last executing test programs: 8.554021978s ago: executing program 3 (id=197): socket$inet_sctp(0x2, 0x0, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xab49}, {0x20, 0x0, 0x0, 0xffeff010}, {0x6}]}, 0x8) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = socket$nl_generic(0x10, 0x3, 0x10) fstat(0xffffffffffffffff, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="e846000040000900ffffffff000000000200000004001f00d04601"], 0x46e8}, 0x1, 0x0, 0x0, 0x4040040}, 0xc000) 8.461094566s ago: executing program 3 (id=199): r0 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x101301) socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x80003, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x8, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000016000119"], 0x78}}, 0x0) recvmmsg(r4, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x3}, {{&(0x7f0000000700)=@ieee802154={0x24, @long}, 0x80, 0x0}}], 0x4, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) listen(r4, 0x9) 7.491383941s ago: executing program 3 (id=202): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r1, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500), 0x0, 0x1}}, 0x3c) r4 = openat$dsp(0xffffffffffffff9c, 0x0, 0x101, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r4, 0x8010500c, &(0x7f0000000100)) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r7, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) creat(&(0x7f0000000140)='./file0\x00', 0x50) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r9 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r8}, 0x8) close(r9) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r8, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r10 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r10, r9, 0x0, 0x0, 0x0}, 0x30) r11 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r11, &(0x7f0000000180)={0x1a, 0x0, 0x2, 0x3d, 0x0, 0x0, @random="48164953c468"}, 0x10) 6.429783554s ago: executing program 3 (id=208): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x10042, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x18, "0062ba0700000000ebffffff0000f7ffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000280), 0x2402c0, 0x0) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082abd7000fcdbdf25110000000800050008000000efe905000400000008000500810007000800040009000000080004000300000008000600b5000000"], 0x44}, 0x1, 0x0, 0x0, 0x20048001}, 0x81) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, "e85e52f25c40d7cb"}) read$watch_queue(0xffffffffffffffff, &(0x7f0000000e00)=""/4096, 0x1000) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) io_uring_setup(0x79af, &(0x7f0000000100)={0x0, 0xaa00, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) unlink(&(0x7f0000000240)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) chdir(&(0x7f0000000140)='./bus\x00') socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) socket$alg(0x26, 0x5, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885, 0x0, 0x4, 0x306, 0x0, r4}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$unix(0x1, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000200)='./file1\x00') 5.950537726s ago: executing program 3 (id=212): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa0, 0x30, 0x1, 0x70bd2a, 0x0, {}, [{0x8c, 0x1, [@m_ct={0x40, 0x2, 0x0, 0x0, {{0x7}, {0x18, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @dev={0xfe, 0x80, '\x00', 0xa}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_usb_connect$cdc_ncm(0x3, 0x0, 0x0, &(0x7f0000000980)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x0, 0x8, 0xfa, 0xfe, 0x10, 0xff}, 0xc, &(0x7f0000000580)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x6, 0x6, 0x8}]}, 0x5, [{0xc0, &(0x7f0000000780)=@string={0xc0, 0x3, "1ed0e4b5236752f84389c6d7f039a955dc01443ead49b0e9db1e947a32732ebe1bdc1cbd1dbdc16a3d10fd2cd1f5c6182a2ae75c0985c7c6de86f09fcad847af6599942f1b3deae9014baadac08df6cd813311836e03dac2c2eb66b4f79af2a37620a2203c1a20712b4412b8f35725d71719f2c0ad5940e0c6d25d900c5633ea227765449a54976522271fa34ba121cae2704f3e7636ffa9782565fc7737b12f41864916e0e63d5b9fd1553387ee262420bde42a7f0c6828359359ac29e5"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x414}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x425}}, {0x91, &(0x7f0000000880)=@string={0x91, 0x3, "4885021ae6b2d95557ab695ea9f99ae70adbd3c227b87eb8a6aff20436302ab8975bd28cdcc91198852b07355d829d1ec9cfaf0d7a4616de864e1ffb208ea4f490e0ecb1382f218fb702a29982232fa9faeab52af6e2109d1f0ddc2c0c5e1eebe1a4e4f343793b6432aa5999bb86963b79f25ac8f75f41099236e165a84d96f70d22ac9182ad69ab6dec985fffaa43"}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x429}}]}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}, 0x45c) ioctl$UI_SET_PROPBIT(r4, 0x5501, 0x0) ioctl$UI_END_FF_UPLOAD(r4, 0x8000552c, 0x0) geteuid() openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8cb83, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0xa) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0cc5640, &(0x7f0000000540)={0x1, @sliced={0x0, [0x12a9, 0x400, 0xea, 0x8, 0xffff, 0x3, 0x6, 0x8, 0x83, 0x1, 0xe3c7, 0x5, 0x6, 0x8, 0x9, 0x200, 0xa, 0x9, 0x5, 0x3, 0x1ff, 0xad3f, 0x5, 0x4, 0x0, 0x7, 0x6, 0x8, 0x101, 0x515, 0x7, 0x2, 0x5, 0x9, 0x2, 0xfc00, 0x10, 0xfff, 0x9, 0x23, 0x38, 0x4, 0xfff4, 0x675, 0xa, 0x6, 0x800, 0x8], 0x3}}) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000140)={@my=0x1}) 5.701520198s ago: executing program 3 (id=215): r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x800, 0x70bd2c, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r4}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000280)={'wg2\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180800d173c81a00000000000000000195000000000000007f4cb933d8c0e4ac46c01ae96072345bc4de2b1089f3"], 0x0, 0x6d, 0xe7, &(0x7f0000000500)=""/231, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, 0x0, 0x4048000) socket$inet6_sctp(0xa, 0x5, 0x84) syz_io_uring_setup(0x117, &(0x7f0000000100), &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r8, r9, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd_index=0x7, 0x2, 0x0, 0x0, 0xc}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) 5.639740313s ago: executing program 32 (id=215): r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x800, 0x70bd2c, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r4}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000280)={'wg2\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180800d173c81a00000000000000000195000000000000007f4cb933d8c0e4ac46c01ae96072345bc4de2b1089f3"], 0x0, 0x6d, 0xe7, &(0x7f0000000500)=""/231, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, 0x0, 0x4048000) socket$inet6_sctp(0xa, 0x5, 0x84) syz_io_uring_setup(0x117, &(0x7f0000000100), &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r8, r9, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x6000, @fd_index=0x7, 0x2, 0x0, 0x0, 0xc}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) 4.631058527s ago: executing program 1 (id=221): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cdrom(0xffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$CDROMREADAUDIO(r3, 0x530e, &(0x7f0000000280)={@msf={0x0, 0x0, 0x2}, 0x2, 0x0, 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x20}}, 0x1c}}, 0x0) add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r4, 0x0, 0x15, &(0x7f0000000000)={0x0, @empty, 0x0, 0x0, 'fo\x00'}, 0x2c) r5 = openat$ipvs(0xffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x0, 0x9, 0x5, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4044000}, 0x4004) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@remote}, 0x0, @in6=@dev}}, &(0x7f0000000580)=0xe4) socket$tipc(0x1e, 0x7, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020001000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2040084) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x60}}, 0x0) set_mempolicy(0x3, &(0x7f0000000080)=0x5, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r7 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000005e00), 0x4) io_uring_enter(r7, 0x2ded, 0x4000, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) 4.540663037s ago: executing program 2 (id=222): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cdrom(0xffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$CDROMREADAUDIO(r3, 0x530e, &(0x7f0000000280)={@msf={0x0, 0x0, 0x2}, 0x2, 0x0, 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x20}}, 0x1c}}, 0x0) add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r4, 