last executing test programs: 4.767962305s ago: executing program 1 (id=404): creat(0x0, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xe, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) socket$phonet_pipe(0x23, 0x5, 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = socket$inet(0x2, 0x1, 0x100) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) sendto$inet(r3, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7820fcfaf65ac6", 0x15, 0x11, 0x0, 0x0) 3.860825803s ago: executing program 1 (id=409): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setscheduler(r0, 0x5, &(0x7f00000001c0)=0x1a4) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x48050) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha1-ssse3\x00'}}) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9}, &(0x7f0000000380)=0x0, &(0x7f0000000280)) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 3.635489953s ago: executing program 2 (id=413): socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', 0x0}) r3 = openat$rdma_cm(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000300)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0xc, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @private=0xa010100}, @in6={0xa, 0x4e21, 0x9, @mcast2, 0x2}}}, 0x118) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0xf5, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0xbf, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, [{0x0, 0x8, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca"}, {0x0, 0x1, "0000000500000000260004"}, {0x18}, {0x18}, {0x21, 0x6, "f5000000000000000000000200000000000000000000000000008879e66485201a0015ca837400"/49}, {}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r4}, 0x8) syz_open_dev$evdev(&(0x7f0000000a00), 0xab, 0x101800) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x6e2, 0x600, 0x1, 0x0, 0x0) fchmodat(0xffffffffffffffff, 0x0, 0x80) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 3.111845942s ago: executing program 0 (id=414): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) acct(&(0x7f00000001c0)='./file0\x00') acct(0x0) getsockopt$inet6_tcp_buf(r6, 0x6, 0x1a, &(0x7f0000000300)=""/106, &(0x7f0000000280)=0x6a) fgetxattr(r5, &(0x7f0000000000)=@known='system.sockprotoname\x00', &(0x7f0000000080)=""/237, 0xed) connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r7, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r7, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="616a764ecc70303c7aefc86f78b09df695d4710e2fec431e815a6d896bfcc4cf1742e1bec168a268084ded0f0419f3229b37bb8d223c68bd888cee4c78852982d54e29330ae8332ee484249a130eabc6832e351e55dc55d408b53217a60698fb6b579290b235661354e8729a6130d27b3e38248025eb1cfebbd79789cbf1ebde87871bb6ab92", @ANYRES16=0x0], 0x288}, 0x1, 0x0, 0x0, 0x8295aac7ea61552c}, 0x0) mount(&(0x7f0000000040)=@sr0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000002280)='afs\x00', 0x949043, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffe7e) 2.921069355s ago: executing program 3 (id=415): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000800000000000000000000850000007d000000850000000700000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='i2c_write\x00', r0}, 0x10) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x101182) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000004c0)={&(0x7f0000000c00)=[{0x0, 0x4a01, 0x0, 0x0}], 0x1}) 2.920767161s ago: executing program 3 (id=416): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000300)={0x17}) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000), 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) getpriority(0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000340)={0x0, 0x39, "4e413ac5de383471d4b95ee036b2c6994a94196027f0adf33c940f07f4782795d3d76db3f743f2d40069d01220a782e6e369cd469b0ec55c75"}, &(0x7f00000003c0)=0x41) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x12, r5, 0x0) syz_clone3(&(0x7f00000006c0)={0x200, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$bt_sco(r4, &(0x7f0000000280), 0x8) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 2.591739854s ago: executing program 2 (id=417): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff06ff"}) (fail_nth: 8) 2.591251057s ago: executing program 1 (id=418): creat(0x0, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xe, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x14) socket$phonet_pipe(0x23, 0x5, 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = socket$inet(0x2, 0x1, 0x100) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) sendto$inet(r3, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7820fcfaf65ac6", 0x15, 0x11, 0x0, 0x0) 2.59106113s ago: executing program 2 (id=419): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x5, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x27) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newtaction={0x44, 0x30, 0x10b, 0x3, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x44}}, 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r4, 0x0, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB="2d6370752037356101b51e81e40d3a590fb4807ecd6fa3d243f6"], 0x5) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000800)=ANY=[@ANYRESDEC, @ANYRESHEX, @ANYRESOCT=r2, @ANYRESHEX=r4, @ANYRESOCT=r4, @ANYRESOCT=r7, @ANYRESOCT=r3, @ANYRES16=r1], 0xaf6) bind$alg(r2, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r8 = accept4(r2, 0x0, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="580000000206050000000000000000000000000005000400000000000900020073797a30000000000c00078008000640000000000500050002000000050001"], 0x58}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000049009d0300000000000000000a000000", @ANYRES32=0x0, @ANYBLOB='\x00'], 0x1c}}, 0x0) sendmmsg$alg(r8, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x10201) sendmsg$nl_route_sched_retired(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000013c0), 0x43c}}, 0x0) recvmmsg(r8, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000080)=""/110, 0x6e}, {&(0x7f0000000280)=""/195, 0xc3}], 0x2}}], 0x1, 0x0, 0x0) write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="016f08000100000000003d0000004600004000000000008490783fffffffac1414aa000000007758325f1cc66c627bc0df0302770d325291261488506ded4eedd736d0addebad76bd6160df5b589d60151f1d898db7deb30251a49146d5a9ad414c0df6dbd7b80b228a4e0aeaa19398bab621ac9baf9d4827dcd8f4069a32663703ff0d8cee3abb639684fb5eb", @ANYRES16=r1, @ANYRES32=0x41424344, @ANYBLOB="ba00000090780018090300050200000000000000000002d58838068b91000000"], 0x4e) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) sendmsg$IPSET_CMD_SAVE(r6, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x401000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000080600000000000000000000020000080900020087797a31000000000500010007000000"], 0x28}, 0x1, 0x0, 0x0, 0x24004005}, 0x801) openat$cdrom(0xffffff9c, &(0x7f00000004c0), 0x20000, 0x0) get_mempolicy(0x0, 0x0, 0x8, &(0x7f0000004000/0x1000)=nil, 0x2) 2.391901028s ago: executing program 2 (id=420): bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={0x0, &(0x7f0000000680)=""/4096, 0x0, 0x0, 0x2}, 0x38) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x9c) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x7fffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/242, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/60, 0xeeee0000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socket(0x22, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) fsopen(&(0x7f0000000000)='hfsplus\x00', 