last executing test programs: 6.404080194s ago: executing program 3 (id=193): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) sendmsg(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x4, 0x1, 0x1, {0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0xe}, {&(0x7f0000000480)="1d45c1f1a4a28a75a165e18fc2c66b404971044f4de2ee02423fe1511d6d3ae186b1cfd740bae3f331190872ec981f7175547bfcfbf1fd9db22aefeae7b16b5e8f34905537d1040353e35d25a2f256b0102d818aca470701c00b128bdc8d10b8543109df3ecd6f3df398448fa092", 0x6e}], 0x2, 0x0, 0x0, 0x11000000}, 0x81) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$ppp(0xffffff9c, &(0x7f0000000200), 0x2000, 0x0) ioctl$PPPIOCSACTIVE(r4, 0x40087446, &(0x7f00000003c0)={0x8, &(0x7f0000000240)=[{0x800, 0x0, 0xe7, 0xf475}, {0xffff, 0x3, 0x2, 0x4}, {0x0, 0x40, 0x3, 0x5}, {0x6, 0xfd, 0xd1, 0x5}, {0x8, 0x0, 0xa6, 0x3ff}, {0x6, 0x6, 0xfb, 0x6}, {0x6, 0x8, 0x42, 0x844b}, {0x401, 0x3, 0xf9, 0x7ff}]}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r2, @ANYBLOB="08001f0005000000050011000100000008001f000800000008002300010000000a"], 0x70}}, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000140)={0x1, 0x8, 0xd4, &(0x7f00000002c0)=""/212}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = dup(r7) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f0000000240)=@x86={0x8, 0x1, 0x5b, 0x0, 0x0, 0x2, 0xba, 0x6, 0x5c, 0x60, 0x5, 0xdd, 0x0, 0x10001, 0x80000001, 0x9, 0xf, 0x8, 0x40, '\x00', 0x6, 0x4b}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000001c0)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000006880)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0xd, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x51}, 0x8000) sendmsg$nl_route(r3, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)=@bridge_setlink={0x40, 0x13, 0x300, 0x70bd27, 0x25dfdbff, {0x7, 0x0, 0x0, r10, 0x10, 0x40000}, [@IFLA_MAP={0x20, 0xe, {0x7, 0x9e, 0x13d, 0xd3, 0x4, 0x38}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000050}, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) fchmod(r11, 0x1c2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xf, 0x9, &(0x7f0000000540)=ANY=[@ANYBLOB="180800000000000000000000000000008510000005000000850000000f0000005f0000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) 5.70597176s ago: executing program 3 (id=194): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) io_setup(0x40000000008, &(0x7f0000000240)=0x0) r5 = socket(0x1e, 0x801, 0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2, 0x0, 0x4, 0x0, 0x0, r5, &(0x7f0000000140)="dc", 0x1}]) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_freezer_state(r6, &(0x7f0000000140), 0x2, 0x0) sendfile(r7, r7, 0x0, 0x9) socket$alg(0x26, 0x5, 0x0) r8 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x8444, 0x13580}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r8, 0xe85, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01e"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) 5.334238599s ago: executing program 0 (id=198): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1004000, &(0x7f0000000640)={[], [{@uid_gt={'uid>', 0xee00}}, {@obj_type={'obj_type', 0x3d, 'smackfsroot'}}, {@permit_directio}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/dsp\x00'}}, {@audit}]}) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) io_setup(0xfb, 0x0) io_cancel(0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x400, r1, &(0x7f0000000380)="cae522a0fb876ef90e97f1a49626940b2936126907293ed2aced179480e7eddefe8536e5d26702b0509dcdb1c3c5c93bdd20d923c2d0ee5dd67042f683d5704a38922fafa55f227a6f0ea92a09bf7de7b5e39fe0823bb10a7d8d07aeeb3f766f8111cf1af12259e3e49ed2e287cc1dfb1cba3a7e66a6b1578096e4eb04b01e2a8a2ec469521b6cc8294ffde62fccf7bc4818c51a10fa55b740d01a90e4e7d3ed8f300fb1d40033d36490b098", 0xac, 0x3, 0x0, 0x1, r1}, &(0x7f0000000480)) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee1, 0x0, 0x2, 0xbfdffffc}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x0, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) getpriority(0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x3c, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f00000004c0)=0x3) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') 4.650319518s ago: executing program 1 (id=200): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000055c0), r0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000005680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) 4.577911955s ago: executing program 1 (id=201): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x7, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xfffffffe}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = syz_open_dev$swradio(&(0x7f0000000380), 0x0, 0x2) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000000)={0xf0f040, 0x8}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) sendfile(r3, r4, 0x0, 0xffffffff000) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r5 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x4000, 0xfffffffe}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) socket$packet(0x11, 0x2, 0x300) openat$dsp(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r5, 0x48e9, 0x0, 0x2, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) 3.756630896s ago: executing program 2 (id=204): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000000000)=0x639) readv(r5, &(0x7f0000000180)=[{&(0x7f0000000200)=""/147, 0x93}], 0x1) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x12060) 3.749870987s ago: executing program 0 (id=205): r0 = open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095000000000000002507739f99c037611e0668cd5456e371"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x0, 0x10, 0x10, &(0x7f0000000080)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x30) (async) fcntl$setlease(r1, 0x400, 0x1) close(r0) (async) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000240)=""/4) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r5 = pidfd_getfd(r1, r2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xf, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r8, 0x65, 0x7, &(0x7f00000001c0), 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000002000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r9, 0x0, 0x0}, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c000000130001c3000000000000000000000800", @ANYRES32=r10, @ANYBLOB="0000d400000000000a000100003b"], 0x2c}}, 0x0) 3.320659469s ago: executing program 1 (id=206): r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r0, 0x2284, &(0x7f0000000080)) 3.112301058s ago: executing program 3 (id=207): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000300), 0x0) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0x3}, 0x6) ioctl$sock_bt_hci(r4, 0x800448d5, &(0x7f0000000080)) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="870a00"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r5}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000840) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad44b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) r8 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x40080, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r9, 0x4048aec9, &(0x7f0000001540)={0x2, 0x0, @pic={0x4, 0x3, 0x8, 0xa, 0x8, 0x2, 0x8, 0x2, 0xfd, 0x5, 0x3, 0xe, 0x0, 0x10, 0x6, 0x7}}) sendmsg$kcm(r2, &(0x7f0000000380)={&(0x7f00000009c0)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e22, @multicast1}, 0x1, 0x4, 0x1}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000a40)="09b4a8c818cbb30d6f2d8909aee9a639e86c422fb2835e51172d39cbb4747ff8e081fd002b34c0542447eb7a68564fb9ef755e2806f4b7344339224c4491d74010", 0x41}, {&(0x7f0000000ac0)="faf78f2f710f810b709fbfc5307f71a13affd9a5d8156a2e70448c6fc12d9590a93662a0e5ab90d4ba1d568c1351ade2e17aec4271fcfbd48056519e72d5090a2e2be3398bf87ef533684e0b2967d0740701df3466300ef2b446e897ab759f54eec2b5873c0774e1436d08fb319902cb3c899be893f533f4184121aa24db64cff745661089758b8fa3e0da884c68f0e913daa1a9ec98a9a250c5edad1a5e76229922", 0xa2}, {&(0x7f0000000b80)="dcc7b46cb9f49dc76a98e14108650dcd9dde8fe8ab52956468ee7e436c4b69fd4cd7db0e139160f7c4c0dabae5ba02b66f6617d94d77671fb7a54e3601f34ee63154f6731e3dbcee9f5d945b27984a68dfa07b5af84c4801c6188ec81ea62d1a4b8eb3b67c93008d813a02a5c7d2a81a351b9b82feb843", 0x77}], 0x3, &(0x7f0000000c00)}, 0x0) connect$inet6(r5, &(0x7f0000000700)={0xa, 0x4e22, 0x80000001, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0x1c) sendmmsg$alg(r7, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="e4e32dd2b696733552eca3e954943a18709f72fbd259a936c67ebe806ab21823f4a0c47bff45323c2b30982dfc67b46cc9a5a07c33fc", 0xff6d}, {&(0x7f0000000100)="3a10bd003aba0c7026336b", 0xb}], 0x2, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x60}], 0x1, 0x8001) recvmmsg(r7, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/156, 0x9c}, {&(0x7f0000000300)=""/80, 