0x0, 0x15, &(0x7f0000000000)={0x0, @empty, 0x0, 0x0, 'fo\x00'}, 0x2c) r5 = openat$ipvs(0xffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x0, 0x9, 0x5, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4044000}, 0x4004) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@remote}, 0x0, @in6=@dev}}, &(0x7f0000000580)=0xe4) socket$tipc(0x1e, 0x7, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020001000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2040084) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x60}}, 0x0) set_mempolicy(0x3, &(0x7f0000000080)=0x5, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r7 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000005e00), 0x4) io_uring_enter(r7, 0x2ded, 0x4000, 0x0, 0x0, 0x0) (fail_nth: 1) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) 4.518850628s ago: executing program 4 (id=217): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)=[{0x4, 0x1, 0xa, 0xb}, {0x1, 0x2, 0x13, 0x2}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = userfaultfd(0x801) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="48000000000101040000ff0f0000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000010000580090001"], 0x48}}, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f00000023c0)=""/241, 0x1115000, 0x0, 0x0, 0x2}, 0x1c) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8001, 0x0, 0x8, 0x0) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') mount$9p_virtio(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB="7472616e733d76697274696f2c64656275673d3078163030303030303030303030303030372c0001da5280833471f915c7"]) read$FUSE(r7, &(0x7f0000000340)={0x2020}, 0x2020) 4.223732167s ago: executing program 0 (id=223): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x200, 0x81}]}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {0x0, 0x800b}}}, 0x1c}}, 0x40000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r4, 0x0, 0xb) write$binfmt_misc(r6, &(0x7f00000000c0), 0xfdef) splice(r3, 0x0, r6, 0x0, 0x80, 0x0) read$FUSE(r5, &(0x7f00000002c0)={0x2020}, 0x2020) syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') 3.713469945s ago: executing program 1 (id=224): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cdrom(0xffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$CDROMREADAUDIO(r3, 0x530e, &(0x7f0000000280)={@msf={0x0, 0x0, 0x2}, 0x2, 0x0, 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x20}}, 0x1c}}, 0x0) add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r4, 0x0, 0x15, &(0x7f0000000000)={0x0, @empty, 0x0, 0x0, 'fo\x00'}, 0x2c) r5 = openat$ipvs(0xffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000000009fc000000000000f6ffff06000000"], 0x14}, 0x1, 0x0, 0x0, 0x4044000}, 0x4004) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@remote}, 0x0, @in6=@dev}}, &(0x7f0000000580)=0xe4) socket$tipc(0x1e, 0x7, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020001000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2040084) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x60}}, 0x0) set_mempolicy(0x3, &(0x7f0000000080)=0x5, 0x9) unshare(0x24020400) r7 = syz_io_uring_setup(0x44f, &(0x7f0000000140)={0x0, 0x40, 0x10100, 0x400000}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000740)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)='./file0\x00'}) io_uring_enter(r7, 0x42d3e, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r10 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00400003000000020000000000000c0400000000306184ea35017c37bc9a65775794f9511ca65a4412bba65a289c11e241ddeb2aee382e861b60209e98321e8e895bcdba8e9d5aa04c39b6db59f93122ac2bad111fda72a31801e020fb9421d72518a0c53864f435259bd64f2a840cf61fef0cbd8279af566f51ae517e433690cfade773f068f4b76ad9841fc402eaedbd056f15d638f8990f2b09ef2c135f88f12ac7d0f664476e8570"], 0x0, 0x27, 0x0, 0x1, 0x4, 0x0, @void, @value}, 0x28) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000005e00), 0x4) io_uring_enter(r10, 0x2ded, 0x4000, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) 3.631383414s ago: executing program 2 (id=225): symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='./file0\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f0000000300)='./file0\x00', r0, &(0x7f00000007c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) fcntl$notify(r2, 0x402, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b701000000000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={r4, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x71, &(0x7f00000000c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0xf, 0x8, 0x8, &(0x7f0000000180)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r5, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r4, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x4c) 3.571429887s ago: executing program 2 (id=226): r0 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x101301) socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x80003, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x8, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000016000119"], 0x78}}, 0x0) recvmmsg(r4, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x3}, {{&(0x7f0000000700)=@ieee802154={0x24, @long}, 0x80, 0x0}}], 0x4, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) listen(r4, 0x9) 3.571114277s ago: executing program 4 (id=227): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x38fe, &(0x7f0000000300)={0x0, 0x1fffff, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000140009050000000000000000021f0020", @ANYRES32, @ANYBLOB="08000100e0000002080002000a01010008000400ac1414aa08000400ffffffff08000a000100000008000200e0000001"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x50, 0x0, @fd=r1}) io_uring_enter(r3, 0x2def, 0x4000, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) fchmod(r2, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) 3.461496318s ago: executing program 0 (id=228): openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x4, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc090}, 0x80d1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0xf0f071, 0x19}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r2) tkill(r2, 0x35) ptrace(0x4208, r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r5, &(0x7f0000000480), 0x10) close(r5) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) io_uring_setup(0xaab, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf20000000000000160005003f1b48013d030100000000009500000000000000bc26000000000000bf67000000000000070600000fff07006702000003000000360600000ee600f0bf052000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 3.051511769s ago: executing program 4 (id=229): openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41201}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x34}}, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4000000000000002, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d, 0xfe}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0) r5 = openat$drirender128(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[0x0], &(0x7f00000000c0), 0x0, 0x1, 0x0, 0x0, r7}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000180)={0x0, 0x1, &(0x7f00000002c0)=[r7], &(0x7f0000000140)=[0x7], &(0x7f0000000800)=[r8], &(0x7f0000000100), 0x0, 0x400000000}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc01c64b9, &(0x7f0000000200)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x7, r7, 0xeeeeeeee}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYRES16=r9, @ANYRES64], 0x0) 2.845244363s ago: executing program 1 (id=230): bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x2000c011, &(0x7f00000001c0)={0xa, 0x2, 0x2, @empty, 0x8}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) syz_open_procfs(0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x42, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11641e7a, 0x20000000, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x20, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x647b}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x6000000b) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x10}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)='Lw', 0x2, 0x800, 0x0, 0x0) r5 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0401273, &(0x7f0000000000)={'\x00', 0x2, 0x6f11, 0xb, 0xfffffffffffffeff, 0x11c3adec}) ioctl$BLKTRACESTART(r5, 0x1276, 0x0) 2.640706539s ago: executing program 2 (id=231): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000100)="0445cf6f46034ab6c8c99ff0", 