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 2.086454537s ago: executing program 0 (id=421): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000001000)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r2, 0x0, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) r3 = openat$cgroup_procs(r0, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000005c0), 0x12) 1.96179022s ago: executing program 0 (id=422): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54", 0xe) 1.961214025s ago: executing program 3 (id=423): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) acct(&(0x7f00000001c0)='./file0\x00') acct(0x0) getsockopt$inet6_tcp_buf(r5, 0x6, 0x1a, &(0x7f0000000300)=""/106, &(0x7f0000000280)=0x6a) bind$inet(r4, 0x0, 0x0) connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r6, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="616a764ecc70303c7aefc86f78b09df695d4710e2fec431e815a6d896bfcc4cf1742e1bec168a268084ded0f0419f3229b37bb8d223c68bd888cee4c78852982d54e29330ae8332ee484249a130eabc6832e351e55dc55d408b53217a60698fb6b579290b235661354e8729a6130d27b3e38248025eb1cfebbd79789cbf1ebde87871bb6ab92", @ANYRES16=0x0], 0x288}, 0x1, 0x0, 0x0, 0x8295aac7ea61552c}, 0x0) mount(&(0x7f0000000040)=@sr0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000002280)='afs\x00', 0x949043, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffe7e) 1.961036085s ago: executing program 0 (id=424): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r6, 0x6, 0x1a, &(0x7f0000000300)=""/106, &(0x7f0000000280)=0x6a) fgetxattr(r5, &(0x7f0000000000)=@known='system.sockprotoname\x00', &(0x7f0000000080)=""/237, 0xed) bind$inet(r4, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x84}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r8, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r8, 0x0, 0x0) 1.871742011s ago: executing program 2 (id=425): socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', 0x0}) r3 = openat$rdma_cm(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000300)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0xc, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @private=0xa010100}, @in6={0xa, 0x4e21, 0x9, @mcast2, 0x2}}}, 0x118) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0xf5, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0xbf, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, [{0x0, 0x8, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca"}, {0x0, 0x1, "0000000500000000260004"}, {0x18}, {0x18}, {0x21, 0x6, "f5000000000000000000000200000000000000000000000000008879e66485201a0015ca837400"/49}, {}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r4}, 0x8) syz_open_dev$evdev(&(0x7f0000000a00), 0xab, 0x101800) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x6e2, 0x600, 0x1, 0x0, 0x0) fchmodat(0xffffffffffffffff, 0x0, 0x80) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 1.604836617s ago: executing program 0 (id=426): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x281}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, 0x0, 0x0, 0x0) getpgrp(0x0) socket$igmp(0x2, 0x3, 0x2) socket$igmp(0x2, 0x3, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000000c0)='ext4_es_find_extent_range_exit\x00', r2, 0x0, 0x8}, 0x18) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="180000002400010300000000000000000100000004"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4010) recvmmsg(r5, &(0x7f0000004140)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000340)=""/250, 0xfa}, {&(0x7f0000000080)=""/31, 0x1f}, {&(0x7f0000000440)=""/167, 0xa7}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x4}, 0x80000000}], 0x2, 0xa0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="20000000010805"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) 1.507271247s ago: executing program 1 (id=427): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setscheduler(r0, 0x5, &(0x7f00000001c0)=0x1a4) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x48050) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha1-ssse3\x00'}}) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9}, &(0x7f0000000380)=0x0, &(0x7f0000000280)) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 1.061971182s ago: executing program 3 (id=428): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)) r1 = socket$kcm(0x2, 0x5, 0x0) msgsnd(0xffffffffffffffff, &(0x7f0000000000)={0x3}, 0x4, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x2, 0x0}}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000000280)='#', 0x1}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x7, &(0x7f0000000180), 0x43) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000240)={0x0, 0xffac, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}}, 0x0) 941.962691ms ago: executing program 2 (id=429): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x281}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, 0x0, 0x0, 0x0) getpgrp(0x0) socket$igmp(0x2, 0x3, 0x2) socket$igmp(0x2, 0x3, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000000c0)='ext4_es_find_extent_range_exit\x00', r2, 0x0, 0x8}, 0x18) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="180000002400010300000000000000000100000004"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4010) recvmmsg(r5, &(0x7f0000004140)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000340)=""/250, 0xfa}, {&(0x7f0000000080)=""/31, 0x1f}, {&(0x7f0000000440)=""/167, 0xa7}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x4}, 0x80000000}], 0x2, 0xa0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r7, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="20000000010805"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) 495.293846ms ago: executing program 1 (id=430): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000001000)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) shmctl$SHM_UNLOCK(0x0, 0xc) r3 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000005c0), 0x12) 431.876979ms ago: executing program 1 (id=431): socket(0x10, 0x80002, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setscheduler(r0, 0x5, &(0x7f00000001c0)=0x1a4) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x48050) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha1-ssse3\x00'}}) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9}, &(0x7f0000000380)=0x0, &(0x7f0000000280)) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 224.98565ms ago: executing program 0 (id=432): socket(0x1d, 0x1, 0x9) openat$null(0xffffff9c, &(0x7f0000000400), 0x240400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x35, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="840100b4100001000300000000000000ac1414aa000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000033000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x184}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x4c, r9, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x31}, @val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r5, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x43}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x7}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x33}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x2}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x804}, 0x80) close(r11) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r4, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r12, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r13, &(0x7f0000000000), 0x400000000000041, 0x0) 221.088945ms ago: executing program 3 (id=433): bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={0x0, &(0x7f0000000680)=""/4096, 0x0, 0x0, 0x2}, 0x38) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x9c) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x7fffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/242, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/60, 0xeeee0000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socket(0x22, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) fsopen(&(0x7f0000000000)='hfsplus\x00', 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 3 (id=434): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000300)={0x17}) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x7b, &(0x7f0000000000), 0x8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) getpriority(0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000340)={0x0, 0x39, "4e413ac5de383471d4b95ee036b2c6994a94196027f0adf33c940f07f4782795d3d76db3f743f2d40069d01220a782e6e369cd469b0ec55c75"}, &(0x7f00000003c0)=0x41) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x12, r6, 0x0) syz_clone3(&(0x7f00000006c0)={0x200, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$bt_sco(r5, &(0x7f0000000280), 0x8) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:23434' (ED25519) to the list of known hosts. [ 41.591062][ T5860] cgroup: Unknown subsys name 'net' [ 41.712419][ T5860] cgroup: Unknown subsys name 'cpuset' [ 41.716415][ T5860] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 42.678771][ T5860] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.374003][ T5945] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.376900][ T5945] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.378466][ T5949] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.379463][ T5945] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.382526][ T5949] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.385601][ T5945] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.387689][ T5949] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.390152][ T5945] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.392102][ T5952] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.392745][ T5949] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.393006][ T5949] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.397327][ T5955] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.401127][ T5945] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.401491][ T5945] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.404315][ T5955] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.406277][ T5945] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.408299][ T5955] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.410998][ T5945] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.413328][ T5955] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.421620][ T5955] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.577584][ T5940] chnl_net:caif_netlink_parms(): no params data found [ 46.715927][ T5940] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.718189][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.721103][ T5940] bridge_slave_0: entered allmulticast mode [ 46.724206][ T5940] bridge_slave_0: entered promiscuous mode [ 46.747726][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.751376][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.753696][ T5940] bridge_slave_1: entered allmulticast mode [ 46.757119][ T5940] bridge_slave_1: entered promiscuous mode [ 46.832949][ T5940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.836605][ T5946] chnl_net:caif_netlink_parms(): no params data found [ 46.850540][ T5940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.921812][ T5940] team0: Port device team_slave_0 added [ 46.923991][ T5951] chnl_net:caif_netlink_parms(): no params data found [ 46.929054][ T5938] chnl_net:caif_netlink_parms(): no params data found [ 46.938732][ T5940] team0: Port device team_slave_1 added [ 46.994535][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.996902][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.006100][ T5940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.016275][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.019143][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.028627][ T5940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.111236][ T5946] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.113835][ T5946] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.116129][ T5946] bridge_slave_0: entered allmulticast mode [ 47.118814][ T5946] bridge_slave_0: entered promiscuous mode [ 47.122292][ T5946] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.124775][ T5946] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.127474][ T5946] bridge_slave_1: entered allmulticast mode [ 47.130701][ T5946] bridge_slave_1: entered promiscuous mode [ 47.226491][ T5946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.267235][ T5940] hsr_slave_0: entered promiscuous mode [ 47.269495][ T5940] hsr_slave_1: entered promiscuous mode [ 47.274879][ T5946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.293190][ T5951] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.295508][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.297720][ T5951] bridge_slave_0: entered allmulticast mode [ 47.300522][ T5951] bridge_slave_0: entered promiscuous mode [ 47.303770][ T5938] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.306455][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.308792][ T5938] bridge_slave_0: entered allmulticast mode [ 47.311439][ T5938] bridge_slave_0: entered promiscuous mode [ 47.314594][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.316893][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.319271][ T5938] bridge_slave_1: entered allmulticast mode [ 47.322517][ T5938] bridge_slave_1: entered promiscuous mode [ 47.357144][ T5951] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.359517][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.361922][ T5951] bridge_slave_1: entered allmulticast mode [ 47.364810][ T5951] bridge_slave_1: entered promiscuous mode [ 47.439434][ T5946] team0: Port device team_slave_0 added [ 47.464388][ T5938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.474516][ T5946] team0: Port device team_slave_1 added [ 47.478878][ T5951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.485823][ T5951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.491199][ T5938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.626344][ T5938] team0: Port device team_slave_0 added [ 47.638766][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.641234][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.649340][ T5946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.654893][ T5951] team0: Port device team_slave_0 added [ 47.661305][ T5951] team0: Port device team_slave_1 added [ 47.664401][ T5938] team0: Port device team_slave_1 added [ 47.666735][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.669141][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.677499][ T5946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.744729][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.746981][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.755012][ T5938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.759267][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.763523][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.771443][ T5951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.778398][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.780724][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.789306][ T5951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.799303][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.801622][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.812154][ T5938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.886236][ T5946] hsr_slave_0: entered promiscuous mode [ 47.888456][ T5946] hsr_slave_1: entered promiscuous mode [ 47.891166][ T5946] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.893898][ T5946] Cannot create hsr debugfs directory [ 47.946337][ T5951] hsr_slave_0: entered promiscuous mode [ 47.948748][ T5951] hsr_slave_1: entered promiscuous mode [ 47.952280][ T5951] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.955335][ T5951] Cannot create hsr debugfs directory [ 47.984868][ T5938] hsr_slave_0: entered promiscuous mode [ 47.987332][ T5938] hsr_slave_1: entered promiscuous mode [ 47.989471][ T5938] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.992967][ T5938] Cannot create hsr debugfs directory [ 48.160801][ T5940] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.168747][ T5940] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.182047][ T5940] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.222694][ T5940] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.286641][ T5946] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.292134][ T5946] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.296710][ T5946] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.300878][ T5946] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.333650][ T5938] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.338792][ T5938] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.343537][ T5938] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.348745][ T5938] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.401172][ T5951] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.408382][ T5951] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.420761][ T5951] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.428198][ T5951] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.439543][ T5940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.440810][ T5955] Bluetooth: hci3: command tx timeout [ 48.440859][ T5950] Bluetooth: hci1: command tx timeout [ 48.442701][ T5950] Bluetooth: hci2: command tx timeout [ 48.443136][ T5295] Bluetooth: hci0: command tx timeout [ 48.477231][ T5940] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.504175][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.506582][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.522821][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.525179][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.541951][ T5946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.552995][ T5938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.585707][ T5938] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.598616][ T5946] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.604944][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.607505][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.619401][ T5940] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 48.623541][ T5940] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.634724][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.637325][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.642527][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.645573][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.657913][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.660835][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.677763][ T5951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.720191][ T5951] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.732238][ T1135] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.734520][ T1135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.741907][ T5946] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.764267][ T1135] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.766855][ T1135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.783401][ T5940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.830991][ T5940] veth0_vlan: entered promiscuous mode [ 48.844994][ T5938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.852110][ T5940] veth1_vlan: entered promiscuous mode [ 48.872234][ T5946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.895213][ T5938] veth0_vlan: entered promiscuous mode [ 48.906672][ T5940] veth0_macvtap: entered promiscuous mode [ 48.913261][ T5938] veth1_vlan: entered promiscuous mode [ 48.919304][ T5940] veth1_macvtap: entered promiscuous mode [ 48.950833][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.954356][ T5946] veth0_vlan: entered promiscuous mode [ 48.960025][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.968374][ T5940] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.972263][ T5940] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.974955][ T5940] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.977644][ T5940] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.983489][ T5951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.986823][ T5938] veth0_macvtap: entered promiscuous mode [ 48.991916][ T5946] veth1_vlan: entered promiscuous mode [ 48.996787][ T5938] veth1_macvtap: entered promiscuous mode [ 49.023761][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.027101][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.031943][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.041240][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.044824][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.048949][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.053654][ T5938] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.056395][ T5938] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.060133][ T5938] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.063060][ T5938] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.074783][ T5946] veth0_macvtap: entered promiscuous mode [ 49.093837][ T5946] veth1_macvtap: entered promiscuous mode [ 49.107977][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.111302][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.117721][ T5951] veth0_vlan: entered promiscuous mode [ 49.129174][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.132345][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.133679][ T5946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.138353][ T5946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.141794][ T5946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.145130][ T5946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.150260][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.167581][ T5946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.171320][ T5946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.174867][ T5946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.178594][ T5946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.182753][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.186415][ T5951] veth1_vlan: entered promiscuous mode [ 49.197353][ T5946] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.202015][ T5946] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.205425][ T5946] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.208887][ T5946] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.215434][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.218621][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.224792][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.228196][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.267662][ T5951] veth0_macvtap: entered promiscuous mode [ 49.276091][ T5951] veth1_macvtap: entered promiscuous mode [ 49.291758][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.292350][ T5940] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.295377][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.317743][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.322705][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.327292][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.332451][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.336275][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.340844][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.346716][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.352324][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.355385][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.362350][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.366526][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.372140][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.375630][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.378654][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.383341][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.387363][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.393093][ T5951] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.396186][ T5951] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.399121][ T5951] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.401932][ T5951] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.442060][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.444544][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.473888][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.476486][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.761447][ T6011] netlink: 'syz.3.4': attribute type 10 has an invalid length. [ 49.786742][ T6011] veth0_vlan: left promiscuous mode [ 49.791514][ T6011] veth0_vlan: entered promiscuous mode [ 49.795950][ T6011] team0: Device veth0_vlan failed to register rx_handler [ 50.494351][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 50.524938][ T5950] Bluetooth: hci0: command tx timeout [ 50.526847][ T5950] Bluetooth: hci3: command tx timeout [ 50.530046][ T5950] Bluetooth: hci2: command tx timeout [ 50.530224][ T5955] Bluetooth: hci1: command tx timeout [ 50.670216][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.680516][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.909863][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 51.000511][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 51.003731][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 51.520519][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 51.561124][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 51.660072][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 51.669933][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 52.600116][ T5950] Bluetooth: hci2: command tx timeout [ 52.600159][ T5295] Bluetooth: hci3: command tx timeout [ 52.601889][ T5950] Bluetooth: hci0: command tx timeout [ 52.606223][ T5955] Bluetooth: hci1: command tx timeout [ 54.060168][ T6076] netlink: 56 bytes leftover after parsing attributes in process `syz.1.17'. [ 54.681237][ T5950] Bluetooth: hci3: command tx timeout [ 54.683905][ T5950] Bluetooth: hci0: command tx timeout [ 54.686621][ T5950] Bluetooth: hci2: command tx timeout [ 54.689223][ T5950] Bluetooth: hci1: command tx timeout [ 55.119088][ T6089] fuse: Bad value for 'group_id' [ 55.126765][ T6089] fuse: Bad value for 'group_id' [ 58.513017][ T6134] netlink: 4 bytes leftover after parsing attributes in process `syz.0.31'. [ 62.921101][ T6183] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 62.929667][ T40] audit: type=1326 audit(1745655901.627:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6182 comm="syz.2.44" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 62.936500][ T40] audit: type=1326 audit(1745655901.637:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6182 comm="syz.2.44" exe="/syz-executor" sig=0 arch=40000003 syscall=321 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 62.943722][ T40] audit: type=1326 audit(1745655901.637:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6182 comm="syz.2.44" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 62.952179][ T40] audit: type=1326 audit(1745655901.637:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6182 comm="syz.2.44" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 62.959110][ T40] audit: type=1326 audit(1745655901.637:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6182 comm="syz.2.44" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 62.966743][ T40] audit: type=1326 audit(1745655901.637:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6182 comm="syz.2.44" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 62.973904][ T40] audit: type=1326 audit(1745655901.637:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6182 comm="syz.2.44" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 62.980621][ T40] audit: type=1326 audit(1745655901.637:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6182 comm="syz.2.44" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 62.987252][ T40] audit: type=1326 audit(1745655901.637:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6182 comm="syz.2.44" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 62.995025][ T40] audit: type=1326 audit(1745655901.637:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6182 comm="syz.2.44" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 63.648422][ T66] Process accounting resumed [ 63.665252][ T6197] ======================================================= [ 63.665252][ T6197] WARNING: The mand mount option has been deprecated and [ 63.665252][ T6197] and is ignored by this kernel. Remove the mand [ 63.665252][ T6197] option from the mount to silence this warning. [ 63.665252][ T6197] ======================================================= [ 64.596143][ T6208] netlink: 12 bytes leftover after parsing attributes in process `syz.1.50'. [ 65.362478][ T6220] block device autoloading is deprecated and will be removed. [ 65.637747][ T6230] netlink: 'syz.0.58': attribute type 4 has an invalid length. [ 68.357032][ T6266] fuse: Bad value for 'fd' [ 69.554898][ T66] Process accounting resumed [ 70.548230][ T6296] Process accounting resumed [ 70.681117][ T6303] fuse: Bad value for 'fd' [ 70.933501][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.936130][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.366487][ T6318] overlayfs: missing 'lowerdir' [ 72.726012][ T6000] Process accounting resumed [ 74.154521][ T6346] Process accounting resumed [ 74.576021][ T6372] netlink: 4 bytes leftover after parsing attributes in process `syz.0.92'. [ 75.163001][ T6377] netlink: 20 bytes leftover after parsing attributes in process `syz.3.98'. [ 75.167350][ T6377] trusted_key: syz.3.98 sent an empty control message without MSG_MORE. [ 75.513994][ T6388] netlink: 4 bytes leftover after parsing attributes in process `syz.3.101'. [ 77.183362][ T6416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.109'. [ 77.820396][ T6422] netlink: 20 bytes leftover after parsing attributes in process `syz.2.110'. [ 