0x50}, {&(0x7f0000000940)=""/72, 0x48}], 0x3}}], 0x1, 0x0, 0x0) 2.98792218s ago: executing program 2 (id=208): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x11) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) mkdir(0x0, 0x0) ioctl$SIOCX25SENDCALLACCPT(0xffffffffffffffff, 0x89e9) mount(0x0, 0x0, &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) setpriority(0x0, 0x0, 0xacf0165) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x400) r3 = openat$fuse(0xffffff9c, &(0x7f0000000300), 0x2, 0x0) read$FUSE(r3, 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000880)={{0x1, 0x1, 0x18, r4, {0x7f}}, './file0\x00'}) socket$rxrpc(0x21, 0x2, 0xa) fallocate(0xffffffffffffffff, 0x5, 0x935, 0x2) 2.987613305s ago: executing program 0 (id=209): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x5, &(0x7f0000019680)=""/102393, &(0x7f0000000000)=0x18ff9) 2.952780775s ago: executing program 1 (id=210): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000055c0), r0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000005680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) 2.873083127s ago: executing program 0 (id=211): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = dup(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) listen(r1, 0x241) mount$9p_fd(0x0, &(0x7f0000000540)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008085) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}}, 0x0) 2.872566888s ago: executing program 1 (id=212): r0 = socket(0x10, 0x2, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)={0xb, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "03"}}, 0x119) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000140)='\n\x00\x00\x00', 0x4}, {&(0x7f00000003c0)}], 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r2, r2, r2) syz_clone(0x22180, 0x0, 0xa42f, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socket$inet6(0xa, 0x80002, 0x0) syz_clone3(&(0x7f00000006c0)={0x200, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) 2.633700818s ago: executing program 0 (id=213): syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaa270005d70000fe0806000108000604"], 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x10, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x7}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) cachestat(r0, &(0x7f0000000000)={0x1867b42f, 0x2}, &(0x7f0000000040), 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000100)="f201000000eba0e7910a60f4d07e", 0xb, 0x0, &(0x7f0000000200)={0x11, 0x3, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.633279706s ago: executing program 2 (id=214): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x11) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) mkdir(0x0, 0x0) ioctl$SIOCX25SENDCALLACCPT(0xffffffffffffffff, 0x89e9) mount(0x0, 0x0, &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) setpriority(0x0, 0x0, 0xacf0165) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x400) r3 = openat$fuse(0xffffff9c, &(0x7f0000000300), 0x2, 0x0) read$FUSE(r3, 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000880)={{0x1, 0x1, 0x18, r4, {0x7f}}, './file0\x00'}) socket$rxrpc(0x21, 0x2, 0xa) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) fallocate(0xffffffffffffffff, 0x5, 0x935, 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffff9c, &(0x7f0000000340), 0x40841, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r6, 0xc0487c04, &(0x7f0000000680)={0x0, 0x5, 0x0, &(0x7f0000000980)=[{}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000780)=[{}], 0x4, 0x0, &(0x7f0000000700)=[{0x0, 0x80000000, 0x0, {0x0}}, {}, {}, {}], 0x0, 0x0, &(0x7f0000000780)}) ioctl$MEDIA_IOC_SETUP_LINK(r6, 0xc0347c03, &(0x7f00000001c0)={{0x80000000, 0x0, 0x1, [0x0, 0xf7df]}, {0x80000000, r7, 0x7, [0x6]}, 0x1, [0x8, 0x3df]}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) rt_tgsigqueueinfo(r8, r9, 0x25, &(0x7f00000001c0)={0x18, 0x9, 0x6}) 1.67460233s ago: executing program 0 (id=215): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) io_setup(0x40000000008, &(0x7f0000000240)=0x0) r5 = socket(0x1e, 0x801, 0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2, 0x0, 0x4, 0x0, 0x0, r5, &(0x7f0000000140)="dc", 0x1}]) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_freezer_state(r6, &(0x7f0000000140), 0x2, 0x0) sendfile(r7, r7, 0x0, 0x9) socket$alg(0x26, 0x5, 0x0) r8 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x8444, 0x13580}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r8, 0xe85, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01e"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) 1.35510788s ago: executing program 3 (id=216): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x7, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xfffffffe}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = syz_open_dev$swradio(&(0x7f0000000380), 0x0, 0x2) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000000)={0xf0f040, 0x8}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r4, 0x0, 0x0) sendfile(r3, r4, 0x0, 0xffffffff000) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r5 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x4000, 0xfffffffe}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) socket$packet(0x11, 0x2, 0x300) openat$dsp(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r5, 0x48e9, 0x0, 0x2, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) 831.39079ms ago: executing program 2 (id=217): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) 524.724362ms ago: executing program 2 (id=218): r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r0, 0x2284, &(0x7f0000000080)) 1.423067ms ago: executing program 1 (id=219): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r1, &(0x7f0000006380)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000c80)=""/4096, 0x1000}], 0x1}, 0xe}], 0x1, 0x40000042, 0x0) recvmsg$can_bcm(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000400)=""/192, 0xc0}], 0x1}, 0x140) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x20013) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0a00000004000000290000000900000000000000", @ANYRES32=0x1, @ANYBLOB="ff00000000000000000000000000000000000004", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x84042, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001ac0)={r3, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1c, "ff9f020b72622578171e70ce03740250ceaac594b1b3d741dd17c1ac0d38ef2a6300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130ee4d528539f3d3289737f0f8a60bf62fb0e11f1b3c7e7772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe, 0x9]}}) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x6, 0x19, 0xd, "89753015418ab0df6afb245518580ce0c8bf604cca41f31c108938fcfa393ef569e0bcf244bb4b23555b13ecab66c7d257a037d0f08e8ad896ba67a07696defa", "8b609009aaa722687f3f2513d754f688a9e306ee1dba533f02e1b69da6e26ec889fce40080000027cc7d24fdc26f1a95d702020000e4b8fb1703e47463b969e4", "ca1b97448abe996b48e2b870128218a0d22915216fddb100", [0x7, 0x7]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='sys_exit\x00', r5, 0x0, 0x4000000000000004}, 0x18) r6 = socket$xdp(0x2c, 0x3, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f0000000740)=0x8, 0x4) bind$xdp(r8, &(0x7f0000000100)={0x2c, 0x0, r10}, 0x10) 847.677µs ago: executing program 3 (id=220): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000055c0), r0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000005680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) 620.223µs ago: executing program 2 (id=221): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="e6000000"]) 0s ago: executing program 3 (id=222): r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffc}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000002a00), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000002ac0)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fbdbdf250200000005000d00280000000800020001000000080001"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4040080) listen(r0, 0x20000005) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x5, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xfffffffe, 0x0, 0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfe00, 0xa0}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9a02fff0}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000580)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x4e20, 0x6, @empty}, 0x1c) r10 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$inet6(r10, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:19596' (ED25519) to the list of known hosts. syzkaller login: [ 87.759851][ T5913] cgroup: Unknown subsys name 'net' [ 87.943089][ T5913] cgroup: Unknown subsys name 'cpuset' [ 87.968924][ T5913] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 90.153624][ T5913] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 100.058196][ T5968] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 100.067835][ T5968] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 100.084242][ T5968] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 100.093352][ T5968] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 100.104048][ T5968] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 100.127561][ T5971] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 100.164908][ T5972] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 100.165676][ T5971] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 100.168256][ T5977] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 100.170813][ T5971] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 100.175774][ T5972] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 100.178374][ T5971] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 100.184425][ T5972] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 100.187861][ T5971] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 100.225690][ T5972] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 100.230962][ T5972] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 100.235300][ T5972] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 100.249410][ T5977] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 100.285132][ T5977] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 100.290183][ T5977] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 100.719042][ T5964] chnl_net:caif_netlink_parms(): no params data found [ 100.917483][ T5969] chnl_net:caif_netlink_parms(): no params data found [ 101.250728][ T5964] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.255368][ T5964] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.258751][ T5964] bridge_slave_0: entered allmulticast mode [ 101.270440][ T5964] bridge_slave_0: entered promiscuous mode [ 101.317652][ T5974] chnl_net:caif_netlink_parms(): no params data found [ 101.352807][ T5964] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.355834][ T5964] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.360032][ T5964] bridge_slave_1: entered allmulticast mode [ 101.365014][ T5964] bridge_slave_1: entered promiscuous mode [ 101.573708][ T5964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.627349][ T5964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.699940][ T5969] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.704257][ T5969] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.707140][ T5969] bridge_slave_0: entered allmulticast mode [ 101.711798][ T5969] bridge_slave_0: entered promiscuous mode [ 101.732446][ T5973] chnl_net:caif_netlink_parms(): no params data found [ 101.919400][ T5969] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.925187][ T5969] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.931010][ T5969] bridge_slave_1: entered allmulticast mode [ 101.937663][ T5969] bridge_slave_1: entered promiscuous mode [ 102.037456][ T5974] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.040349][ T5974] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.054051][ T5974] bridge_slave_0: entered allmulticast mode [ 102.064200][ T5974] bridge_slave_0: entered promiscuous mode [ 102.181043][ T5974] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.182737][ T5977] Bluetooth: hci0: command tx timeout [ 102.184171][ T5974] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.189417][ T5974] bridge_slave_1: entered allmulticast mode [ 102.193731][ T5974] bridge_slave_1: entered promiscuous mode [ 102.228417][ T5964] team0: Port device team_slave_0 added [ 102.233615][ T5969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.239965][ T5969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.262260][ T5977] Bluetooth: hci3: command tx timeout [ 102.264634][ T5977] Bluetooth: hci1: command tx timeout [ 102.369541][ T5974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.386196][ T5964] team0: Port device team_slave_1 added [ 102.413258][ T5977] Bluetooth: hci2: command tx timeout [ 102.492971][ T5974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.879299][ T5964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.884177][ T5964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.896537][ T5964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.903945][ T5969] team0: Port device team_slave_0 added [ 102.908388][ T5969] team0: Port device team_slave_1 added [ 103.002276][ T5974] team0: Port device team_slave_0 added [ 103.005186][ T5973] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.008071][ T5973] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.010682][ T5973] bridge_slave_0: entered allmulticast mode [ 103.017966][ T5973] bridge_slave_0: entered promiscuous mode [ 103.022754][ T5964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.025474][ T5964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.036974][ T5964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.153705][ T5974] team0: Port device team_slave_1 added [ 103.156538][ T5973] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.159168][ T5973] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.170066][ T5973] bridge_slave_1: entered allmulticast mode [ 103.183075][ T5973] bridge_slave_1: entered promiscuous mode [ 103.306655][ T5969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.312881][ T5969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.334270][ T5969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.610715][ T5973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.614912][ T5969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.617574][ T5969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.650742][ T5969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.662169][ T5974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.665044][ T5974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.690145][ T5974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.708148][ T5974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.715682][ T5974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.734943][ T5974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.746051][ T5973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.850227][ T5973] team0: Port device team_slave_0 added [ 103.923585][ T5973] team0: Port device team_slave_1 added [ 104.254213][ T5977] Bluetooth: hci0: command tx timeout [ 104.332022][ T5977] Bluetooth: hci1: command tx timeout [ 104.341621][ T5977] Bluetooth: hci3: command tx timeout [ 104.391971][ T5973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.399418][ T5973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.445176][ T5973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.469914][ T5964] hsr_slave_0: entered promiscuous mode [ 104.473723][ T5964] hsr_slave_1: entered promiscuous mode [ 104.483229][ T5974] hsr_slave_0: entered promiscuous mode [ 104.486981][ T5974] hsr_slave_1: entered promiscuous mode [ 104.490112][ T5974] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.495065][ T5974] Cannot create hsr debugfs directory [ 104.503757][ T5977] Bluetooth: hci2: command tx timeout [ 104.506989][ T5969] hsr_slave_0: entered promiscuous mode [ 104.516063][ T5969] hsr_slave_1: entered promiscuous mode [ 104.523515][ T5969] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.528788][ T5969] Cannot create hsr debugfs directory [ 104.537678][ T5973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.540650][ T5973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.564223][ T5973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.838257][ T5973] hsr_slave_0: entered promiscuous mode [ 104.861583][ T5973] hsr_slave_1: entered promiscuous mode [ 104.865657][ T5973] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.869878][ T5973] Cannot create hsr debugfs directory [ 105.715320][ T5964] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 105.741663][ T5964] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 105.756556][ T5964] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 105.768987][ T5964] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 105.909312][ T5974] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.922133][ T5974] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.944090][ T5974] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.951297][ T5974] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 106.039981][ T5964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.129901][ T5973] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 106.145934][ T5973] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 106.181421][ T5973] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 106.193844][ T5973] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 106.237860][ T5964] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.324282][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.327226][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.331921][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.334464][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.346163][ T5977] Bluetooth: hci0: command tx timeout [ 106.375806][ T5974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.419925][ T5974] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.422499][ T5977] Bluetooth: hci1: command tx timeout [ 106.439131][ T5306] Bluetooth: hci3: command tx timeout [ 106.439974][ T5969] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 106.507563][ T1204] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.510678][ T1204] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.518269][ T5969] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 106.556398][ T5964] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 106.570776][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.574022][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.576945][ T5977] Bluetooth: hci2: command tx timeout [ 106.583552][ T5969] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 106.629728][ T5969] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 106.660732][ T5973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.737270][ T5973] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.859274][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.862060][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.894262][ T1204] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.897259][ T1204] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.055785][ T5964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.200426][ T5964] veth0_vlan: entered promiscuous mode [ 107.247504][ T5969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.279521][ T5969] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.307056][ T5974] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.316049][ T5964] veth1_vlan: entered promiscuous mode [ 107.327098][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.329856][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.422923][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.428156][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.461107][ T5964] veth0_macvtap: entered promiscuous mode [ 107.479441][ T5973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.490218][ T5964] veth1_macvtap: entered promiscuous mode [ 107.507695][ T5974] veth0_vlan: entered promiscuous mode [ 107.591410][ T5974] veth1_vlan: entered promiscuous mode [ 107.599575][ T5964] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.627180][ T24] cfg80211: failed to load regulatory.db [ 107.647147][ T5964] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.719120][ T5973] veth0_vlan: entered promiscuous mode [ 107.732926][ T5969] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 107.774510][ T5964] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.778192][ T5964] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.801512][ T5964] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.804852][ T5964] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.870090][ T5973] veth1_vlan: entered promiscuous mode [ 107.958026][ T5974] veth0_macvtap: entered promiscuous mode [ 107.968184][ T5973] veth0_macvtap: entered promiscuous mode [ 107.981030][ T5973] veth1_macvtap: entered promiscuous mode [ 108.038757][ T5974] veth1_macvtap: entered promiscuous mode [ 108.072771][ T5974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.077115][ T5974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.115933][ T5974] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.164444][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.168252][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.185865][ T5974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.189958][ T5974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.205398][ T5974] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.212698][ T5969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.226418][ T5973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.233039][ T5973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.237214][ T5973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.243285][ T5973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.251992][ T5973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.294334][ T5973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.298216][ T5973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.309753][ T5973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.316837][ T5973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.353372][ T5973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.356682][ T5974] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.359419][ T5974] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.364892][ T5974] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.369262][ T5974] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.381852][ T923] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.387328][ T923] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.412960][ T5977] Bluetooth: hci0: command tx timeout [ 108.418803][ T5973] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.423449][ T5973] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.428893][ T5973] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.438251][ T5973] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.499828][ T5977] Bluetooth: hci1: command tx timeout [ 108.499847][ T5306] Bluetooth: hci3: command tx timeout [ 108.667421][ T5969] veth0_vlan: entered promiscuous mode [ 108.672110][ T5306] Bluetooth: hci2: command tx timeout [ 108.688891][ T5964] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 108.720054][ T5969] veth1_vlan: entered promiscuous mode [ 108.790823][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.793464][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.876593][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.937603][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.059184][ T5969] veth0_macvtap: entered promiscuous mode [ 109.130285][ T5969] veth1_macvtap: entered promiscuous mode [ 109.215232][ T923] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.218416][ T923] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.307735][ T6030] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 109.337018][ T5969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.340986][ T5969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.345236][ T5969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.351050][ T5969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.386339][ T5969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.389926][ T5969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.403049][ T5969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.445697][ T1204] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.449771][ T1204] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.466853][ T5969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.478073][ T5969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.495438][ T5969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.500995][ T5969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.506450][ T5969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.525176][ T6035] loop6: detected capacity change from 0 to 524287999 [ 109.538038][ T5969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.543906][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 109.553789][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 109.562685][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 109.565335][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 109.568092][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 109.577810][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 109.578887][ T5969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.582457][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 109.582482][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 109.583682][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 109.583701][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 109.584077][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 109.584127][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 109.584627][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 109.584682][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 109.585008][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 109.585025][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 109.585067][ T6035] ldm_validate_partition_table(): Disk read failed. [ 