0xc, 0x2000c011, &(0x7f00000001c0)={0xa, 0x2, 0x2, @empty, 0x8}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) syz_open_procfs(0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x42, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11641e7a, 0x20000000, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x20, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x647b}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x6000000b) r4 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x10}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x47ba, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000080)='Lw', 0x2, 0x800, 0x0, 0x0) r7 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0401273, &(0x7f0000000000)={'\x00', 0x2, 0x6f11, 0xb, 0xfffffffffffffeff, 0x11c3adec}) ioctl$BLKTRACESTART(r7, 0x1276, 0x0) 2.151374822s ago: executing program 0 (id=232): syz_open_dev$vim2m(&(0x7f0000000580), 0x800, 0x2) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00005df400000000b7efeb2825b7d992820573349bdd3f12d805000008000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x0, 0x1ee}, 0xfe}, 0x18, &(0x7f00000004c0)={&(0x7f0000000140)='\x00', 0x1}}, 0x40000) syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x800) close_range(r0, 0xffffffffffffffff, 0x0) 1.677161683s ago: executing program 1 (id=233): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ptrace(0x10, r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600000000000000000000000002"}) syz_open_pts(r2, 0x0) accept4(r1, 0x0, 0x0, 0x800) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x800, 0x70bd2c, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r6 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0xfffffffe, 0x0, 0x0, 0x386}, &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) io_uring_enter(r6, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1.676360376s ago: executing program 2 (id=234): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ptrace(0x10, r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600000000000000000000000002"}) syz_open_pts(r2, 0x0) accept4(r1, 0x0, 0x0, 0x800) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x800, 0x70bd2c, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x7c45, &(0x7f0000000080)={0x0, 0x20, 0x13100, 0x0, 0x2e}, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r6 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0xfffffffe, 0x0, 0x0, 0x386}, &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) io_uring_enter(r6, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1.601226116s ago: executing program 0 (id=235): r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000400)={{0x3, 0x0, 0x1}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40585414, &(0x7f0000000300)={0x3, 0x0, 0x7fffffff}) (async) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r2, &(0x7f0000002100)=[{{&(0x7f0000000180)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="20000000290000003200000000000000000000000000ffffffffffff", @ANYRES32=0x0, @ANYBLOB=' \x00'], 0x40}}], 0x1, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x65, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) 1.600833019s ago: executing program 0 (id=236): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)=[{0x4, 0x1, 0xa, 0xb}, {0x1, 0x2, 0x13, 0x2}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = userfaultfd(0x801) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="48000000000101040000ff0f0000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000010000580090001"], 0x48}}, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f00000023c0)=""/241, 0x1115000, 0x0, 0x0, 0x2}, 0x1c) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8001, &(0x7f0000000000)=0x6, 0x8, 0x0) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, 0x0) syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') mount$9p_virtio(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB="7472616e733d76697274696f2c64656275673d3078163030303030303030303030303030372c0001da5280833471f915c7"]) read$FUSE(r7, &(0x7f0000000340)={0x2020}, 0x2020) 771.376414ms ago: executing program 1 (id=237): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x38fe, &(0x7f0000000300)={0x0, 0x1fffff, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000140009050000000000000000021f0020", @ANYRES32=r7, @ANYBLOB="08000100e0000002080002000a01010008000400ac1414aa08000400ffffffff08000a000100000008000200e0000001"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x50, 0x0, @fd=r1}) io_uring_enter(r3, 0x2def, 0x4000, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) fchmod(r2, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) 697.84406ms ago: executing program 2 (id=238): socket$nl_generic(0x10, 0x3, 0x10) fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='trusted.overlay.upper\x00', 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000002640)=0x1, 0x4) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x8, 0x70, 0x40000}, 0x20) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x7, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}}) prlimit64(0x0, 0x4, &(0x7f0000000040)={0x1000, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x7, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x0, &(0x7f0000000080)}) ioctl$IMCLEAR_L2(0xffffffffffffffff, 0x80044946, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008f29, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000440)='nv\x00', 0x3) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r6 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r6, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) 697.341783ms ago: executing program 0 (id=239): r0 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x101301) socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x80003, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x8, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000016000119"], 0x78}}, 0x0) recvmmsg(r4, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x3}, {{&(0x7f0000000700)=@ieee802154={0x24, @long}, 0x80, 0x0}}], 0x4, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) listen(r4, 0x9) 100.723764ms ago: executing program 1 (id=240): openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) (async) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) dup(r0) (async) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000040)={0x60, 0xa0, 0x0, 0x0, 0x2000, 0x0, 0x8, 0x0, {0x10, 0x8}, {}, {0x0, 0x8, 0x1}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x6, 0x0, 0x554c, 0x0, 0x100, 0x2}) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') (async) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r4, 0x1, &(0x7f0000002340)=[&(0x7f0000000040)={0x0, 0x300, 0x0, 0x5, 0x0, r5, 0x0}]) lstat64(&(0x7f0000000080)='./cgroup\x00', 0x0) (async) lstat64(&(0x7f0000000080)='./cgroup\x00', 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x10000, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, 0x0, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r7, 0x84, 0x80, 0x0, 0x0) (async) setsockopt(r7, 0x84, 0x80, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000300)=ANY=[@ANYRESOCT=r6, @ANYRES32=0x0, @ANYRES32=0x41424344, @ANYBLOB="5c0090780000200b0000000000002afa0bbe8ef0b2a54be260897662d8f5a523b02a75f3150bcd20295ac77648de49b246c1e770d17259444528"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x10c}}, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, 0x0) (async) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x80001, 0x0) ioctl$BLKZEROOUT(r10, 0x127f, &(0x7f0000000240)={0x600, 0x1000000}) 47.439104ms ago: executing program 4 (id=241): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) (async) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) (async) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x2) (async) r4 = socket$inet_sctp(0x2, 0x1, 0x84) (async) r5 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40000c0) (async) r8 = socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet(r8, 0x0, 0x0, 0x200408c4, 0x0, 0x0) socket$inet(0x2, 0x80003, 0x6) r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004886}, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r9, 0x0, 0x1) (async) pread64(r9, 0x0, 0x0, 0x0) (async) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r10, &(0x7f00000012c0), 0x0, 0x11, 0x0, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r11 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r13, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8}]}}]}, 