last executing test programs: 8.268882459s ago: executing program 2 (id=51): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x14) getsockopt(r0, 0x0, 0x5, &(0x7f0000000140)=""/181, &(0x7f0000000000)=0xb5) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYRES64], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) writev(r5, 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) io_setup(0x8, &(0x7f00000002c0)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000040)) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 7.121559413s ago: executing program 2 (id=55): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {0x1, 0x3}, [{0x2, 0x3}], {0x4, 0x5}, [], {0x10, 0x4}, {0x20, 0x1}}, 0x2c, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) setrlimit(0x7, &(0x7f0000000180)={0xe, 0x6fb1}) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) capset(0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000) syz_clone3(&(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, {0x800}, 0x0, 0x0, 0x0, 0x0}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = syz_open_dev$loop(&(0x7f00000005c0), 0x541d, 0x385a41) ioctl$LOOP_GET_STATUS64(r4, 0x4c05, 0x0) sched_setscheduler(0x0, 0x1, 0x0) 7.060330682s ago: executing program 3 (id=56): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xe, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002000)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000000000000032000000ac1414aa00"/138], 0x140}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) openat$cuse(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10138, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r5, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x2, 0x1, 0x9, 0x68, 0x8000, 0x9}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x8e, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @local}, {0x4f20, 0x4e22, 0x7a, 0x0, @gue={{0x1, 0x0, 0x3, 0x2, 0x0, @void}, "6279cb22459ff50866ff829694a603d3c443eead410baf7b350c12fa15932138ee8f6a6d2afdde33d5a4298b32860f7d3d68030697e95d9cff97f976b3ac6d8c10e10601a959b4bf18b7d52cd3b5a4c19759c5eb55c033fbf5a6b311de39eb228702b8bf55388a273db8f23105e3"}}}}, 0x9c) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000080)={0x0, 0x0, 0xa294}) symlink(&(0x7f0000000880)='.\x00', &(0x7f00000008c0)='./file0\x00') mount$nfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{'fsc,ntext'}]}) ioctl$SG_SET_TIMEOUT(r4, 0x2201, &(0x7f0000000000)=0xc) 6.151285302s ago: executing program 2 (id=59): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000000000080036000000000000000080"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r1, &(0x7f0000000600)=[{{&(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003740)="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", 0x5c1}], 0x1}}], 0x4, 0x240080a0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000280)=0x4, 0x4) sendmmsg$inet(r1, &(0x7f0000003500)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x98}}], 0x1, 0x40012) syz_usb_control_io$hid(r0, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000b00)={0x0, 'gretap0\x00', {0xffe}, 0x80}) socket$nl_route(0x10, 0x3, 0x0) getpid() r3 = syz_usb_connect(0x4, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES16=r2], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x1046}}]}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r4, &(0x7f0000000280)=""/239, 0xef) read$char_usb(r4, 0x0, 0x0) write$char_usb(r4, 0x0, 0x0) syz_usb_disconnect(r3) socket$kcm(0x10, 0x2, 0x4) io_uring_enter(0xffffffffffffffff, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r6 = syz_open_dev$cec(&(0x7f0000000140), 0x0, 0xc3) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r7, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000001a00010026bd700000000000020020000014", @ANYRESOCT=r5, @ANYRES32=r6], 0x38}, 0x1, 0x0, 0x0, 0x20040050}, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0xc0105b08, &(0x7f0000000040)) r8 = syz_usb_connect(0x2, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba80102030109022702010200100009"], 0x0) syz_usb_ep_read(r8, 0x0, 0x4c, &(0x7f00000000c0)=""/76) 6.023213217s ago: executing program 3 (id=60): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x880) connect$inet(r4, &(0x7f0000001980)={0x2, 0x1, @broadcast}, 0x10) r6 = socket$inet6(0xa, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r7 = dup2(r6, r6) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) write$tun(r7, &(0x7f0000000040)=ANY=[@ANYRES64, @ANYRES8], 0x46) recvmmsg(r7, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) 4.92511767s ago: executing program 3 (id=64): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00\x00\x00\x00\b\x006\x00\x00\x00\x00\x00\x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r1, &(0x7f0000000600)=[{{&(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003740)="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", 0x5c1}], 0x1}}], 0x4, 0x240080a0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000280)=0x4, 0x4) sendmmsg$inet(r1, &(0x7f0000003500)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x98}}], 0x1, 0x40012) syz_usb_control_io$hid(r0, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000b00)={0x0, 'gretap0\x00', {0xffe}, 0x80}) socket$nl_route(0x10, 0x3, 0x0) getpid() r3 = syz_usb_connect(0x4, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES16=r2], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x1046}}]}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r4, &(0x7f0000000280)=""/239, 0xef) read$char_usb(r4, 0x0, 0x0) write$char_usb(r4, 0x0, 0x0) syz_usb_disconnect(r3) io_uring_enter(0xffffffffffffffff, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r6 = syz_open_dev$cec(&(0x7f0000000140), 0x0, 0xc3) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r7, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000001a00010026bd700000000000020020000014", @ANYRESOCT=r5, @ANYRES32=r6], 0x38}, 0x1, 0x0, 0x0, 0x20040050}, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0xc0105b08, &(0x7f0000000040)) r8 = syz_usb_connect(0x2, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba80102030109022702010200100009"], 0x0) syz_usb_ep_read(r8, 0x0, 0x4c, &(0x7f00000000c0)=""/76) 4.911352111s ago: executing program 1 (id=65): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000003c0)={0x60, 0x0, &(0x7f00000cf000/0x3000)=nil, &(0x7f0000731000/0x1000)=nil, 0x1, 0x0, 0x0, 0x4, 0x0, 0x23, 0x20, 0xa}) r1 = open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x89800) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000000)=0x9, 0xe7) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x301}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x339) r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='projid_map\x00') read$FUSE(r5, &(0x7f0000005d40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) close(r3) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000200)="580000001400add4275a1bf00c45b45602067fffffff81005e22000d00ff0028925aa8002000eaa57b00090080000efffeffe809000000ff0000f03a0200f0ffffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) socket$nl_route(0x10, 0x3, 0x0) timer_create(0x2, &(0x7f0000000040)={0x0, 0x3d, 0x2}, &(0x7f00000001c0)) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000000380)={0xfffffff8, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r8, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r8, 0x402c5342, &(0x7f0000000040)={0x0, 0x7a124, 0x60, {0xfffffff8}}) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000180)={0x2d8}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)={0x2c, r11, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PEER_V4={0x8, 0x8, @empty}]}, 0x2c}}, 0x10) ptrace(0x11, r6) 4.180010537s ago: executing program 0 (id=66): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {0x1, 0x3}, [{0x2, 0x3}], {0x4, 0x5}, [], {0x10, 0x4}, {0x20, 0x1}}, 0x2c, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) setrlimit(0x7, &(0x7f0000000180)={0xe, 