109.585158][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 109.585173][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 109.585279][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 109.585295][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 109.585528][ T6035] Dev loop6: unable to read RDB block 0 [ 109.586288][ T6035] loop6: unable to read partition table [ 109.586422][ T6035] loop_reread_partitions: partition scan of loop6 (ÿŸ rb%xpÎtPΪŔ±³×AÝÁ¬8ï*c) failed (rc=-5) [ 109.806987][ T5969] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.810890][ T5969] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.815361][ T5969] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.818712][ T5969] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.166419][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.177076][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.412077][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.455414][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.818959][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 111.177133][ T9] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 111.183222][ T9] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 111.190640][ T9] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 111.194850][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.300540][ T6045] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 111.592423][ T9] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 111.839597][ T755] usb 6-1: USB disconnect, device number 2 [ 111.963341][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 111.971990][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 114.501992][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 114.644324][ T6088] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12'. [ 114.647643][ T6088] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12'. [ 114.661560][ T6092] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 0, id = 0 [ 114.741814][ T6094] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 0, id = 1 [ 114.748444][ T6095] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 0, id = 2 [ 114.755333][ T6096] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 0, id = 3 [ 114.831691][ T6097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12'. [ 115.341324][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 115.782183][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 115.851930][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 115.942580][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 116.732196][ T58] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 117.227749][ T6117] syz.3.17 uses obsolete (PF_INET,SOCK_PACKET) [ 117.597270][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 118.749263][ T6128] can0: slcan on ptm0. [ 118.816484][ T6132] netlink: 128 bytes leftover after parsing attributes in process `syz.3.22'. [ 119.445564][ T6127] can0 (unregistered): slcan off ptm0. [ 119.883831][ T755] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 119.949898][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 120.044823][ T755] usb 8-1: Using ep0 maxpacket: 16 [ 120.049013][ T755] usb 8-1: config 0 has an invalid interface number: 132 but max is 0 [ 120.053981][ T755] usb 8-1: config 0 has no interface number 0 [ 120.071415][ T755] usb 8-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 120.076566][ T755] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.080084][ T755] usb 8-1: Product: syz [ 120.083050][ T755] usb 8-1: Manufacturer: syz [ 120.084769][ T755] usb 8-1: SerialNumber: syz [ 120.103923][ T755] usb 8-1: config 0 descriptor?? [ 120.125776][ T755] hub 8-1:0.132: bad descriptor, ignoring hub [ 120.129739][ T755] hub 8-1:0.132: probe with driver hub failed with error -5 [ 120.208216][ T755] input: bcm5974 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.132/input/input5 [ 120.512296][ T6138] syz.2.23 (6138) used greatest stack depth: 20072 bytes left [ 120.888741][ T6005] usb 8-1: reset high-speed USB device number 2 using dummy_hcd [ 121.162408][ T6019] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 121.354687][ T6019] usb 5-1: Using ep0 maxpacket: 16 [ 121.373554][ T6019] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 121.395000][ T6019] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 121.418606][ T6019] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 121.424750][ T6019] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.439011][ T6019] usb 5-1: Product: syz [ 121.445677][ T6019] usb 5-1: Manufacturer: syz [ 121.450328][ T6019] usb 5-1: SerialNumber: syz [ 121.466642][ T6019] usb 5-1: config 0 descriptor?? [ 121.764561][ T6019] appledisplay 5-1:0.0: Error while getting initial brightness: -110 [ 121.783214][ T6019] appledisplay 5-1:0.0: probe with driver appledisplay failed with error -110 [ 122.299477][ T40] audit: type=1800 audit(1743849214.957:2): pid=6163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.3.29" name="/" dev="sockfs" ino=8128 res=0 errno=0 [ 122.621869][ T0] NOHZ tick-stop error: local softirq work is pending, handler #248!!! [ 122.814763][ T6167] "syz.0.27" (6167) uses obsolete ecb(arc4) skcipher [ 123.933688][ T6186] ======================================================= [ 123.933688][ T6186] WARNING: The mand mount option has been deprecated and [ 123.933688][ T6186] and is ignored by this kernel. Remove the mand [ 123.933688][ T6186] option from the mount to silence this warning. [ 123.933688][ T6186] ======================================================= [ 124.038678][ T6186] 9pnet_virtio: no channels available for device syz [ 124.350313][ T6190] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 124.791556][ T29] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 125.131778][ T838] usb 5-1: USB disconnect, device number 2 [ 125.151918][ T29] usb 7-1: Using ep0 maxpacket: 8 [ 125.203110][ T29] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 125.231564][ T29] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 125.255520][ T29] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 125.342756][ T6196] netlink: 'syz.1.35': attribute type 4 has an invalid length. [ 125.381577][ T29] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 125.389708][ T29] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 125.408666][ T6196] netlink: 20 bytes leftover after parsing attributes in process `syz.1.35'. [ 125.421138][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.525242][ T58] usb 8-1: USB disconnect, device number 2 [ 125.828973][ T29] usb 7-1: usb_control_msg returned -32 [ 125.831667][ T29] usbtmc 7-1:16.0: can't read capabilities [ 126.443646][ T6210] netlink: 4388 bytes leftover after parsing attributes in process `syz.3.38'. [ 126.511402][ T57] IPVS: starting estimator thread 0... [ 126.611785][ T6212] IPVS: using max 26 ests per chain, 62400 per kthread [ 127.497733][ T6222] netlink: 'syz.1.41': attribute type 11 has an invalid length. [ 127.504798][ T6222] netlink: 224 bytes leftover after parsing attributes in process `syz.1.41'. [ 127.997192][ T29] usb 7-1: USB disconnect, device number 2 [ 128.061749][ T6230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.43'. [ 128.130379][ T6230] team1: entered promiscuous mode [ 128.132806][ T6230] 8021q: adding VLAN 0 to HW filter on device team1 [ 128.413727][ T6230] netlink: 52 bytes leftover after parsing attributes in process `syz.2.43'. [ 128.419003][ T6230] Zero length message leads to an empty skb [ 128.808752][ T6245] dccp_v4_rcv: dropped packet with invalid checksum [ 129.682735][ T6262] netlink: 24 bytes leftover after parsing attributes in process `syz.2.46'. [ 132.787446][ T6299] [U] [ 132.788615][ T6299] [U] [ 132.789600][ T6299] [U] [ 132.790594][ T6299] [U] [ 132.793274][ T6299] [U] [ 132.795032][ T6299] [U] [ 132.796484][ T6299] [U] [ 132.797931][ T6299] [U] [ 132.800177][ T6299] [U] [ 132.802213][ T6299] [U] [ 132.803582][ T6299] [U] [ 132.804976][ T6299] [U] [ 132.807959][ T6299] [U] [ 132.812575][ T6299] [U] [ 132.813737][ T6299] [U] [ 132.814886][ T6299] [U] [ 132.840299][ T6299] [U] [ 132.864920][ T6299] [U] [ 132.865968][ T6299] [U] [ 132.867023][ T6299] [U] [ 132.874490][ T6299] [U] [ 132.889648][ T6299] [U] [ 132.891572][ T6299] [U] [ 132.893020][ T6299] [U] [ 132.901187][ T6299] [U] [ 132.904177][ T6299] [U] [ 132.906563][ T6299] [U] [ 132.910641][ T6299] [U] [ 132.929015][ T6299] [U] [ 132.930251][ T6299] [U] [ 132.931434][ T6299] [U] [ 132.932634][ T6299] [U] [ 132.934619][ T6299] [U] [ 132.935638][ T6299] [U] [ 132.936751][ T6299] [U] [ 132.938239][ T6299] [U] [ 132.940018][ T6299] [U] [ 132.942849][ T6299] [U] [ 132.961296][ T6299] [U] [ 132.962355][ T6299] [U] [ 132.969448][ T6299] [U] [ 132.985286][ T6299] [U] [ 132.986450][ T6299] [U] [ 132.987623][ T6299] [U] [ 132.992960][ T6299] [U] [ 132.994071][ T6299] [U] [ 132.995087][ T6299] [U] [ 132.996102][ T6299] [U] [ 132.998169][ T6299] [U] [ 133.013086][ T6299] [U] [ 133.014182][ T6299] [U] [ 133.015238][ T6299] [U] [ 133.018264][ T6299] [U] [ 133.019189][ T6299] [U] [ 133.020081][ T6299] [U] [ 133.021130][ T6299] [U] [ 133.022481][ T6299] [U] [ 133.023721][ T6299] [U] [ 133.024974][ T6299] [U] [ 133.026689][ T6299] [U] [ 133.028779][ T6299] [U] [ 133.030508][ T6299] [U] [ 133.031751][ T6299] [U] [ 133.034880][ T6299] [U] [ 133.036453][ T6299] [U] [ 133.038227][ T6299] [U] [ 133.039919][ T6299] [U] [ 133.041552][ T6299] [U] [ 133.470431][ T6299] [U] [ 133.472512][ T6299] [U] [ 133.480526][ T6299] [U] [ 133.481648][ T6299] [U] [ 133.514901][ T6299] [U] [ 133.518232][ T6299] [U] [ 133.519886][ T6299] [U] [ 133.521193][ T6299] [U] [ 133.523455][ T6299] [U] [ 133.524770][ T6299] [U] [ 133.526068][ T6299] [U] [ 133.528213][ T6299] [U] [ 133.530096][ T6299] [U] [ 133.531246][ T6299] [U] [ 133.532197][ T6299] [U] [ 133.533285][ T6299] [U] [ 133.534452][ T6299] [U] [ 133.535469][ T6299] [U] [ 133.536658][ T6299] [U] [ 133.537757][ T6299] [U] [ 133.539625][ T6299] [U] [ 133.541608][ T6299] [U] [ 133.542847][ T6299] [U] [ 133.544160][ T6299] [U] [ 133.560003][ T6299] [U] [ 133.561551][ T6299] [U] [ 133.562684][ T6299] [U] [ 133.566602][ T6299] [U] [ 133.589504][ T6299] [U] [ 133.590919][ T6299] [U] [ 133.592451][ T6299] [U] [ 133.594119][ T6299] [U] [ 133.604783][ T6299] [U] [ 133.606262][ T6299] [U] [ 133.608917][ T6299] [U] [ 133.612400][ T6299] [U] [ 133.759988][ T6299] [U] [ 133.761141][ T6299] [U] [ 133.762184][ T6299] [U] [ 133.763298][ T6299] [U] [ 133.764935][ T6299] [U] [ 133.766182][ T6299] [U] [ 133.767490][ T6299] [U] [ 133.768508][ T6299] [U] [ 133.769786][ T6299] [U] [ 133.770722][ T6299] [U] [ 133.771854][ T6299] [U] [ 133.773006][ T6299] [U] [ 133.865353][ T6299] [U] [ 133.866670][ T6299] [U] [ 133.867832][ T6299] [U] [ 133.891775][ T6299] [U] [ 133.936659][ T6299] [U] [ 133.938459][ T6299] [U] [ 133.940030][ T6299] [U] [ 133.941421][ T6299] [U] [ 133.949207][ T6299] [U] [ 133.951776][ T6299] [U] [ 133.954665][ T6299] [U] [ 134.599097][ T6303] [U] [ 134.914951][ T6318] netlink: 4388 bytes leftover after parsing attributes in process `syz.1.57'. [ 135.125131][ T58] IPVS: starting estimator thread 0... [ 135.291244][ T6325] IPVS: using max 26 ests per chain, 62400 per kthread [ 137.080243][ T6343] netlink: 'syz.3.59': attribute type 4 has an invalid length. [ 137.095200][ T6343] netlink: 20 bytes leftover after parsing attributes in process `syz.3.59'. [ 137.211547][ T6019] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 137.385767][ T6019] usb 6-1: Using ep0 maxpacket: 8 [ 137.408932][ T6019] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 137.415915][ T6019] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 137.430435][ T6019] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 137.435898][ T6019] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 137.452782][ T6019] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 137.458161][ T6019] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.537252][ T6349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.71'. [ 137.575280][ T6349] team1: entered promiscuous mode [ 137.587052][ T6349] 8021q: adding VLAN 0 to HW filter on device team1 [ 137.695854][ T6019] usb 6-1: usb_control_msg returned -32 [ 137.698756][ T6019] usbtmc 6-1:16.0: can't read capabilities [ 138.138530][ T6357] dccp_v4_rcv: dropped packet with invalid checksum [ 138.586850][ T6358] netlink: 24 bytes leftover after parsing attributes in process `syz.3.63'. [ 140.112828][ T6006] usb 6-1: USB disconnect, device number 3 [ 141.355263][ T6386] netlink: 4388 bytes leftover after parsing attributes in process `syz.0.69'. [ 141.438750][ T6026] IPVS: starting estimator thread 0... [ 141.561586][ T6389] IPVS: using max 23 ests per chain, 55200 per kthread [ 141.781314][ T6397] netlink: 'syz.2.74': attribute type 11 has an invalid length. [ 141.784705][ T6397] netlink: 224 bytes leftover after parsing attributes in process `syz.2.74'. [ 142.275155][ T6412] dccp_v4_rcv: dropped packet with invalid checksum [ 143.465578][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 143.484098][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 143.936423][ T6446] 9pnet_virtio: no channels available for device syz [ 146.673592][ T6470] netlink: 4388 bytes leftover after parsing attributes in process `syz.1.83'. [ 148.671082][ T40] audit: type=1800 audit(1743849241.317:3): pid=6494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.2.89" name="/" dev="sockfs" ino=12471 res=0 errno=0 [ 149.224858][ T57] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 149.411644][ T57] usb 7-1: Using ep0 maxpacket: 16 [ 149.415731][ T57] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 149.422445][ T57] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 149.431246][ T57] usb 7-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 149.463601][ T57] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.467296][ T57] usb 7-1: Product: syz [ 149.468797][ T57] usb 7-1: Manufacturer: syz [ 149.476649][ T57] usb 7-1: SerialNumber: syz [ 149.487553][ T57] usb 7-1: config 0 descriptor?? [ 149.759621][ T57] appledisplay 7-1:0.0: Error while getting initial brightness: -110 [ 149.773765][ T57] appledisplay 7-1:0.0: probe with driver appledisplay failed with error -110 [ 150.483642][ T6519] netlink: 4388 bytes leftover after parsing attributes in process `syz.3.94'. [ 150.578717][ T6500] "syz.2.90" (6500) uses obsolete ecb(arc4) skcipher [ 151.922758][ T838] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 152.071572][ T6006] usb 7-1: USB disconnect, device number 3 [ 152.286882][ T838] usb 5-1: Using ep0 maxpacket: 16 [ 152.292884][ T838] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 152.298891][ T838] usb 5-1: config 0 has no interface number 0 [ 152.352932][ T838] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 152.380919][ T838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.396635][ T838] usb 5-1: Product: syz [ 152.398992][ T838] usb 5-1: Manufacturer: syz [ 152.401820][ T838] usb 5-1: SerialNumber: syz [ 152.407452][ T838] usb 5-1: config 0 descriptor?? [ 152.435808][ T838] hub 5-1:0.132: bad descriptor, ignoring hub [ 152.448683][ T838] hub 5-1:0.132: probe with driver hub failed with error -5 [ 152.466025][ T838] input: bcm5974 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.132/input/input6 [ 153.161738][ T6005] usb 5-1: reset high-speed USB device number 3 using dummy_hcd [ 153.633860][ T6006] usb 5-1: USB disconnect, device number 3 [ 154.466123][ T6546] netlink: 128 bytes leftover after parsing attributes in process `syz.0.100'. [ 157.341544][ T6026] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 158.171848][ T6026] usb 6-1: Using ep0 maxpacket: 16 [ 158.182775][ T6026] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 158.188066][ T6026] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 158.210181][ T6026] usb 6-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 158.221286][ T6026] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.224856][ T6026] usb 6-1: Product: syz [ 158.232900][ T6026] usb 6-1: Manufacturer: syz [ 158.238897][ T6026] usb 6-1: SerialNumber: syz [ 158.252478][ T6026] usb 6-1: config 0 descriptor?? [ 158.561906][ T6026] appledisplay 6-1:0.0: Error while getting initial brightness: -110 [ 158.568856][ T6026] appledisplay 6-1:0.0: probe with driver appledisplay failed with error -110 [ 159.198198][ T6581] "syz.1.107" (6581) uses obsolete ecb(arc4) skcipher [ 159.394354][ T6587] can0: slcan on ptm0. [ 159.571562][ T6026] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 159.741622][ T6026] usb 7-1: Using ep0 maxpacket: 16 [ 159.745756][ T6026] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 159.751250][ T6026] usb 7-1: config 0 has no interface number 0 [ 159.763507][ T6026] usb 7-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 159.771772][ T6026] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.787072][ T6026] usb 7-1: Product: syz [ 159.796061][ T6026] usb 7-1: Manufacturer: syz [ 159.801224][ T6026] usb 7-1: SerialNumber: syz [ 159.815763][ T6026] usb 7-1: config 0 descriptor?? [ 159.821917][ T6026] hub 7-1:0.132: bad descriptor, ignoring hub [ 159.835174][ T6026] hub 7-1:0.132: probe with driver hub failed with error -5 [ 159.871120][ T6026] input: bcm5974 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.132/input/input7 [ 160.212221][ T6584] can0 (unregistered): slcan off ptm0. [ 160.895801][ T29] usb 6-1: USB disconnect, device number 4 [ 160.905024][ T6005] usb 7-1: reset high-speed USB device number 4 using dummy_hcd [ 161.213985][ T6614] netlink: 128 bytes leftover after