78.564179][ T66] Process accounting resumed [ 78.934992][ T6453] netlink: 4 bytes leftover after parsing attributes in process `syz.3.119'. [ 81.176182][ T58] cfg80211: failed to load regulatory.db [ 81.426502][ T66] Process accounting resumed [ 81.938198][ T6508] netlink: 4 bytes leftover after parsing attributes in process `syz.1.134'. [ 82.436680][ T6513] netlink: 4 bytes leftover after parsing attributes in process `syz.2.135'. [ 83.983048][ T6550] netlink: 4 bytes leftover after parsing attributes in process `syz.2.145'. [ 84.038833][ T6000] Process accounting resumed [ 84.713278][ T6560] netlink: 20 bytes leftover after parsing attributes in process `syz.1.149'. [ 84.904847][ T6000] Process accounting resumed [ 85.653797][ T6584] netlink: 4 bytes leftover after parsing attributes in process `syz.3.155'. [ 86.064862][ T6594] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.073859][ T6594] syz.0.158: attempt to access beyond end of device [ 86.073859][ T6594] nbd0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 86.078323][ T6594] syz.0.158: attempt to access beyond end of device [ 86.078323][ T6594] nbd0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 86.083652][ T6594] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 86.086651][ T6594] syz.0.158: attempt to access beyond end of device [ 86.086651][ T6594] nbd0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 86.090941][ T6594] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 86.094911][ T6594] syz.0.158: attempt to access beyond end of device [ 86.094911][ T6594] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 86.099022][ T6594] syz.0.158: attempt to access beyond end of device [ 86.099022][ T6594] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 86.103683][ T6594] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 86.106805][ T6594] syz.0.158: attempt to access beyond end of device [ 86.106805][ T6594] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 86.111661][ T6594] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 86.115217][ T6594] syz.0.158: attempt to access beyond end of device [ 86.115217][ T6594] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 86.119209][ T6594] syz.0.158: attempt to access beyond end of device [ 86.119209][ T6594] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 86.124814][ T6594] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 86.127799][ T6594] syz.0.158: attempt to access beyond end of device [ 86.127799][ T6594] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 86.132126][ T6594] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 86.136069][ T6594] syz.0.158: attempt to access beyond end of device [ 86.136069][ T6594] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 86.141045][ T6594] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 86.144094][ T6594] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 86.146942][ T6594] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 86.416227][ T6609] capability: warning: `syz.1.164' uses 32-bit capabilities (legacy support in use) [ 87.532141][ T6631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.168'. [ 87.799055][ T6633] fuse: Bad value for 'fd' [ 87.804841][ T6633] Zero length message leads to an empty skb [ 87.863991][ T6634] tipc: Started in network mode [ 87.865699][ T6634] tipc: Node identity 4000004, cluster identity 4711 [ 87.868226][ T6634] tipc: Node number set to 67108868 [ 87.945727][ T6637] netlink: 4 bytes leftover after parsing attributes in process `syz.3.171'. [ 88.258009][ T6646] fuse: Unknown parameter 'fd0x0000000000000003' [ 89.472677][ T66] Process accounting resumed [ 90.070615][ T6689] netlink: 36 bytes leftover after parsing attributes in process `syz.3.185'. [ 90.074920][ T6689] netlink: 16 bytes leftover after parsing attributes in process `syz.3.185'. [ 90.080778][ T6689] netlink: 36 bytes leftover after parsing attributes in process `syz.3.185'. [ 90.084736][ T6689] netlink: 36 bytes leftover after parsing attributes in process `syz.3.185'. [ 90.094387][ T6689] netlink: 4 bytes leftover after parsing attributes in process `syz.3.185'. [ 91.454830][ T6710] netlink: 20 bytes leftover after parsing attributes in process `syz.3.191'. [ 91.939846][ T66] Process accounting resumed [ 92.661704][ T6741] fuse: Bad value for 'fd' [ 92.895468][ T6745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.197'. [ 93.050859][ T6748] netlink: 20 bytes leftover after parsing attributes in process `syz.0.201'. [ 94.317014][ T6776] netlink: 4 bytes leftover after parsing attributes in process `syz.0.208'. [ 94.748003][ T6784] netlink: 20 bytes leftover after parsing attributes in process `syz.3.210'. [ 94.984587][ T833] Process accounting resumed [ 95.745384][ T6808] syz.3.217 uses obsolete (PF_INET,SOCK_PACKET) [ 96.190839][ T6818] overlay: ./file0 is not a directory [ 97.026387][ T6828] netlink: 4 bytes leftover after parsing attributes in process `syz.0.221'. [ 97.464562][ T6841] netlink: 36 bytes leftover after parsing attributes in process `syz.2.224'. [ 97.467637][ T6841] netlink: 16 bytes leftover after parsing attributes in process `syz.2.224'. [ 97.471915][ T6841] netlink: 36 bytes leftover after parsing attributes in process `syz.2.224'. [ 97.475250][ T6841] netlink: 36 bytes leftover after parsing attributes in process `syz.2.224'. [ 97.492124][ T6841] netlink: 4 bytes leftover after parsing attributes in process `syz.2.224'. [ 97.710424][ T6843] fuse: Bad value for 'fd' [ 98.112349][ T5997] Process accounting resumed [ 98.162941][ T6852] Process accounting resumed [ 98.379892][ T6867] __nla_validate_parse: 1 callbacks suppressed [ 98.379933][ T6867] netlink: 4 bytes leftover after parsing attributes in process `syz.1.230'. [ 99.435785][ T6889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.235'. [ 99.628592][ T6893] netlink: 20 bytes leftover after parsing attributes in process `syz.0.237'. [ 99.933652][ T833] Process accounting resumed [ 100.434059][ T58] Process accounting resumed [ 101.383214][ T6932] netlink: 20 bytes leftover after parsing attributes in process `syz.2.251'. [ 101.694653][ T6945] netlink: 4 bytes leftover after parsing attributes in process `syz.0.255'. [ 101.702692][ T833] Process accounting resumed [ 101.704222][ T6945] erspan0: entered promiscuous mode [ 101.706990][ T6945] macvtap1: entered promiscuous mode [ 101.709214][ T6945] macvtap1: entered allmulticast mode [ 101.712342][ T6945] erspan0: entered allmulticast mode [ 102.249187][ T6958] netlink: 20 bytes leftover after parsing attributes in process `syz.3.261'. [ 102.510712][ T833] Process accounting resumed [ 102.833101][ T6973] netlink: 4 bytes leftover after parsing attributes in process `syz.3.263'. [ 103.361317][ T6985] FAULT_INJECTION: forcing a failure. [ 103.361317][ T6985] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 103.365281][ T6985] CPU: 2 UID: 0 PID: 6985 Comm: syz.2.267 Not tainted 6.15.0-rc3-syzkaller-00244-gc3137514f1f1 #0 PREEMPT(full) [ 103.365295][ T6985] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 103.365301][ T6985] Call Trace: [ 103.365305][ T6985] [ 103.365309][ T6985] dump_stack_lvl+0x16c/0x1f0 [ 103.365326][ T6985] should_fail_ex+0x512/0x640 [ 103.365342][ T6985] _copy_from_user+0x2e/0xd0 [ 103.365358][ T6985] get_user_ifreq+0x116/0x1c0 [ 103.365371][ T6985] sock_do_ioctl+0x16b/0x280 [ 103.365383][ T6985] ? __pfx_sock_do_ioctl+0x10/0x10 [ 103.365402][ T6985] compat_sock_ioctl+0x301/0x730 [ 103.365416][ T6985] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 