0x6fb1}) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) capset(0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000) syz_clone3(&(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, {0x800}, 0x0, 0x0, 0x0, 0x0}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = syz_open_dev$loop(&(0x7f00000005c0), 0x541d, 0x385a41) ioctl$LOOP_GET_STATUS64(r4, 0x4c05, 0x0) sched_setscheduler(0x0, 0x1, 0x0) 4.141700433s ago: executing program 1 (id=67): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020}, 0x2020) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1181}) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000040)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000640)={0x10, 0x0, &(0x7f0000000e00)=[@request_death={0x400c6313}], 0x0, 0x0, 0x0}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000480)={0x2020}, 0x2020) 3.256388083s ago: executing program 0 (id=68): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x14) getsockopt(r0, 0x0, 0x5, &(0x7f0000000140)=""/181, &(0x7f0000000000)=0xb5) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYRES64], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) writev(r5, 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) io_setup(0x8, &(0x7f00000002c0)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000040)) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 3.213831231s ago: executing program 1 (id=69): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x880) connect$inet(r4, &(0x7f0000001980)={0x2, 0x1, @broadcast}, 0x10) r6 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r7 = dup2(r6, r6) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) write$tun(r7, &(0x7f0000000040)=ANY=[@ANYRES64, @ANYRES8], 0x46) 3.099029866s ago: executing program 2 (id=70): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x200000100000011, 0x1, 0x5) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) mkdir(&(0x7f0000000200)='./file0\x00', 0x1c2) r5 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000000080)='./file1\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0x4000040) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000026000000000000000100000095"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r7}, 0x18) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BLKPG(r8, 0x1269, &(0x7f0000000000)={0x1, 0x0, 0x98, &(0x7f0000000180)={0x0, 0x800, 0x1000000f}}) fcntl$setstatus(r4, 0x4, 0x0) ptrace$pokeuser(0x6, r6, 0x118, 0x40000089) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x805}, 0x4c0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x30, 0x1, 0x4, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFULA_CFG_MODE={0xa, 0x2, {0x8, 0x1}}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4044000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000009200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd8}}, 0x0) 2.599730204s ago: executing program 2 (id=71): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x880) connect$inet(r4, &(0x7f0000001980)={0x2, 0x1, @broadcast}, 0x10) r6 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r7 = dup2(r6, r6) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) write$tun(r7, &(0x7f0000000040)=ANY=[@ANYRES64, @ANYRES8], 0x46) 2.198570257s ago: executing program 0 (id=72): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x54) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000000080)) r1 = openat$tun(0xffffff9c, &(0x7f0000000000), 0x2600, 0x0) write$tun(r1, &(0x7f0000000240)={@val={0x0, 0x6003}, @void, @ipv6=@icmpv6={0x0, 0x6, "b996ef", 0xd6, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @dev={0xfe, 0x80, '\x00', 0x35}, {[@srh={0x67, 0x4, 0x4, 0x2, 0x4, 0x0, 0xe, [@dev={0xfe, 0x80, '\x00', 0x31}, @local]}], @dest_unreach={0x1, 0x6, 0x0, 0x2, '\x00', {0xa, 0x6, "2f1d3c", 0x3ff, 0x4, 0xff, @local, @private1, [], "33148ddfb69b797485904a1227ef7644b2c37d1b81ddf496ee28787dde27d5d44af694d4ab8e9bd069afc3f3fd4ba6811de81948b9633e106a64513f43f4277c08589b4642c94eb91ffcd531bcf242dd343532b9fe1db15a855a7133adcbf172e46f3b84e1f70a375a1137359e90aa33198a9c81361bdb893ec3bdc96b62"}}}}}, 0x102) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000006e9a850000002d000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r2}, 0xc) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) add_key$fscrypt_provisioning(&(0x7f0000000080), &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000580)=ANY=[@ANYBLOB="52cf166ba87e331294b1c17538104310f36eeb0c4736ffe63700100000000000002bcded18253416c2fbc1cef5fec4519b8860cb1aa6ff6bfdde8e29fd390d04f4dfe2bdd0a6242d81562acbaa12a3e4f6e6f2a8e3346e2e2566bd09f86dbfc871f17d61d51cad0e12a8c6cc1ff7a54453405ee8a391e81c441aa75da756be5660d6e29f709f789ecded905407fb6bd2071bdc972756fbbd599097e33ca24c4b203832bb2e119a7144d4feee03cd49ae90f4000000000000000000"], 0xa, r3) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r5, 0x0, 0x1}, 0x18) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000e9010000000000000000000000950000000000000097df364d1ef904b2a58b150d8febad190d872e927376356c1c3fa554b4fb57bc3c955aafae9ed1f9258a85ad5c21df74e5afc994f154daaa3189f923ea73cad597e2e565c93431e42441ea45fa"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000240)='contention_end\x00', r7}, 0x18) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000100)={0x40, 0x0, 0xfe, 0x60fa}) r8 = syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2) readv(r8, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000300)=""/61, 0x3d}], 0x2) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt(r9, 0x401, 0xb, 0x0, &(0x7f00000003c0)) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r12, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d4d549b, 0x0, [0xffffffffffffffff, 0x7, 0x0, 0x0, 0x6, 0x3, 0xfffffffffffffffc, 0x800000]}) 2.108022187s ago: executing program 1 (id=73): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {0x1, 0x3}, [{0x2, 0x3}], {0x4, 0x5}, [], {0x10, 0x4}, {0x20, 0x1}}, 0x2c, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) setrlimit(0x7, &(0x7f0000000180)={0xe, 0x6fb1}) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) capset(0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000) syz_clone3(&(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, {0x800}, 0x0, 0x0, 0x0, 0x0}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = syz_open_dev$loop(&(0x7f00000005c0), 0x541d, 0x385a41) ioctl$LOOP_GET_STATUS64(r4, 0x4c05, 0x0) getpid() 1.992593299s ago: executing program 0 (id=74): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000), 0x4) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r5, 0x0, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="b0000000daffffff", @ANYRES64=0x3, @ANYBLOB="040000000000000000000000000000000000000000000080040000000000000000000000ff000000010000000000f900060000000000000005000000000000009c0000000000000081000000000000007e0000000000000000000000070000006e04000000800000508c0000", @ANYRES32, @ANYRES32, @ANYBLOB="04000000810000000000000000000000000000000200000000000000010000000700"/43], 0xb0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f00000000c0)={0x0, 0x80600}) r6 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r6, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r6, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) unshare(0x40020000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000100)={'wg0\x00'}) 1.876661691s ago: executing program 3 (id=75): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x880) connect$inet(r4, &(0x7f0000001980)={0x2, 0x1, @broadcast}, 0x10) r6 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r7 = dup2(r6, r6) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) write$tun(r7, &(0x7f0000000040)=ANY=[@ANYRES64, @ANYRES8], 0x46) 1.66405225s ago: executing program 2 (id=76): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000002780)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_io_uring_setup(0x40, &(0x7f00000006c0)={0x0, 0x5dda, 0x10100, 0x0, 0x268}, &(0x7f0000000140), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x80c, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x40000000, 