parsing attributes in process `syz.1.113'. [ 163.073567][ T6636] can0: slcan on ptm0. [ 163.976956][ T6635] can0 (unregistered): slcan off ptm0. [ 165.676973][ T58] usb 7-1: USB disconnect, device number 4 [ 167.275765][ T6689] netlink: 28 bytes leftover after parsing attributes in process `syz.2.133'. [ 167.291807][ T6689] netlink: 60 bytes leftover after parsing attributes in process `syz.2.133'. [ 167.467972][ T6692] netlink: 4 bytes leftover after parsing attributes in process `syz.2.133'. [ 168.760377][ T6706] slcan: can't register candev [ 168.762785][ T6706] Falling back ldisc for ptm1. [ 170.779528][ T6726] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 0, id = 0 [ 170.794189][ T6728] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 0, id = 2 [ 170.801725][ T6727] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 0, id = 1 [ 170.805248][ T6729] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 0, id = 3 [ 171.172906][ T58] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 173.067590][ T6769] can0: slcan on ptm0. [ 173.339204][ T6768] can0 (unregistered): slcan off ptm0. [ 190.053015][ T6860] can0: slcan on ptm0. [ 190.489307][ T6857] can0 (unregistered): slcan off ptm0. [ 194.686047][ T6945] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 194.707488][ T24] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 194.710585][ T6945] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 194.894583][ T24] usb 5-1: config 7 has an invalid interface number: 191 but max is 0 [ 194.899054][ T24] usb 5-1: config 7 has no interface number 0 [ 194.903231][ T24] usb 5-1: config 7 interface 191 has no altsetting 0 [ 194.929910][ T24] usb 5-1: New USB device found, idVendor=064b, idProduct=7825, bcdDevice=23.af [ 194.933251][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.936143][ T24] usb 5-1: Product: syz [ 194.938061][ T24] usb 5-1: Manufacturer: syz [ 194.942120][ T24] usb 5-1: SerialNumber: syz [ 195.589452][ T6957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.193'. [ 195.892836][ T24] upd78f0730 5-1:7.191: upd78f0730 converter detected [ 195.903863][ T24] usb 5-1: upd78f0730 converter now attached to ttyUSB0 [ 195.914685][ T24] usb 5-1: USB disconnect, device number 4 [ 195.922562][ T24] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0 [ 195.930906][ T24] upd78f0730 5-1:7.191: device disconnected [ 196.345691][ T6964] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 196.350477][ T6964] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 196.713502][ T6972] overlay: Unknown parameter 'uid>00000000000000060928' [ 197.302137][ T6978] FAULT_INJECTION: forcing a failure. [ 197.302137][ T6978] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 197.400453][ T6978] CPU: 1 UID: 0 PID: 6978 Comm: syz.2.195 Not tainted 6.14.0-syzkaller-13408-g9f867ba24d36 #0 PREEMPT(full) [ 197.400478][ T6978] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 197.400487][ T6978] Call Trace: [ 197.400492][ T6978] [ 197.400498][ T6978] dump_stack_lvl+0x16c/0x1f0 [ 197.400561][ T6978] should_fail_ex+0x512/0x640 [ 197.400583][ T6978] _copy_to_user+0x32/0xd0 [ 197.400638][ T6978] simple_read_from_buffer+0xcb/0x170 [ 197.400660][ T6978] proc_fail_nth_read+0x197/0x270 [ 197.400716][ T6978] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 197.400740][ T6978] ? rw_verify_area+0xcf/0x680 [ 197.400758][ T6978] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 197.400816][ T6978] vfs_read+0x1de/0xc70 [ 197.400839][ T6978] ? __pfx___mutex_lock+0x10/0x10 [ 197.400862][ T6978] ? __pfx_vfs_read+0x10/0x10 [ 197.400889][ T6978] ? __fget_files+0x20e/0x3c0 [ 197.400917][ T6978] ksys_read+0x12a/0x240 [ 197.400936][ T6978] ? __pfx_ksys_read+0x10/0x10 [ 197.400955][ T6978] ? __do_sys_getpriority+0x18b/0xc30 [ 197.400977][ T6978] ? rcu_is_watching+0x12/0xc0 [ 197.401000][ T6978] __do_fast_syscall_32+0x73/0x120 [ 197.401025][ T6978] do_fast_syscall_32+0x32/0x80 [ 197.401047][ T6978] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 197.401066][ T6978] RIP: 0023:0xf7fe2579 [ 197.401085][ T6978] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 197.401100][ T6978] RSP: 002b:00000000f505f590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 197.401114][ T6978] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000f505f620 [ 197.401124][ T6978] RDX: 000000000000000f RSI: 00000000f746cff4 RDI: 0000000000000000 [ 197.401133][ T6978] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 197.401141][ T6978] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 197.401150][ T6978] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 197.401170][ T6978] [ 197.739776][ T6987] netlink: 72 bytes leftover after parsing attributes in process `syz.2.202'. [ 198.972925][ T7010] can0: slcan on ptm0. [ 199.174197][ T838] hid-generic 0000:0000:0000.0002: item fetching failed at offset 0/1 [ 199.175366][ T7009] can0 (unregistered): slcan off ptm0. [ 199.202113][ T838] hid-generic 0000:0000:0000.0002: probe with driver hid-generic failed with error -22 [ 199.580091][ T7032] can0: slcan on ptm0. [ 201.036634][ T7030] can0 (unregistered): slcan off ptm0. [ 201.380804][ T5977] Bluetooth: hci3: command 0x0405 tx timeout [ 201.600991][ T7069] loop6: detected capacity change from 0 to 524287999 [ 201.607078][ C3] blk_print_req_error: 7 callbacks suppressed [ 201.607093][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 201.613532][ C3] buffer_io_error: 7 callbacks suppressed [ 201.613542][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 201.623693][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 201.651948][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 201.657275][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 201.670232][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 201.686821][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 201.695727][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 201.700918][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 201.705857][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 201.719158][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 201.747881][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 201.757412][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 201.760983][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 201.776231][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 201.780062][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 201.812167][ T7069] ldm_validate_partition_table(): Disk read failed. [ 201.817074][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 201.830541][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 201.835083][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 201.843397][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 201.847553][ T7069] Dev loop6: unable to read RDB block 0 [ 201.850387][ T7069] loop6: unable to read partition table [ 201.890232][ T7069] loop_reread_partitions: partition scan of loop6 (ÿŸ rb%xpÎtPΪŔ±³×AÝÁ¬8ï*c) failed (rc=-5) [ 202.025652][ T7070] loop6: detected capacity change from 524287999 to 524288000 [ 202.029256][ T7070] [ 202.030130][ T7070] ====================================================== [ 202.036072][ T7070] WARNING: possible circular locking dependency detected [ 202.038398][ T7070] 6.14.0-syzkaller-13408-g9f867ba24d36 #0 Not tainted [ 202.049007][ T7070] ------------------------------------------------------ [ 202.054706][ T7070] syz.1.219/7070 is trying to acquire lock: [ 202.073205][ T7070] ffffffff906990a8 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_env+0xb36/0x1870 [ 202.078707][ T7070] [ 202.078707][ T7070] but task is already holding lock: [ 202.081198][ T7070] ffff88801fcc6228 (&q->q_usage_counter(io)#23){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 202.086380][ T7070] [ 202.086380][ T7070] which lock already depends on the new lock. [ 202.086380][ T7070] [ 202.101073][ T7070] [ 202.101073][ T7070] the existing dependency chain (in reverse order) is: [ 202.104465][ T7070] [ 202.104465][ T7070] -> #2 (&q->q_usage_counter(io)#23){++++}-{0:0}: [ 202.110997][ T7070] blk_alloc_queue+0x619/0x760 [ 202.120994][ T7070] blk_mq_alloc_queue+0x179/0x290 [ 202.123753][ T7070] __blk_mq_alloc_disk+0x29/0x120 [ 202.127044][ T7070] loop_add+0x496/0xb70 [ 202.129421][ T7070] loop_init+0x164/0x270 [ 202.141822][ T7070] do_one_initcall+0x120/0x6e0 [ 202.144144][ T7070] kernel_init_freeable+0x5c2/0x900 [ 202.147196][ T7070] kernel_init+0x1c/0x2b0 [ 202.149837][ T7070] ret_from_fork+0x45/0x80 [ 202.161872][ T7070] ret_from_fork_asm+0x1a/0x30 [ 202.164541][ T7070] [ 202.164541][ T7070] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 202.167650][ T7070] fs_reclaim_acquire+0x102/0x150 [ 202.169906][ T7070] kmem_cache_alloc_node_noprof+0x57/0x3b0 [ 202.186302][ T7070] __alloc_skb+0x2b2/0x380 [ 202.188319][ T7070] alloc_uevent_skb+0x7d/0x210 [ 202.190190][ T7070] kobject_uevent_env+0xca4/0x1870 [ 202.192247][ T7070] kobject_synth_uevent+0x7d4/0x8a0 [ 202.194235][ T7070] bus_uevent_store+0x3d/0x90 [ 202.196110][ T7070] bus_attr_store+0x71/0xb0 [ 202.197938][ T7070] sysfs_kf_write+0xef/0x150 [ 202.199907][ T7070] kernfs_fop_write_iter+0x351/0x510 [ 202.202040][ T7070] vfs_write+0x5ba/0x1180 [ 202.203692][ T7070] ksys_write+0x12a/0x240 [ 202.205354][ T7070] do_syscall_64+0xcd/0x260 [ 202.207041][ T7070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.209229][ T7070] [ 202.209229][ T7070] -> #0 (uevent_sock_mutex){+.