [ 54.430038][ T6169] memfd_alloc_folio+0x2db/0x3b0 [ 54.430054][ T6169] memfd_pin_folios+0xe9d/0x1150 [ 54.430072][ T6169] ? __pfx_memfd_pin_folios+0x10/0x10 [ 54.430090][ T6169] ? __lock_acquire+0xb8a/0x1c90 [ 54.430102][ T6169] ? __lock_acquire+0x622/0x1c90 [ 54.430122][ T6169] ? __pfx_down_read+0x10/0x10 [ 54.430137][ T6169] ? __fget_files+0x20e/0x3c0 [ 54.430150][ T6169] udmabuf_create+0x61e/0x11a0 [ 54.430173][ T6169] ? __pfx_udmabuf_create+0x10/0x10 [ 54.430187][ T6169] ? find_held_lock+0x2b/0x80 [ 54.430200][ T6169] ? __might_fault+0xe3/0x190 [ 54.430212][ T6169] ? __might_fault+0xe3/0x190 [ 54.430222][ T6169] ? __might_fault+0x13b/0x190 [ 54.430239][ T6169] udmabuf_ioctl+0x192/0x310 [ 54.430253][ T6169] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 54.430267][ T6169] ? find_held_lock+0x2b/0x80 [ 54.430284][ T6169] ? __fget_files+0x20e/0x3c0 [ 54.430294][ T6169] ? __fput_deferred+0x370/0x370 [ 54.430310][ T6169] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 54.430325][ T6169] __ia32_compat_sys_ioctl+0x23f/0x370 [ 54.430344][ T6169] __do_fast_syscall_32+0x7c/0x3a0 [ 54.430358][ T6169] do_fast_syscall_32+0x32/0x80 [ 54.430371][ T6169] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 54.430385][ T6169] RIP: 0023:0xf70be579 [ 54.430394][ T6169] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 54.430404][ T6169] RSP: 002b:00000000f50ae55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 54.430414][ T6169] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040187542 [ 54.430421][ T6169] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 54.430427][ T6169] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 54.430433][ T6169] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 54.430439][ T6169] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 54.430452][ T6169] [ 55.624984][ T6193] netlink: 'syz.3.48': attribute type 4 has an invalid length. [ 55.762027][ T6198] capability: warning: `syz.0.56' uses 32-bit capabilities (legacy support in use) [ 55.848185][ T2292] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 55.910959][ T6200] netlink: 20 bytes leftover after parsing attributes in process `syz.0.57'. [ 56.018144][ T2292] usb 6-1: Using ep0 maxpacket: 8 [ 56.020236][ T6206] netlink: 4 bytes leftover after parsing attributes in process `syz.3.59'. [ 56.024494][ T2292] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 56.027886][ T2292] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 56.038044][ T2292] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 56.041317][ T2292] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.078204][ T6209] netlink: 8 bytes leftover after parsing attributes in process `syz.3.60'. [ 56.251319][ T2292] usb 6-1: USB disconnect, device number 2 [ 56.545370][ T6220] : entered promiscuous mode [ 56.554603][ T6220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.61'. [ 56.846014][ T6219] bridge_slave_0: left allmulticast mode [ 56.847857][ T6219] bridge_slave_0: left promiscuous mode [ 56.849837][ T6219] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.855440][ T6219] bridge_slave_1: left allmulticast mode [ 56.857250][ T6219] bridge_slave_1: left promiscuous mode [ 56.859699][ T6219] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.865139][ T6219] bond0: (slave bond_slave_0): Releasing backup interface [ 56.870089][ T6219] bond0: (slave bond_slave_1): Releasing backup interface [ 56.877660][ T6219] team0: Port device team_slave_0 removed [ 56.878246][ T6225] nbd1: detected capacity change from 0 to 4294967296 [ 56.884823][ T6219] team0: Port device team_slave_1 removed [ 56.887043][ T6219] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.889835][ T6219] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.893014][ T6219] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.895404][ T6219] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.897948][ T6228] block nbd1: shutting down sockets [ 56.904509][ C0] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 56.908192][ C0] Buffer I/O error on dev nbd1, logical block 0, async page read [ 56.910734][ T6221] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 56.913824][ T6221] Buffer I/O error on dev nbd1, logical block 0, async page read [ 56.917248][ T6221] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 56.923947][ T6221] Buffer I/O error on dev nbd1, logical block 0, async page read [ 56.926694][ T6221] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 56.930612][ T6221] Buffer I/O error on dev nbd1, logical block 0, async page read [ 56.933889][ T6221] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 56.937586][ T6221] Buffer I/O error on dev nbd1, logical block 0, async page read [ 56.941859][ T6221] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 56.945723][ T6221] Buffer I/O error on dev nbd1, logical block 0, async page read [ 56.949249][ T6221] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 56.953108][ T6221] Buffer I/O error on dev nbd1, logical block 0, async page read [ 56.957120][ T6221] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 56.960755][ T6221] Buffer I/O error on dev nbd1, logical block 0, async page read [ 56.965030][ T6221] ldm_validate_partition_table(): Disk read failed. [ 56.967818][ T6221] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 56.971671][ T6221] Buffer I/O error on dev nbd1, logical block 0, async page read [ 56.975067][ T6221] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 56.978892][ T6221] Buffer I/O error on dev nbd1, logical block 0, async page read [ 56.982341][ T6221] Dev nbd1: unable to read RDB block 0 [ 56.985828][ T6221] nbd1: unable to read partition table [ 56.990327][ T6225] ldm_validate_partition_table(): Disk read failed. [ 56.992794][ T6225] Dev nbd1: unable to read RDB block 0 [ 56.994898][ T6225] nbd1: unable to read partition table [ 56.998814][ T6221] ldm_validate_partition_table(): Disk read failed. [ 57.002392][ T6221] Dev nbd1: unable to read RDB block 0 [ 57.006171][ T6221] nbd1: unable to read partition table [ 57.098246][ T1467] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 57.249102][ T1467] usb 8-1: Using ep0 maxpacket: 16 [ 57.251932][ T1467] usb 8-1: too many configurations: 123, using maximum allowed: 8 [ 57.256855][ T1467] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 57.263731][ T1467] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 57.269447][ T1467] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 57.274996][ T1467] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 57.281991][ T1467] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 57.287394][ T1467] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 57.295913][ T1467] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 57.301503][ T1467] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 57.307403][ T1467] usb 8-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 57.318018][ T1467] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 57.318315][ T6237] capability: warning: `syz.0.70' uses deprecated v2 capabilities in a way that may be insecure [ 57.333633][ T1467] usb 8-1: SerialNumber: syz [ 57.336465][ T1467] usb 8-1: config 0 descriptor?? [ 57.348734][ T1467] input: bcm5974 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input9 [ 57.574266][ T6227] netlink: 4 bytes leftover after parsing attributes in process `syz.3.66'. [ 57.578144][ T6003] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 57.585875][ T6227] netlink: 4 bytes leftover after parsing attributes in process `syz.3.66'. [ 57.604945][ T5338] bcm5974 8-1:0.0: could not read from device [ 57.611367][ T5338] bcm5974 8-1:0.0: could not read from device [ 57.613759][ T1467] usb 8-1: USB disconnect, device number 3 [ 57.614088][ T5338] bcm5974 8-1:0.0: could not read from device [ 57.738160][ T6003] usb 7-1: Using ep0 maxpacket: 8 [ 57.742375][ T6003] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 57.745873][ T6003] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 57.752323][ T6003] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 57.756209][ T6003] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.768983][ T6244] loop6: detected capacity change from 0 to 524287999 [ 57.976514][ T1467] usb 7-1: USB disconnect, device number 2 [ 58.260674][ T6249] FAULT_INJECTION: forcing a failure. [ 58.260674][ T6249] name failslab, interval 1, probability 0, space 0, times 0 [ 58.265670][ T6249] CPU: 3 UID: 0 PID: 6249 Comm: syz.0.73 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 58.265685][ T6249] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 58.265692][ T6249] Call Trace: [ 58.265696][ T6249] [ 58.265700][ T6249] dump_stack_lvl+0x16c/0x1f0 [ 58.265718][ T6249] should_fail_ex+0x512/0x640 [ 58.265734][ T6249] ? __kvmalloc_node_noprof+0x122/0x620 [ 58.265749][ T6249] should_failslab+0xc2/0x120 [ 58.265767][ T6249] __kvmalloc_node_noprof+0x135/0x620 [ 58.265779][ T6249] ? kfree+0x2b4/0x4d0 [ 58.265788][ T6249] ? snd_pcm_oss_change_params_locked+0x1d18/0x3a30 [ 58.265805][ T6249] ? calc_src_frames.isra.0+0x187/0x1d0 [ 58.265824][ T6249] ? snd_pcm_oss_change_params_locked+0x1d18/0x3a30 [ 58.265840][ T6249] snd_pcm_oss_change_params_locked+0x1d18/0x3a30 [ 58.265863][ T6249] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 58.265890][ T6249] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 