0x40}}, 0x4000) (async) sendto$inet(r4, &(0x7f0000000300)="ab", 0x34000, 0x41, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 569.598µs ago: executing program 4 (id=242): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000000000000000000000000008500000041000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = openat$binfmt_format(0xffffff9c, &(0x7f0000000080)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) readv(r4, &(0x7f00000016c0)=[{&(0x7f0000000580)=""/228, 0xe4}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x4c) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x1238000, 0xc00}, 0x1c) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x25, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5a54}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) keyctl$setperm(0x5, 0x0, 0x440008) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='tlb_flush\x00', r6}, 0x10) 0s ago: executing program 4 (id=243): iopl(0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x7, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = openat$fb1(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000400)='./file0\x00', 0x0, 0x223216, 0x0) chdir(&(0x7f0000000100)='./file0\x00') syz_open_dev$loop(0x0, 0x2, 0x40000) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x4, 0x0) ptrace(0x10, r2) ptrace(0x420f, r2) syz_usb_connect$hid(0xf63067478e218e8, 0x36, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) rename(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000800)='./file0\x00') ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x3e, 0x4b0, 0x1, 0x3e, 0x0, 0x0, {0x0, 0x5}, {}, {}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1a, 0x0, 0x3}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x15) r5 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:16353' (ED25519) to the list of known hosts. [ 32.027024][ T5851] cgroup: Unknown subsys name 'net' [ 32.174965][ T5851] cgroup: Unknown subsys name 'cpuset' [ 32.178812][ T5851] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 32.933935][ T5851] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.634068][ T5924] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 35.636750][ T5924] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 35.639524][ T5924] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 35.641649][ T5924] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 35.644475][ T5924] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 35.646754][ T5924] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 35.647862][ T5936] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 35.649900][ T5924] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 35.651491][ T5936] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 35.653239][ T5924] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 35.655349][ T5936] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 35.656959][ T5924] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 35.659976][ T5936] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 35.661342][ T5938] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 35.661802][ T5937] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 35.663324][ T5936] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 35.666714][ T5938] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 35.667276][ T5929] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 35.670042][ T5938] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 35.670351][ T5936] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 35.670482][ T5936] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 35.671773][ T5929] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 35.675227][ T5935] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 35.684543][ T5935] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 35.826584][ T5932] chnl_net:caif_netlink_parms(): no params data found [ 35.859527][ T5921] chnl_net:caif_netlink_parms(): no params data found [ 35.870579][ T5925] chnl_net:caif_netlink_parms(): no params data found [ 35.960167][ T5932] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.963147][ T5932] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.965330][ T5932] bridge_slave_0: entered allmulticast mode [ 35.967531][ T5932] bridge_slave_0: entered promiscuous mode [ 35.987864][ T5922] chnl_net:caif_netlink_parms(): no params data found [ 35.993135][ T5932] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.995789][ T5932] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.997898][ T5932] bridge_slave_1: entered allmulticast mode [ 36.000076][ T5932] bridge_slave_1: entered promiscuous mode [ 36.007974][ T5921] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.010572][ T5921] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.013492][ T5921] bridge_slave_0: entered allmulticast mode [ 36.016460][ T5921] bridge_slave_0: entered promiscuous mode [ 36.019697][ T5921] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.022182][ T5921] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.024516][ T5921] bridge_slave_1: entered allmulticast mode [ 36.026654][ T5921] bridge_slave_1: entered promiscuous mode [ 36.093542][ T5921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.097894][ T5921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.102804][ T5932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.105475][ T5925] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.107896][ T5925] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.110008][ T5925] bridge_slave_0: entered allmulticast mode [ 36.112095][ T5925] bridge_slave_0: entered promiscuous mode [ 36.156494][ T5932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.161310][ T5921] team0: Port device team_slave_0 added [ 36.163410][ T5925] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.165989][ T5925] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.168028][ T5925] bridge_slave_1: entered allmulticast mode [ 36.170179][ T5925] bridge_slave_1: entered promiscuous mode [ 36.212052][ T5921] team0: Port device team_slave_1 added [ 36.227350][ T5925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.230835][ T5922] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.235044][ T5922] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.237896][ T5922] bridge_slave_0: entered allmulticast mode [ 36.240832][ T5922] bridge_slave_0: entered promiscuous mode [ 36.245623][ T5932] team0: Port device team_slave_0 added [ 36.259979][ T5925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.264077][ T5922] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.266649][ T5922] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.269210][ T5922] bridge_slave_1: entered allmulticast mode [ 36.271996][ T5922] bridge_slave_1: entered promiscuous mode [ 36.276184][ T5932] team0: Port device team_slave_1 added [ 36.322963][ T5921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.324965][ T5921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.331919][ T5921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.336912][ T5925] team0: Port device team_slave_0 added [ 36.339694][ T5922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.344500][ T5922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.358651][ T5932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.360634][ T5932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.367735][ T5932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.371090][ T5921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.373107][ T5921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.380152][ T5921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.384489][ T5925] team0: Port device team_slave_1 added [ 36.401046][ T5932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.404293][ T5932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.413441][ T5932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.431874][ T5922] team0: Port device team_slave_0 added [ 36.435670][ T5922] team0: Port device team_slave_1 added [ 36.460991][ T5922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.463132][ T5922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.470358][ T5922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.474336][ T5925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.476349][ T5925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.484203][ T5925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.488002][ T5925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.490012][ T5925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.497431][ T5925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.515349][ T5922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.517388][ T5922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.525333][ T5922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.548834][ T5932] hsr_slave_0: entered promiscuous mode [ 36.551082][ T5932] hsr_slave_1: entered promiscuous mode [ 36.556764][ T5921] hsr_slave_0: entered promiscuous mode [ 36.558804][ T5921] hsr_slave_1: entered promiscuous mode [ 36.560686][ T5921] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.563187][ T5921] Cannot create hsr debugfs directory [ 36.590562][ T5925] hsr_slave_0: entered promiscuous mode [ 36.592891][ T5925] hsr_slave_1: entered promiscuous mode [ 36.594922][ T5925] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.597526][ T5925] Cannot create hsr debugfs directory [ 36.636337][ T5922] hsr_slave_0: entered promiscuous mode [ 36.638355][ T5922] hsr_slave_1: entered promiscuous mode [ 36.640244][ T5922] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.642375][ T5922] Cannot create hsr debugfs directory [ 36.801454][ T5932] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 36.806518][ T5932] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 36.810574][ T5932] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 36.817002][ T5932] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 36.831651][ T5921] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 36.835237][ T5921] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 36.840145][ T5921] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 36.848170][ T5921] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 36.881996][ T5925] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.886542][ T5925] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.889693][ T5925] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.899949][ T5925] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.918698][ T5922] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 36.923276][ T5922] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 36.926333][ T5922] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 36.930454][ T5922] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 36.980729][ T5921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.995588][ T5932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.009961][ T5932] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.013501][ T5921] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.018576][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.021312][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.030051][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.032720][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.037369][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.039950][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.045692][ T5925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.054643][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.057227][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.071325][ T5922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.077935][ T5925] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.092983][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.094937][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.098312][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.100362][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.111125][ T5922] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.119249][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.121785][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.134129][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.136776][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.195233][ T5932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.211377][ T5932] veth0_vlan: entered promiscuous mode [ 37.217089][ T5932] veth1_vlan: entered promiscuous mode [ 37.237324][ T5921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.240951][ T5932] veth0_macvtap: entered promiscuous mode [ 37.245210][ T5932] veth1_macvtap: entered promiscuous mode [ 37.251792][ T5925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.258961][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.269137][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.278192][ T5932] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.280730][ T5932] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.283674][ T5932] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.286044][ T5932] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.291086][ T5922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.307817][ T5921] veth0_vlan: entered promiscuous mode [ 37.337179][ T5921] veth1_vlan: entered promiscuous mode [ 37.349745][ T5925] veth0_vlan: entered promiscuous mode [ 37.359068][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.362045][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.368443][ T5925] veth1_vlan: entered promiscuous mode [ 37.378724][ T5922] veth0_vlan: entered promiscuous mode [ 37.384122][ T1134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.386181][ T5921] veth0_macvtap: entered promiscuous mode [ 37.387251][ T1134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.390023][ T5921] veth1_macvtap: entered promiscuous mode [ 37.398012][ T5922] veth1_vlan: entered promiscuous mode [ 37.406965][ T5921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.411003][ T5921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.416818][ T5921] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.426124][ T5921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.429116][ T5921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.434911][ T5921] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.443294][ T5932] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 37.444463][ T5921] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.450829][ T5921] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.454624][ T5921] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.457918][ T5921] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.466294][ T5925] veth0_macvtap: entered promiscuous mode [ 37.477697][ T5925] veth1_macvtap: entered promiscuous mode [ 37.486634][ T5925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.489567][ T5925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.492248][ T5925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.495198][ T5925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.498397][ T5925] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.506374][ T5922] veth0_macvtap: entered promiscuous mode [ 37.527517][ T5922] veth1_macvtap: entered promiscuous mode [ 37.531714][ T5925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.535947][ T5925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.539738][ T5925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.544722][ T5925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.549303][ T5925] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.552749][ T1134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.554058][ T5925] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.555013][ T1134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.557585][ T5925] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.563930][ T5925] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.567490][ T5925] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.590359][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.591837][ T5922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.592754][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.595407][ T5922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.601073][ T5922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.605403][ T5922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.608202][ T5922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.611181][ T5922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.614456][ T5922] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.642295][ T5922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.645512][ T5922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.648223][ T5922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.651223][ T5922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.655331][ T5922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.658238][ T5922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.661549][ T5922] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.670869][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.671064][ T5922] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.674065][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.676239][ T5922] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.681527][ T5922] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.684234][ T5922] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.730446][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.733204][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.750085][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.752294][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.754912][ T5935] Bluetooth: hci1: command tx timeout [ 37.756756][ T5935] Bluetooth: hci0: command tx timeout [ 37.758614][ T5935] Bluetooth: hci2: command tx timeout [ 37.760361][ T5935] Bluetooth: hci3: command tx timeout [ 37.770844][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.774472][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.849091][ C3] IPv4: Oversized IP packet from 172.20.20.24 [ 37.914634][ T6010] netlink: 'syz.0.1': attribute type 10 has an invalid length. [ 37.918268][ T6010] openvswitch: netlink: Missing key (keys=40, expected=100) [ 38.164291][ T6016] netlink: 'syz.3.4': attribute type 10 has an invalid length. [ 38.172344][ T6016] team0: Port device netdevsim0 added [ 39.033774][ T69] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 39.617174][ T69] usb 8-1: device descriptor read/64, error -71 [ 39.812745][ T5938] Bluetooth: hci0: command tx timeout [ 39.812831][ T65] Bluetooth: hci1: command tx timeout [ 39.814855][ T5935] Bluetooth: hci2: command tx timeout [ 39.817151][ T5293] Bluetooth: hci3: command tx timeout [ 39.958213][ T69] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 40.041441][ T6040] ipvlan1: entered allmulticast mode [ 40.043136][ T6040] veth0_vlan: entered allmulticast mode [ 40.171826][ T6037] wg2: entered promiscuous mode [ 40.173330][ T6037] wg2: entered allmulticast mode [ 40.222832][ T69] usb 8-1: device descriptor read/64, error -71 [ 40.333593][ T69] usb usb8-port1: attempt power cycle [ 40.562488][ T30] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 40.794886][ T69] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 40.799173][ T30] usb 5-1: device descriptor read/64, error -71 [ 40.817085][ T69] usb 8-1: device descriptor read/8, error -71 [ 41.069389][ T69] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 41.072078][ T30] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 41.125500][ T69] usb 8-1: device descriptor read/8, error -71 [ 41.222815][ T30] usb 5-1: device descriptor read/64, error -71 [ 41.233296][ T69] usb usb8-port1: unable to enumerate USB device [ 41.303397][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 41.305834][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 41.308153][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 41.332894][ T30] usb usb5-port1: attempt power cycle [ 41.700519][ T30] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 41.733638][ T30] usb 5-1: device descriptor read/8, error -71 [ 41.832639][ T6068] netlink: 'syz.2.16': attribute type 6 has an invalid length. [ 41.835340][ T6068] netlink: 20 bytes leftover after parsing attributes in process `syz.2.16'. [ 41.902525][ T5293] Bluetooth: hci1: command tx timeout [ 41.904148][ T5293] Bluetooth: hci2: command tx timeout [ 41.905769][ T5293] Bluetooth: hci0: command tx timeout [ 41.982540][ T30] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 42.003618][ T30] usb 5-1: device descriptor read/8, error -71 [ 42.139391][ T30] usb usb5-port1: unable to enumerate USB device [ 42.237742][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 42.531899][ T6075] netlink: 'syz.2.19': attribute type 12 has an invalid length. [ 42.590968][ T6075] warning: `syz.2.19' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 42.752317][ T6084] TCP: TCP_TX_DELAY enabled [ 43.572768][ T5935] Bluetooth: hci3: command tx timeout [ 43.878881][ T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!! [ 43.906095][ T6114] ipvlan1: entered allmulticast mode [ 43.908078][ T6114] veth0_vlan: entered allmulticast mode [ 43.912535][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 43.916183][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 43.926413][ T6113] bridge_slave_0: left allmulticast mode [ 43.928084][ T6113] bridge_slave_0: left promiscuous mode [ 43.931177][ T6113] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.941151][ T6113] bridge_slave_1: left allmulticast mode [ 43.944128][ T6113] bridge_slave_1: left promiscuous mode [ 43.945826][ T6113] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.950328][ T6113] bond0: (slave bond_slave_0): Releasing backup interface [ 43.960056][ T6113] bond0: (slave bond_slave_1): Releasing backup interface [ 43.970583][ T6113] team0: Port device team_slave_0 removed [ 43.972757][ T5935] Bluetooth: hci0: command tx timeout [ 43.974330][ T5935] Bluetooth: hci2: command tx timeout [ 43.975873][ T5935] Bluetooth: hci1: command tx timeout [ 43.981232][ T6113] team0: Port device team_slave_1 removed [ 43.983336][ T6113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.985392][ T6113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 43.988187][ T6113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.990231][ T6113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.020968][ T6115] team0: Mode changed to "broadcast" [ 44.022747][ T6117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.24'. [ 44.053812][ T6113] vlan0: entered promiscuous mode [ 44.058928][ T6113] team0: Port device vlan0 added [ 44.067244][ T6113] tipc: Started in network mode [ 44.068743][ T6113] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 44.071051][ T6113] tipc: Enabled bearer , priority 0 [ 44.696040][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 44.701528][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 44.732567][ T57] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 44.872500][ T57] usb 6-1: device descriptor read/64, error -71 [ 45.213077][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 45.224526][ T1335] tipc: Node number set to 11578026 [ 45.362666][ T57] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 45.417774][ T1014] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 45.502554][ T57] usb 6-1: device descriptor read/64, error -71 [ 45.542570][ T1014] usb 5-1: device descriptor read/64, error -71 [ 45.569994][ T6146] wg2: entered promiscuous mode [ 45.571485][ T6146] wg2: entered allmulticast mode [ 45.612714][ T57] usb usb6-port1: attempt power cycle [ 45.802512][ T1014] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 45.952534][ T1014] usb 5-1: device descriptor read/64, error -71 [ 45.962593][ T57] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 45.983881][ T57] usb 6-1: device descriptor read/8, error -71 [ 46.072823][ T1014] usb usb5-port1: attempt power cycle [ 46.222749][ T57] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 46.246458][ T57] usb 6-1: device descriptor read/8, error -71 [ 46.599482][ T6155] netlink: 16 bytes leftover after parsing attributes in process `syz.2.34'. [ 46.663307][ T57] usb usb6-port1: unable to enumerate USB device [ 46.792208][ T1014] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 46.813790][ T1014] usb 5-1: device descriptor read/8, error -71 [ 47.179540][ T6160] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 47.253070][ T1014] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 47.273603][ T1014] usb 5-1: device descriptor read/8, error -71 [ 47.455429][ T1014] usb usb5-port1: unable to enumerate USB device [ 47.550045][ T6161] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 47.675332][ T6161] mmap: syz.3.36 (6161) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 48.720827][ T65] Bluetooth: hci3: unexpected event 0x2f length: 1017 > 260 [ 49.004533][ T6199] netlink: 12 bytes leftover after parsing attributes in process `syz.0.42'. [ 49.903298][ T6216] wg2: entered promiscuous mode [ 49.905281][ T6216] wg2: entered allmulticast mode [ 51.534115][ T6247] FAULT_INJECTION: forcing a failure. [ 51.534115][ T6247] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 51.633017][ T6247] CPU: 