0x54}, &(0x7f0000000180)=0x0, &(0x7f0000000040)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r2, 0x381b, 0x0, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xffffffffffffffe0, &(0x7f0000000240)=ANY=[]) 1.149518232s ago: executing program 1 (id=77): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020}, 0x2020) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1181}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000640)={0x10, 0x0, &(0x7f0000000e00)=[@request_death={0x400c6313}], 0x0, 0x0, 0x0}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000480)={0x2020}, 0x2020) 1.040085016s ago: executing program 0 (id=78): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {0x1, 0x3}, [{0x2, 0x3}], {0x4, 0x5}, [], {0x10, 0x4}, {0x20, 0x1}}, 0x2c, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) setrlimit(0x7, &(0x7f0000000180)={0xe, 0x6fb1}) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) capset(0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000) syz_clone3(&(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, {0x800}, 0x0, 0x0, 0x0, 0x0}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = syz_open_dev$loop(&(0x7f00000005c0), 0x541d, 0x385a41) ioctl$LOOP_GET_STATUS64(r4, 0x4c05, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() 870.396736ms ago: executing program 3 (id=79): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) io_setup(0x8, &(0x7f0000002740)=0x0) io_getevents(r0, 0x4, 0x13, &(0x7f0000000000), 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) io_submit(r0, 0x1, &(0x7f0000000480)=[&(0x7f0000000880)={0x0, 0x0, 0x0, 0x7, 0x8, r1, 0x0, 0x0, 0x6}]) io_destroy(r0) ioprio_get$uid(0x3, 0xee00) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'raw\x00', 0x2, [{}, {}]}, 0x44) 533.83678ms ago: executing program 3 (id=80): socket$kcm(0x29, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000005000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x578410eb) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4004550c, &(0x7f0000000180)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000340)='sys_enter\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$vsock_stream(0x28, 0x1, 0x0) 121.910476ms ago: executing program 0 (id=81): socket$kcm(0x10, 0x2, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x50313134, 0x0, 0xa, [{}, {0x10}, {}, {}, {0x6}]}}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000180)={0xf0f015, 0x4}) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x41, 0x0) (fail_nth: 1) 0s ago: executing program 1 (id=82): socket$kcm(0x10, 0x2, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x50313134, 0x0, 0xa, [{}, {0x10}, {}, {}, {0x6}]}}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000180)={0xf0f015, 0x4}) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x41, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:7429' (ED25519) to the list of known hosts. [ 41.834669][ T5926] cgroup: Unknown subsys name 'net' [ 41.962344][ T5926] cgroup: Unknown subsys name 'cpuset' [ 41.966899][ T5926] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 42.848734][ T5926] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.359848][ T5947] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.362941][ T5947] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.374417][ T5953] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.378055][ T5953] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.380950][ T5950] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.381428][ T5950] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.384506][ T5953] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.386704][ T5950] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.389634][ T5953] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.391204][ T5950] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.393320][ T5953] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.395991][ T5950] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.408088][ T5955] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.409582][ T5949] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.411270][ T5955] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.414410][ T5949] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.415191][ T5955] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.418011][ T5949] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.425782][ T5955] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.428299][ T5955] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.665963][ T5944] chnl_net:caif_netlink_parms(): no params data found [ 46.674687][ T5943] chnl_net:caif_netlink_parms(): no params data found [ 46.679268][ T5956] chnl_net:caif_netlink_parms(): no params data found [ 46.715153][ T5952] chnl_net:caif_netlink_parms(): no params data found [ 46.934478][ T5943] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.937153][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.941272][ T5943] bridge_slave_0: entered allmulticast mode [ 46.943833][ T5943] bridge_slave_0: entered promiscuous mode [ 46.960576][ T5944] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.962843][ T5944] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.965065][ T5944] bridge_slave_0: entered allmulticast mode [ 46.967598][ T5944] bridge_slave_0: entered promiscuous mode [ 46.984139][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.986823][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.989211][ T5943] bridge_slave_1: entered allmulticast mode [ 46.992575][ T5943] bridge_slave_1: entered promiscuous mode [ 47.008173][ T5956] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.010503][ T5956] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.012694][ T5956] bridge_slave_0: entered allmulticast mode [ 47.015244][ T5956] bridge_slave_0: entered promiscuous mode [ 47.018248][ T5956] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.020770][ T5956] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.023055][ T5956] bridge_slave_1: entered allmulticast mode [ 47.025528][ T5956] bridge_slave_1: entered promiscuous mode [ 47.027813][ T5944] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.030353][ T5944] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.032577][ T5944] bridge_slave_1: entered allmulticast mode [ 47.035335][ T5944] bridge_slave_1: entered promiscuous mode [ 47.051514][ T5952] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.054561][ T5952] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.057682][ T5952] bridge_slave_0: entered allmulticast mode [ 47.061969][ T5952] bridge_slave_0: entered promiscuous mode [ 47.125979][ T5944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.128982][ T5952] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.132434][ T5952] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.134671][ T5952] bridge_slave_1: entered allmulticast mode [ 47.137226][ T5952] bridge_slave_1: entered promiscuous mode [ 47.140848][ T5943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.145217][ T5956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.151469][ T5944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.169813][ T5943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.173947][ T5956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.253663][ T5952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.272070][ T5943] team0: Port device team_slave_0 added [ 47.292729][ T5944] team0: Port device team_slave_0 added [ 47.296791][ T5952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.301969][ T5943] team0: Port device team_slave_1 added [ 47.305840][ T5956] team0: Port device team_slave_0 added [ 47.309878][ T5944] team0: Port device team_slave_1 added [ 47.348573][ T5956] team0: Port device team_slave_1 added [ 47.438894][ T5952] team0: Port device team_slave_0 added [ 47.441818][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.444018][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.452133][ T5943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.478310][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.480708][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.488810][ T5944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.494620][ T5952] team0: Port device team_slave_1 added [ 47.497315][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.499579][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.507456][ T5943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.511347][ T5956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.513631][ T5956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.522568][ T5956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.526490][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.528647][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.536676][ T5944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.572909][ T5956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.575470][ T5956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.585703][ T5956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.599759][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.601890][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.609799][ T5952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.656286][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.658623][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.666545][ T5952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.704736][ T5956] hsr_slave_0: entered promiscuous mode [ 47.707614][ T5956] hsr_slave_1: entered promiscuous mode [ 47.730049][ T5944] hsr_slave_0: entered promiscuous mode [ 47.732179][ T5944] hsr_slave_1: entered promiscuous mode [ 47.734201][ T5944] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.736599][ T5944] Cannot create hsr debugfs directory [ 47.752900][ T5943] hsr_slave_0: entered promiscuous mode [ 47.755525][ T5943] hsr_slave_1: entered promiscuous mode [ 47.757766][ T5943] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.760348][ T5943] Cannot create hsr debugfs directory [ 47.807031][ T5952] hsr_slave_0: entered promiscuous mode [ 47.809266][ T5952] hsr_slave_1: entered promiscuous mode [ 47.811385][ T5952] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.813749][ T5952] Cannot create hsr debugfs directory [ 48.145509][ T5952] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.151187][ T5952] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.162909][ T5952] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.173837][ T5952] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.194479][ T5943] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.201882][ T5943] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.221983][ T5943] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.232951][ T5943] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.259956][ T5956] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.264065][ T5956] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.268538][ T5956] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.272664][ T5956] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.320976][ T5944] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.326515][ T5944] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.338398][ T5944] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.343563][ T5944] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.364107][ T5952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.395321][ T5952] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.402882][ T5943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.410689][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.413018][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.425307][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.427680][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.435614][ T5943] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.444988][ T5956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.454708][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.457000][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.460099][ T5955] Bluetooth: hci2: command tx timeout [ 48.460105][ T5953] Bluetooth: hci1: command tx timeout [ 48.467224][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.469547][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.469709][ T5955] Bluetooth: hci3: command tx timeout [ 48.471936][ T5953] Bluetooth: hci0: command tx timeout [ 48.480582][ T5944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.492377][ T5956] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.502702][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.504967][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.513834][ T5952] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 48.517107][ T5952] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.526645][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.528896][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.544235][ T5943] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 48.547613][ T5943] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.561362][ T5944] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.577069][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.579470][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.591026][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.593452][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.636176][ T5952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.672901][ T5943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.683518][ T5952] veth0_vlan: entered promiscuous mode [ 48.694571][ T5952] veth1_vlan: entered promiscuous mode [ 48.705235][ T5956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.712993][ T5943] veth0_vlan: entered promiscuous mode [ 48.717760][ T5943] veth1_vlan: entered promiscuous mode [ 48.746017][ T5952] veth0_macvtap: entered promiscuous mode [ 48.767358][ T5943] veth0_macvtap: entered promiscuous mode [ 48.772054][ T5952] veth1_macvtap: entered promiscuous mode [ 48.775592][ T5956] veth0_vlan: entered promiscuous mode [ 48.780407][ T5944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.786523][ T5943] veth1_macvtap: entered promiscuous mode [ 48.796032][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.806027][ T5956] veth1_vlan: entered promiscuous mode [ 48.810584][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.816493][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.826843][ T5943] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.832498][ T5943] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.835468][ T5943] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.838776][ T5943] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.852182][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.880334][ T5952] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.883176][ T5952] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.885916][ T5952] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.888588][ T5952] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.896271][ T5956] veth0_macvtap: entered promiscuous mode [ 48.899149][ T5944] veth0_vlan: entered promiscuous mode [ 48.911531][ T5956] veth1_macvtap: entered promiscuous mode [ 48.915687][ T5944] veth1_vlan: entered promiscuous mode [ 48.950762][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.951878][ T5956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.953352][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.961346][ T5956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.971985][ T5956] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.974762][ T5956] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.977698][ T5956] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.980913][ T5956] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.994732][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.997363][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.006312][ T5944] veth0_macvtap: entered promiscuous mode [ 49.017629][ T5944] veth1_macvtap: entered promiscuous mode [ 49.021313][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.024109][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.059467][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.067761][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.068806][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.074832][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.091818][ T5944] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.094731][ T5944] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.097464][ T5944] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.100803][ T5944] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.114189][ T5943] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.120702][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.124020][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.160461][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.163536][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.171970][ T97] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.174460][ T97] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.196700][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 49.200187][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.206033][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.210851][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.260463][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.289696][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.292352][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.319530][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.343185][ T6036] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 49.387197][ T6039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 49.639766][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.902165][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.905043][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.907823][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.547428][ T5953] Bluetooth: hci0: command tx timeout [ 50.548724][ T5955] Bluetooth: hci3: command tx timeout [ 50.549621][ T5953] Bluetooth: hci1: command tx timeout [ 50.553270][ T5953] Bluetooth: hci2: command tx timeout [ 51.178397][ T6068] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 51.308077][ T6074] lo speed is unknown, defaulting to 1000 [ 51.310320][ T6074] lo speed is unknown, defaulting to 1000 [ 51.331061][ T6074] lo speed is unknown, defaulting to 1000 [ 51.341682][ T6074] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 51.360610][ T6074] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 51.439215][ T6074] lo speed is unknown, defaulting to 1000 [ 51.444617][ T6074] lo speed is unknown, defaulting to 1000 [ 51.449772][ T6074] lo speed is unknown, defaulting to 1000 [ 51.457676][ T6074] lo speed is unknown, defaulting to 1000 [ 51.519484][ T59] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 51.641511][ T6019] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 51.671750][ T40] audit: type=1326 audit(1750214754.209:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6083 comm="syz.3.15" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x0 [ 51.733102][ T6086] Zero length message leads to an empty skb [ 51.791859][ T6019] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 51.795480][ T6019] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 51.800840][ T6019] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 51.804277][ T6019] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.838440][ T59] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 52.011051][ T838] usb 8-1: new low-speed USB device number 2 using dummy_hcd [ 52.169423][ T59] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 52.173361][ T59] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 52.175061][ T6019] usb 6-1: usb_control_msg returned -32 [ 52.176087][ T59] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.200601][ T6019] usbtmc 6-1:16.0: can't read capabilities [ 52.320775][ T838] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 52.323970][ T838] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 52.326959][ T838] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 52.330894][ T838] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.334085][ T838] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 52.336956][ T838] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.345699][ T838] hub 8-1:1.0: bad descriptor, ignoring hub [ 52.347699][ T838] hub 8-1:1.0: probe with driver hub failed with error -5 [ 52.350341][ T838] cdc_wdm 8-1:1.0: skipping garbage [ 52.351974][ T838] cdc_wdm 8-1:1.0: skipping garbage [ 52.355857][ T838] cdc_wdm 8-1:1.0: cdc-wdm1: USB WDM device [ 52.357910][ T838] cdc_wdm 8-1:1.0: Unknown control protocol [ 52.390049][ T59] usb 5-1: usb_control_msg returned -32 [ 52.391890][ T59] usbtmc 5-1:16.0: can't read capabilities [ 52.425383][ T6094] process 'syz.2.16' launched './file1' with NULL argv: empty string added [ 52.538235][ T6095] usbtmc 6-1:16.0: send_request_dev_dep_msg_in returned -90 [ 52.542375][ T6095] usbtmc 6-1:16.0: send_request_dev_dep_msg_in returned -90 [ 52.619866][ T5947] Bluetooth: hci3: command tx timeout [ 52.629651][ T5955] Bluetooth: hci1: command tx timeout [ 52.629697][ T5953] Bluetooth: hci0: command tx timeout [ 52.633259][ T5947] Bluetooth: hci2: command tx timeout [ 52.749818][ T6095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.751016][ T6096] usbtmc 6-1:16.0: send_request_dev_dep_msg_in returned -90 [ 52.753478][ T6095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.758729][ T6096] usbtmc 6-1:16.0: send_request_dev_dep_msg_in returned -90 [ 52.964652][ T6096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.968458][ T6096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.410316][ T6100] hub 9-0:1.0: USB hub found [ 53.412360][ T6100] hub 9-0:1.0: 1 port detected [ 54.156956][ T6006] usb 6-1: USB disconnect, device number 2 [ 54.290256][ T1020] usb 5-1: USB disconnect, device number 2 [ 54.353419][ T6108] lo speed is unknown, defaulting to 1000 [ 54.459649][ T6111] siw: device registration error -23 [ 54.699631][ T5953] Bluetooth: hci3: command tx timeout [ 54.701895][ T5947] Bluetooth: hci0: command tx timeout [ 54.709510][ T5947] Bluetooth: hci2: command tx timeout [ 54.711784][ T5947] Bluetooth: hci1: command tx timeout [ 54.783260][ T6119] netlink: 'syz.3.23': attribute type 10 has an invalid length. [ 54.790824][ T839] usb 8-1: USB disconnect, device number 2 [ 54.803769][ T6119] batman_adv: batadv0: Adding interface: team0 [ 54.836525][ T6119] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.845613][ T6121] netlink: 'syz.3.23': attribute type 10 has an invalid length. [ 54.848088][ T6121] netlink: 2 bytes leftover after parsing attributes in process `syz.3.23'. [ 54.849566][ T6119] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 54.855061][ T6121] team0: entered promiscuous mode [ 54.857228][ T6121] team_slave_0: entered promiscuous mode [ 54.860577][ T6121] team_slave_1: entered promiscuous mode [ 54.864543][ T6121] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.867537][ T6121] batman_adv: batadv0: Interface activated: team0 [ 54.870257][ T6121] batman_adv: batadv0: Interface deactivated: team0 [ 54.872948][ T6121] batman_adv: batadv0: Removing interface: team0 [ 54.881547][ T6121] bridge0: port 3(team0) entered blocking state [ 54.883828][ T6121] bridge0: port 3(team0) entered disabled state [ 54.886145][ T6121] team0: entered allmulticast mode [ 54.887767][ T6121] team_slave_0: entered allmulticast mode [ 54.889738][ T6121] team_slave_1: entered allmulticast mode [ 54.903228][ T6121] bridge0: port 3(team0) entered blocking state [ 54.905476][ T6121] bridge0: port 3(team0) entered forwarding state [ 55.016829][ T6122] hub 9-0:1.0: USB hub found [ 55.019483][ T6122] hub 9-0:1.0: 1 port detected [ 55.469434][ T839] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 55.539251][ T6132] siw: device registration