58.265909][ T6249] snd_pcm_oss_ioctl+0x31aa/0x37a0 [ 58.265927][ T6249] ? hook_file_ioctl_common+0x145/0x410 [ 58.265938][ T6249] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 58.265956][ T6249] ? __fget_files+0x20e/0x3c0 [ 58.265966][ T6249] ? __fput_deferred+0x370/0x370 [ 58.265982][ T6249] ? __pfx_snd_pcm_oss_ioctl_compat+0x10/0x10 [ 58.266000][ T6249] __ia32_compat_sys_ioctl+0x23f/0x370 [ 58.266018][ T6249] __do_fast_syscall_32+0x7c/0x3a0 [ 58.266037][ T6249] do_fast_syscall_32+0x32/0x80 [ 58.266055][ T6249] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 58.266075][ T6249] RIP: 0023:0xf709e579 [ 58.266087][ T6249] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 58.266104][ T6249] RSP: 002b:00000000f506d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 58.266119][ T6249] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0045005 [ 58.266129][ T6249] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 58.266138][ T6249] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 58.266149][ T6249] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 58.266159][ T6249] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 58.266181][ T6249] [ 58.367553][ T6250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.74'. [ 58.494007][ T6252] netlink: 'syz.1.75': attribute type 1 has an invalid length. [ 58.497976][ T6252] netlink: 228 bytes leftover after parsing attributes in process `syz.1.75'. [ 58.501684][ T6252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.75'. [ 58.856588][ T6259] netlink: 4 bytes leftover after parsing attributes in process `syz.2.76'. [ 59.779197][ T6277] loop6: detected capacity change from 0 to 524287999 [ 60.173137][ T6286] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 60.628132][ T34] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 60.867424][ T34] usb 6-1: not running at top speed; connect to a high speed hub [ 60.870777][ T34] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 60.874118][ T34] usb 6-1: config 1 interface 0 has no altsetting 0 [ 60.878718][ T34] usb 6-1: string descriptor 0 read error: -22 [ 60.880660][ T34] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 60.883953][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.891976][ T6290] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 60.972097][ T6302] loop6: detected capacity change from 0 to 524287999 [ 61.793030][ T6310] 9pnet_fd: Insufficient options for proto=fd [ 61.837398][ T6312] warning: `syz.3.89' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 63.046037][ T6335] netlink: 'syz.0.95': attribute type 4 has an invalid length. [ 63.084944][ T24] usb 6-1: USB disconnect, device number 3 [ 63.143529][ T6339] 9pnet_fd: Insufficient options for proto=fd [ 63.465681][ T40] audit: type=1326 audit(1748723472.118:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6356 comm="syz.2.99" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 63.488146][ T40] audit: type=1326 audit(1748723472.118:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6356 comm="syz.2.99" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 63.497474][ T40] audit: type=1326 audit(1748723472.118:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6356 comm="syz.2.99" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 63.509803][ T40] audit: type=1326 audit(1748723472.118:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6356 comm="syz.2.99" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 63.519534][ T40] audit: type=1326 audit(1748723472.118:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6356 comm="syz.2.99" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 63.526740][ T40] audit: type=1326 audit(1748723472.118:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6356 comm="syz.2.99" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 63.533979][ T40] audit: type=1326 audit(1748723472.118:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6356 comm="syz.2.99" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 63.541084][ T40] audit: type=1326 audit(1748723472.118:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6356 comm="syz.2.99" exe="/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 63.549925][ T40] audit: type=1326 audit(1748723472.118:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6356 comm="syz.2.99" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 63.558628][ T40] audit: type=1326 audit(1748723472.118:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6356 comm="syz.2.99" exe="/syz-executor" sig=0 arch=40000003 syscall=23 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 63.798187][ T6003] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 63.968228][ T6003] usb 7-1: Using ep0 maxpacket: 8 [ 63.974585][ T6003] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 63.978003][ T6003] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 63.982217][ T6003] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 63.985905][ T6003] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.012731][ T6384] FAULT_INJECTION: forcing a failure. [ 64.012731][ T6384] name failslab, interval 1, probability 0, space 0, times 0 [ 64.018020][ T6384] CPU: 3 UID: 0 PID: 6384 Comm: syz.3.101 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 64.018042][ T6384] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 64.018066][ T6384] Call Trace: [ 64.018074][ T6384] [ 64.018080][ T6384] dump_stack_lvl+0x16c/0x1f0 [ 64.018105][ T6384] should_fail_ex+0x512/0x640 [ 64.018129][ T6384] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 64.018150][ T6384] should_failslab+0xc2/0x120 [ 64.018187][ T6384] __kmalloc_cache_noprof+0x6a/0x3e0 [ 64.018205][ T6384] ? snd_pcm_oss_change_params_locked+0x1db/0x3a30 [ 64.018237][ T6384] snd_pcm_oss_change_params_locked+0x1db/0x3a30 [ 64.018263][ T6384] ? preempt_count_sub+0x85/0x160 [ 64.018289][ T6384] ? rcu_is_watching+0x12/0xc0 [ 64.018312][ T6384] ? trace_contention_end+0xdd/0x130 [ 64.018331][ T6384] ? __mutex_lock+0x1ca/0xb90 [ 64.018349][ T6384] ? snd_pcm_oss_get_active_substream+0x172/0x1d0 [ 64.018377][ T6384] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 64.018404][ T6384] ? __pfx___mutex_lock+0x10/0x10 [ 64.018440][ T6384] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 64.018471][ T6384] snd_pcm_oss_ioctl+0x31aa/0x37a0 [ 64.018499][ T6384] ? hook_file_ioctl_common+0x145/0x410 [ 64.018517][ T6384] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 64.018547][ T6384] ? __fget_files+0x20e/0x3c0 [ 64.018563][ T6384] ? __fput_deferred+0x370/0x370 [ 64.018590][ T6384] ? __pfx_snd_pcm_oss_ioctl_compat+0x10/0x10 [ 64.018618][ T6384] __ia32_compat_sys_ioctl+0x23f/0x370 [ 64.018654][ T6384] __do_fast_syscall_32+0x7c/0x3a0 [ 64.018678][ T6384] do_fast_syscall_32+0x32/0x80 [ 64.018699][ T6384] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 64.018721][ T6384] RIP: 0023:0xf708e579 [ 64.018735][ T6384] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 64.018751][ T6384] RSP: 002b:00000000f505d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 64.018767][ T6384] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0045005 [ 64.018778][ T6384] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 64.018787][ T6384] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 64.018797][ T6384] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 64.018806][ T6384] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 64.018829][ T6384] [ 64.710507][ T6396] bridge_slave_0: left allmulticast mode [ 64.712595][ T6396] bridge_slave_0: left promiscuous mode [ 64.714998][ T6396] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.977726][ T6396] bridge_slave_1: left allmulticast mode [ 64.981954][ T6396] bridge_slave_1: left promiscuous mode [ 64.986170][ T6396] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.001669][ T6396] bond0: (slave bond_slave_0): Releasing backup interface [ 65.031923][ T6396] bond0: (slave bond_slave_1): Releasing backup interface [ 65.250219][ T53] usb 7-1: USB disconnect, device number 3 [ 65.354055][ T6396] team0: Port device team_slave_0 removed [ 65.366426][ T6407] 9pnet_fd: Insufficient options for proto=fd [ 65.371584][ T6396] team0: Port device team_slave_1 removed [ 65.376015][ T6396] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.381850][ T6396] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.388040][ T6396] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.397282][ T6396] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.505101][ T6412] FAULT_INJECTION: forcing a failure. [ 65.505101][ T6412] name failslab, interval 1, probability 0, space 0, times 0 [ 65.511131][ T6412] CPU: 2 UID: 0 PID: 6412 Comm: syz.2.108 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 65.511154][ T6412] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 65.511165][ T6412] Call Trace: [ 65.511189][ T6412] [ 65.511197][ T6412] dump_stack_lvl+0x16c/0x1f0 [ 65.511222][ T6412] should_fail_ex+0x512/0x640 [ 65.511247][ T6412] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 65.511268][ T6412] should_failslab+0xc2/0x120 [ 65.511290][ T6412] __kmalloc_cache_noprof+0x6a/0x3e0 [ 65.511309][ T6412] ? snd_pcm_oss_change_params_locked+0x247/0x3a30 [ 65.511340][ T6412] snd_pcm_oss_change_params_locked+0x247/0x3a30 [ 65.511367][ T6412] ? preempt_count_sub+0x87/0x160 [ 65.511395][ T6412] ? trace_contention_end+0xdd/0x130 [ 65.511415][ T6412] ? __mutex_lock+0x1ca/0xb90 [ 65.511434][ T6412] ? rcu_is_watching+0x12/0xc0 [ 65.511459][ T6412] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 65.511496][ T6412] ? __pfx___mutex_lock+0x10/0x10 [ 65.511524][ T6412] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 65.511552][ T6412] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 65.511582][ T6412] snd_pcm_oss_ioctl+0x31aa/0x37a0 [ 65.511611][ T6412] ? hook_file_ioctl_common+0x145/0x410 [ 65.511630][ T6412] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 65.511659][ T6412] ? __fget_files+0x20e/0x3c0 [ 65.511675][ T6412] ? __fput_deferred+0x370/0x370 [ 65.511702][ T6412] ? __pfx_snd_pcm_oss_ioctl_compat+0x10/0x10 [ 65.511728][ T6412] __ia32_compat_sys_ioctl+0x23f/0x370 [ 65.511755][ T6412] __do_fast_syscall_32+0x7c/0x3a0 [ 65.511776][ T6412] do_fast_syscall_32+0x32/0x80 [ 65.511795][ T6412] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 65.511816][ T6412] RIP: 0023:0xf7fa4579 [ 65.511828][ T6412] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 65.511843][ T6412] RSP: 002b:00000000f50a555c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 65.511858][ T6412] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0045005 [ 65.511868][ T6412] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 65.511877][ T6412] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 65.511886][ T6412] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 65.511895][ T6412] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 65.511916][ T6412] [ 65.947325][ T6424] __nla_validate_parse: 1 callbacks suppressed [ 65.947337][ T6424] netlink: 4 bytes leftover after parsing attributes in process `syz.3.112'. [ 66.822791][ T6438] raw_sendmsg: syz.2.115 forgot to set AF_INET. Fix it! [ 66.917006][ T6441] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 67.095650][ T6449] netlink: 'syz.1.121': attribute type 9 has an invalid length. [ 67.099889][ T6449] netlink: 212384 bytes leftover after parsing attributes in process `syz.1.121'. [ 67.103919][ T6449] openvswitch: netlink: Message has 5 unknown bytes. [ 67.128159][ T5944] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 67.131265][ T6450] geneve2: entered promiscuous mode [ 67.132927][ T6450] geneve2: entered allmulticast mode [ 67.368359][ T6464] "syz.1.128" (6464) uses obsolete ecb(arc4) skcipher [ 67.417998][ T6473] netlink: 'syz.1.130': attribute type 1 has an invalid length. [ 67.437510][ T6473] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.449436][ T6473] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 67.583860][ T6483] support for the xor transformation has been removed. [ 67.623216][ T6485] netlink: 4 bytes leftover after parsing attributes in process `syz.1.134'. [ 67.696985][ T6488] netlink: 'syz.0.132': attribute type 4 has an invalid length. [ 68.047353][ T6494] netlink: 8 bytes leftover after parsing attributes in process `syz.3.137'. [ 68.051409][ T6494] netlink: 'syz.3.137': attribute type 30 has an invalid length. [ 68.057769][ T6494] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.060666][ T6494] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.063339][ T6494] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.066077][ T6494] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.166136][ T6497] FAULT_INJECTION: forcing a failure. [ 68.166136][ T6497] name failslab, interval 1, probability 0, space 0, times 0 [ 68.170176][ T6497] CPU: 3 UID: 0 PID: 6497 Comm: syz.3.138 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 68.170191][ T6497] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 68.170197][ T6497] Call Trace: [ 68.170201][ T6497] [ 68.170206][ T6497] dump_stack_lvl+0x16c/0x1f0 [ 68.170223][ T6497] should_fail_ex+0x512/0x640 [ 68.170239][ T6497] ? __kvmalloc_node_noprof+0x122/0x620 [ 68.170252][ T6497] should_failslab+0xc2/0x120 [ 68.170266][ T6497] __kvmalloc_node_noprof+0x135/0x620 [ 68.170278][ T6497] ? kfree+0x2b4/0x4d0 [ 68.170287][ T6497] ? snd_pcm_oss_change_params_locked+0x1d18/0x3a30 [ 68.170304][ T6497] ? calc_src_frames.isra.0+0x187/0x1d0 [ 68.170324][ T6497] ? snd_pcm_oss_change_params_locked+0x1d18/0x3a30 [ 68.170339][ T6497] snd_pcm_oss_change_params_locked+0x1d18/0x3a30 [ 68.170363][ T6497] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 68.170390][ T6497] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 68.170409][ T6497] snd_pcm_oss_ioctl+0x31aa/0x37a0 [ 68.170426][ T6497] ? hook_file_ioctl_common+0x145/0x410 [ 68.170442][ T6497] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 68.170460][ T6497] ? __fget_files+0x20e/0x3c0 [ 68.170470][ T6497] ? __fput_deferred+0x370/0x370 [ 68.170486][ T6497] ? __pfx_snd_pcm_oss_ioctl_compat+0x10/0x10 [ 68.170504][ T6497] __ia32_compat_sys_ioctl+0x23f/0x370 [ 68.170522][ T6497] __do_fast_syscall_32+0x7c/0x3a0 [ 68.170537][ T6497] do_fast_syscall_32+0x32/0x80 [ 68.170550][ T6497] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 68.170564][ T6497] RIP: 0023:0xf708e579 [ 68.170573][ T6497] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 68.170595][ T6497] RSP: 002b:00000000f505d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 68.170606][ T6497] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0045005 [ 68.170612][ T6497] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 68.170619][ T6497] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 68.170624][ T6497] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 68.170631][ T6497] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 68.170644][ T6497] [ 68.524154][ T6506] loop6: detected capacity change from 0 to 524287999 [ 68.594957][ T6508] netlink: 'syz.2.140': attribute type 12 has an invalid length. [ 69.079250][ T6522] openvswitch: : Dropping previously announced user features [ 69.089687][ T6522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.143'. [ 69.409103][ T6003] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 69.569665][ T6003] usb 8-1: Using ep0 maxpacket: 32 [ 69.574014][ T6003] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 69.581151][ T6003] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 69.584272][ T6003] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 69.586882][ T6003] usb 8-1: Product: syz [ 69.588674][ T6003] usb 8-1: Manufacturer: syz [ 69.590322][ T6003] usb 8-1: SerialNumber: syz [ 69.596123][ T6003] usb 8-1: config 0 descriptor?? [ 69.600172][ T6523] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 70.550495][ T6545] netlink: 24 bytes leftover after parsing attributes in process `syz.2.152'. [ 70.933164][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.935317][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.954038][ T6552] loop6: detected capacity change from 0 to 524287999 [ 71.023314][ T6553] netlink: 'syz.2.154': attribute type 12 has an invalid length. [ 72.232889][ T6565] wireguard0: entered promiscuous mode [ 72.760473][ T29] usb 8-1: USB disconnect, device number 4 [ 73.363271][ T6592] loop6: detected capacity change from 0 to 524287999 [ 73.477867][ T6593] netlink: 'syz.0.164': attribute type 12 has an invalid length. [ 74.056189][ T6609] 9pnet_fd: Insufficient options for proto=fd [ 74.293186][ T6619] netlink: 'syz.1.174': attribute type 2 has an invalid length. [ 74.295578][ T6619] netlink: 723 bytes leftover after parsing attributes in process `syz.1.174'. [ 74.356943][ T6623] Bluetooth: MGMT ver 1.23 [ 75.228190][ T6006] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 75.378186][ T6006] usb 7-1: Using ep0 maxpacket: 32 [ 75.382352][ T6006] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 75.389016][ T6006] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 75.393875][ T6006] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 75.411046][ T6006] usb 7-1: Product: syz [ 75.416352][ T6006] usb 7-1: Manufacturer: syz [ 75.426450][ T6006] usb 7-1: SerialNumber: syz [ 75.447135][ T6006] usb 7-1: config 0 descriptor?? [ 75.613125][ T6633] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 76.588259][ T6006] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 76.718219][ T6006] usb 8-1: device descriptor read/64, error -71 [ 76.958373][ T6006] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 77.108158][ T6006] usb 8-1: device descriptor read/64, error -71 [ 77.228777][ T6006] usb usb8-port1: attempt power cycle [ 77.568239][ T6006] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 77.588790][ T6006] usb 8-1: device descriptor read/8, error -71 [ 77.828236][ T6006] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 77.849453][ T6006] usb 8-1: device descriptor read/8, error -71 [ 77.858142][ T6667] netlink: 'syz.0.187': attribute type 4 has an invalid length. [ 77.958317][ T6006] usb usb8-port1: unable to enumerate USB device [ 78.002806][ T6006] usb 7-1: USB disconnect, device number 4 [ 78.212818][ T6675] netlink: 4 bytes leftover after parsing attributes in process `syz.2.189'. [ 79.349415][ T6694] loop6: detected capacity change from 0 to 524287999 [ 79.439579][ T6695] netlink: 'syz.2.195': attribute type 12 has an invalid length. [ 79.779389][ T6701] netlink: 596 bytes leftover after parsing attributes in process `syz.1.197'. [ 80.526057][ T6716] netlink: 6 bytes leftover after parsing attributes in process `syz.0.200'. [ 81.348996][ T6735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.207'. [ 