last executing test programs: 3.910260789s ago: executing program 3 (id=199): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) io_setup(0x7ff, &(0x7f0000000680)=0x0) io_submit(r1, 0x1, &(0x7f0000000640)=[&(0x7f0000000440)={0x18, 0x7000000, 0x4, 0x7, 0x0, r0, &(0x7f0000000380)="f733902887625c04ff", 0x9}]) 3.637149095s ago: executing program 3 (id=201): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000040)=@x86={0x3, 0x8, 0x0, 0x0, 0x2, 0x2, 0xe, 0xfe, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x8000000000002}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socketpair(0x1e, 0x5, 0x0, &(0x7f0000000040)) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000140)={"9fcaa0504b38d5004b9277c079417ff857dc9b7ac770169aed764b4d2ada8bde", 0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000200)={"fe0d1acce4a37ef94acd000200", r5, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r7 = syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0) kcmp(r7, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r9, &(0x7f0000000600)=[{{&(0x7f00000002c0)=@sco, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)=""/217}, {&(0x7f0000000500)=""/235}, {&(0x7f0000000440)=""/65}, {&(0x7f0000000080)=""/45}], 0x0, &(0x7f0000000680)=""/4096}, 0x9}], 0x10167, 0x40010062, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x109042, 0x0) dup(r6) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)=ANY=[]) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000240)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0xb}}, 0x10) 2.389642766s ago: executing program 3 (id=212): syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="180000001808ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$vhost_vsock(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000100)={0x2c264462e1915f48, 0x18}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair(0x0, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="04040a0000000000005467920034db81e7abdddc259aee6063e57dfee0dab308ac44bd02bae33aa428c21e8527c5b32e2c96d0a0d523936e2a0c48ae51b0", @ANYBLOB="930be6adf65494ee31d39323e2a0630a80da14c970c04a37672bb7506f12b3d4458303077c5006fa", @ANYRES8], 0xd) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)=@generic={0x0}, 0x14) syz_emit_vhci(0x0, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x11, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) syz_io_uring_setup(0x113, &(0x7f0000000100)={0x0, 0xd13, 0x2, 0x0, 0x293}, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, 0x0) r6 = socket(0x10, 0x80003, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000016000119"], 0x78}}, 0x0) 2.389419565s ago: executing program 1 (id=213): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000980)=ANY=[@ANYBLOB="c0000000190001050400000000000000200100000000000000000100000000000000000000000000000000000000000100000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000c001c"], 0xc0}, 0x1, 0x0, 0x0, 0x800}, 0x44) 2.376798172s ago: executing program 0 (id=214): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = eventfd(0x3f1e) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000080)={r5}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) creat(0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18}, '\x00'}) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000300)=0xe) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r8, 0x40047438, &(0x7f0000000180)=""/246) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x2}, 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r5}) close_range(r0, 0xffffffffffffffff, 0x0) 2.289720047s ago: executing program 1 (id=215): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="0bc3ff", 0x3}, {&(0x7f0000000000)='G', 0x1}, {&(0x7f0000000240)="d336bd75243cb9a6418e", 0xa}], 0x3) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={r0, 0x20, &(0x7f0000000280)={&(0x7f0000000340)=""/151, 0x97, 0x0, &(0x7f0000000200)=""/44, 0x2c}}, 0x10) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) (async) r4 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={r0, 0xffffffffffffffff}, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000600)={'ip6gretap0\x00', 0x0}) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f0000000000)=0x3, 0x12) (async) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_SUBMITURB(r8, 0x802c550a, &(0x7f0000000280)=@urb_type_control={0x2, {0xf, 0x1}, 0x4, 0xa0, &(0x7f0000000000)={0x0, 0x18, 0x7, 0x6, 0x7}, 0x8, 0x10a9, 0x80, 0x0, 0x8, 0x80, 0x0}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x13, 0x10, &(0x7f00000004c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @jmp={0x5, 0x0, 0x8, 0x0, 0xb, 0x50, 0x8}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x3}], &(0x7f0000000540)='GPL\x00', 0x7ff, 0x49, &(0x7f0000000580)=""/73, 0x41100, 0x41, '\x00', r6, @fallback=0x2f, r7, 0x8, &(0x7f00000006c0)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, &(0x7f0000000700)=[r0, r0], &(0x7f0000000740)=[{0x0, 0x4, 0xa}, {0x2, 0x2, 0x3, 0x9}, {0x4, 0x3, 0xd, 0x9}, {0x1, 0x1, 0x9, 0xc}, {0x3, 0x5, 0x7, 0x8}, {0x3, 0x5, 0x3, 0xb}, {0x1, 0x1, 0x10, 0x9}, {0x4, 0x1, 0x7, 0x9}], 0x10, 0x10001, @void, @value}, 0x94) (async) r9 = syz_io_uring_setup(0x756b, &(0x7f0000000000)={0x0, 0x2118, 0x2, 0x3, 0x33d}, &(0x7f0000000080), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r9, 0xb, &(0x7f00000001c0)=[@ioring_restriction_sqe_op, @ioring_restriction_sqe_op={0x1, 0xe}, @ioring_restriction_sqe_op={0x1, 0x13}], 0x3) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x70ad30, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'team0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048086}, 0x20000810) 1.925076267s ago: executing program 2 (id=218): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) syz_emit_ethernet(0x0, 0x0, 0x0) (async) socket$nl_generic(0x11, 0x3, 0x10) (async) syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0xbc, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3f, 0xe, {{{}, {0xb4c}, @device_a, @device_b}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @void, @val={0x25, 0x3, {0x0, 0x34}}, @void, @val={0x3c, 0x4, {0x1, 0x6, 0xb8, 0x4}}, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_FTM_RESPONDER={0x48, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x5, 0x3, "16"}, @NL80211_FTM_RESP_ATTR_LCI={0x37, 0x2, "acb00a2a08773993a1ee8fbe7ea9bc6efe45c460f22c71635b820b731cde2b700d214569bb04af2e0f542706dde2c014fc6101"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}]]}, 0xbc}, 0x1, 0x0, 0x0, 0x90}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) (async) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000180)={0x2, 0x0, 0x7, 0x0, 0x12, "1f5af4bd7a8c91d0"}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='mmap_lock_acquire_returned\x00', r10}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r10}, 0x10) (async) r11 = getpid() process_vm_readv(r11, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 1.750558706s ago: executing program 0 (id=219): sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="93ca"], 0x14}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c8]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890c, &(0x7f0000000300)={0x0, @l2tp={0x2, 0x0, @local, 0x80000}, @vsock={0x28, 0x0, 0x0, @host}, @sco, 0xffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}) 1.599819938s ago: executing program 2 (id=220): r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000640)="f3", 0xf000}], 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000007c0), r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x1, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)={0x14, r2, 0x1, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 1.598947717s ago: executing program 0 (id=221): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x1000000, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [{@smackfsdef={'smackfsdef', 0x3d, '%'}}, {@dont_appraise}]}}) getdents64(r2, 0x0, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000240)="04000000000203", 0x7}, {0x0, 0x8}], 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) brk(0x0) gettid() bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000280)=0x0) write$cgroup_pid(r2, &(0x7f00000002c0)=r4, 0x12) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008000a"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) 1.519606006s ago: executing program 2 (id=222): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x1000000, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [{@smackfsdef={'smackfsdef', 0x3d, '%'}}, {@dont_appraise}]}}) getdents64(r2, 0x0, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000240)="04000000000203", 0x7}, {0x0, 0x8}], 0x2) (fail_nth: 1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) brk(0x0) gettid() bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000280)=0x0) write$cgroup_pid(r2, &(0x7f00000002c0)=r4, 0x12) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008000a"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) 1.425154826s ago: executing program 3 (id=223): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[@sndrcv={0x2c, 0x84, 0x1, {0x5, 0x8, 0x8009, 0x1, 0xa, 0x2, 0x2, 0xfffffff0}}], 0x2c, 0x4c010}], 0x1, 0x4880) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x101, 0x0) r1 = memfd_create(&(0x7f0000000000)='\xef]-$$**\x96[\x00', 0x0) writev(r1, &(0x7f0000001280)=[{&(0x7f0000000080)='\x00', 0x1}], 0x49) 1.350146391s ago: executing program 3 (id=224): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x7, 0x4}, 0xfffffffffffffe78, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0xd4600000) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') sendfile(r4, r5, 0x0, 0xc01) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r6, {}, 0xa}}, 0x26) sendmmsg$inet(r7, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c", 0xc}], 0x1}}], 0x1, 0x8040) r8 = socket$netlink(0x10, 0x3, 0x13) bind$netlink(r8, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, 0x0, &(0x7f00000004c0)='./file0\x00', 0xffffffffffffffff) pwritev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="3f398000ed08070f00dd849b45409445fefc424d461f8031e1a4a911441827eb5cdb57ce64e20d2c333467ee172416391ecd9b5489c50699f1", 0x39}, {0x0}], 0x2, 