1 UID: 0 PID: 6247 Comm: syz.2.54 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 51.636750][ T6247] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 51.639794][ T6247] Call Trace: [ 51.640929][ T6247] [ 51.641796][ T6247] dump_stack_lvl+0x16c/0x1f0 [ 51.643163][ T6247] should_fail_ex+0x497/0x5b0 [ 51.644499][ T6247] _copy_to_user+0x32/0xd0 [ 51.645778][ T6247] simple_read_from_buffer+0xd0/0x160 [ 51.647589][ T6247] proc_fail_nth_read+0x198/0x270 [ 51.649460][ T6247] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 51.651309][ T6247] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 51.653364][ T6247] vfs_read+0x1df/0xbe0 [ 51.654871][ T6247] ? __fget_files+0x1fc/0x3a0 [ 51.656512][ T6247] ? __pfx___mutex_lock+0x10/0x10 [ 51.658392][ T6247] ? __pfx_vfs_read+0x10/0x10 [ 51.659751][ T6247] ? __fget_files+0x206/0x3a0 [ 51.661101][ T6247] ksys_read+0x12b/0x250 [ 51.662344][ T6247] ? __pfx_ksys_read+0x10/0x10 [ 51.663665][ T6247] __do_fast_syscall_32+0x73/0x120 [ 51.665078][ T6247] do_fast_syscall_32+0x32/0x80 [ 51.666385][ T6247] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 51.668161][ T6247] RIP: 0023:0xf70fe579 [ 51.669409][ T6247] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 51.674772][ T6247] RSP: 002b:00000000f50ae590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 51.677067][ T6247] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f50ae620 [ 51.679283][ T6247] RDX: 000000000000000f RSI: 00000000f7433ff4 RDI: 0000000000000000 [ 51.681464][ T6247] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 51.683682][ T6247] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 51.686262][ T6247] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 51.688913][ T6247] [ 51.689876][ C1] vkms_vblank_simulate: vblank timer overrun [ 51.764164][ T6254] wg2: left promiscuous mode [ 51.765552][ T6254] wg2: left allmulticast mode [ 51.777396][ T6254] wg2: entered promiscuous mode [ 51.778919][ T6254] wg2: entered allmulticast mode [ 52.015981][ T6258] serio: Serial port ptm1 [ 52.769835][ T1014] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 52.902593][ T1014] usb 6-1: device descriptor read/64, error -71 [ 53.022542][ T30] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 53.085995][ T6281] netlink: 12 bytes leftover after parsing attributes in process `syz.2.63'. [ 53.140887][ T6286] netlink: 116 bytes leftover after parsing attributes in process `syz.3.65'. [ 53.153256][ T1014] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 53.156504][ T30] usb 5-1: device descriptor read/64, error -71 [ 53.292635][ T1014] usb 6-1: device descriptor read/64, error -71 [ 53.392862][ T30] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 53.403140][ T1014] usb usb6-port1: attempt power cycle [ 53.522652][ T30] usb 5-1: device descriptor read/64, error -71 [ 53.643589][ T30] usb usb5-port1: attempt power cycle [ 53.772647][ T1014] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 53.803563][ T1014] usb 6-1: device descriptor read/8, error -71 [ 53.991252][ T6296] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 53.992526][ T30] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 53.994643][ T6296] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 53.999464][ T6296] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 54.003071][ T6296] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 54.006058][ T6296] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 54.008836][ T6296] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 54.012291][ T6296] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 54.013003][ T30] usb 5-1: device descriptor read/8, error -71 [ 54.015334][ T6296] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 54.019280][ T6296] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 54.021744][ T6296] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 54.042558][ T1014] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 54.063041][ T1014] usb 6-1: device descriptor read/8, error -71 [ 54.200390][ T1014] usb usb6-port1: unable to enumerate USB device [ 54.622892][ T6320] wg2: left promiscuous mode [ 54.624251][ T6320] wg2: left allmulticast mode [ 54.627356][ T6319] wg2: entered promiscuous mode [ 54.629501][ T6319] wg2: entered allmulticast mode [ 54.652155][ T30] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 54.673093][ T30] usb 5-1: device descriptor read/8, error -71 [ 54.783778][ T30] usb usb5-port1: unable to enumerate USB device [ 55.478134][ T6344] netlink: 'syz.2.73': attribute type 10 has an invalid length. [ 55.638439][ T6351] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 57.995233][ T6403] 9pnet_fd: Insufficient options for proto=fd [ 58.007673][ T6403] netlink: 'syz.0.88': attribute type 4 has an invalid length. [ 58.277910][ T6403] syz.0.88 (6403) used greatest stack depth: 21008 bytes left [ 58.842559][ T1335] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 59.202573][ T1335] usb 7-1: Using ep0 maxpacket: 16 [ 59.212123][ T1335] usb 7-1: config 1 interface 0 has no altsetting 0 [ 59.218527][ T1335] usb 7-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.40 [ 59.222791][ T1335] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.230304][ T1335] usb 7-1: Product: Ћ [ 59.231702][ T1335] usb 7-1: Manufacturer: 礷ܺ裓钀蝊๒淋ⓔ㗆 [ 59.234172][ T1335] usb 7-1: SerialNumber: 봙툊똼卛㢌䳦⏉尉왿䗂㶻봠퉨퍎䀻ꛉ㹋䎾瀔ꃗ칥郍컜гﳧ䁃魳亙䭩ꡮ䪋㜧둓셫橡뛝㢩뽂⒡滗㒎뽧쩨䉊䙴Ϫ븅ㄛ剳軗缗꤀섉炨酂脬ꀄ馑騘넨朋幨漝⓳䤵囗궺⥲么쩓⌝ [ 59.382825][ T6431] netlink: 32 bytes leftover after parsing attributes in process `syz.0.94'. [ 59.387950][ T6431] netlink: 32 bytes leftover after parsing attributes in process `syz.0.94'. [ 59.401555][ T6435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.97'. [ 59.450423][ T6438] overlayfs: failed to resolve './file0': -2 [ 59.464870][ T6431] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 59.467556][ T6431] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 59.470164][ T6431] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 59.472889][ T6431] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 59.476268][ T6431] geneve2: entered promiscuous mode [ 59.477850][ T6431] geneve2: entered allmulticast mode [ 59.505144][ T6410] bridge1: entered promiscuous mode [ 59.508265][ T6410] bridge1: entered allmulticast mode [ 59.566683][ T6447] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 59.820701][ T6455] wg2: left promiscuous mode [ 59.822182][ T6455] wg2: left allmulticast mode [ 59.831401][ T6455] wg2: entered promiscuous mode [ 59.833156][ T6455] wg2: entered allmulticast mode [ 60.736255][ T1335] usbhid 7-1:1.0: can't add hid device: -71 [ 60.738158][ T1335] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 60.742928][ T1335] usb 7-1: USB disconnect, device number 2 [ 60.756683][ T6471] FAULT_INJECTION: forcing a failure. [ 60.756683][ T6471] name failslab, interval 1, probability 0, space 0, times 0 [ 60.761048][ T6471] CPU: 2 UID: 0 PID: 6471 Comm: syz.1.106 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 60.764072][ T6471] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 60.767123][ T6471] Call Trace: [ 60.768079][ T6471] [ 60.768961][ T6471] dump_stack_lvl+0x16c/0x1f0 [ 60.770334][ T6471] should_fail_ex+0x497/0x5b0 [ 60.771683][ T6471] ? fs_reclaim_acquire+0xae/0x150 [ 60.773146][ T6471] should_failslab+0xc2/0x120 [ 60.774503][ T6471] __kmalloc_cache_noprof+0x68/0x420 [ 60.776021][ T6471] kobject_uevent_env+0x265/0x1670 [ 60.777504][ T6471] ? __pfx_dev_uevent_name+0x10/0x10 [ 60.779042][ T6471] ? bus_to_subsys+0x12d/0x160 [ 60.780442][ T6471] device_del+0x623/0x9f0 [ 60.781711][ T6471] ? __pfx_device_del+0x10/0x10 [ 60.783124][ T6471] ? __timer_delete_sync+0x108/0x1b0 [ 60.784647][ T6471] device_unregister+0x1d/0xc0 [ 60.786039][ T6471] wakeup_source_unregister.part.0+0x4f/0x150 [ 60.787782][ T6471] wakeup_source_unregister+0x1f/0x30 [ 60.789336][ T6471] ep_clear_and_put+0x39e/0x440 [ 60.790749][ T6471] ? __pfx_ep_eventpoll_release+0x10/0x10 [ 60.792378][ T6471] ep_eventpoll_release+0x3e/0x60 [ 60.793853][ T6471] __fput+0x3f8/0xb60 [ 60.794999][ T6471] ? _raw_spin_unlock_irq+0x23/0x50 [ 60.796491][ T6471] task_work_run+0x14e/0x250 [ 60.797850][ T6471] ? __pfx_task_work_run+0x10/0x10 [ 60.799322][ T6471] ? __might_fault+0xe3/0x190 [ 60.800701][ T6471] syscall_exit_to_user_mode+0x27b/0x2a0 [ 60.802312][ T6471] __do_fast_syscall_32+0x80/0x120 [ 60.803795][ T6471] do_fast_syscall_32+0x32/0x80 [ 60.805204][ T6471] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 60.807010][ T6471] RIP: 