81.871895][ T6742] netlink: 168 bytes leftover after parsing attributes in process `syz.0.209'. [ 81.875732][ T6742] netlink: 168 bytes leftover after parsing attributes in process `syz.0.209'. [ 82.221016][ T6744] veth3: entered promiscuous mode [ 82.255651][ T6750] veth5: entered promiscuous mode [ 82.299420][ T6756] netlink: 4 bytes leftover after parsing attributes in process `syz.3.215'. [ 82.349501][ T6759] netlink: 'syz.1.214': attribute type 10 has an invalid length. [ 82.354533][ T6759] futex_wake_op: syz.1.214 tries to shift op by -1; fix this program [ 82.459434][ T34] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 83.289661][ T6766] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.376461][ T6766] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.475865][ T6766] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.594382][ T6766] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.668276][ T34] usb 7-1: Using ep0 maxpacket: 32 [ 83.674246][ T34] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 83.682036][ T34] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 83.684886][ T34] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 83.688023][ T34] usb 7-1: Product: syz [ 83.689491][ T34] usb 7-1: Manufacturer: syz [ 83.690975][ T34] usb 7-1: SerialNumber: syz [ 83.694283][ T34] usb 7-1: config 0 descriptor?? [ 83.696507][ T6746] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 83.846852][ T6766] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.858509][ T6766] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.865663][ T6766] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.875472][ T6766] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.029850][ T6785] kvm: Disabled LAPIC found during irq injection [ 84.033154][ T6785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.223'. [ 84.037206][ T6785] dlm: plock device version mismatch: kernel (1.2.0), user (4207673345.1574799195.3139252685) [ 84.403656][ T6796] netlink: 20 bytes leftover after parsing attributes in process `syz.1.226'. [ 84.736323][ T6801] : entered promiscuous mode [ 84.759496][ T6801] netlink: 4 bytes leftover after parsing attributes in process `syz.1.227'. [ 85.167115][ T6812] NILFS (loop0): device size too small [ 85.238141][ T34] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 85.246267][ T1467] usb 7-1: USB disconnect, device number 5 [ 85.294372][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 85.294382][ T40] audit: type=1326 audit(1748723493.948:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6818 comm="syz.2.232" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fa4579 code=0x0 [ 85.352191][ T5944] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 85.355396][ T6822] geneve2: entered promiscuous mode [ 85.358208][ T6822] geneve2: entered allmulticast mode [ 85.388138][ T34] usb 8-1: Using ep0 maxpacket: 8 [ 85.391604][ T34] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 85.394811][ T34] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 85.398977][ T34] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 85.402125][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.403301][ T6824] netlink: 4 bytes leftover after parsing attributes in process `syz.0.231'. [ 85.618527][ T34] usb 8-1: USB disconnect, device number 9 [ 85.626955][ T6805] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 86.751163][ T6852] netlink: 'syz.0.238': attribute type 12 has an invalid length. [ 86.938155][ T34] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 87.098163][ T34] usb 7-1: Using ep0 maxpacket: 32 [ 87.101366][ T34] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 87.106139][ T34] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 87.109444][ T34] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 87.111972][ T34] usb 7-1: Product: syz [ 87.113280][ T34] usb 7-1: Manufacturer: syz [ 87.114817][ T34] usb 7-1: SerialNumber: syz [ 87.117692][ T34] usb 7-1: config 0 descriptor?? [ 87.120029][ T6845] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 87.562497][ T6859] 8021q: adding VLAN 0 to HW filter on device bond1 [ 87.565696][ T6859] bond0: (slave bond1): Enslaving as an active interface with an up link [ 88.880156][ T6875] bridge1: entered allmulticast mode [ 88.891553][ T6879] netlink: 'syz.3.248': attribute type 4 has an invalid length. [ 89.031495][ T6885] netlink: 20 bytes leftover after parsing attributes in process `syz.1.252'. [ 89.086076][ T6888] netlink: 'syz.1.253': attribute type 64 has an invalid length. [ 89.090553][ T6888] netlink: 12 bytes leftover after parsing attributes in process `syz.1.253'. [ 89.825321][ T6905] loop6: detected capacity change from 0 to 524287999 [ 89.913515][ T6906] netlink: 'syz.3.257': attribute type 12 has an invalid length. [ 90.092795][ T6003] usb 7-1: USB disconnect, device number 6 [ 91.413807][ T6938] netlink: 4 bytes leftover after parsing attributes in process `syz.1.268'. [ 91.481178][ T6939] loop6: detected capacity change from 0 to 524287999 [ 91.589129][ T6940] netlink: 'syz.2.267': attribute type 12 has an invalid length. [ 92.622659][ T6959] netlink: 168 bytes leftover after parsing attributes in process `syz.0.271'. [ 92.626457][ T6959] netlink: 168 bytes leftover after parsing attributes in process `syz.0.271'. [ 92.848275][ T63] Bluetooth: hci3: command 0x0405 tx timeout [ 93.287317][ T6972] netlink: 'syz.0.276': attribute type 10 has an invalid length. [ 93.290649][ T6972] futex_wake_op: syz.0.276 tries to shift op by -1; fix this program [ 93.516912][ T6954] xt_CT: You must specify a L4 protocol and not use inversions on it [ 93.976319][ T6976] openvswitch: : Dropping previously announced user features [ 93.999613][ T6976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.275'. [ 94.553429][ T6988] loop6: detected capacity change from 0 to 524287999 [ 94.665040][ T6989] netlink: 'syz.0.279': attribute type 12 has an invalid length. [ 95.268153][ T29] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 95.548173][ T29] usb 8-1: Using ep0 maxpacket: 32 [ 95.554476][ T29] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 95.562349][ T29] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 95.565868][ T29] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 95.569730][ T29] usb 8-1: Product: syz [ 95.571429][ T29] usb 8-1: Manufacturer: syz [ 95.573253][ T29] usb 8-1: SerialNumber: syz [ 95.581685][ T29] usb 8-1: config 0 descriptor?? [ 95.593281][ T7004] loop6: detected capacity change from 0 to 524287999 [ 95.599319][ T6993] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 95.697279][ T7005] netlink: 'syz.0.283': attribute type 12 has an invalid length. [ 95.898141][ T1467] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 96.068233][ T1467] usb 6-1: Using ep0 maxpacket: 8 [ 96.073028][ T1467] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 96.076869][ T1467] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 96.081685][ T1467] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 96.085511][ T1467] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.304436][ T1467] usb 6-1: USB disconnect, device number 4 [ 96.499906][ T7013] netlink: 'syz.0.287': attribute type 4 has an invalid length. [ 96.855701][ T7018] : entered promiscuous mode [ 96.865848][ T7018] netlink: 4 bytes leftover after parsing attributes in process `syz.2.289'. [ 98.108912][ T9] usb 8-1: USB disconnect, device number 10 [ 98.155404][ T7035] netlink: 'syz.2.292': attribute type 4 has an invalid length. [ 98.520598][ T7050] bond0: (slave bond1): Releasing backup interface [ 98.680500][ T7052] netlink: 8 bytes leftover after parsing attributes in process `syz.3.298'. [ 98.685766][ T7052] netlink: 'syz.3.298': attribute type 5 has an invalid length. [ 98.688455][ T7052] netlink: 28 bytes leftover after parsing attributes in process `syz.3.298'. [ 98.708320][ T7052] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 98.711251][ T7052] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 98.714266][ T7052] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 98.717029][ T7052] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 98.720599][ T7052] geneve2: entered promiscuous mode [ 98.722455][ T7052] geneve2: entered allmulticast mode [ 100.128317][ T837] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 100.348368][ T837] usb 6-1: Using ep0 maxpacket: 32 [ 100.461827][ T7091] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 100.464748][ T7091] overlayfs: missing 'lowerdir' [ 100.501645][ T7091] netlink: 'syz.0.311': attribute type 4 has an invalid length. [ 100.528726][ T7092] netlink: 4 bytes leftover after parsing attributes in process `syz.3.308'. [ 100.676986][ T837] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 100.684066][ T837] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 100.688536][ T837] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 100.691246][ T837] usb 6-1: Product: syz [ 100.692899][ T837] usb 6-1: Manufacturer: syz [ 100.694479][ T837] usb 6-1: SerialNumber: syz [ 100.697270][ T837] usb 6-1: config 0 descriptor?? [ 100.699507][ T7077] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 102.509479][ T7124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.317'. [ 102.910666][ T34] usb 6-1: USB disconnect, device number 5 [ 103.012565][ T40] audit: type=1326 