+.}-{4:4}: [ 202.212101][ T7070] __lock_acquire+0x1173/0x1ba0 [ 202.214217][ T7070] lock_acquire+0x179/0x350 [ 202.215940][ T7070] __mutex_lock+0x199/0xb90 [ 202.217656][ T7070] kobject_uevent_env+0xb36/0x1870 [ 202.219620][ T7070] set_capacity_and_notify+0x1ca/0x240 [ 202.221758][ T7070] loop_set_status+0x94a/0xb90 [ 202.223632][ T7070] lo_ioctl+0x729/0x26d0 [ 202.225448][ T7070] lo_compat_ioctl+0xb9/0x170 [ 202.227406][ T7070] compat_blkdev_ioctl+0x2eb/0x7a0 [ 202.229744][ T7070] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 202.232031][ T7070] __do_fast_syscall_32+0x73/0x120 [ 202.234376][ T7070] do_fast_syscall_32+0x32/0x80 [ 202.236831][ T7070] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 202.240025][ T7070] [ 202.240025][ T7070] other info that might help us debug this: [ 202.240025][ T7070] [ 202.244808][ T7070] Chain exists of: [ 202.244808][ T7070] uevent_sock_mutex --> fs_reclaim --> &q->q_usage_counter(io)#23 [ 202.244808][ T7070] [ 202.251227][ T7070] Possible unsafe locking scenario: [ 202.251227][ T7070] [ 202.255097][ T7070] CPU0 CPU1 [ 202.257839][ T7070] ---- ---- [ 202.260380][ T7070] lock(&q->q_usage_counter(io)#23); [ 202.263048][ T7070] lock(fs_reclaim); [ 202.266012][ T7070] lock(&q->q_usage_counter(io)#23); [ 202.269203][ T7070] lock(uevent_sock_mutex); [ 202.281370][ T7070] [ 202.281370][ T7070] *** DEADLOCK *** [ 202.281370][ T7070] [ 202.285135][ T7070] 3 locks held by syz.1.219/7070: [ 202.287487][ T7070] #0: ffff888024049368 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_set_status+0x2a/0xb90 [ 202.301708][ T7070] #1: ffff88801fcc6228 (&q->q_usage_counter(io)#23){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 202.307175][ T7070] #2: ffff88801fcc6260 (&q->q_usage_counter(queue)#20){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 202.322097][ T7070] [ 202.322097][ T7070] stack backtrace: [ 202.324819][ T7070] CPU: 3 UID: 0 PID: 7070 Comm: syz.1.219 Not tainted 6.14.0-syzkaller-13408-g9f867ba24d36 #0 PREEMPT(full) [ 202.324840][ T7070] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 202.324849][ T7070] Call Trace: [ 202.324855][ T7070] [ 202.324861][ T7070] dump_stack_lvl+0x116/0x1f0 [ 202.324888][ T7070] print_circular_bug+0x275/0x350 [ 202.324912][ T7070] check_noncircular+0x14c/0x170 [ 202.324937][ T7070] __lock_acquire+0x1173/0x1ba0 [ 202.324956][ T7070] lock_acquire+0x179/0x350 [ 202.324970][ T7070] ? kobject_uevent_env+0xb36/0x1870 [ 202.324985][ T7070] ? __pfx___might_resched+0x10/0x10 [ 202.325010][ T7070] __mutex_lock+0x199/0xb90 [ 202.325031][ T7070] ? kobject_uevent_env+0xb36/0x1870 [ 202.325046][ T7070] ? rcu_is_watching+0x12/0xc0 [ 202.325067][ T7070] ? kobject_uevent_env+0xb36/0x1870 [ 202.325084][ T7070] ? __pfx___mutex_lock+0x10/0x10 [ 202.325110][ T7070] ? __asan_memcpy+0x3c/0x60 [ 202.325131][ T7070] ? kobject_get_path+0x8e/0x2a0 [ 202.325156][ T7070] ? kobject_uevent_env+0xb36/0x1870 [ 202.325171][ T7070] kobject_uevent_env+0xb36/0x1870 [ 202.325188][ T7070] ? set_capacity_and_notify+0xce/0x240 [ 202.325207][ T7070] set_capacity_and_notify+0x1ca/0x240 [ 202.325223][ T7070] ? __pfx_set_capacity_and_notify+0x10/0x10 [ 202.325240][ T7070] ? __asan_memcpy+0x3c/0x60 [ 202.325261][ T7070] loop_set_status+0x94a/0xb90 [ 202.325283][ T7070] lo_ioctl+0x729/0x26d0 [ 202.325300][ T7070] ? __pfx_stack_trace_save+0x10/0x10 [ 202.325322][ T7070] ? stack_depot_save_flags+0x28/0xa50 [ 202.325343][ T7070] ? __lock_acquire+0xaa4/0x1ba0 [ 202.325358][ T7070] ? kasan_save_stack+0x42/0x60 [ 202.325381][ T7070] ? kasan_save_stack+0x33/0x60 [ 202.325403][ T7070] ? kasan_save_track+0x14/0x30 [ 202.325425][ T7070] ? kasan_save_free_info+0x3b/0x60 [ 202.325443][ T7070] ? __kasan_slab_free+0x51/0x70 [ 202.325466][ T7070] ? kfree+0x2b6/0x4d0 [ 202.325486][ T7070] ? tomoyo_path_number_perm+0x470/0x580 [ 202.325505][ T7070] ? security_file_ioctl_compat+0x9b/0x240 [ 202.325523][ T7070] ? __do_compat_sys_ioctl+0x4e/0x2c0 [ 202.325544][ T7070] ? __do_fast_syscall_32+0x73/0x120 [ 202.325568][ T7070] ? do_fast_syscall_32+0x32/0x80 [ 202.325591][ T7070] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 202.325613][ T7070] ? __pfx_lo_ioctl+0x10/0x10 [ 202.325645][ T7070] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 202.325664][ T7070] ? blkdev_common_ioctl+0x1dd/0x2250 [ 202.325690][ T7070] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 202.325710][ T7070] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 202.325740][ T7070] ? do_vfs_ioctl+0x512/0x1990 [ 202.325758][ T7070] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 202.325783][ T7070] lo_compat_ioctl+0xb9/0x170 [ 202.325802][ T7070] ? __pfx_lo_compat_ioctl+0x10/0x10 [ 202.325819][ T7070] compat_blkdev_ioctl+0x2eb/0x7a0 [ 202.325845][ T7070] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 202.325872][ T7070] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 202.325898][ T7070] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 202.325918][ T7070] __do_fast_syscall_32+0x73/0x120 [ 202.325943][ T7070] do_fast_syscall_32+0x32/0x80 [ 202.325966][ T7070] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 202.325986][ T7070] RIP: 0023:0xf73ee579 [ 202.325999][ T7070] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 202.326014][ T7070] RSP: 002b:00000000f505555c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 202.326031][ T7070] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000000004c04 [ 202.326042][ T7070] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 202.326052][ T7070] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 202.326061][ T7070] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 202.326071][ T7070] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 202.326085][ T7070] [ 204.894727][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.896575][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 VM DIAGNOSIS: 10:34:55 Registers: info registers vcpu 0 CPU#0 RAX=00000000003bd084 RBX=0000000000000000 RCX=ffffffff8b700439 RDX=ffffed10056465be RSI=ffffffff8bf45100 RDI=ffffffff8191a841 RBP=fffffbfff1c12ee8 RSP=ffffffff8e007e10 R8 =0000000000000000 R9 =ffffed10056465bd R10=ffff88802b232deb R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e097740 R14=ffffffff90867310 R15=0000000000000000 RIP=ffffffff8b6feccf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000080000280 CR3=000000006cab4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 EAX=84c29be0 EBX=ffffffff ECX=84c71e57 EDX=f746cff4 ESI=f74a5108 EDI=f610b008 EBP=f7fd5610 ESP=ffc3e970 EIP=f714e409 EFL=00000286 [--S--P-] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0023 00000000 ffffffff 00c0fb00 DPL=3 CS32 [-RA] SS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 00000000 ffffffff 00c00000 GS =0063 580a1440 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 00000000 ffffffff 00c00000 TR =0040 0004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000003081eff8 CR3=0000000067bbe000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000080000 RBX=0000000000000008 RCX=ffffc900030f7b90 RDX=0000000000000008 RSI=0000000000000000 RDI=0000000000000000 RBP=0000000000000000 RSP=ffffc900030f79b0 R8 =0000000000000001 R9 =0000000000000001 R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000001 R14=ffffc900030f7b90 R15=0000000000000001 RIP=ffffffff84cc3550 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880979b9000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005616db3678e8 CR3=0000000067bbe000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f741cff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000005f RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854bd545 RDI=ffffffff9ae12bc0 RBP=ffffffff9ae12b80 RSP=ffffc90003426ee8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000066666666 R12=0000000000000000 R13=000000000000005f R14=ffffffff9ae12b80 R15=ffffffff854bd4e0 RIP=ffffffff854bd56f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 000fffff 00000000 GS =0063 ffff888097ab9000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 000fffff 00000000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000030afcffc CR3=000000006d436000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000