103.365432][ T6985] ? __fget_files+0x20e/0x3c0 [ 103.365447][ T6985] ? fput+0x30/0xf0 [ 103.365462][ T6985] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 103.365474][ T6985] __ia32_compat_sys_ioctl+0x24c/0x360 [ 103.365490][ T6985] __do_fast_syscall_32+0x73/0x120 [ 103.365505][ T6985] do_fast_syscall_32+0x32/0x80 [ 103.365518][ T6985] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 103.365531][ T6985] RIP: 0023:0xf710e579 [ 103.365539][ T6985] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 103.365549][ T6985] RSP: 002b:00000000f50fe55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 103.365559][ T6985] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000008933 [ 103.365565][ T6985] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 103.365571][ T6985] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 103.365577][ T6985] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 103.365583][ T6985] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 103.365595][ T6985] [ 103.680603][ T6995] netlink: 4 bytes leftover after parsing attributes in process `syz.1.265'. [ 104.010838][ T833] Process accounting resumed [ 104.153762][ T6999] netlink: 20 bytes leftover after parsing attributes in process `syz.1.271'. [ 104.627286][ T66] Process accounting resumed [ 105.418584][ T7013] Process accounting resumed [ 106.899380][ T66] Process accounting resumed [ 107.160397][ T5950] Bluetooth: hci3: command 0x0405 tx timeout [ 107.721595][ T7054] netlink: 4 bytes leftover after parsing attributes in process `syz.3.285'. [ 107.941336][ T7059] netlink: 4 bytes leftover after parsing attributes in process `syz.2.286'. [ 108.822294][ T7082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.289'. [ 109.235703][ T7094] netlink: 20 bytes leftover after parsing attributes in process `syz.3.295'. [ 109.398242][ T7099] netlink: 20 bytes leftover after parsing attributes in process `syz.3.297'. [ 109.433608][ T7097] ptrace attach of "/syz-executor exec"[7103] was attempted by "/syz-executor exec"[7097] [ 109.513653][ T7106] fuse: Bad value for 'fd' [ 109.921907][ T7115] netlink: 4 bytes leftover after parsing attributes in process `syz.3.300'. [ 110.600092][ T5950] Bluetooth: hci3: command 0x0405 tx timeout [ 111.086666][ T7133] netlink: 20 bytes leftover after parsing attributes in process `syz.0.306'. [ 111.508926][ T7143] fuse: Bad value for 'fd' [ 112.180318][ T7156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.312'. [ 112.552258][ T7147] Process accounting resumed [ 112.653367][ T66] Process accounting resumed [ 113.442489][ T7184] netlink: 4 bytes leftover after parsing attributes in process `syz.3.318'. [ 113.453637][ T7181] netlink: 20 bytes leftover after parsing attributes in process `syz.2.319'. [ 113.996890][ C1] vkms_vblank_simulate: vblank timer overrun [ 115.246987][ T7202] Process accounting resumed [ 115.832381][ T5981] Process accounting resumed [ 116.902031][ T7241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.332'. [ 117.555851][ T7260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.339'. [ 117.559088][ T7260] netlink: 72 bytes leftover after parsing attributes in process `syz.1.339'. [ 118.868854][ T66] Process accounting resumed [ 119.311492][ T7259] [U]  [ 120.095653][ T7299] netlink: 4 bytes leftover after parsing attributes in process `syz.2.346'. [ 120.235577][ T7305] bridge0: port 3(syz_tun) entered blocking state [ 120.238559][ T7305] bridge0: port 3(syz_tun) entered disabled state [ 120.241578][ T7305] syz_tun: entered allmulticast mode [ 120.244182][ T7305] syz_tun: entered promiscuous mode [ 120.246318][ T7305] bridge0: port 3(syz_tun) entered blocking state [ 120.249155][ T7305] bridge0: port 3(syz_tun) entered forwarding state [ 120.568423][ T5981] libceph: connect (1)[c::]:6789 error -101 [ 120.579541][ T5981] libceph: mon0 (1)[c::]:6789 connect error [ 120.583743][ T7311] netlink: 20 bytes leftover after parsing attributes in process `syz.3.351'. [ 120.592085][ T5981] libceph: connect (1)[c::]:6789 error -101 [ 120.605296][ T5981] libceph: mon0 (1)[c::]:6789 connect error [ 120.892413][ T66] libceph: connect (1)[c::]:6789 error -101 [ 120.895526][ T66] libceph: mon0 (1)[c::]:6789 connect error [ 121.400684][ T5981] libceph: connect (1)[c::]:6789 error -101 [ 121.435617][ T5981] libceph: mon0 (1)[c::]:6789 connect error [ 121.461575][ T5981] Process accounting resumed [ 122.366509][ T7310] ceph: No mds server is up or the cluster is laggy [ 122.372320][ T66] libceph: connect (1)[c::]:6789 error -101 [ 122.374285][ T66] libceph: mon0 (1)[c::]:6789 connect error [ 123.943239][ T7370] bridge0: port 3(syz_tun) entered blocking state [ 123.945332][ T7370] bridge0: port 3(syz_tun) entered disabled state [ 123.947956][ T7370] syz_tun: entered allmulticast mode [ 123.950443][ T7370] syz_tun: entered promiscuous mode [ 123.952431][ T7370] bridge0: port 3(syz_tun) entered blocking state [ 123.954485][ T7370] bridge0: port 3(syz_tun) entered forwarding state [ 124.200277][ T5981] libceph: connect (1)[c::]:6789 error -101 [ 124.203735][ T5981] libceph: mon0 (1)[c::]:6789 connect error [ 124.207259][ T5981] libceph: connect (1)[c::]:6789 error -101 [ 124.220973][ T5981] libceph: mon0 (1)[c::]:6789 connect error [ 124.480075][ T5981] libceph: connect (1)[c::]:6789 error -101 [ 124.482126][ T5981] libceph: mon0 (1)[c::]:6789 connect error [ 124.727224][ T7391] netlink: 20 bytes leftover after parsing attributes in process `syz.2.371'. [ 124.831343][ T7376] ceph: No mds server is up or the cluster is laggy [ 124.939147][ T7400] netlink: 36 bytes leftover after parsing attributes in process `syz.2.373'. [ 124.943078][ T7400] netlink: 16 bytes leftover after parsing attributes in process `syz.2.373'. [ 124.947108][ T7400] netlink: 36 bytes leftover after parsing attributes in process `syz.2.373'. [ 124.951763][ T7400] netlink: 36 bytes leftover after parsing attributes in process `syz.2.373'. [ 126.801842][ T5981] Process accounting resumed [ 127.111431][ T7444] netlink: 20 bytes leftover after parsing attributes in process `syz.0.386'. [ 127.114470][ T7448] bridge0: port 3(syz_tun) entered blocking state [ 127.114569][ T7448] bridge0: port 3(syz_tun) entered disabled state [ 127.114694][ T7448] syz_tun: entered allmulticast mode [ 127.116129][ T7448] syz_tun: entered promiscuous mode [ 127.124113][ T7448] bridge0: port 3(syz_tun) entered blocking state [ 127.126248][ T7448] bridge0: port 3(syz_tun) entered forwarding state [ 127.684792][ T58] libceph: connect (1)[c::]:6789 error -101 [ 127.687566][ T58] libceph: mon0 (1)[c::]:6789 connect error [ 127.959947][ T58] libceph: connect (1)[c::]:6789 error -101 [ 127.962139][ T58] libceph: mon0 (1)[c::]:6789 connect error [ 128.445903][ T7449] ceph: No mds server is up or the cluster is laggy [ 128.760816][ T7479] netlink: 20 bytes leftover after parsing attributes in process `syz.3.396'. [ 128.986007][ T7493] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 130.001621][ T7512] netlink: 'syz.3.405': attribute type 1 has an invalid length. [ 130.004021][ T7512] netlink: 224 bytes leftover after parsing attributes in process `syz.3.405'. [ 130.279840][ T5955] Bluetooth: hci3: command 0x0405 tx timeout [ 130.576711][ T7524] netlink: 20 bytes leftover after parsing attributes in process `syz.3.407'. [ 130.879182][ T5981] Process accounting resumed [ 131.618519][ T5981] Process accounting resumed [ 131.908420][ T7557] warning: `syz.2.417' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 131.914801][ T7557] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 