error -23 [ 55.758952][ T6134] binder: 6127:6134 ioctl 4018620d 0 returned -22 [ 55.761512][ T839] usb 8-1: Using ep0 maxpacket: 16 [ 55.765216][ T839] usb 8-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 55.772102][ T839] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.776666][ T6134] binder: 6127:6134 ioctl c0306201 80000640 returned -22 [ 55.816764][ T839] usb 8-1: config 0 descriptor?? [ 55.821727][ T839] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected [ 56.024511][ T839] usb 8-1: Detected FT232A [ 56.030462][ T839] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 56.036088][ T839] usb 8-1: USB disconnect, device number 3 [ 56.041988][ T839] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 56.045829][ T839] ftdi_sio 8-1:0.0: device disconnected [ 56.117503][ T6140] block device autoloading is deprecated and will be removed. [ 56.891554][ T6158] hub 9-0:1.0: USB hub found [ 56.893955][ T6158] hub 9-0:1.0: 1 port detected [ 58.062014][ T6166] siw: device registration error -23 [ 58.781518][ T6177] netlink: 'syz.0.35': attribute type 2 has an invalid length. [ 58.784746][ T6177] netlink: 84 bytes leftover after parsing attributes in process `syz.0.35'. [ 58.797301][ T6177] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 58.975619][ T6188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.37'. [ 59.321942][ T6194] siw: device registration error -23 [ 60.013185][ T6204] siw: device registration error -23 [ 60.234257][ T6202] binder: 6197:6202 ioctl c0306201 80000640 returned -22 [ 60.989102][ T6216] netlink: 4 bytes leftover after parsing attributes in process `syz.1.43'. [ 61.056615][ T6216] team0: Port device team_slave_0 removed [ 61.296162][ T6223] netlink: 28 bytes leftover after parsing attributes in process `syz.2.46'. [ 61.300107][ T6223] netlink: 'syz.2.46': attribute type 7 has an invalid length. [ 61.302683][ T6223] netlink: 'syz.2.46': attribute type 8 has an invalid length. [ 61.305524][ T6223] netlink: 4 bytes leftover after parsing attributes in process `syz.2.46'. [ 61.314296][ T6223] bond0: entered promiscuous mode [ 61.316489][ T6223] bond_slave_0: entered promiscuous mode [ 61.318960][ T6223] bond_slave_1: entered promiscuous mode [ 61.322954][ T6223] ip6gretap0: entered promiscuous mode [ 61.326274][ T6223] gretap0: entered promiscuous mode [ 61.449585][ T839] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 61.569529][ T59] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 61.771880][ T839] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 61.775018][ T839] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 61.779070][ T839] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 61.782515][ T839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.839465][ T59] usb 6-1: Using ep0 maxpacket: 32 [ 61.842555][ T59] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 61.845214][ T59] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 61.847907][ T59] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 61.851250][ T59] usb 6-1: config 1 has no interface number 0 [ 61.853235][ T59] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 61.856593][ T59] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 61.860789][ T59] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 61.863626][ T59] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.875593][ T59] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 61.993603][ T839] usb 5-1: usb_control_msg returned -32 [ 61.995606][ T839] usbtmc 5-1:16.0: can't read capabilities [ 62.356147][ T6232] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -90 [ 62.358851][ T6232] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -90 [ 62.434465][ T59] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 62.566388][ T6232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.570630][ T6232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.755857][ T40] audit: type=1326 audit(1750214765.289:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6224 comm="syz.1.47" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x0 [ 63.510309][ T59] snd_usb_pod 6-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 63.681668][ T6250] hub 9-0:1.0: USB hub found [ 63.683849][ T6250] hub 9-0:1.0: 1 port detected [ 64.183227][ T10] usb 5-1: USB disconnect, device number 3 [ 64.364247][ T59] usb 6-1: USB disconnect, device number 3 [ 64.367219][ T59] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 64.821460][ T6271] syzkaller1: entered promiscuous mode [ 64.823310][ T6271] syzkaller1: entered allmulticast mode [ 64.836822][ T6271] program syz.3.56 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.843776][ T6271] nfs: Unknown parameter 'ntext' [ 65.065867][ T6272] input: syz1 as /devices/virtual/input/input6 [ 65.659599][ T1020] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 65.970491][ T1020] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 65.973672][ T1020] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 65.978688][ T1020] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 65.983474][ T1020] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.557210][ T1020] usb 7-1: usb_control_msg returned -32 [ 66.559063][ T1020] usbtmc 7-1:16.0: can't read capabilities [ 66.871385][ T838] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 66.970178][ T6305] usbtmc 7-1:16.0: send_request_dev_dep_msg_in returned -90 [ 66.972927][ T6305] usbtmc 7-1:16.0: send_request_dev_dep_msg_in returned -90 [ 67.031230][ T838] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 67.034329][ T838] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 67.038404][ T838] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 67.041701][ T838] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.178064][ T6305] netlink: 28 bytes leftover after parsing attributes in process `syz.2.59'. [ 67.185844][ T6305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.188968][ T6305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.255060][ T838] usb 8-1: usb_control_msg returned -32 [ 67.257871][ T838] usbtmc 8-1:16.0: can't read capabilities [ 67.770695][ T6315] usbtmc 7-1:16.0: send_request_dev_dep_msg_in returned -90 [ 67.776041][ T6315] usbtmc 7-1:16.0: send_request_dev_dep_msg_in returned -90 [ 68.004055][ T6315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.011225][ T6315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.429897][ T839] usb 7-1: USB disconnect, device number 2 [ 68.551653][ T6321] hub 9-0:1.0: USB hub found [ 68.553334][ T6321] hub 9-0:1.0: 1 port detected [ 68.627863][ T6327] siw: device registration error -23 [ 69.190156][ T6331] siw: device registration error -23 [ 69.658659][ T839] usb 8-1: USB disconnect, device number 4 [ 69.921847][ T6348] lo speed is unknown, defaulting to 1000 [ 70.329506][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 70.489674][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 70.498019][ T10] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 70.506801][ T10] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 70.514886][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 70.518625][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 70.527442][ T10] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 70.531903][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 70.537544][ T10] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 70.541899][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.550929][ T10] usb 7-1: config 0 descriptor?? [ 70.738680][ T6359] binder: 6351:6359 ioctl c0306201 80000640 returned -22 [ 70.793325][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.795434][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.855120][ T10] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 70.867463][ T10] usb 7-1: USB disconnect, device number 3 [ 70.872013][ T10] usblp0: removed [ 71.439483][ T10] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 71.662961][ T6374] FAULT_INJECTION: forcing a failure. [ 71.662961][ T6374] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 71.663476][ T6374] [ 71.663482][ T6374] ====================================================== [ 71.663485][ T6374] WARNING: possible circular locking dependency detected [ 71.663488][ T6374] 6.16.0-rc2-syzkaller-00045-g4663747812d1 #0 Not tainted [ 71.663494][ T6374] ------------------------------------------------------ [ 71.663497][ T6374] syz.0.81/6374 is trying to acquire lock: [ 71.663502][ T6374] ffffffff8e4d1c80 (console_owner){....