0x6, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) 1.229660969s ago: executing program 1 (id=225): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') sendfile(0xffffffffffffffff, r3, 0x0, 0xc01) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {}, 0xa}}, 0x26) sendmmsg$inet(r5, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) r6 = socket$netlink(0x10, 0x3, 0x13) bind$netlink(r6, 0x0, 0x0) setsockopt$sock_int(r6, 0x1, 0x8, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, 0x0, &(0x7f00000004c0)='./file0\x00', 0xffffffffffffffff) pwritev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="3f398000ed08070f00dd849b4540", 0xe}, {0x0}], 0x2, 0x6, 0x40) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, &(0x7f0000000680)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) 733.189617ms ago: executing program 0 (id=226): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000100)={{}, {0xe}, 0x0, 0x4}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) rename(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000800)='./file0\x00') connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @broadcast}, 0xffffffffffffff29) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window, @mss, @sack_perm, @window], 0x6) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000400)=0x403, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000040)={0x1d, r3}, 0x10) close(r2) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0xc7) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000240)={0x200, 0x0, 0x3, 0x0, 0x21}) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) r5 = open(&(0x7f0000000140)='./file0\x00', 0x149442, 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000008640)=[{0x0}], 0x1, 0x0) mlock2(&(0x7f000000a000/0x2000)=nil, 0x2000, 0x0) mlock2(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x0) ftruncate(r5, 0x200002) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 660.224572ms ago: executing program 2 (id=227): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) r2 = gettid() r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r3, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000080)={0x366, @tick=0x4, 0x1, {}, 0x5, 0x2}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0x40045304, &(0x7f0000001280)={0xfffffffd, 0x2, 'client0\x00', 0x1, '\x00\x00\x00\x00\x00\x00\x00\b', "3b25d78e50d5db56cf3fa21e83335c90ba0200974227f243661f9e0c2f5720ee", 0x2, 0x1bf}) tkill(r2, 0x7) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="72fb2d5ca220b6978d7d014016da147f1640499e9a248334e1272c8bb91981ccf15a457432305656868430621d5cef722d430b54c532d92f75b5fb6a58ce0715914520e6eb7130156aaefa127b5fd01564456f83ba3b37a9da672e5dd393692267fe4f397229b21a843f3841d9c504a4e87a24b674caedf0465d82d910dca0bde26010408a0f8bb163a20b54f094b0c5c1dcd61218da2c", @ANYRES16=r1, @ANYBLOB="010000000000000000000400000008000400e00000011400060076657468315f746f5f7465616d000000"], 0x30}}, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1}, 0xc) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, r4, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24040005}, 0x1) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000300)={0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) r9 = openat$nvram(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r9, 0x541b, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000480)={'wg0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, r9, 0x2, '\x00', r10, 0xffffffffffffffff, 0x4, 0x1, 0x2, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r8, 0xa78472a963866823, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x3c}}, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f0000000840)={0x0, 0x0, r6, r11, 0xd, 0x4, 0x4, 0x9, {0x3606, 0x30, 0x6cde, 0xfffe, 0xfffe, 0x7, 0xfb62, 0xfb62, 0xfb62, 0xfb62, 0x5, 0x100002, 0x80, 0xfffffe01, "e10a2be47a666d3d42404ecfe5569fdc470ca9bd6cf42e33e5df01a3841470bb"}}) r12 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r12, &(0x7f00000000c0)='asymmetric\x00', 0x0) r13 = timerfd_create(0x0, 0x0) read(r13, &(0x7f0000000140)=""/196, 0xc4) write$USERIO_CMD_SEND_INTERRUPT(r9, &(0x7f0000000600)={0x2, 0x37}, 0x2) timerfd_settime(r13, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x3938700}}, 0x0) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000000540), 0xc) 570.099153ms ago: executing program 0 (id=228): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) (async) openat$vmci(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000440)={0x2, 0x3}, 0x8) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000000c000280080001"], 0x44}}, 0x0) (async) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a00170000000004003700090003", 0x27}], 0x1) r1 = socket$kcm(0x10, 0x2, 0x10) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x0, 0x70bd2b, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x11, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x9}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (rerun: 64) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="3000000010000100000000000800000000000000", @ANYRES32, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB='\r\x00+'], 0x30}], 0x1}, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90324fc602f00001550000100053582c137153e370248018086dd1700d1bd", 0x2e}], 0x1}, 0x0) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x92, 0xdf, 0x55, 0x10, 0x5ac, 0x9226, 0xb289, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0xe9, 0x0, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "d77b5d2898"}]}}]}}]}}]}}, 0x0) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000140)={0x9, 0x0, 0x0, 0xffff}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001000000018000180140002006e657464657673696d3000000000000008000a00040e00000800090000a800000800070000000000080008"], 0x4c}}, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) getrandom(&(0x7f0000000480)=""/281, 0x119, 0x0) 569.622004ms ago: executing program 0 (id=229): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, 0x0}, 0x20) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = openat2$dir(0xffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x4a4402, 0xa0}, 0x18) mknodat(r1, &(0x7f0000000180)='./file0\x00', 0x1000, 0x6) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r2, 0x400000001ffffffd) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x16, 0x4, &(0x7f0000001340)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @flow_dissector, r3, 0x8, 0x0, 0x3d, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) close(0xffffffffffffffff) mknod$loop(0x0, 0x0, 0x1) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYBLOB="646078b12208369bb0718316ab320a0aa4e56fb64a48ea9ad3aa516d09e47a72713f881ff037f5d014bac755d123e1f203e4c282faf71fd3c57b3b8c7c29a05b25a8c2acf64091e4c10f25b453ea59c7ae51ab6efaf0210657e8d5f64e6d175549b8602e", @ANYRES32=r0], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r4) read$char_usb(r5, 0x0, 0x0) ptrace(0x10, 0x0) ptrace$pokeuser(0x6, 0x0, 0x4d, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) link(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r7 = socket$xdp(0x2c, 0x3, 0x0) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800}, 0x20) 430.182288ms ago: executing program 2 (id=230): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') sendfile(0xffffffffffffffff, r3, 0x0, 0xc01) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {}, 0xa}}, 0x26) sendmmsg$inet(r5, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) r6 = socket$netlink(0x10, 0x3, 0x13) bind$netlink(r6, 0x0, 0x0) setsockopt$sock_int(r6, 0x1, 0x8, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, 0x0, &(0x7f00000004c0)='./file0\x00', 0xffffffffffffffff) pwritev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="3f398000ed08070f00dd849b", 0xc}, {0x0}], 0x2, 0x6, 0x40) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, &(0x7f0000000680)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) 294.155334ms ago: executing program 1 (id=231): r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000000)=0x9, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104000000000022000000000000", @ANYRES32=0x0, @ANYBLOB="0000000046800200140012800a000100767863616e0000000400028008000300", @ANYRES32=0x0, @ANYBLOB], 0x3c}, 0x1, 0x8}, 0x0) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x80) 202.021173ms ago: executing program 3 (id=232): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYBLOB="0000000000005f02000000530000edffffff0000e44890d85440914fdd0774738dfbfc00ebf3e2c011b65d87679266ea3a5932adaf6caa6d87bbf26af791283e163bc260ba98f5855afafc4139bd8fd42cec78998aabebfc14fe7c399e832c7fca1d93a70861077015deac54c161a950c9079288263771d5563c5ae088fa52f66f3a034f60cd05e2d6bffc2b2a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$MRT_INIT(r2, 0x0, 0xc8, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) socket$nl_generic(0x11, 0x3, 0x10) syz_io_uring_setup(0x100117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000000180), &(0x7f0000000200)) r5 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getpid() socket$inet6(0xa, 0x2, 0x8) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) sendmmsg$inet(r6, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14) 178.411891ms ago: executing program 1 (id=233): r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmmsg(r0, &(0x7f00000056c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000001d40)=""/201, 0xc9}], 0x1}, 0x6}], 0x1, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) (async) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x109000, 0x0) ioctl$CDROMREADAUDIO(r3, 0x40041271, &(0x7f0000000080)={@msf={0xff, 0x10, 0x4e}, 0x2, 0x0, 0x0}) (async) ioctl$CDROMREADAUDIO(r3, 0x40041271, &(0x7f0000000080)={@msf={0xff, 0x10, 0x4e}, 0x2, 0x0, 0x0}) recvmsg$unix(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000880)=""/27, 0x1b}, {&(0x7f0000000500)=""/14, 0xe}], 0x2}, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000880)=""/27, 0x1b}, {&(0x7f0000000500)=""/14, 0xe}], 0x2}, 0x0) read$alg(r2, &(0x7f0000002840)=""/4089, 0xff9) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) bind$can_raw(r0, &(0x7f00000002c0), 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711233000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) open(&(0x7f0000000000)='./file0\x00', 