audit(1748723511.668:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7133 comm="syz.1.320" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70be579 code=0x0 [ 103.070695][ T5944] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 103.074696][ T7135] geneve2: entered promiscuous mode [ 103.076395][ T7135] geneve2: entered allmulticast mode [ 103.389490][ T7125] netlink: 'syz.0.318': attribute type 4 has an invalid length. [ 103.452619][ T40] audit: type=1326 audit(1748723512.108:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7142 comm="syz.3.323" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf708e579 code=0x0 [ 103.514907][ T5944] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 103.520717][ T7145] geneve3: entered promiscuous mode [ 103.522457][ T7145] geneve3: entered allmulticast mode [ 103.957533][ T7151] kvm: Disabled LAPIC found during irq injection [ 103.964212][ T7151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.326'. [ 103.970328][ T7151] dlm: plock device version mismatch: kernel (1.2.0), user (4207673345.1574799195.3139252685) [ 104.658453][ T7164] loop6: detected capacity change from 0 to 524287999 [ 104.659567][ T7159] openvswitch: : Dropping previously announced user features [ 104.672117][ T7159] netlink: 4 bytes leftover after parsing attributes in process `syz.0.328'. [ 104.747114][ T7170] netlink: 'syz.2.329': attribute type 12 has an invalid length. [ 105.186673][ T7177] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 105.660101][ T5944] Bluetooth: hci1: command 0x0406 tx timeout [ 106.232631][ T7190] can: request_module (can-proto-3) failed. [ 106.518169][ T837] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 106.677877][ T7214] netlink: 4 bytes leftover after parsing attributes in process `syz.1.346'. [ 106.708193][ T837] usb 8-1: Using ep0 maxpacket: 32 [ 106.712783][ T837] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 106.730036][ T837] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 106.733752][ T837] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 106.737344][ T837] usb 8-1: Product: syz [ 106.739429][ T837] usb 8-1: Manufacturer: syz [ 106.743964][ T837] usb 8-1: SerialNumber: syz [ 106.764667][ T837] usb 8-1: config 0 descriptor?? [ 106.797986][ T7193] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 107.142064][ T6003] usb 8-1: USB disconnect, device number 11 [ 107.567640][ T7234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.356'. [ 107.571429][ T7234] netlink: 'syz.1.356': attribute type 30 has an invalid length. [ 107.577286][ T7234] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.587006][ T7234] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.593347][ T7234] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.596119][ T7234] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.711694][ T7256] syz.3.362 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 108.779782][ T7256] tipc: Started in network mode [ 108.788173][ T7256] tipc: Node identity 8, cluster identity 4711 [ 108.790570][ T7256] tipc: Node number set to 8 [ 109.019710][ T7268] openvswitch: : Dropping previously announced user features [ 109.024977][ T7268] netlink: 4 bytes leftover after parsing attributes in process `syz.1.365'. [ 109.065371][ T7271] loop6: detected capacity change from 0 to 524287999 [ 109.141594][ T7272] netlink: 'syz.2.366': attribute type 12 has an invalid length. [ 110.059200][ T7283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.367'. [ 110.708130][ T6186] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 110.908312][ T6186] usb 5-1: Using ep0 maxpacket: 32 [ 110.913611][ T6186] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 110.927543][ T6186] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 110.931322][ T6186] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 110.935201][ T6186] usb 5-1: Product: syz [ 110.936899][ T6186] usb 5-1: Manufacturer: syz [ 110.940244][ T6186] usb 5-1: SerialNumber: syz [ 110.945223][ T6186] usb 5-1: config 0 descriptor?? [ 110.950066][ T7279] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 110.984934][ T7296] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 111.228246][ T60] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 111.249092][ T34] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 111.389602][ T60] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 111.394895][ T60] usb 6-1: New USB device found, idVendor=1b96, idProduct=0013, bcdDevice= 0.00 [ 111.398254][ T60] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.405292][ T60] usb 6-1: config 0 descriptor?? [ 111.420997][ T34] usb 7-1: not running at top speed; connect to a high speed hub [ 111.425476][ T34] usb 7-1: config 1 interface 0 altsetting 3 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 111.429171][ T34] usb 7-1: config 1 interface 0 has no altsetting 0 [ 111.434949][ T34] usb 7-1: string descriptor 0 read error: -22 [ 111.437223][ T34] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 111.441064][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.453487][ T7299] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 111.613036][ T60] usbhid 6-1:0.0: can't add hid device: -71 [ 111.615190][ T60] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 111.623748][ T60] usb 6-1: USB disconnect, device number 6 [ 112.479239][ T837] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 112.628192][ T837] usb 6-1: Using ep0 maxpacket: 8 [ 112.632100][ T837] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 112.636262][ T837] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 112.640697][ T837] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 112.644804][ T837] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 112.650117][ T837] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 112.653835][ T837] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.906572][ T29] usb 5-1: USB disconnect, device number 2 [ 112.914792][ T7305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.920042][ T7305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.933776][ T837] usb 6-1: GET_CAPABILITIES returned 0 [ 112.937907][ T837] usbtmc 6-1:16.0: can't read capabilities [ 112.955069][ T7309] 9pnet: Could not find request transport: xen [ 112.963967][ T7312] FAULT_INJECTION: forcing a failure. [ 112.963967][ T7312] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 112.968648][ T7312] CPU: 0 UID: 0 PID: 7312 Comm: syz.0.377 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 112.968662][ T7312] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 112.968669][ T7312] Call Trace: [ 112.968673][ T7312] [ 112.968677][ T7312] dump_stack_lvl+0x16c/0x1f0 [ 112.968694][ T7312] should_fail_ex+0x512/0x640 [ 112.968712][ T7312] _copy_from_user+0x2e/0xd0 [ 112.968729][ T7312] copy_clone_args_from_user+0x150/0x7e0 [ 112.968748][ T7312] ? get_pid_task+0xfc/0x250 [ 112.968759][ T7312] ? __pfx_copy_clone_args_from_user+0x10/0x10 [ 112.968783][ T7312] __do_sys_clone3+0xbd/0x290 [ 112.968794][ T7312] ? __pfx___do_sys_clone3+0x10/0x10 [ 112.968803][ T7312] ? lock_vma_under_rcu+0x47d/0x970 [ 112.968826][ T7312] ? count_memcg_events_mm.constprop.0+0x138/0x340 [ 112.968850][ T7312] ? rcu_is_watching+0x12/0xc0 [ 112.968867][ T7312] __do_fast_syscall_32+0x7c/0x3a0 [ 112.968881][ T7312] do_fast_syscall_32+0x32/0x80 [ 112.968894][ T7312] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 112.968908][ T7312] RIP: 0023:0xf709e579 [ 112.968916][ T7312] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 112.968926][ T7312] RSP: 002b:00000000f508e42c EFLAGS: 00000286 ORIG_RAX: 00000000000001b3 [ 112.968937][ T7312] RAX: ffffffffffffffda RBX: 00000000f508e460 RCX: 0000000000000058 [ 112.968944][ T7312] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 112.968950][ T7312] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 112.968956][ T7312] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 112.968962][ T7312] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 112.968974][ T7312] [ 113.152676][ T7305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.168880][ T7305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.364044][ T7317] loop6: detected capacity change from 0 to 524287999 [ 113.436082][ T7318] netlink: 'syz.0.378': attribute type 12 has an invalid length. [ 113.509325][ T7319] netlink: 'syz.1.375': attribute type 9 has an invalid length. [ 113.831816][ T9] usb 7-1: USB disconnect, device number 7 [ 113.881926][ T1467] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 113.885014][ T1467] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 113.887766][ T1467] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 113.891299][ T1467] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 113.894033][ T1467] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 113.897015][ T1467] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 113.900523][ T1467] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 113.903401][ T1467] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 113.905801][ T1467] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 113.908692][ T1467] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 113.912185][ T1467] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 113.915355][ T1467] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 113.917707][ T1467] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 113.920308][ T1467] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 113.923145][ T1467] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 113.925789][ T1467] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 113.928000][ T1467] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 113.930773][ T1467] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 113.933279][ T1467] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 113.935686][ T1467] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 113.939056][ T1467] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 113.941666][ T1467] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 113.944042][ T1467] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 113.946272][ T1467] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 113.948846][ T1467] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 113.952784][ T1467] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 113.956300][ T1467] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 113.960355][ T1467] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 113.964364][ T1467] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 114.010408][ T1467] hid-generic 0001:0000:0000.0002: hidraw1: HID vffffff.ff Device [syz0] on syz0 [ 114.113771][ T7324] fido_id[7324]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 114.190658][ T101] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.198156][ T101] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.208249][ T101] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 114.314089][ T101] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.321306][ T101] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.324751][ T101] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 114.398971][ T101] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.408897][ T101] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.412116][ T101] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 114.419798][ T5944] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 114.423698][ T5944] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 114.426666][ T5944] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 114.434942][ T5944] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 114.435903][ T7335] netlink: 4 bytes leftover after parsing attributes in process `syz.0.386'. [ 114.437581][ T5944] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 114.518931][ T101] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.523321][ T101] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.527483][ T101] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 114.711589][ T101] bridge_slave_1: left allmulticast mode [ 114.714224][ T101] bridge_slave_1: left promiscuous mode [ 114.717443][ T101] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.724624][ T101] bridge_slave_0: left allmulticast mode [ 114.726820][ T101] bridge_slave_0: left promiscuous mode [ 114.728981][ T101] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.748495][ T29] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 114.998241][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 115.003667][ T29] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 115.007184][ T29] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 115.011317][ T29] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 115.014801][ T29] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 115.019094][ T29] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 115.021823][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.092122][ T101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.098164][ T101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.103698][ T101] bond0 (unregistering): Released all slaves [ 115.115397][ T7332] chnl_net:caif_netlink_parms(): no params data found [ 115.224332][ T7332] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.226597][ T7332] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.229291][ T7332] bridge_slave_0: entered allmulticast mode [ 115.233260][ T7332] bridge_slave_0: entered promiscuous mode [ 115.237712][ T7332] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.241560][ T7332] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.244013][ T7332] bridge_slave_1: entered allmulticast mode [ 115.248251][ T7332] bridge_slave_1: entered promiscuous mode [ 115.248389][ T29] usb 5-1: GET_CAPABILITIES returned 0 [ 115.254998][ T101] tipc: Left network mode [ 115.265308][ T29] usbtmc 5-1:16.0: can't read capabilities [ 115.291520][ T29] usb 6-1: USB disconnect, device number 7 [ 115.376067][ T7332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.386292][ T7332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.425006][ T7332] team0: Port device team_slave_0 added [ 115.429061][ T7332] team0: Port device team_slave_1 added [ 115.441372][ T6186] usb 5-1: USB disconnect, device number 3 [ 115.519712][ T7332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.522559][ T7332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.532934][ T7332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.539686][ T7332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.542429][ T7332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.550537][ T7332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.583615][ T7362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.390'. [ 115.605254][ T7332] hsr_slave_0: entered promiscuous mode [ 115.610008][ T7332] hsr_slave_1: entered promiscuous mode [ 115.612425][ T7332] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 115.614869][ T7332] Cannot create hsr debugfs directory [ 115.623980][ T101] hsr_slave_0: left promiscuous mode [ 115.627274][ T101] hsr_slave_1: left promiscuous mode [ 115.630017][ T101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.632401][ T101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.635538][ T101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.638037][ T101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.661161][ T101] veth1_macvtap: left promiscuous mode [ 115.663137][ T101] veth0_macvtap: left promiscuous mode [ 115.664983][ T101] veth1_vlan: left promiscuous mode [ 115.666774][ T101] veth0_vlan: left promiscuous mode [ 116.255167][ T101] team0 (unregistering): Port device team_slave_1 removed [ 116.332762][ T101] team0 (unregistering): Port device team_slave_0 removed [ 116.538212][ T5944] Bluetooth: hci0: command tx timeout [ 117.004017][ T7332] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 117.013241][ T7332] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 117.021241][ T7332] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 117.026993][ T7332] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 117.092424][ T7332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.110505][ T7332] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.122214][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.124641][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.133754][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.135984][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.147943][ T7390] kvm: Disabled LAPIC found during irq injection [ 117.153116][ T7390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.395'. [ 117.160764][ T7390] dlm: plock device version mismatch: kernel (1.2.0), user (4207673345.1574799195.3139252685) [ 117.174190][ T7332] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 117.338310][ T7332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.524789][ T7332] veth0_vlan: entered promiscuous mode [ 117.537244][ T7332] veth1_vlan: entered promiscuous mode [ 117.564584][ T7332] veth0_macvtap: entered promiscuous mode [ 117.571921][ T7332] veth1_macvtap: entered promiscuous mode [ 117.587180][ T7332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.597714][ T7332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.605578][ T7332] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.608695][ T7332] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.611427][ T7332] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.614114][ T7332] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.648443][ T29] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 117.655353][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.657775][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.676708][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.679805][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.799415][ T29] usb 7-1: Using ep0 maxpacket: 32 [ 117.840457][ T29] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 117.909116][ T29] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 117.912087][ T29] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 117.914644][ T29] usb 7-1: Product: syz [ 117.917203][ T29] usb 7-1: Manufacturer: syz [ 117.919186][ T29] usb 7-1: SerialNumber: syz [ 117.924535][ T29] usb 7-1: config 0 descriptor?? [ 117.929346][ T7409] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 118.629247][ T5944] Bluetooth: hci0: command tx timeout [ 118.705888][ T7446] syzkaller0: entered promiscuous mode [ 118.707771][ T7446] syzkaller0: entered allmulticast mode [ 118.763398][ T7451] loop2: detected capacity change from 0 to 4 [ 118.808787][ T7451] [ 118.809613][ T7451] ====================================================== [ 118.811886][ T7451] WARNING: possible circular locking dependency detected [ 118.814171][ T7451] 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 Not tainted [ 118.818803][ T7451] ------------------------------------------------------ [ 118.821141][ T7451] syz.4.403/7451 is trying to acquire lock: [ 118.823055][ T7451] ffff8880404e8a20 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x9c/0xf0 [ 118.827042][ T7451] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 118.827042][ T7451] but task is already holding lock: [ 118.829651][ T7451] ffff888042363190 (&q->q_usage_counter(io)#19){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 118.833114][ T7451] [ 118.833114][ T7451] which lock already depends on the new lock. [ 118.833114][ T7451] [ 118.836783][ T7451] [ 118.836783][ T7451] the existing dependency chain (in reverse order) is: [ 118.839572][ T7451] [ 118.839572][ T7451] -> #3 (&q->q_usage_counter(io)#19){++++}-{0:0}: [ 118.842247][ T7451] blk_alloc_queue+0x619/0x760 [ 118.843939][ T7451] blk_mq_alloc_queue+0x175/0x290 [ 118.845707][ T7451] __blk_mq_alloc_disk+0x29/0x120 [ 118.847842][ T7451] loop_add+0x49c/0xb70 [ 118.849385][ T7451] loop_init+0x164/0x270 [ 118.850904][ T7451] do_one_initcall+0x120/0x6e0 [ 118.852546][ T7451] kernel_init_freeable+0x5c2/0x900 [ 118.854310][ T7451] kernel_init+0x1c/0x2b0 [ 118.855878][ T7451] ret_from_fork+0x5d4/0x6f0 [ 118.857548][ T7451] ret_from_fork_asm+0x1a/0x30 [ 118.859262][ T7451] [ 118.859262][ T7451] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 118.861502][ T7451] fs_reclaim_acquire+0x102/0x150 [ 118.863235][ T7451] kmem_cache_alloc_noprof+0x53/0x3b0 [ 118.865159][ T7451] __kernfs_iattrs+0xbc/0x3f0 [ 118.866826][ T7451] __kernfs_setattr+0x4d/0x3c0 [ 118.868877][ T7451] kernfs_iop_setattr+0xda/0x120 [ 118.870578][ T7451] notify_change+0x6a9/0x1230 [ 118.872323][ T7451] do_truncate+0x1d7/0x230 [ 118.873926][ T7451] path_openat+0x2678/0x2cb0 [ 118.875544][ T7451] do_filp_open+0x20b/0x470 [ 118.877140][ T7451] do_sys_openat2+0x11b/0x1d0 [ 118.878951][ T7451] __x64_sys_openat+0x174/0x210 [ 118.880635][ T7451] do_syscall_64+0xcd/0x490 [ 118.882244][ T7451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.884121][ T7451] [ 118.884121][ T7451] -> #1 (iattr_mutex){+.+.}-{4:4}: [ 118.886390][ T7451] __mutex_lock+0x199/0xb90 [ 118.887998][ T7451] __kernfs_iattrs+0x2b/0x3f0 [ 118.889741][ T7451] __kernfs_setattr+0x4d/0x3c0 [ 118.891766][ T7451] kernfs_iop_setattr+0xda/0x120 [ 118.893916][ T7451] notify_change+0x6a9/0x1230 [ 118.896081][ T7451] do_truncate+0x1d7/0x230 [ 118.898160][ T7451] path_openat+0x2678/0x2cb0 [ 118.900116][ T7451] do_filp_open+0x20b/0x470 [ 118.901927][ T7451] do_sys_openat2+0x11b/0x1d0 [ 118.903576][ T7451] __x64_sys_openat+0x174/0x210 [ 118.905290][ T7451] do_syscall_64+0xcd/0x490 [ 118.906887][ T7451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.908923][ T7451] [ 118.908923][ T7451] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 118.911654][ T7451] __lock_acquire+0x126f/0x1c90 [ 118.913346][ T7451] lock_acquire+0x179/0x350 [ 118.914965][ T7451] down_read+0x9b/0x480 [ 118.916446][ T7451] kernfs_iop_getattr+0x9c/0xf0 [ 118.918134][ T7451] vfs_getattr_nosec+0x2a9/0x430 [ 118.919833][ T7451] vfs_getattr+0x4a/0x60 [ 118.921435][ T7451] loop_query_min_dio_size.isra.0+0x117/0x250 [ 118.923492][ T7451] lo_ioctl+0x1e14/0x28e0 [ 118.925018][ T7451] lo_compat_ioctl+0xb9/0x170 [ 118.926638][ T7451] compat_blkdev_ioctl+0x2ee/0x7a0 [ 118.928397][ T7451] __ia32_compat_sys_ioctl+0x23f/0x370 [ 118.930259][ T7451] __do_fast_syscall_32+0x7c/0x3a0 [ 118.932341][ T7451] do_fast_syscall_32+0x32/0x80 [ 118.934158][ T7451] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 118.936067][ T7451] [ 118.936067][ T7451] other info that might help us debug this: [ 118.936067][ T7451] [ 118.939183][ T7451] Chain exists of: [ 118.939183][ T7451] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#19 [ 118.939183][ T7451] [ 118.944037][ T7451] Possible unsafe locking scenario: [ 118.944037][ T7451] [ 118.946329][ T7451] CPU0 CPU1 [ 118.948011][ T7451] ---- ---- [ 118.949670][ T7451] lock(&q->q_usage_counter(io)#19); [ 118.951358][ T7451] lock(fs_reclaim); [ 118.953659][ T7451] lock(&q->q_usage_counter(io)#19); [ 118.956235][ T7451] rlock(&root->kernfs_iattr_rwsem); [ 118.957908][ T7451] [ 118.957908][ T7451] *** DEADLOCK *** [ 118.957908][ T7451] [ 118.960397][ T7451] 3 locks held by syz.4.403/7451: [ 118.961965][ T7451] #0: ffff888020794400 (&lo->lo_mutex){+.+.}-{4:4}, at: lo_ioctl+0x370/0x28e0 [ 118.964855][ T7451] #1: ffff888042363190 (&q->q_usage_counter(io)#19){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 118.968431][ T7451] #2: ffff8880423631c8 (&q->q_usage_counter(queue)#20){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 118.972032][ T7451] [ 118.972032][ T7451] stack backtrace: [ 118.973850][ T7451] CPU: 0 UID: 0 PID: 7451 Comm: syz.4.403 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(full) [ 118.973865][ T7451] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 118.973877][ T7451] Call Trace: [ 118.973882][ T7451] [ 118.973887][ T7451] dump_stack_lvl+0x116/0x1f0 [ 118.973902][ T7451] print_circular_bug+0x275/0x350 [ 118.973922][ T7451] check_noncircular+0x14c/0x170 [ 118.973946][ T7451] __lock_acquire+0x126f/0x1c90 [ 118.973966][ T7451] lock_acquire+0x179/0x350 [ 118.973985][ T7451] ? kernfs_iop_getattr+0x9c/0xf0 [ 118.974005][ T7451] ? __pfx___might_resched+0x10/0x10 [ 118.974031][ T7451] down_read+0x9b/0x480 [ 118.974049][ T7451] ? kernfs_iop_getattr+0x9c/0xf0 [ 118.974064][ T7451] ? find_held_lock+0x2b/0x80 [ 118.974085][ T7451] ? __pfx_down_read+0x10/0x10 [ 118.974107][ T7451] ? kernfs_root+0xee/0x2a0 [ 118.974123][ T7451] kernfs_iop_getattr+0x9c/0xf0 [ 118.974139][ T7451] vfs_getattr_nosec+0x2a9/0x430 [ 118.974160][ T7451] ? __pfx_kernfs_iop_getattr+0x10/0x10 [ 118.974179][ T7451] vfs_getattr+0x4a/0x60 [ 118.974201][ T7451] loop_query_min_dio_size.isra.0+0x117/0x250 [ 118.974221][ T7451] ? __pfx_loop_query_min_dio_size.isra.0+0x10/0x10 [ 118.974242][ T7451] ? mark_held_locks+0x49/0x80 [ 118.974268][ T7451] ? blk_freeze_queue_start+0xec/0x140 [ 118.974291][ T7451] lo_ioctl+0x1e14/0x28e0 [ 118.974309][ T7451] ? __lock_acquire+0xb8a/0x1c90 [ 118.974320][ T7451] ? kasan_save_stack+0x42/0x60 [ 118.974332][ T7451] ? kasan_save_stack+0x33/0x60 [ 118.974343][ T7451] ? kasan_save_track+0x14/0x30 [ 118.974355][ T7451] ? kasan_save_free_info+0x3b/0x60 [ 118.974371][ T7451] ? __kasan_slab_free+0x51/0x70 [ 118.974384][ T7451] ? kfree+0x2b4/0x4d0 [ 118.974393][ T7451] ? tomoyo_path_number_perm+0x470/0x580 [ 118.974406][ T7451] ? security_file_ioctl_compat+0x9b/0x240 [ 118.974418][ T7451] ? __ia32_compat_sys_ioctl+0xc3/0x370 [ 118.974434][ T7451] ? __do_fast_syscall_32+0x7c/0x3a0 [ 118.974447][ T7451] ? do_fast_syscall_32+0x32/0x80 [ 118.974458][ T7451] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 118.974473][ T7451] ? __pfx_lo_ioctl+0x10/0x10 [ 118.974491][ T7451] ? kasan_quarantine_put+0x10a/0x240 [ 118.974502][ T7451] ? lockdep_hardirqs_on+0x7c/0x110 [ 118.974514][ T7451] ? find_held_lock+0x2b/0x80 [ 118.974528][ T7451] ? tomoyo_path_number_perm+0x295/0x580 [ 118.974540][ T7451] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 118.974553][ T7451] ? blkdev_common_ioctl+0x1dd/0x2480 [ 118.974564][ T7451] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 118.974577][ T7451] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 118.974588][ T7451] ? do_vfs_ioctl+0x523/0x1a60 [ 118.974603][ T7451] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 118.974623][ T7451] lo_compat_ioctl+0xb9/0x170 [ 118.974635][ T7451] ? __pfx_lo_compat_ioctl+0x10/0x10 [ 118.974646][ T7451] compat_blkdev_ioctl+0x2ee/0x7a0 [ 118.974658][ T7451] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 118.974670][ T7451] ? __ia32_compat_sys_openat+0xf0/0x210 [ 118.974710][ T7451] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 118.974724][ T7451] __ia32_compat_sys_ioctl+0x23f/0x370 [ 118.974742][ T7451] __do_fast_syscall_32+0x7c/0x3a0 [ 118.974756][ T7451] do_fast_syscall_32+0x32/0x80 [ 118.974769][ T7451] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 118.974784][ T7451] RIP: 0023:0xf7f98579 [ 118.974793][ T7451] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 118.974804][ T7451] RSP: 002b:00000000f50b655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 118.974814][ T7451] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004c06 [ 118.974820][ T7451] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 118.974826][ T7451] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 118.974832][ T7451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.974838][ T7451] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 118.974848][ T7451] [ 119.119477][ C0] blk_print_req_error: 40 callbacks suppressed [ 119.119486][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 119.124657][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.127481][ C0] buffer_io_error: 39 callbacks suppressed [ 119.127488][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 119.136070][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.138968][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 119.142601][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.145477][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 