}-{0:0}, at: console_lock_spinning_enable+0x9f/0xd0 [ 71.663532][ T6374] [ 71.663532][ T6374] but task is already holding lock: [ 71.663535][ T6374] ffff88802b23bdd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 71.663555][ T6374] [ 71.663555][ T6374] which lock already depends on the new lock. [ 71.663555][ T6374] [ 71.663558][ T6374] [ 71.663558][ T6374] the existing dependency chain (in reverse order) is: [ 71.663561][ T6374] [ 71.663561][ T6374] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 71.663572][ T6374] _raw_spin_lock_nested+0x31/0x40 [ 71.663586][ T6374] raw_spin_rq_lock_nested+0x29/0x130 [ 71.663594][ T6374] task_rq_lock+0xcf/0x490 [ 71.663602][ T6374] cgroup_move_task+0x81/0x2a0 [ 71.663612][ T6374] css_set_move_task+0x288/0x5f0 [ 71.663624][ T6374] cgroup_post_fork+0x201/0x9e0 [ 71.663633][ T6374] copy_process+0x5cfc/0x76a0 [ 71.663643][ T6374] kernel_clone+0xfc/0x960 [ 71.663653][ T6374] user_mode_thread+0xc7/0x110 [ 71.663664][ T6374] rest_init+0x23/0x2b0 [ 71.663673][ T6374] start_kernel+0x3ee/0x4d0 [ 71.663685][ T6374] x86_64_start_reservations+0x18/0x30 [ 71.663696][ T6374] x86_64_start_kernel+0x130/0x190 [ 71.663707][ T6374] common_startup_64+0x13e/0x148 [ 71.663722][ T6374] [ 71.663722][ T6374] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 71.663733][ T6374] _raw_spin_lock_irqsave+0x3a/0x60 [ 71.663746][ T6374] try_to_wake_up+0xb2/0x1680 [ 71.663754][ T6374] __wake_up_common+0x135/0x1f0 [ 71.663765][ T6374] __wake_up+0x31/0x60 [ 71.663774][ T6374] tty_port_default_wakeup+0x2a/0x40 [ 71.663784][ T6374] serial8250_tx_chars+0x68e/0x860 [ 71.663793][ T6374] serial8250_handle_irq+0x761/0xcb0 [ 71.663803][ T6374] serial8250_default_handle_irq+0x9a/0x210 [ 71.663813][ T6374] serial8250_interrupt+0x103/0x210 [ 71.663823][ T6374] __handle_irq_event_percpu+0x229/0x7d0 [ 71.663832][ T6374] handle_irq_event+0xab/0x1e0 [ 71.663840][ T6374] handle_edge_irq+0x28e/0xab0 [ 71.663853][ T6374] __common_interrupt+0xdf/0x250 [ 71.663864][ T6374] common_interrupt+0xba/0xe0 [ 71.663874][ T6374] asm_common_interrupt+0x26/0x40 [ 71.663883][ T6374] pv_native_safe_halt+0xf/0x20 [ 71.663895][ T6374] default_idle+0x13/0x20 [ 71.663904][ T6374] default_idle_call+0x6d/0xb0 [ 71.663912][ T6374] do_idle+0x391/0x510 [ 71.663920][ T6374] cpu_startup_entry+0x4f/0x60 [ 71.663929][ T6374] start_secondary+0x21d/0x2b0 [ 71.663939][ T6374] common_startup_64+0x13e/0x148 [ 71.663953][ T6374] [ 71.663953][ T6374] -> #2 (&tty->write_wait){-...}-{3:3}: [ 71.663965][ T6374] _raw_spin_lock_irqsave+0x3a/0x60 [ 71.663976][ T6374] __wake_up+0x1c/0x60 [ 71.663985][ T6374] tty_port_default_wakeup+0x2a/0x40 [ 71.663994][ T6374] serial8250_tx_chars+0x68e/0x860 [ 71.664002][ T6374] __start_tx+0x3e9/0x4a0 [ 71.664010][ T6374] serial8250_start_tx+0x368/0x530 [ 71.664019][ T6374] __uart_start+0x292/0x4c0 [ 71.664030][ T6374] uart_write+0x218/0xb30 [ 71.664037][ T6374] n_tty_write+0x40f/0x1160 [ 71.664046][ T6374] file_tty_write.constprop.0+0x504/0x9b0 [ 71.664061][ T6374] redirected_tty_write+0xd4/0x150 [ 71.664074][ T6374] vfs_write+0x6c7/0x1150 [ 71.664086][ T6374] ksys_write+0x12a/0x250 [ 71.664098][ T6374] do_syscall_64+0xcd/0x490 [ 71.664105][ T6374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.664114][ T6374] [ 71.664114][ T6374] -> #1 (&port_lock_key){-...}-{3:3}: [ 71.664126][ T6374] _raw_spin_lock_irqsave+0x3a/0x60 [ 71.664138][ T6374] serial8250_console_write+0x181/0x1890 [ 71.664148][ T6374] console_flush_all+0x801/0xc60 [ 71.664155][ T6374] console_unlock+0xd8/0x210 [ 71.664163][ T6374] vprintk_emit+0x418/0x6d0 [ 71.664171][ T6374] _printk+0xc7/0x100 [ 71.664182][ T6374] register_console+0xc2d/0x11b0 [ 71.664190][ T6374] univ8250_console_init+0x5f/0x90 [ 71.664202][ T6374] console_init+0x14f/0x680 [ 71.664212][ T6374] start_kernel+0x29f/0x4d0 [ 71.664223][ T6374] x86_64_start_reservations+0x18/0x30 [ 71.664234][ T6374] x86_64_start_kernel+0x130/0x190 [ 71.664244][ T6374] common_startup_64+0x13e/0x148 [ 71.664258][ T6374] [ 71.664258][ T6374] -> #0 (console_owner){....}-{0:0}: [ 71.664269][ T6374] __lock_acquire+0x126f/0x1c90 [ 71.664281][ T6374] lock_acquire+0x179/0x350 [ 71.664292][ T6374] console_lock_spinning_enable+0xb0/0xd0 [ 71.664306][ T6374] console_flush_all+0x7aa/0xc60 [ 71.664314][ T6374] console_unlock+0xd8/0x210 [ 71.664321][ T6374] vprintk_emit+0x418/0x6d0 [ 71.664329][ T6374] _printk+0xc7/0x100 [ 71.664339][ T6374] should_fail_ex+0x4e7/0x640 [ 71.664352][ T6374] copy_to_user_nofault+0xac/0x1c0 [ 71.664366][ T6374] bpf_probe_write_user+0xaf/0xf0 [ 71.664376][ T6374] bpf_prog_6303d92f98284ad8+0x44/0x4c [ 71.664384][ T6374] bpf_trace_run4+0x249/0x5a0 [ 71.664395][ T6374] __bpf_trace_sched_switch+0x145/0x190 [ 71.664410][ T6374] __schedule+0x1bee/0x5de0 [ 71.664421][ T6374] schedule+0xe7/0x3a0 [ 71.664437][ T6374] exit_to_user_mode_loop+0x67/0x110 [ 71.664451][ T6374] __do_fast_syscall_32+0x2ac/0x3a0 [ 71.664458][ T6374] do_fast_syscall_32+0x32/0x80 [ 71.664466][ T6374] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 71.664477][ T6374] [ 71.664477][ T6374] other info that might help us debug this: [ 71.664477][ T6374] [ 71.664480][ T6374] Chain exists of: [ 71.664480][ T6374] console_owner --> &p->pi_lock --> &rq->__lock [ 71.664480][ T6374] [ 71.664493][ T6374] Possible unsafe locking scenario: [ 71.664493][ T6374] [ 71.664495][ T6374] CPU0 CPU1 [ 71.664498][ T6374] ---- ---- [ 71.664500][ T6374] lock(&rq->__lock); [ 71.664505][ T6374] lock(&p->pi_lock); [ 71.664511][ T6374] lock(&rq->__lock); [ 71.664517][ T6374] lock(console_owner); [ 71.664523][ T6374] [ 71.664523][ T6374] *** DEADLOCK *** [ 71.664523][ T6374] [ 71.664525][ T6374] 4 locks held by syz.0.81/6374: [ 71.664530][ T6374] #0: ffff88802b23bdd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 71.664551][ T6374] #1: ffffffff8e5c4700 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x1cf/0x5a0 [ 71.664575][ T6374] #2: ffffffff8e5b20c0 (console_lock){+.+.}-{0:0}, at: _printk+0xc7/0x100 [ 71.664598][ T6374] #3: ffffffff8e5b2130 (console_srcu){....}-{0:0}, at: console_flush_all+0x158/0xc60 [ 71.664618][ T6374] [ 71.664618][ T6374] stack backtrace: [ 71.664622][ T6374] CPU: 1 UID: 0 PID: 6374 Comm: syz.0.81 Not tainted 6.16.0-rc2-syzkaller-00045-g4663747812d1 #0 PREEMPT(full) [ 71.664634][ T6374] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 71.664641][ T6374] Call Trace: [ 71.664644][ T6374] [ 71.664648][ T6374] dump_stack_lvl+0x116/0x1f0 [ 71.664663][ T6374] print_circular_bug+0x275/0x350 [ 71.664675][ T6374] check_noncircular+0x14c/0x170 [ 71.664689][ T6374] __lock_acquire+0x126f/0x1c90 [ 71.664703][ T6374] lock_acquire+0x179/0x350 [ 71.664715][ T6374] ? console_lock_spinning_enable+0x9f/0xd0 [ 71.664730][ T6374] ? console_lock_spinning_enable+0x88/0xd0 [ 71.664746][ T6374] console_lock_spinning_enable+0xb0/0xd0 [ 71.664761][ T6374] ? console_lock_spinning_enable+0x9f/0xd0 [ 71.664776][ T6374] console_flush_all+0x7aa/0xc60 [ 71.664786][ T6374] ? __pfx_console_flush_all+0x10/0x10 [ 71.664796][ T6374] ? is_printk_cpu_sync_owner+0x32/0x40 [ 71.664808][ T6374] console_unlock+0xd8/0x210 [ 71.664816][ T6374] ? __pfx_console_unlock+0x10/0x10 [ 71.664824][ T6374] ? do_raw_spin_unlock+0xe0/0x230 [ 71.664839][ T6374] ? _printk+0xc7/0x100 [ 71.664851][ T6374] ? __down_trylock_console_sem+0xb0/0x140 [ 71.664864][ T6374] vprintk_emit+0x418/0x6d0 [ 71.664874][ T6374] ? __pfx_vprintk_emit+0x10/0x10 [ 71.664883][ T6374] ? __pfx___schedule+0x10/0x10 [ 71.664897][ T6374] _printk+0xc7/0x100 [ 71.664909][ T6374] ? __pfx__printk+0x10/0x10 [ 71.664921][ T6374] ? __lock_acquire+0x622/0x1c90 [ 71.664933][ T6374] ? __pfx____ratelimit+0x10/0x10 [ 71.664948][ T6374] should_fail_ex+0x4e7/0x640 [ 71.664962][ T6374] copy_to_user_nofault+0xac/0x1c0 [ 71.664977][ T6374] bpf_probe_write_user+0xaf/0xf0 [ 71.664988][ T6374] bpf_prog_6303d92f98284ad8+0x44/0x4c [ 71.664996][ T6374] bpf_trace_run4+0x249/0x5a0 [ 71.665009][ T6374] ? __pfx_bpf_trace_run4+0x10/0x10 [ 71.665022][ T6374] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 71.665039][ T6374] __bpf_trace_sched_switch+0x145/0x190 [ 71.665055][ T6374] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 71.665070][ T6374] ? plist_check_prev_next+0x12a/0x1a0 [ 71.665083][ T6374] ? rcu_read_lock_sched_held+0x3e/0x70 [ 71.665095][ T6374] ? psi_task_switch+0x6d0/0x8e0 [ 71.665106][ T6374] __schedule+0x1bee/0x5de0 [ 71.665118][ T6374] ? ksys_write+0x190/0x250 [ 71.665134][ T6374] ? __pfx___schedule+0x10/0x10 [ 71.665148][ T6374] ? find_held_lock+0x2b/0x80 [ 71.665157][ T6374] ? __might_fault+0xe3/0x190 [ 71.665170][ T6374] ? __might_fault+0xe3/0x190 [ 71.665183][ T6374] ? __might_fault+0x13b/0x190 [ 71.665197][ T6374] schedule+0xe7/0x3a0 [ 71.665234][ T6374] exit_to_user_mode_loop+0x67/0x110 [ 71.665256][ T6374] __do_fast_syscall_32+0x2ac/0x3a0 [ 71.665267][ T6374] do_fast_syscall_32+0x32/0x80 [ 71.665276][ T6374] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 71.665288][ T6374] RIP: 0023:0xf702e579 [ 71.665295][ T6374] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 71.665304][ T6374] RSP: 002b:00000000f4fdc590 EFLAGS: 00000293 ORIG_RAX: 0000000000000004 [ 71.665313][ T6374] RAX: 0000000000000001 RBX: 0000000000000009 RCX: 00000000f4fdc610 [ 71.665319][ T6374] RDX: 0000000000000001 RSI: 00000000f7392ff4 RDI: 0000000000000000 [ 71.665325][ T6374] RBP: 00000000f73c50a0 R08: 0000000000000000 R09: 0000000000000000 [ 71.665330][ T6374] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 71.665335][ T6374] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 71.665344][ T6374] [ 71.986127][ T6374] CPU: 1 UID: 0 PID: 6374 Comm: syz.0.81 Not tainted 6.16.0-rc2-syzkaller-00045-g4663747812d1 #0 PREEMPT(full) [ 71.986141][ T6374] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 71.986148][ T6374] Call Trace: [ 71.986153][ T6374] [ 71.986158][ T6374] dump_stack_lvl+0x116/0x1f0 [ 71.986176][ T6374] should_fail_ex+0x512/0x640 [ 71.986191][ T6374] copy_to_user_nofault+0xac/0x1c0 [ 71.986209][ T6374] bpf_probe_write_user+0xaf/0xf0 [ 71.986221][ T6374] bpf_prog_6303d92f98284ad8+0x44/0x4c [ 71.986229][ T6374] bpf_trace_run4+0x249/0x5a0 [ 71.986243][ T6374] ? __pfx_bpf_trace_run4+0x10/0x10 [ 71.986257][ T6374] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 71.986275][ T6374] __bpf_trace_sched_switch+0x145/0x190 [ 71.986291][ T6374] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 71.986306][ T6374] ? plist_check_prev_next+0x12a/0x1a0 [ 71.986320][ T6374] ? rcu_read_lock_sched_held+0x3e/0x70 [ 71.986333][ T6374] ? psi_task_switch+0x6d0/0x8e0 [ 71.986345][ T6374] __schedule+0x1bee/0x5de0 [ 71.986359][ T6374] ? ksys_write+0x190/0x250 [ 71.986375][ T6374] ? __pfx___schedule+0x10/0x10 [ 71.986389][ T6374] ? find_held_lock+0x2b/0x80 [ 71.986398][ T6374] ? __might_fault+0xe3/0x190 [ 71.986412][ T6374] ? __might_fault+0xe3/0x190 [ 71.986428][ T6374] ? __might_fault+0x13b/0x190 [ 71.986442][ T6374] schedule+0xe7/0x3a0 [ 71.986455][ T6374] exit_to_user_mode_loop+0x67/0x110 [ 71.986470][ T6374] __do_fast_syscall_32+0x2ac/0x3a0 [ 71.986480][ T6374] do_fast_syscall_32+0x32/0x80 [ 71.986489][ T6374] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 71.986501][ T6374] RIP: 0023:0xf702e579 [ 71.986509][ T6374] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 71.986518][ T6374] RSP: 002b:00000000f4fdc590 EFLAGS: 00000293 ORIG_RAX: 0000000000000004 [ 71.986528][ T6374] RAX: 0000000000000001 RBX: 0000000000000009 RCX: 00000000f4fdc610 [ 71.986534][ T6374] RDX: 0000000000000001 RSI: 00000000f7392ff4 RDI: 0000000000000000 [ 71.986539][ T6374] RBP: 00000000f73c50a0 R08: 0000000000000000 R09: 0000000000000000 [ 71.986545][ T6374] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 71.986550][ T6374] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 71.986559][ T6374] [ 72.057953][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 72.084546][ T6374] random: crng reseeded on system resumption [ 72.085189][ T10] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 72.089044][ T10] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 72.091785][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 72.094557][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 72.097501][ T10] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 72.100447][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 72.104415][ T10] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 72.107188][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.110207][ T10] usb 7-1: config 0 descriptor?? [ 72.114919][ T6374] PM: hibernation: Marking nosave pages: [mem 0x00000000-0x00000fff] [ 72.117414][ T6374] PM: hibernation: Marking nosave pages: [mem 0x0009f000-0x000fffff] [ 72.119920][ T6374] PM: hibernation: Basic memory bitmaps created [ 72.277635][ T6369] PM: hibernation: Basic memory bitmaps freed [ 72.281112][ T6376] random: crng reseeded on system resumption [ 72.284535][ T6376] PM: hibernation: Marking nosave pages: [mem 0x00000000-0x00000fff] [ 72.286996][ T6376] PM: hibernation: Marking nosave pages: [mem 0x0009f000-0x000fffff] [ 72.289333][ T6376] PM: hibernation: Basic memory bitmaps created [ 72.327528][ T10] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 72.406402][ T6371] PM: hibernation: Basic memory bitmaps freed [ 73.357758][ T10] usb 7-1: USB disconnect, device number 4 [ 73.361584][ T10] usblp0: removed [ 81.031579][ T53] cfg80211: failed to load regulatory.db VM DIAGNOSIS: 02:46:14 Registers: info registers vcpu 0 CPU#0 RAX=0000000080010003 RBX=0000000000000003 RCX=ffffffff8169e256 RDX=ffffffff8e297780 RSI=ffffffff816a12ac RDI=0000000000000000 RBP=ffff88802b23bdc0 RSP=ffffc90000007b18 R8 =0000000000000000 R9 =0000000000000003 R10=0000000000000003 R11=ffffc90000007ff8 R12=0000000000000003 R13=0000000000000003 R14=ffff88802b23cd40 R15=ffffed10056477b8 RIP=ffffffff816a12ad RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097561000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000ffffffff CR3=000000006c868000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000034 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85582055 RDI=ffffffff9b06da40 RBP=ffffffff9b06da00 RSP=ffffc90007cc75d8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=722d302e36312e36 R12=0000000000000000 R13=0000000000000034 R14=ffffffff9b06da00 R15=ffffffff85581ff0 RIP=ffffffff8558207f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097661000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000ffffffff CR3=000000006cfe4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=dffffc0000000000 RBX=ffffffff93cd2228 RCX=0000000000000001 RDX=1ffffffff1be3bb6 RSI=ffffffff8c156360 RDI=ffffffff8df1ddb0 RBP=0000000000000002 RSP=ffffc90007e5f9c0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=ffffffff8205a39b R13=ffffc90007e5fa90 R14=ffffc90007e5fb50 R15=00000000800c48c0 RIP=ffffffff81a0e5c3 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097761000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000ffffffff CR3=000000006cfe4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f7472ff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff8169e256 RDX=ffff88801c308000 RSI=ffffffff816a12ac RDI=0000000000000000 RBP=ffff88802b53cd54 RSP=ffffc900005e86c0 R8 =0000000000000000 R9 =0000000000000001 R10=0000000000000001 R11=0000000000000001 R12=0000000000000001 R13=0000000000000001 R14=ffff88802b53cd40 R15=ffff88802b53cd48 RIP=ffffffff816a12ad RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097861000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000ffffffff CR3=0000000067606000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000