0x10001, 0x4) (async) open(&(0x7f0000000000)='./file0\x00', 0x10001, 0x4) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r4}, 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "5b7ba3698f28aaf0"}, 0x10}}, 0x0) (async) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r4}, 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "5b7ba3698f28aaf0"}, 0x10}}, 0x0) 82.857442ms ago: executing program 2 (id=234): socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0xc0a45320, &(0x7f00000001c0)={0x80, 0x0, 'client1\x00', 0x0, "706283c421ca447c", "b437067509007708e18f85bb3d22ac7a6568af9ebb8891fdffa0225452869ac0"}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r1, 0x28, 0x6, &(0x7f0000000000)={0x0, 0xea60}, 0x10) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r1, 0x0, 0x0) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) socket$alg(0x26, 0x5, 0x0) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000080)={0xf0f041}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) 0s ago: executing program 1 (id=235): syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xebfc, 0x40, 0xfffffffe, 0x1cd}, &(0x7f00000005c0)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080), 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x1a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)='./file0\x00', 0xffffffffffffffff, 0x1000, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sched_setaffinity(0x0, 0xffffffffffffff28, &(0x7f0000000280)=0x7fff) connect$unix(r2, &(0x7f000057eff8)=@abs={0x1}, 0x6e) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x2, 0x0) iopl(0x3) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000100)={0xb6, 0x1, 0x7, 0xfffffffffffffffa}) mq_timedreceive(r6, &(0x7f0000000340)=""/221, 0xdd, 0x0, 0x0) mq_timedreceive(r6, &(0x7f0000000000)=""/127, 0x7f, 0x0, 0x0) sched_setscheduler(r3, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) dup(0xffffffffffffffff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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"/608], 0x268}, 0x1, 0x0, 0x0, 0xc060}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:34286' (ED25519) to the list of known hosts. [ 34.678690][ T5869] cgroup: Unknown subsys name 'net' [ 34.850583][ T5869] cgroup: Unknown subsys name 'cpuset' [ 34.854295][ T5869] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 35.686801][ T5869] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 38.792671][ T5314] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 38.802048][ T5954] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 38.804234][ T5954] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 38.818439][ T5960] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 38.821534][ T5960] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 38.823760][ T5960] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 38.825923][ T5960] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 38.828941][ T5960] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 38.830790][ T5960] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 38.833414][ T5960] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 38.836004][ T5960] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 38.838452][ T5960] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 38.840645][ T5960] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 38.842506][ T5960] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 38.844591][ T5960] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 38.847764][ T5964] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 38.847957][ T5968] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 38.851189][ T5964] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 38.852775][ T5968] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 38.855955][ T5964] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 38.859678][ T5964] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 38.862041][ T5964] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 38.866215][ T5966] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 38.871579][ T5964] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 39.074595][ T5958] chnl_net:caif_netlink_parms(): no params data found [ 39.093348][ T5951] chnl_net:caif_netlink_parms(): no params data found [ 39.116417][ T5955] chnl_net:caif_netlink_parms(): no params data found [ 39.176537][ T5959] chnl_net:caif_netlink_parms(): no params data found [ 39.310068][ T5951] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.312010][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.314052][ T5951] bridge_slave_0: entered allmulticast mode [ 39.316096][ T5951] bridge_slave_0: entered promiscuous mode [ 39.320650][ T5951] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.322590][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.324633][ T5951] bridge_slave_1: entered allmulticast mode [ 39.326775][ T5951] bridge_slave_1: entered promiscuous mode [ 39.358725][ T5958] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.361269][ T5958] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.363815][ T5958] bridge_slave_0: entered allmulticast mode [ 39.366888][ T5958] bridge_slave_0: entered promiscuous mode [ 39.371020][ T5958] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.373057][ T5958] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.375107][ T5958] bridge_slave_1: entered allmulticast mode [ 39.377238][ T5958] bridge_slave_1: entered promiscuous mode [ 39.464045][ T5951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.466538][ T5955] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.468450][ T5955] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.470544][ T5955] bridge_slave_0: entered allmulticast mode [ 39.472702][ T5955] bridge_slave_0: entered promiscuous mode [ 39.475695][ T5959] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.478196][ T5959] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.480868][ T5959] bridge_slave_0: entered allmulticast mode [ 39.482910][ T5959] bridge_slave_0: entered promiscuous mode [ 39.485389][ T5959] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.487255][ T5959] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.489473][ T5959] bridge_slave_1: entered allmulticast mode [ 39.491552][ T5959] bridge_slave_1: entered promiscuous mode [ 39.495203][ T5958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.500251][ T5958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.503910][ T5951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.516433][ T5955] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.518770][ T5955] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.521416][ T5955] bridge_slave_1: entered allmulticast mode [ 39.523696][ T5955] bridge_slave_1: entered promiscuous mode [ 39.591459][ T5959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.595850][ T5958] team0: Port device team_slave_0 added [ 39.599228][ T5951] team0: Port device team_slave_0 added [ 39.602424][ T5955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.605952][ T5959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.623719][ T5958] team0: Port device team_slave_1 added [ 39.626794][ T5951] team0: Port device team_slave_1 added [ 39.630232][ T5955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.651632][ T5959] team0: Port device team_slave_0 added [ 39.689600][ T5959] team0: Port device team_slave_1 added [ 39.691971][ T5958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.693794][ T5958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.702912][ T5958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.720283][ T5955] team0: Port device team_slave_0 added [ 39.725091][ T5955] team0: Port device team_slave_1 added [ 39.744716][ T5958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.746577][ T5958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.753597][ T5958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.757095][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.759624][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.766842][ T5951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.788293][ T5959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.790237][ T5959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.796834][ T5959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.803487][ T5959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.805537][ T5959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.813252][ T5959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.816689][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.818618][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.825431][ T5951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.828930][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.831151][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.839194][ T5955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.844694][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.847117][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.854349][ T5955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.891698][ T5958] hsr_slave_0: entered promiscuous mode [ 39.893709][ T5958] hsr_slave_1: entered promiscuous mode [ 39.958833][ T5955] hsr_slave_0: entered promiscuous mode [ 39.960828][ T5955] hsr_slave_1: entered promiscuous mode [ 39.962596][ T5955] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.964598][ T5955] Cannot create hsr debugfs directory [ 39.976541][ T5959] hsr_slave_0: entered promiscuous mode [ 39.978781][ T5959] hsr_slave_1: entered promiscuous mode [ 39.980638][ T5959] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.982618][ T5959] Cannot create hsr debugfs directory [ 40.009187][ T5951] hsr_slave_0: entered promiscuous mode [ 40.011907][ T5951] hsr_slave_1: entered promiscuous mode [ 40.013829][ T5951] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 40.016339][ T5951] Cannot create hsr debugfs directory [ 40.233466][ T5959] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 40.239836][ T5959] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 40.243710][ T5959] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 40.247830][ T5959] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 40.270694][ T5955] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 40.274120][ T5955] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 40.277522][ T5955] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 40.280925][ T5955] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 40.307583][ T5951] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 40.311196][ T5951] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 40.314709][ T5951] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 40.318697][ T5951] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 40.347590][ T5958] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 40.354249][ T5958] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 40.358654][ T5958] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 40.362459][ T5958] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 40.399044][ T5959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.424089][ T5959] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.437453][ T5955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.441932][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.444104][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.450616][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.452476][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.465332][ T5951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.483928][ T5955] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.495455][ T5951] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.500082][ T103] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.502216][ T103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.511683][ T103] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.513518][ T103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.520163][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.522044][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.529944][ T5958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.533378][ T103] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.535398][ T103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.562362][ T5958] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.586411][ T5955] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 40.591032][ T5955] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.597185][ T103] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.599800][ T103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.608069][ T103] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.610678][ T103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.639598][ T5959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.662047][ T5959] veth0_vlan: entered promiscuous mode [ 40.669755][ T5959] veth1_vlan: entered promiscuous mode [ 40.681410][ T5951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.696544][ T5959] veth0_macvtap: entered promiscuous mode [ 40.701824][ T5959] veth1_macvtap: entered promiscuous mode [ 40.719305][ T5955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.724230][ T5959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.730665][ T5959] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.735260][ T5951] veth0_vlan: entered promiscuous mode [ 40.741731][ T5951] veth1_vlan: entered promiscuous mode [ 40.752874][ T5959] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.755251][ T5959] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.757894][ T5959] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.760219][ T5959] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.766153][ T5958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.774111][ T5951] veth0_macvtap: entered promiscuous mode [ 40.783829][ T5951] veth1_macvtap: entered promiscuous mode [ 40.798202][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.801612][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.804868][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.813214][ T5955] veth0_vlan: entered promiscuous mode [ 40.816696][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.819841][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.823747][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.834964][ T5955] veth1_vlan: entered promiscuous mode [ 40.837158][ T5951] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.840123][ T5951] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.842530][ T5951] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.845026][ T5951] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.863533][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.866800][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.887735][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.890013][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.891941][ T5958] veth0_vlan: entered promiscuous mode [ 40.898883][ T5964] Bluetooth: hci0: command tx timeout [ 40.900746][ T5964] Bluetooth: hci3: command tx timeout [ 40.901303][ T5314] Bluetooth: hci2: command tx timeout [ 40.901354][ T5954] Bluetooth: hci1: command tx timeout [ 40.910331][ T103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.913566][ T103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.918993][ T5955] veth0_macvtap: entered promiscuous mode [ 40.926844][ T5958] veth1_vlan: entered promiscuous mode [ 40.927382][ T5959] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 40.929386][ T5955] veth1_macvtap: entered promiscuous mode [ 40.938471][ T103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.940604][ T103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.945281][ T5955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.948506][ T5955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.952123][ T5955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.955734][ T5955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.961506][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.968538][ T5955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.972004][ T5955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.975420][ T5955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.979360][ T5955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.984209][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.007055][ T5955] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.010506][ T5955] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.013497][ T5955] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.016453][ T5955] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.048794][ T5958] veth0_macvtap: entered promiscuous mode [ 41.059795][ T5958] veth1_macvtap: entered promiscuous mode [ 41.085137][ T103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.089073][ T103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.105741][ T57] kernel read not supported for file /newroot/0/file0 (pid: 57 comm: kworker/1:1) [ 41.107872][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 41.110423][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 41.112923][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 41.113044][ T5958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.114488][ T39] audit: type=1326 audit(1732008978.746:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6015 comm="syz.2.3" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 41.115509][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 41.116436][ T39] audit: type=1326 audit(1732008978.746:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6015 comm="syz.2.3" exe="/syz-executor" sig=0 arch=40000003 syscall=45 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 41.116478][ T39] audit: type=1326 audit(1732008978.746:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6015 comm="syz.2.3" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 41.116551][ T39] audit: type=1326 audit(1732008978.746:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6015 comm="syz.2.3" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 41.118367][ T5958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.119187][ T39] audit: type=1326 audit(1732008978.756:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6015 comm="syz.2.3" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 41.119219][ T39] audit: type=1326 audit(1732008978.756:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6015 comm="syz.2.3" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 41.119242][ T39] audit: type=1326 audit(1732008978.756:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6015 comm="syz.2.3" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 41.119682][ T39] audit: type=1326 audit(1732008978.756:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6015 comm="syz.2.3" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 41.119821][ T39] audit: type=1326 audit(1732008978.756:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6015 comm="syz.2.3" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 41.119937][ T39] audit: type=1326 audit(1732008978.756:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6015 comm="syz.2.3" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 41.178235][ T5958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.182301][ T5958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.185899][ T5958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.189819][ T5958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.194035][ T5958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.204127][ T6016] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 41.215407][ T5958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.224425][ T5958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.228059][ T5958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.231705][ T5958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.235149][ T5958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.239959][ T5958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.243582][ T5958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.254948][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.257031][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.257204][ T5958] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.267767][ T5958] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.270119][ T5958] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.272365][ T5958] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.360319][ T1043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.365793][ T1043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.367996][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 41.376563][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.386528][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.386580][ T6025] Device name cannot be null; rc = [-22] [ 41.437792][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 41.472779][ T6028] netlink: 'syz.0.1': attribute type 4 has an invalid length. [ 41.487857][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 41.506400][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 41.531587][ T6028] netlink: 'syz.0.1': attribute type 4 has an invalid length. [ 41.609058][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 41.628209][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 41.633714][ T6028] tmpfs: Group quota inode hardlimit too large. [ 41.652060][ T6028] syz.0.1 (6028) used greatest stack depth: 21120 bytes left [ 41.738925][ T6042] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.453161][ T6055] syzkaller1: entered promiscuous mode [ 42.454656][ T6055] syzkaller1: entered allmulticast mode [ 42.818701][ T6018] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 42.978783][ T5314] Bluetooth: hci3: command tx timeout [ 42.979031][ T5954] Bluetooth: hci0: command tx timeout [ 42.983181][ T5964] Bluetooth: hci1: command tx timeout [ 42.987824][ T6018] usb 8-1: Using ep0 maxpacket: 16 [ 42.988454][ T5964] Bluetooth: hci2: command tx timeout [ 42.998810][ T6018] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 43.020056][ T6018] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 43.022618][ T6018] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.024984][ T6018] usb 8-1: Product: syz [ 43.026815][ T6018] usb 8-1: Manufacturer: syz [ 43.028217][ T6018] usb 8-1: SerialNumber: syz [ 43.368593][ T6018] usb 8-1: config 0 descriptor?? [ 43.377210][ T6018] hub 8-1:0.0: bad descriptor, ignoring hub [ 43.379143][ T6018] hub 8-1:0.0: probe with driver hub failed with error -5 [ 43.387510][ T6018] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input5 [ 43.529746][ T6061] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 43.898466][ T25] usb 8-1: USB disconnect, device number 2 [ 44.877878][ T30] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 45.049180][ T30] usb 5-1: Using ep0 maxpacket: 8 [ 45.057859][ T5964] Bluetooth: hci2: command tx timeout [ 45.057920][ T30] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 45.058008][ T5314] Bluetooth: hci0: command tx timeout [ 45.058037][ T5314] Bluetooth: hci3: command tx timeout [ 45.058234][ T5954] Bluetooth: hci1: command tx timeout [ 45.069830][ T30] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 45.073612][ T30] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 45.077025][ T30] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 45.080749][ T30] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 45.086469][ T30] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 45.089793][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.322495][ T30] usb 5-1: GET_CAPABILITIES returned 0 [ 45.325231][ T30] usbtmc 5-1:16.0: can't read capabilities [ 45.335680][ T6080] input: syz0 as /devices/virtual/input/input6 [ 45.379782][ T6080] netlink: 'syz.3.19': attribute type 1 has an invalid length. [ 45.441874][ T6081] netlink: 16 bytes leftover after parsing attributes in process `syz.3.19'. [ 45.633203][ T6074] usbtmc 5-1:16.0: usb_control_msg returned -71 [ 45.634707][ T5993] usb 5-1: USB disconnect, device number 2 [ 46.416527][ T6099] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 46.532670][ T6101] netlink: 'syz.0.23': attribute type 3 has an invalid length. [ 46.543606][ T6101] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.23'. [ 47.139262][ T5964] Bluetooth: hci2: command tx timeout [ 47.139765][ T67] Bluetooth: hci3: command tx timeout [ 47.141129][ T5964] Bluetooth: hci0: command tx timeout [ 47.142788][ T5954] Bluetooth: hci1: command tx timeout [ 47.958654][ T3219] kernel read not supported for file /newroot/8/file0 (pid: 3219 comm: kworker/1:2) [ 47.960397][ C3] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 47.966133][ T39] kauditd_printk_skb: 34 callbacks suppressed [ 47.966144][ T39] audit: type=1326 audit(1732008985.596:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6125 comm="syz.3.31" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745e579 code=0x7ffc0000 [ 47.972435][ T6126] netlink: 16 bytes leftover after parsing attributes in process `syz.3.31'. [ 47.974361][ T39] audit: type=1326 audit(1732008985.606:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6125 comm="syz.3.31" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745e579 code=0x7ffc0000 [ 47.983981][ T39] audit: type=1326 audit(1732008985.606:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6125 comm="syz.3.31" exe="/syz-executor" sig=0 arch=40000003 syscall=45 compat=1 ip=0xf745e579 code=0x7ffc0000 [ 47.992433][ T39] audit: type=1326 audit(1732008985.606:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6125 comm="syz.3.31" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745e579 code=0x7ffc0000 [ 48.000557][ T39] audit: type=1326 audit(1732008985.606:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6125 comm="syz.3.31" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745e579 code=0x7ffc0000 [ 48.007243][ T39] audit: type=1326 audit(1732008985.606:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6125 comm="syz.3.31" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf745e579 code=0x7ffc0000 [ 48.013609][ T39] audit: type=1326 audit(1732008985.606:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6125 comm="syz.3.31" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745e579 code=0x7ffc0000 [ 48.020142][ T39] audit: type=1326 audit(1732008985.606:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6125 comm="syz.3.31" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745e579 code=0x7ffc0000 [ 48.039315][ T6133] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 48.044568][ T39] audit: type=1326 audit(1732008985.606:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6125 comm="syz.3.31" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf745e579 code=0x7ffc0000 [ 48.062904][ T39] audit: type=1326 audit(1732008985.606:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6125 comm="syz.3.31" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745e579 code=0x7ffc0000 [ 48.136039][ T6142] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 48.140843][ T6142] netlink: 64 bytes leftover after parsing attributes in process `syz.0.40'. [ 48.145127][ T6142] netlink: 60 bytes leftover after parsing attributes in process `syz.0.40'. [ 48.148942][ T6142] unsupported nlmsg_type 40 [ 48.151013][ T6144] netlink: 'syz.3.33': attribute type 3 has an invalid length. [ 48.153072][ T6144] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.33'. [ 48.317523][ T6147] netlink: 'syz.2.35': attribute type 10 has an invalid length. [ 48.324407][ T6147] team0: Port device netdevsim0 added [ 48.335046][ T6151] bridge_slave_0: left allmulticast mode [ 48.338154][ T6151] bridge_slave_0: left promiscuous mode [ 48.343109][ T6151] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.351285][ T6151] bridge_slave_1: left allmulticast mode [ 48.352807][ T6151] bridge_slave_1: left promiscuous mode [ 48.354399][ T6151] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.361816][ T6151] bond0: (slave bond_slave_0): Releasing backup interface [ 48.369528][ T6151] bond0: (slave bond_slave_1): Releasing backup interface [ 48.386090][ T6151] team0: Port device team_slave_0 removed [ 48.396118][ T6151] team0: Port device team_slave_1 removed [ 48.399440][ T6151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.402921][ T6151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.406540][ T6151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.408885][ T6151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.414790][ T6147] netlink: 'syz.2.35': attribute type 10 has an invalid length. [ 48.422392][ T6147] team0: Port device netdevsim0 removed [ 48.426787][ T6147] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 48.443158][ T6154] geneve2: entered promiscuous mode [ 48.445017][ T6154] geneve2: entered allmulticast mode [ 48.448513][ T6154] batman_adv: batadv0: Adding interface: geneve2 [ 48.450562][ T6154] batman_adv: batadv0: Interface activated: geneve2 [ 48.642419][ T6168] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 48.645277][ T6168] IPv6: NLM_F_CREATE should be set when creating new route [ 48.650058][ T6168] Zero length message leads to an empty skb [ 48.729398][ T6172] netlink: 'syz.3.44': attribute type 1 has an invalid length. [ 48.732178][ T6172] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.44'. [ 49.153612][ T6186] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 49.161550][ T6186] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.163930][ T6186] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.858317][ T6212] nbd1: detected capacity change from 0 to 12 [ 49.863819][ T6224] block nbd1: NBD_DISCONNECT [ 49.866721][ T6224] block nbd1: Send disconnect failed -89 [ 49.879220][ T5952] block nbd1: Send control failed (result -89) [ 49.882524][ T5952] block nbd1: Request send failed, requeueing [ 49.890562][ T5952] block nbd1: Disconnected due to user request. [ 49.896562][ T71] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 49.900928][ T71] Buffer I/O error on dev nbd1, logical block 0, async page read [ 49.905362][ T5952] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 49.908559][ T5952] Buffer I/O error on dev nbd1, logical block 0, async page read [ 49.911062][ T5952] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 49.913457][ T5952] Buffer I/O error