119.148415][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.151290][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 119.154094][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.157014][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 119.175017][ C2] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.177886][ C2] Buffer I/O error on dev loop2, logical block 0, async page read [ 119.181471][ C2] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.184280][ C2] Buffer I/O error on dev loop2, logical block 0, async page read [ 119.187058][ C2] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.189925][ C2] Buffer I/O error on dev loop2, logical block 0, async page read [ 119.200519][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.203387][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 119.207757][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 120.107156][ T60] usb 7-1: USB disconnect, device number 8 [ 120.133785][ T1138] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.136939][ T1138] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.230870][ T1138] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.234780][ T1138] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.350505][ T1138] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.353635][ T1138] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.472962][ T1138] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.476591][ T1138] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.885356][ T1138] bond0 (unregistering): Released all slaves [ 120.939794][ T1138] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 120.943365][ T1138] bond1 (unregistering): Released all slaves [ 121.008355][ T1138] : left promiscuous mode [ 121.265353][ T1138] hsr_slave_0: left promiscuous mode [ 121.268217][ T1138] hsr_slave_1: left promiscuous mode [ 121.274606][ T1138] veth1_macvtap: left promiscuous mode [ 121.276925][ T1138] veth0_macvtap: left promiscuous mode [ 121.279382][ T1138] veth1_vlan: left promiscuous mode [ 121.281620][ T1138] veth0_vlan: left promiscuous mode [ 122.156247][ T1138] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.213722][ T1138] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.281185][ T1138] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.353788][ T1138] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.452376][ T1138] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.510254][ T1138] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.569566][ T1138] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.639778][ T1138] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.721227][ T1138] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.801296][ T1138] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.873527][ T1138] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.943607][ T1138] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.028013][ T1138] bridge_slave_1: left allmulticast mode [ 123.030971][ T1138] bridge_slave_1: left promiscuous mode [ 123.032785][ T1138] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.035911][ T1138] bridge_slave_0: left allmulticast mode [ 123.037903][ T1138] bridge_slave_0: left promiscuous mode [ 123.040931][ T1138] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.242969][ T1138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.246458][ T1138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.250042][ T1138] bond0 (unregistering): Released all slaves [ 123.395348][ T1138] bond0 (unregistering): Released all slaves [ 123.459716][ T1138] bond1 (unregistering): Released all slaves [ 123.603559][ T1138] bond0 (unregistering): Released all slaves [ 123.690827][ T1138] : left promiscuous mode [ 123.750449][ T1138] : left promiscuous mode [ 124.233351][ T1138] hsr_slave_0: left promiscuous mode [ 124.235415][ T1138] hsr_slave_1: left promiscuous mode [ 124.237270][ T1138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.239831][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.242355][ T1138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.244670][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.248541][ T1138] hsr_slave_0: left promiscuous mode [ 124.250468][ T1138] hsr_slave_1: left promiscuous mode [ 124.253529][ T1138] hsr_slave_0: left promiscuous mode [ 124.255382][ T1138] hsr_slave_1: left promiscuous mode [ 124.261662][ T1138] veth1_macvtap: left promiscuous mode [ 124.263404][ T1138] veth0_macvtap: left promiscuous mode [ 124.265161][ T1138] veth1_vlan: left promiscuous mode [ 124.266846][ T1138] veth0_vlan: left promiscuous mode [ 124.269328][ T1138] veth1_macvtap: left promiscuous mode [ 124.271534][ T1138] veth0_macvtap: left promiscuous mode [ 124.273820][ T1138] veth1_vlan: left promiscuous mode [ 124.275914][ T1138] veth0_vlan: left promiscuous mode [ 124.278806][ T1138] veth1_macvtap: left promiscuous mode [ 124.280549][ T1138] veth0_macvtap: left promiscuous mode [ 124.282279][ T1138] veth1_vlan: left promiscuous mode [ 124.283952][ T1138] veth0_vlan: left promiscuous mode [ 124.423886][ T1138] team0 (unregistering): Port device team_slave_1 removed [ 124.452416][ T1138] team0 (unregistering): Port device team_slave_0 removed VM DIAGNOSIS: 20:32:07 Registers: info registers vcpu 0 CPU#0 RAX=000000000000006c RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8555a9c5 RDI=ffffffff9ae53d80 RBP=ffffffff9ae53d40 RSP=ffffc900031f6f48 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=732d302e35312e36 R12=0000000000000000 R13=000000000000006c R14=ffffffff9ae53d40 R15=ffffffff8555a960 RIP=ffffffff8555a9ef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88809777b000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000000c3b5030 CR3=000000006a9eb000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000009471b377 RBX=0000000000000010 RCX=ffffc90002e27250 RDX=000000005b21ecf0 RSI=0000000000000014 RDI=000000006782d90f RBP=0000000000000001 RSP=ffffc90002e27198 R8 =ffffffff911646a0 R9 =00000000afc3c3a4 R10=ffffc90002e270d0 R11=0000000000002c4a R12=0000000000002000 R13=000000009f57640b R14=ffffc90002e27220 R15=0000000000000010 RIP=ffffffff85081fcd RFL=00000a87 [-OS--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809787b000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7fd6e40 CR3=000000004b4d0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f7472ff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000000000d9 RBX=ffffc90007183818 RCX=ffffffff86a2a689 RDX=1ffff11004e3c2c3 RSI=ffffffff86a2a696 RDI=ffff8880271e162a RBP=00000000000000d9 RSP=ffffc90000537778 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=00000000af100004 R13=dffffc0000000000 R14=ffff888041f88000 R15=ffff8880271e1600 RIP=ffffffff86a2a72b RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809797b000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002f816000 CR3=000000006aa53000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000cffeffe0 Opmask01=000000000000005f Opmask02=000000000000005f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 79dd0262efe26e51 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 629ba1f537e99e04 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4844c6fb20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 953f9f3391984297 cef542976fb203c0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 040b2e26a0dfbaed 5029ee3bc0383c9b ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 007365697261646e 6f6365735f65746f 6d6f72702f396270 616c2f666e6f632f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 550a005642444943 5f4b50510a56000a 51404b0a56564449 460a565c560a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 33303635363d7367 616c66666900303d 7373656c65726977 666900343031313d ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 63697274656d6669 0070753d72656972 7261636669006575 72743d6465727567 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7265746e69005245 49525241433d6e6f 7361657200343536 353d646970006e69 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 69666e6f635f6669 006b6e696c3d6c6f 636f746f72700033 6874653d65636166 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 63697274656d6669 0070753d72656972 7261636669006575 72743d6465727567 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0065736c61663d6e 776f645f66690065 736c61663d70755f 666900316e616c77 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 200a0a625f620063 632036205f65626d 2020373320320a63 616520200a003662 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbff52532232d20 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=ffffffff91d02ed2 RBX=ffffffff9110be38 RCX=dffffc0000000000 RDX=1ffffffff22217c7 RSI=0000000000000000 RDI=ffffffff9110be34 RBP=ffffffff9110be34 RSP=ffffc90003e974d0 R8 =ffffffff91d02ee4 R9 =0000000000000000 R10=ffffc90003e97580 R11=00000000000a796a R12=ffffffff9110be3c R13=ffffffff8b796a11 R14=ffffffff9110be34 R15=ffffffff9110be34 RIP=ffffffff816a6bd0 RFL=00000a02 [-O-----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097a7b000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002f7f4000 CR3=000000006836f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000004800000000 0000000100000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000c000000000 0000000300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000