131.982746][ T7561] netlink: 20 bytes leftover after parsing attributes in process `syz.2.419'. [ 132.361761][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.364664][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.923213][ T24] Process accounting resumed [ 133.049079][ T7587] netlink: 4 bytes leftover after parsing attributes in process `syz.0.426'. [ 133.510207][ T7594] netlink: 12 bytes leftover after parsing attributes in process `syz.3.428'. [ 133.671467][ T7597] netlink: 36 bytes leftover after parsing attributes in process `syz.2.429'. [ 133.674533][ T7597] netlink: 16 bytes leftover after parsing attributes in process `syz.2.429'. [ 133.677655][ T7597] netlink: 36 bytes leftover after parsing attributes in process `syz.2.429'. [ 133.681731][ T7597] netlink: 36 bytes leftover after parsing attributes in process `syz.2.429'. [ 134.753716][ T5955] non-paged memory [ 134.755665][ T5955] list_del corruption, ffff88804ecab400->next is LIST_POISON1 (dead000000000100) [ 134.758763][ T5955] ------------[ cut here ]------------ [ 134.760685][ T5955] kernel BUG at lib/list_debug.c:56! [ 134.762616][ T5955] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 134.766061][ T5955] CPU: 1 UID: 0 PID: 5955 Comm: kworker/u33:8 Not tainted 6.15.0-rc3-syzkaller-00244-gc3137514f1f1 #0 PREEMPT(full) [ 134.770117][ T5955] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 134.773834][ T5955] Workqueue: hci3 hci_conn_timeout [ 134.775563][ T5955] RIP: 0010:__list_del_entry_valid_or_report+0x121/0x200 [ 134.777935][ T5955] Code: 48 c7 c7 e0 6a f4 8b e8 dd 45 c7 fc 90 0f 0b 4c 89 e7 e8 c2 f7 29 fd 4c 89 e2 48 89 de 48 c7 c7 40 6b f4 8b e8 c0 45 c7 fc 90 <0f> 0b 48 89 ef e8 a5 f7 29 fd 48 89 ea 48 89 de 48 c7 c7 a0 6b f4 [ 134.784162][ T5955] RSP: 0018:ffffc90002d8fb80 EFLAGS: 00010286 [ 134.786426][ T5955] RAX: 000000000000004e RBX: ffff88804ecab400 RCX: ffffffff819a2819 [ 134.789300][ T5955] RDX: 0000000000000000 RSI: ffffffff819aa6a6 RDI: 0000000000000005 [ 134.791838][ T5955] RBP: dead000000000122 R08: 0000000000000005 R09: 0000000000000000 [ 134.794283][ T5955] R10: 0000000080000000 R11: 0000000000000000 R12: dead000000000100 [ 134.796858][ T5955] R13: dffffc0000000000 R14: ffff88801fd90618 R15: ffff88804ecab400 [ 134.799275][ T5955] FS: 0000000000000000(0000) GS:ffff8880978ef000(0000) knlGS:0000000000000000 [ 134.801993][ T5955] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 134.804576][ T5955] CR2: 000000002ef1eff8 CR3: 0000000068e12000 CR4: 0000000000352ef0 [ 134.807504][ T5955] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 134.810253][ T5955] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 134.812776][ T5955] Call Trace: [ 134.813834][ T5955] [ 134.814913][ T5955] _hci_cmd_sync_cancel_entry.constprop.0+0x80/0x1d0 [ 134.816976][ T5955] hci_cancel_connect_sync+0xfa/0x2b0 [ 134.818664][ T5955] hci_abort_conn+0x15a/0x340 [ 134.820212][ T5955] hci_conn_timeout+0x1a2/0x210 [ 134.821755][ T5955] process_one_work+0x9cc/0x1b70 [ 134.823693][ T5955] ? __pfx_process_one_work+0x10/0x10 [ 134.825823][ T5955] ? assign_work+0x1a0/0x250 [ 134.827537][ T5955] worker_thread+0x6c8/0xf10 [ 134.829239][ T5955] ? __kthread_parkme+0x19e/0x250 [ 134.830994][ T5955] ? __pfx_worker_thread+0x10/0x10 [ 134.832720][ T5955] kthread+0x3c2/0x780 [ 134.834006][ T5955] ? __pfx_kthread+0x10/0x10 [ 134.835493][ T5955] ? __pfx_kthread+0x10/0x10 [ 134.837168][ T5955] ? __pfx_kthread+0x10/0x10 [ 134.838656][ T5955] ? __pfx_kthread+0x10/0x10 [ 134.840159][ T5955] ? rcu_is_watching+0x12/0xc0 [ 134.841643][ T5955] ? __pfx_kthread+0x10/0x10 [ 134.843356][ T5955] ret_from_fork+0x45/0x80 [ 134.845307][ T5955] ? __pfx_kthread+0x10/0x10 [ 134.847429][ T5955] ret_from_fork_asm+0x1a/0x30 [ 134.849608][ T5955] [ 134.850747][ T5955] Modules linked in: [ 134.852324][ T5955] ---[ end trace 0000000000000000 ]--- [ 134.854662][ T5955] RIP: 0010:__list_del_entry_valid_or_report+0x121/0x200 [ 134.856934][ T5955] Code: 48 c7 c7 e0 6a f4 8b e8 dd 45 c7 fc 90 0f 0b 4c 89 e7 e8 c2 f7 29 fd 4c 89 e2 48 89 de 48 c7 c7 40 6b f4 8b e8 c0 45 c7 fc 90 <0f> 0b 48 89 ef e8 a5 f7 29 fd 48 89 ea 48 89 de 48 c7 c7 a0 6b f4 [ 134.862588][ T5955] RSP: 0018:ffffc90002d8fb80 EFLAGS: 00010286 [ 134.865113][ T5955] RAX: 000000000000004e RBX: ffff88804ecab400 RCX: ffffffff819a2819 [ 134.868320][ T5955] RDX: 0000000000000000 RSI: ffffffff819aa6a6 RDI: 0000000000000005 [ 134.871423][ T5955] RBP: dead000000000122 R08: 0000000000000005 R09: 0000000000000000 [ 134.874175][ T5955] R10: 0000000080000000 R11: 0000000000000000 R12: dead000000000100 [ 134.877066][ T5955] R13: dffffc0000000000 R14: ffff88801fd90618 R15: ffff88804ecab400 [ 134.880043][ T5955] FS: 0000000000000000(0000) GS:ffff8880979ef000(0000) knlGS:0000000000000000 [ 134.882861][ T5955] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 134.884958][ T5955] CR2: 0000000080032000 CR3: 0000000023b1a000 CR4: 0000000000352ef0 [ 134.887477][ T5955] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 134.890246][ T5955] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 134.893336][ T5955] Kernel panic - not syncing: Fatal exception [ 134.896265][ T5955] Kernel Offset: disabled [ 134.897714][ T5955] Rebooting in 86400 seconds.. VM DIAGNOSIS: 08:26:13 Registers: info registers vcpu 0 CPU#0 RAX=00000000002028d4 RBX=0000000000000000 RCX=ffffffff8b68c3e9 RDX=ffffed10056465be RSI=ffffffff8bf46720 RDI=ffffffff819130b1 RBP=fffffbfff1c12ee8 RSP=ffffffff8e007e10 R8 =0000000000000000 R9 =ffffed10056465bd R10=ffff88802b232deb R11=0000000000000001 R12=0000000000000000 R13=ffffffff8e097740 R14=ffffffff90850d10 R15=0000000000000000 RIP=ffffffff8b68ac7f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977ef000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000058041404 CR3=000000006d44a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff854bf230 RDI=ffffffff9addcb80 RBP=ffffffff9addcb40 RSP=ffffc90002d8f4c8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6e69203a73706f4f R12=0000000000000000 R13=0000000000000020 R14=fffffbfff35bb9c2 R15=dffffc0000000000 RIP=ffffffff854bf257 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880978ef000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002ef1eff8 CR3=0000000068e12000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000100a9c RBX=0000000000000002 RCX=ffffffff8b68c3e9 RDX=ffffed10056865be RSI=ffffffff8bf46720 RDI=ffffffff819130b1 RBP=ffffed10037e8910 RSP=ffffc9000047fdf8 R8 =0000000000000000 R9 =ffffed10056865bd R10=ffff88802b432deb R11=0000000000000001 R12=0000000000000002 R13=ffff88801bf44880 R14=ffffffff90850d10 R15=0000000000000000 RIP=ffffffff8b68ac7f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880979ef000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080032000 CR3=000000004c1cc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f73f2ff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000003 RBX=ffffffff8e3bf440 RCX=ffffc90002e40001 RDX=ffffc90002e3fa00 RSI=ffffffff81699d14 RDI=ffffffff8e3bf440 RBP=0000000000000001 RSP=ffffc90002e3f5f0 R8 =0000000000000001 R9 =0000000000000000 R10=ffffc90002e3f6a8 R11=0000000000011efc R12=ffffffff81699d14 R13=ffffc90002e3f6a8 R14=ffffc90002e3f9f8 R15=ffffc90002e3f6dc RIP=ffffffff8197a2c5 RFL=00000297 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097aef000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000005822e99c CR3=000000004a7ea000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000030500000000 0000000400000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000