on dev nbd1, logical block 0, async page read [ 49.915913][ T5952] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 49.918930][ T5952] Buffer I/O error on dev nbd1, logical block 0, async page read [ 49.921017][ T5952] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 49.923899][ T5952] Buffer I/O error on dev nbd1, logical block 0, async page read [ 49.926527][ T5952] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 49.929386][ T5952] Buffer I/O error on dev nbd1, logical block 0, async page read [ 49.931479][ T5952] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 49.935249][ T5952] Buffer I/O error on dev nbd1, logical block 0, async page read [ 49.937372][ T5952] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 49.940434][ T5952] Buffer I/O error on dev nbd1, logical block 0, async page read [ 49.942561][ T5952] ldm_validate_partition_table(): Disk read failed. [ 49.945119][ T5952] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 49.949400][ T5952] Buffer I/O error on dev nbd1, logical block 0, async page read [ 49.951788][ T5952] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 49.954152][ T5952] Buffer I/O error on dev nbd1, logical block 0, async page read [ 49.956517][ T5952] Dev nbd1: unable to read RDB block 0 [ 49.958334][ T5952] nbd1: unable to read partition table [ 49.959887][ T5952] nbd1: partition table beyond EOD, truncated [ 49.972087][ T6212] ldm_validate_partition_table(): Disk read failed. [ 49.975045][ T6212] Dev nbd1: unable to read RDB block 0 [ 49.977369][ T6212] nbd1: unable to read partition table [ 49.986192][ T6212] nbd1: partition table beyond EOD, truncated [ 49.992003][ T5952] ldm_validate_partition_table(): Disk read failed. [ 49.993975][ T5952] Dev nbd1: unable to read RDB block 0 [ 49.995677][ T5952] nbd1: unable to read partition table [ 49.997342][ T5952] nbd1: partition table beyond EOD, truncated [ 50.249701][ T6239] veth1_macvtap: left promiscuous mode [ 50.251865][ T6239] macsec0: entered allmulticast mode [ 50.260397][ T6239] veth1_macvtap: entered promiscuous mode [ 50.262442][ T6239] veth1_macvtap: entered allmulticast mode [ 50.321521][ T6242] netlink: 16 bytes leftover after parsing attributes in process `syz.3.65'. [ 50.495091][ T6257] netlink: 4 bytes leftover after parsing attributes in process `syz.3.70'. [ 51.067785][ T5954] Bluetooth: hci2: Opcode 0x206a failed: -110 [ 51.069639][ T5954] Bluetooth: hci2: command 0x206a tx timeout [ 52.887724][ T3219] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 53.073832][ T3219] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 53.078544][ T3219] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 53.089154][ T3219] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 53.092880][ T3219] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.104470][ T6326] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 53.110388][ T3219] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 53.164252][ T1322] cfg80211: failed to load regulatory.db [ 53.616851][ T3219] usb 6-1: USB disconnect, device number 2 [ 54.249680][ T6383] netlink: 'syz.1.100': attribute type 21 has an invalid length. [ 54.251894][ T6383] netlink: 'syz.1.100': attribute type 20 has an invalid length. [ 54.273021][ T6383] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 54.276116][ T6383] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 54.281671][ T6383] vhci_hcd vhci_hcd.0: Device attached [ 54.284284][ T6383] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 54.287062][ T6383] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 54.290187][ T6383] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 54.293886][ T6383] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 54.296767][ T6383] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 54.299880][ T6383] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 54.306454][ T6385] vhci_hcd: connection closed [ 54.308324][ T12] vhci_hcd: stop threads [ 54.312267][ T12] vhci_hcd: release socket [ 54.314030][ T12] vhci_hcd: disconnect device [ 54.353710][ T6388] netlink: 12 bytes leftover after parsing attributes in process `syz.3.101'. [ 54.904108][ T6396] netlink: 44 bytes leftover after parsing attributes in process `syz.1.103'. [ 54.912327][ T6396] netlink: 4 bytes leftover after parsing attributes in process `syz.1.103'. [ 54.922146][ T6396] netlink: 4 bytes leftover after parsing attributes in process `syz.1.103'. [ 55.712910][ T6414] evm: overlay not supported [ 56.327692][ T3219] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 56.430412][ T6423] netlink: 'syz.0.112': attribute type 53 has an invalid length. [ 56.469790][ T6423] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 56.469790][ T6423] program syz.0.112 not setting count and/or reply_len properly [ 56.558975][ T3219] usb 6-1: config 108 has an invalid interface number: 85 but max is 0 [ 56.561500][ T3219] usb 6-1: config 108 has no interface number 0 [ 56.563154][ T3219] usb 6-1: config 108 interface 85 has no altsetting 0 [ 56.567391][ T3219] usb 6-1: language id specifier not provided by device, defaulting to English [ 56.574119][ T3219] usb 6-1: New USB device found, idVendor=12d1, idProduct=c187, bcdDevice=2b.99 [ 56.576507][ T3219] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.579144][ T3219] usb 6-1: Product: syz [ 56.580383][ T3219] usb 6-1: SerialNumber: syz [ 57.278495][ T3219] option 6-1:108.85: GSM modem (1-port) converter detected [ 57.354015][ T3219] usb 6-1: USB disconnect, device number 3 [ 57.373669][ T3219] option 6-1:108.85: device disconnected [ 57.614575][ T6449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.121'. [ 58.165451][ T6476] tipc: Can't bind to reserved service type 1 [ 58.333191][ T5964] Bluetooth: Unexpected continuation frame (len 4) [ 58.858453][ T39] kauditd_printk_skb: 12 callbacks suppressed [ 58.858466][ T39] audit: type=1326 audit(1732008996.496:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6501 comm="syz.0.136" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 58.860826][ T6505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.136'. [ 58.867792][ T39] audit: type=1326 audit(1732008996.496:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6501 comm="syz.0.136" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 58.874006][ T39] audit: type=1326 audit(1732008996.496:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6501 comm="syz.0.136" exe="/syz-executor" sig=0 arch=40000003 syscall=45 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 58.880151][ T39] audit: type=1326 audit(1732008996.496:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6501 comm="syz.0.136" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 58.885596][ T39] audit: type=1326 audit(1732008996.496:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6501 comm="syz.0.136" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 58.891423][ T39] audit: type=1326 audit(1732008996.496:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6501 comm="syz.0.136" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 58.897266][ T39] audit: type=1326 audit(1732008996.496:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6501 comm="syz.0.136" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 58.904100][ T39] audit: type=1326 audit(1732008996.496:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6501 comm="syz.0.136" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 58.916088][ T39] audit: type=1326 audit(1732008996.496:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6501 comm="syz.0.136" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 58.922309][ T39] audit: type=1326 audit(1732008996.496:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6501 comm="syz.0.136" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740e579 code=0x7ffc0000 [ 59.667337][ T6538] warning: `syz.1.149' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 60.226038][ T6554] mmap: syz.0.154 (6554) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 61.688294][ T6592] binder: 6591:6592 ioctl 9408 0 returned -22 [ 61.863725][ T6609] sit0 speed is unknown, defaulting to 1000 [ 61.866755][ T6609] sit0 speed is unknown, defaulting to 1000 [ 61.870502][ T6609] sit0 speed is unknown, defaulting to 1000 [ 61.952121][ T6609] infiniband syz0: set active [ 61.954394][ T5961] sit0 speed is unknown, defaulting to 1000 [ 61.956087][ T6609] infiniband syz0: added sit0 [ 61.986898][ T6609] RDS/IB: syz0: added [ 61.988531][ T6609] smc: adding ib device syz0 with port count 1 [ 61.990390][ T6609] smc: ib device syz0 port 1 has pnetid SYZ1 (user defined) [ 61.993832][ T5998] sit0 speed is unknown, defaulting to 1000 [ 61.997520][ T6609] sit0 speed is unknown, defaulting to 1000 [ 62.036756][ T6609] sit0 speed is unknown, defaulting to 1000 [ 62.079205][ T6609] sit0 speed is unknown, defaulting to 1000 [ 62.126604][ T6609] sit0 speed is unknown, defaulting to 1000 [ 62.257410][ T6621] Bluetooth: MGMT ver 1.23 [ 62.306866][ T6621] syzkaller0: entered promiscuous mode [ 62.308478][ T6621] syzkaller0: entered allmulticast mode [ 62.914543][ T6629] netlink: 16 bytes leftover after parsing attributes in process `syz.2.175'. [ 63.903479][ T6648] overlayfs: missing 'lowerdir' [ 64.226134][ T39] kauditd_printk_skb: 55 callbacks suppressed [ 64.226144][ T39] audit: type=1326 audit(1732009001.856:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6661 comm="syz.2.184" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 64.235294][ T39] audit: type=1326 audit(1732009001.866:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6661 comm="syz.2.184" exe="/syz-executor" sig=0 arch=40000003 syscall=45 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 64.244454][ T39] audit: type=1326 audit(1732009001.866:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6661 comm="syz.2.184" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 64.250636][ T39] audit: type=1326 audit(1732009001.866:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6661 comm="syz.2.184" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 64.256515][ T39] audit: type=1326 audit(1732009001.866:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6661 comm="syz.2.184" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 64.263739][ T39] audit: type=1326 audit(1732009001.866:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6661 comm="syz.2.184" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 64.269914][ T39] audit: type=1326 audit(1732009001.866:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6661 comm="syz.2.184" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 64.272158][ T6665] netlink: 40 bytes leftover after parsing attributes in process `syz.3.183'. [ 64.275616][ T39] audit: type=1326 audit(1732009001.866:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6661 comm="syz.2.184" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 64.283808][ T39] audit: type=1326 audit(1732009001.866:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6661 comm="syz.2.184" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 64.289760][ T39] audit: type=1326 audit(1732009001.866:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6661 comm="syz.2.184" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf746e579 code=0x7ffc0000 [ 65.070377][ T6674] sit0 speed is unknown, defaulting to 1000 [ 65.637835][ T6685] fuse: Unknown parameter '0x0000000000000006' [ 65.658864][ T6685] ERROR: device name not specified. [ 65.802864][ T6696] overlayfs: missing 'workdir' [ 65.819167][ T6696] overlayfs: missing 'workdir' [ 65.825693][ T6696] overlayfs: missing 'workdir' [ 65.834408][ T6696] overlayfs: missing 'workdir' [ 65.838899][ T6696] overlayfs: missing 'workdir' [ 65.842413][ T6696] overlayfs: missing 'workdir' [ 65.846658][ T6696] overlayfs: missing 'workdir' [ 66.145031][ T6714] syz.1.198 uses obsolete (PF_INET,SOCK_PACKET) [ 66.323802][ T6719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.200'. [ 66.546198][ T6726] IPv6: addrconf: prefix option has invalid lifetime [ 66.628446][ T6731] netdevsim netdevsim1 : renamed from netdevsim0 (while UP) [ 66.719913][ T6734] netlink: 'syz.1.203': attribute type 9 has an invalid length. [ 66.721996][ T6734] netlink: 69104 bytes leftover after parsing attributes in process `syz.1.203'. [ 67.677207][ T6758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.210'. [ 68.705865][ T6802] FAULT_INJECTION: forcing a failure. [ 68.705865][ T6802] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 68.709859][ T6802] CPU: 2 UID: 0 PID: 6802 Comm: syz.2.222 Not tainted 6.12.0-syzkaller-00233-g9fb2cfa4635a #0 [ 68.712589][ T6802] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 68.715424][ T6802] Call Trace: [ 68.716431][ T6802] [ 68.717219][ T6802] dump_stack_lvl+0x16c/0x1f0 [ 68.718478][ T6802] should_fail_ex+0x497/0x5b0 [ 68.719727][ T6802] _copy_from_user+0x2e/0xd0 [ 68.720944][ T6802] rfkill_fop_write+0x11f/0x570 [ 68.722247][ T6802] ? __pfx_rfkill_fop_write+0x10/0x10 [ 68.723683][ T6802] ? bpf_lsm_file_permission+0x9/0x10 [ 68.725107][ T6802] ? security_file_permission+0x71/0x210 [ 68.726595][ T6802] ? __pfx_rfkill_fop_write+0x10/0x10 [ 68.727990][ T6802] vfs_writev+0x6da/0xdd0 [ 68.729228][ T6802] ? find_held_lock+0x2d/0x110 [ 68.730603][ T6802] ? __pfx_vfs_writev+0x10/0x10 [ 68.731887][ T6802] ? find_held_lock+0x2d/0x110 [ 68.733158][ T6802] ? __pfx_lock_release+0x10/0x10 [ 68.734513][ T6802] ? trace_lock_acquire+0x14a/0x1d0 [ 68.735987][ T6802] ? __fget_files+0x206/0x3a0 [ 68.737256][ T6802] ? do_writev+0x297/0x340 [ 68.738458][ T6802] do_writev+0x297/0x340 [ 68.739577][ T6802] ? __pfx_do_writev+0x10/0x10 [ 68.741088][ T6802] __do_fast_syscall_32+0x73/0x120 [ 68.742454][ T6802] do_fast_syscall_32+0x32/0x80 [ 68.743739][ T6802] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 68.745398][ T6802] RIP: 0023:0xf746e579 [ 68.746487][ T6802] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 68.751623][ T6802] RSP: 002b:00000000f573555c EFLAGS: 00000296 ORIG_RAX: 0000000000000092 [ 68.753968][ T6802] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000140 [ 68.756131][ T6802] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 68.758283][ T6802] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 68.760355][ T6802] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 68.762431][ T6802] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 68.764599][ T6802] [ 69.778833][ T5964] Bluetooth: hci1: command tx timeout [ 69.868683][ T5961] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 70.039293][ T5961] usb 5-1: device descriptor read/64, error -71 [ 70.132888][ T6842] trusted_key: syz.1.233 sent an empty control message without MSG_MORE. [ 70.256234][ T6849] vivid-007: disconnect [ 70.357708][ T5961] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 70.497740][ T5961] usb 5-1: device descriptor read/64, error -71 [ 70.619674][ T5961] usb usb5-port1: attempt power cycle [ 70.750024][ T1407] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.751890][ T1407] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.027721][ T6848] vivid-007: reconnect [ 71.297786][ T39] kauditd_printk_skb: 64 callbacks suppressed [ 71.297802][ T39] audit: type=1326 audit(1732009008.926:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6876 comm="syz.1.236" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe0579 code=0x7ffc0000 [ 71.321561][ T39] audit: type=1326 audit(1732009008.946:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6876 comm="syz.1.236" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe0579 code=0x7ffc0000 [ 71.329683][ T39] audit: type=1326 audit(1732009008.946:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6876 comm="syz.1.236" exe="/syz-executor" sig=0 arch=40000003 syscall=45 compat=1 ip=0xf7fe0579 code=0x7ffc0000 [ 71.335484][ T39] audit: type=1326 audit(1732009008.946:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6876 comm="syz.1.236" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe0579 code=0x7ffc0000 [ 71.343577][ T39] audit: type=1326 audit(1732009008.946:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6876 comm="syz.1.236" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe0579 code=0x7ffc0000 [ 71.349910][ T39] audit: type=1326 audit(1732009008.946:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6876 comm="syz.1.236" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7fe0579 code=0x7ffc0000 [ 71.355592][ T39] audit: type=1326 audit(1732009008.946:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6876 comm="syz.1.236" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe0579 code=0x7ffc0000 [ 71.364625][ T39] audit: type=1326 audit(1732009008.946:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6876 comm="syz.1.236" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe0579 code=0x7ffc0000 [ 71.370914][ T39] audit: type=1326 audit(1732009008.946:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6876 comm="syz.1.236" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fe0579 code=0x7ffc0000 [ 71.376567][ T39] audit: type=1326 audit(1732009008.946:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6876 comm="syz.1.236" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe0579 code=0x7ffc0000 [ 71.421421][ T6886] FAULT_INJECTION: forcing a failure. [ 71.421421][ T6886] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 71.424939][ T6886] CPU: 3 UID: 0 PID: 6886 Comm: syz.2.238 Not tainted 6.12.0-syzkaller-00233-g9fb2cfa4635a #0 [ 71.427890][ T6886] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 71.431000][ T6886] Call Trace: [ 71.431964][ T6886] [ 71.432793][ T6886] dump_stack_lvl+0x16c/0x1f0 [ 71.434312][ T6886] should_fail_ex+0x497/0x5b0 [ 71.435459][ T6886] _copy_from_user+0x2e/0xd0 [ 71.436548][ T6886] rfkill_fop_write+0x11f/0x570 [ 71.437679][ T6886] ? __pfx_rfkill_fop_write+0x10/0x10 [ 71.439061][ T6886] ? bpf_lsm_file_permission+0x9/0x10 [ 71.440495][ T6886] ? security_file_permission+0x71/0x210 [ 71.442010][ T6886] ? iov_iter_advance+0x1e3/0x6c0 [ 71.443372][ T6886] ? __pfx_rfkill_fop_write+0x10/0x10 [ 71.444874][ T6886] vfs_writev+0x6da/0xdd0 [ 71.446149][ T6886] ? find_held_lock+0x2d/0x110 [ 71.447562][ T6886] ? __pfx_vfs_writev+0x10/0x10 [ 71.448993][ T6886] ? find_held_lock+0x2d/0x110 [ 71.450399][ T6886] ? __pfx_lock_release+0x10/0x10 [ 71.451825][ T6886] ? trace_lock_acquire+0x14a/0x1d0 [ 71.453192][ T6886] ? __fget_files+0x206/0x3a0 [ 71.454451][ T6886] ? do_writev+0x297/0x340 [ 71.455630][ T6886] do_writev+0x297/0x340 [ 71.456764][ T6886] ? __pfx_do_writev+0x10/0x10 [ 71.458029][ T6886] __do_fast_syscall_32+0x73/0x120 [ 71.459381][ T6886] do_fast_syscall_32+0x32/0x80 [ 71.460660][ T6886] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 71.462218][ T6886] RIP: 0023:0xf746e579 [ 71.463298][ T6886] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 71.468340][ T6886] RSP: 002b:00000000f573555c EFLAGS: 00000296 ORIG_RAX: 0000000000000092 [ 71.470456][ T6886] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000140 [ 71.472498][ T6886] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 71.474650][ T6886] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 71.476821][ T6886] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 71.479016][ T6886] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 71.481051][ T6886] [ 85.940955][ T5954] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.943775][ T5954] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.946180][ T5954] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.950661][ T5954] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.954560][ T5954] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 85.956691][ T5954] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.975304][ T6907] sit0 speed is unknown, defaulting to 1000 [ 86.078106][ T6907] chnl_net:caif_netlink_parms(): no params data found [ 87.996575][ T5954] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 88.001314][ T5954] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 88.005001][ T5954] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 88.009407][ T5954] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 88.013199][ T5954] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 88.016207][ T5954] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 88.017962][ T5314] Bluetooth: hci4: command tx timeout [ 90.098791][ T5964] Bluetooth: hci5: command tx timeout [ 90.098827][ T5314] Bluetooth: hci4: command tx timeout [ 92.188011][ T5314] Bluetooth: hci5: command tx timeout [ 92.188022][ T5964] Bluetooth: hci4: command tx timeout [ 94.258420][ T5314] Bluetooth: hci5: command tx timeout [ 94.259908][ T5314] Bluetooth: hci4: command tx timeout [ 96.337963][ T5964] Bluetooth: hci5: command tx timeout [ 146.142965][ T5314] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 146.147160][ T5314] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 146.150068][ T5314] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 146.153349][ T5314] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 146.157873][ T5314] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 146.161710][ T5314] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 148.110270][ T5964] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 148.113760][ T5964] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 148.116701][ T5964] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 148.121644][ T5964] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 148.125628][ T5964] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 148.127848][ T5964] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 148.177811][ T5314] Bluetooth: hci6: command tx timeout [ 150.187899][ T5314] Bluetooth: hci7: command tx timeout [ 150.267812][ T5314] Bluetooth: hci6: command tx timeout [ 152.267780][ T5314] Bluetooth: hci7: command tx timeout [ 152.347839][ T5314] Bluetooth: hci6: command tx timeout [ 154.337879][ T5314] Bluetooth: hci7: command tx timeout [ 154.427828][ T5314] Bluetooth: hci6: command tx timeout [ 156.417844][ T5314] Bluetooth: hci7: command tx timeout [ 164.977881][ T5966] Bluetooth: hci0: command 0x0406 tx timeout [ 164.980344][ T5966] Bluetooth: hci2: command 0x206a tx timeout [ 164.990794][ T5966] Bluetooth: hci3: command 0x0406 tx timeout [ 175.767645][ C2] rcu: INFO: rcu_preempt self-detected stall on CPU [ 175.769672][ C2] rcu: 2-....: (1 GPs behind) idle=9544/1/0x4000000000000000 softirq=10805/10833 fqs=4677 [ 175.775998][ C2] rcu: hardirqs softirqs csw/system [ 175.778578][ C2] rcu: number: 1 0 0 [ 175.780966][ C2] rcu: cputime: 227 0 52262 ==> 52500(ms) [ 175.783601][ C2] rcu: (t=10502 jiffies g=7505 q=7226 ncpus=4) [ 175.785729][ C2] CPU: 2 UID: 0 PID: 1407 Comm: aoe_tx0 Not tainted 6.12.0-syzkaller-00233-g9fb2cfa4635a #0 [ 175.785746][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 175.785754][ C2] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 175.785775][ C2] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 86 41 52 f6 48 89 df e8 8e be 52 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 55 d0 43 f6 65 8b 05 96 ed eb 74 85 c0 74 16 5b [ 175.785782][ C2] RSP: 0018:ffffc90007d8f9e8 EFLAGS: 00000246 [ 175.785790][ C2] RAX: 0000000000000002 RBX: ffffffff9a649ee0 RCX: 1ffffffff2d42f5d [ 175.785795][ C2] RDX: 0000000000000000 RSI: ffffffff8b4cca20 RDI: ffffffff8bb14d00 [ 175.785800][ C2] RBP: 0000000000000293 R08: 0000000000000001 R09: fffffbfff2d333b0 [ 175.785804][ C2] R10: ffffffff96999d87 R11: 0000000000000000 R12: ffffffff9a649fe8 [ 175.785809][ C2] R13: 0000000000000003 R14: 0000000000000001 R15: 0000000000000003 [ 175.785814][ C2] FS: 0000000000000000(0000) GS:ffff88802b600000(0000) knlGS:0000000000000000 [ 175.785833][ C2] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 175.785840][ C2] CR2: 00007fe45ff5c440 CR3: 000000000db7c000 CR4: 0000000000352ef0 [ 175.785845][ C2] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 175.785849][ C2] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 175.785854][ C2] Call Trace: [ 175.785857][ C2] [ 175.785863][ C2] ? rcu_dump_cpu_stacks+0x25e/0x4c0 [ 175.785878][ C2] ? rcu_sched_clock_irq+0xa24/0x32a0 [ 175.785891][ C2] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 175.785899][ C2] ? find_held_lock+0x2d/0x110 [ 175.785916][ C2] ? update_process_times+0x178/0x220 [ 175.785928][ C2] ? __pfx_update_process_times+0x10/0x10 [ 175.785941][ C2] ? tick_nohz_handler+0x376/0x530 [ 175.785952][ C2] ? __pfx_tick_nohz_handler+0x10/0x10 [ 175.785959][ C2] ? __hrtimer_run_queues+0x5fb/0xae0 [ 175.785974][ C2] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 175.785985][ C2] ? ktime_get_update_offsets_now+0x201/0x310 [ 175.785998][ C2] ? hrtimer_interrupt+0x31b/0x800 [ 175.786010][ C2] ? __sysvec_apic_timer_interrupt+0x10f/0x400 [ 175.786020][ C2] ? sysvec_apic_timer_interrupt+0x9f/0xc0 [ 175.786030][ C2] [ 175.786032][ C2] [ 175.786035][ C2] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 175.786050][ C2] ? _raw_spin_unlock_irqrestore+0x31/0x80 [ 175.786061][ C2] uart_write+0x4c1/0xb30 [ 175.786075][ C2] handle_tx+0x203/0x630 [ 175.786089][ C2] dev_hard_start_xmit+0x143/0x790 [ 175.786101][ C2] __dev_queue_xmit+0x7c7/0x4350 [ 175.786115][ C2] ? __pfx___dev_queue_xmit+0x10/0x10 [ 175.786124][ C2] ? __pfx___lock_acquire+0x10/0x10 [ 175.786136][ C2] ? __pfx___lock_acquire+0x10/0x10 [ 175.786148][ C2] ? lock_acquire.part.0+0x11b/0x380 [ 175.786158][ C2] ? find_held_lock+0x2d/0x110 [ 175.786168][ C2] ? find_held_lock+0x2d/0x110 [ 175.786178][ C2] ? tx+0xa8/0x190 [ 175.786187][ C2] ? __pfx_lock_release+0x10/0x10 [ 175.786197][ C2] ? lock_acquire+0x2f/0xb0 [ 175.786211][ C2] tx+0xcc/0x190 [ 175.786219][ C2] ? __pfx_tx+0x10/0x10 [ 175.786226][ C2] kthread+0x1e7/0x3c0 [ 175.786238][ C2] ? __pfx_kthread+0x10/0x10 [ 175.786249][ C2] ? __pfx_default_wake_function+0x10/0x10 [ 175.786261][ C2] ? lockdep_hardirqs_on+0x7c/0x110 [ 175.786272][ C2] ? __kthread_parkme+0x148/0x220 [ 175.786282][ C2] ? __pfx_kthread+0x10/0x10 [ 175.786292][ C2] kthread+0x2c1/0x3a0 [ 175.786300][ C2] ? _raw_spin_unlock_irq+0x23/0x50 [ 175.786308][ C2] ? __pfx_kthread+0x10/0x10 [ 175.786317][ C2] ret_from_fork+0x45/0x80 [ 175.786325][ C2] ? __pfx_kthread+0x10/0x10 [ 175.786333][ C2] ret_from_fork_asm+0x1a/0x30 [ 175.786350][ C2] VM DIAGNOSIS: 09:38:33 Registers: info registers vcpu 0 CPU#0 RAX=0000000000475c77 RBX=0000000000000000 RCX=ffffffff8b157a59 RDX=0000000000000000 RSI=ffffffff8b4cca20 RDI=ffffffff8bb14d00 RBP=fffffbfff1b52b10 RSP=ffffffff8da07e20 R8 =0000000000000001 R9 =ffffed1005687025 R10=ffff88802b43812b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8da95880 R14=ffffffff901d2c88 R15=0000000000000000 RIP=ffffffff8b158e3f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000555fbc69ed88 CR3=000000000db7c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000400000 Opmask01=00000000fffffff8 Opmask02=0000000000000002 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 92cc337fd2720fe6 5b916b1b1a01b5de ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2cc07ac72ac618c9 0e8fe7cbc6036cb1 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 bb5c5e2596243320 31961959b04ab9c2 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 cf9b751570d748ac 9b631ea40e698e9e ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 0000000000000060 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000020 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4ea772c588c788ba 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 166de4cb00000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 80404985016893b4 56b432afa591b457 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000350c01a1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 40e90ccaeba21371 4cd778bcbbeff275 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ab7288bb363451f6 cf4a2948ab95c0e5 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f6e3a6d5e007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4b1f485e005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000a3020 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000428cb5 RBX=0000000000000001 RCX=ffffffff8b157a59 RDX=0000000000000000 RSI=ffffffff8b4cca20 RDI=ffffffff8bb14d00 RBP=ffffed1003771910 RSP=ffffc90000477e08 R8 =0000000000000001 R9 =ffffed10056a7025 R10=ffff88802b53812b R11=0000000000000000 R12=0000000000000001 R13=ffff88801bb8c880 R14=ffffffff901d2c88 R15=0000000000000000 RIP=ffffffff8b158e3f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000555fbc69ed88 CR3=000000000db7c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f747dff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000078 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85053f45 RDI=ffffffff9a6493e0 RBP=ffffffff9a6493a0 RSP=ffffc90000540580 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000013 R12=0000000000000000 R13=0000000000000078 R14=ffffffff85053ee0 R15=0000000000000000 RIP=ffffffff85053f6f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fe45ff5c440 CR3=000000000db7c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001c000000000 0000000800000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000131325 RBX=0000000000000003 RCX=ffffffff8b157a59 RDX=0000000000000000 RSI=ffffffff8b4cca20 RDI=ffffffff8bb14d00 RBP=ffffed1003774488 RSP=ffffc90000497e08 R8 =0000000000000001 R9 =ffffed10056e7025 R10=ffff88802b73812b R11=0000000000000000 R12=0000000000000003 R13=ffff88801bba2440 R14=ffffffff901d2c88 R15=0000000000000000 RIP=ffffffff8b158e3f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000ffe6d924 CR3=000000000db7c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9021135a4c093abb 19e62d95c00f1784 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a180d426e2fa10c6 d1eb319cc9da6206 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 098608f795b8967c 67a65625808c9d71 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e52999f682609aa 19926a1a21674f58 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 00000000000000b4 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000034 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f70679dcbed1a3be af637c6dd1906d19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1e385334cd976c79 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2b2b443d2ea52785 35ac3ce94ca6687e ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 22cf1d4000000000 44d33bbcd234c619 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 375bb1493c31f53d 30d60bd78733b8f1 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 29bb89539d2fbd6c 4f037b9238de0a71 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000