0023:0xf705e579 [ 60.808187][ T6471] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 60.813689][ T6471] RSP: 002b:00000000f502f55c EFLAGS: 00000296 ORIG_RAX: 000000000000013f [ 60.816059][ T6471] RAX: 0000000000000001 RBX: 0000000000000006 RCX: 00000000208c9fc4 [ 60.818327][ T6471] RDX: 0000000000000001 RSI: 00000000fffffff7 RDI: 0000000000000000 [ 60.820597][ T6471] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 60.822833][ T6471] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 60.825090][ T6471] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 60.827354][ T6471] [ 61.032357][ T6483] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 61.093740][ T6483] can: request_module (can-proto-0) failed. [ 61.445833][ T6488] FAULT_INJECTION: forcing a failure. [ 61.445833][ T6488] name failslab, interval 1, probability 0, space 0, times 0 [ 61.449415][ T6488] CPU: 2 UID: 0 PID: 6488 Comm: syz.3.110 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 61.452393][ T6488] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 61.455433][ T6488] Call Trace: [ 61.456396][ T6488] [ 61.457386][ T6488] dump_stack_lvl+0x16c/0x1f0 [ 61.458883][ T6488] should_fail_ex+0x497/0x5b0 [ 61.460256][ T6488] ? fs_reclaim_acquire+0xae/0x150 [ 61.461720][ T6488] should_failslab+0xc2/0x120 [ 61.463069][ T6488] __kmalloc_cache_noprof+0x68/0x420 [ 61.464569][ T6488] ? find_held_lock+0x2d/0x110 [ 61.465932][ T6488] netdevice_event+0x368/0xa10 [ 61.467300][ T6488] ? __pfx_netdevice_event+0x10/0x10 [ 61.469058][ T6488] ? __pfx_del_netdev_ips+0x10/0x10 [ 61.470645][ T6488] ? __pfx_pass_all_filter+0x10/0x10 [ 61.472151][ T6488] ? cfg802154_netdev_notifier_call+0x391/0xa00 [ 61.473928][ T6488] notifier_call_chain+0xb7/0x410 [ 61.475367][ T6488] ? __pfx_netdevice_event+0x10/0x10 [ 61.476880][ T6488] call_netdevice_notifiers_info+0xbe/0x140 [ 61.478566][ T6488] unregister_netdevice_many_notify+0x8d5/0x1e60 [ 61.479140][ T6490] FAULT_INJECTION: forcing a failure. [ 61.479140][ T6490] name failslab, interval 1, probability 0, space 0, times 0 [ 61.480389][ T6488] ? trace_contention_end+0xee/0x140 [ 61.485623][ T6488] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 61.487553][ T6488] ? __pfx___mutex_lock+0x10/0x10 [ 61.489008][ T6488] ? __pfx___nla_validate_parse+0x10/0x10 [ 61.490648][ T6488] ? unregister_netdevice_queue+0x22f/0x3f0 [ 61.492342][ T6488] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 61.494130][ T6488] rtnl_dellink+0x3d7/0xaa0 [ 61.495434][ T6488] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 61.497218][ T6488] ? kasan_save_stack+0x42/0x60 [ 61.498616][ T6488] ? kasan_save_stack+0x33/0x60 [ 61.500039][ T6488] ? __pfx_rtnl_dellink+0x10/0x10 [ 61.501483][ T6488] ? kmem_cache_free+0x152/0x4c0 [ 61.502934][ T6488] ? hlock_class+0x4e/0x130 [ 61.504252][ T6488] ? aa_get_newest_label+0x376/0x680 [ 61.505789][ T6488] ? find_held_lock+0x2d/0x110 [ 61.507156][ T6488] ? find_held_lock+0x2d/0x110 [ 61.508529][ T6488] ? rtnetlink_rcv_msg+0x93a/0xea0 [ 61.510003][ T6488] ? __pfx_lock_release+0x10/0x10 [ 61.511439][ T6488] ? trace_lock_acquire+0x14e/0x1f0 [ 61.512929][ T6488] ? __pfx_rtnl_dellink+0x10/0x10 [ 61.514374][ T6488] rtnetlink_rcv_msg+0x95b/0xea0 [ 61.515798][ T6488] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 61.517394][ T6488] ? __pfx___dev_queue_xmit+0x10/0x10 [ 61.518975][ T6488] netlink_rcv_skb+0x165/0x410 [ 61.520367][ T6488] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 61.521937][ T6488] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 61.523451][ T6488] ? netlink_deliver_tap+0x1ae/0xca0 [ 61.524972][ T6488] netlink_unicast+0x53c/0x7f0 [ 61.526350][ T6488] ? __pfx_netlink_unicast+0x10/0x10 [ 61.527869][ T6488] ? __phys_addr_symbol+0x30/0x80 [ 61.529348][ T6488] ? __check_object_size+0x488/0x710 [ 61.530861][ T6488] netlink_sendmsg+0x8b8/0xd70 [ 61.532238][ T6488] ? __pfx_netlink_sendmsg+0x10/0x10 [ 61.533769][ T6488] ____sys_sendmsg+0x9ae/0xb40 [ 61.535148][ T6488] ? __pfx_____sys_sendmsg+0x10/0x10 [ 61.536666][ T6488] ? get_compat_msghdr+0x11b/0x170 [ 61.538143][ T6488] ___sys_sendmsg+0x135/0x1e0 [ 61.539518][ T6488] ? __pfx____sys_sendmsg+0x10/0x10 [ 61.541037][ T6488] ? __pfx_lock_release+0x10/0x10 [ 61.542483][ T6488] ? trace_lock_acquire+0x14e/0x1f0 [ 61.543951][ T6488] ? __fget_files+0x206/0x3a0 [ 61.545298][ T6488] __sys_sendmsg+0x16e/0x220 [ 61.546770][ T6488] ? __pfx___sys_sendmsg+0x10/0x10 [ 61.548280][ T6488] __do_fast_syscall_32+0x73/0x120 [ 61.549792][ T6488] do_fast_syscall_32+0x32/0x80 [ 61.551217][ T6488] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 61.553058][ T6488] RIP: 0023:0xf7f74579 [ 61.554263][ T6488] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 61.559872][ T6488] RSP: 002b:00000000f50c655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 61.562241][ T6488] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000240 [ 61.564516][ T6488] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 61.566784][ T6488] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 61.569070][ T6488] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 61.571275][ T6488] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 61.573578][ T6488] [ 61.574482][ T6490] CPU: 3 UID: 0 PID: 6490 Comm: syz.1.111 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 61.577857][ T6490] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 61.580952][ T6490] Call Trace: [ 61.581939][ T6490] [ 61.582815][ T6490] dump_stack_lvl+0x16c/0x1f0 [ 61.584181][ T6490] should_fail_ex+0x497/0x5b0 [ 61.585562][ T6490] ? fs_reclaim_acquire+0xae/0x150 [ 61.587041][ T6490] should_failslab+0xc2/0x120 [ 61.588404][ T6490] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 61.589966][ T6490] ? sk_prot_alloc+0x60/0x2a0 [ 61.591328][ T6490] sk_prot_alloc+0x60/0x2a0 [ 61.592651][ T6490] sk_alloc+0x36/0xb90 [ 61.593847][ T6490] inet_create+0x3a1/0x10a0 [ 61.595167][ T6490] ? inet_create+0x90/0x10a0 [ 61.596504][ T6490] __sock_create+0x335/0x8d0 [ 61.597860][ T6490] mptcp_subflow_create_socket+0xf6/0x10a0 [ 61.599562][ T6490] ? __pfx_mark_lock+0x10/0x10 [ 61.600959][ T6490] ? lock_acquire.part.0+0x11b/0x380 [ 61.602485][ T6490] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 61.604300][ T6490] ? find_held_lock+0x2d/0x110 [ 61.605704][ T6490] __mptcp_nmpc_sk+0x184/0x7d0 [ 61.607095][ T6490] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 61.608615][ T6490] ? __local_bh_enable_ip+0xa4/0x120 [ 61.610148][ T6490] mptcp_sendmsg+0x1693/0x1f20 [ 61.611521][ T6490] ? find_held_lock+0x2d/0x110 [ 61.612894][ T6490] ? __pfx___might_resched+0x10/0x10 [ 61.614422][ T6490] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 61.616113][ T6490] ? aa_sk_perm+0x2f5/0xb20 [ 61.617438][ T6490] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 61.618927][ T6490] ? __might_fault+0xe3/0x190 [ 61.620296][ T6490] ? __import_iovec+0x1f2/0x6d0 [ 61.621713][ T6490] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 61.623190][ T6490] inet_sendmsg+0x119/0x140 [ 61.624510][ T6490] ____sys_sendmsg+0x907/0xb40 [ 61.625910][ T6490] ? __pfx_____sys_sendmsg+0x10/0x10 [ 61.627436][ T6490] ? get_compat_msghdr+0x11b/0x170 [ 61.628922][ T6490] ___sys_sendmsg+0x135/0x1e0 [ 61.630243][ T6490] ? __pfx____sys_sendmsg+0x10/0x10 [ 61.631729][ T6490] ? __pfx_lock_release+0x10/0x10 [ 61.633169][ T6490] ? trace_lock_acquire+0x14e/0x1f0 [ 61.634614][ T6490] ? __fget_files+0x206/0x3a0 [ 61.635945][ T6490] __sys_sendmsg+0x16e/0x220 [ 61.637275][ T6490] ? __pfx___sys_sendmsg+0x10/0x10 [ 61.638709][ T6490] __do_fast_syscall_32+0x73/0x120 [ 61.640190][ T6490] do_fast_syscall_32+0x32/0x80 [ 61.641589][ T6490] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 61.643390][ T6490] RIP: 0023:0xf705e579 [ 61.644568][ T6490] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 61.650021][ T6490] RSP: 002b:00000000f505055c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 61.652388][ T6490] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020003080 [ 61.654635][ T6490] RDX: 000000002404c0c5 RSI: 0000000000000000 RDI: 0000000000000000 [ 61.657057][ T6490] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 61.659310][ T6490] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 61.661576][ T6490] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 61.663806][ T6490] [ 62.273875][ T6504] wg2: left promiscuous mode [ 62.275783][ T6504] wg2: left allmulticast mode [ 62.282780][ T6504] wg2: entered promiscuous mode [ 62.284773][ T6504] wg2: entered allmulticast mode [ 62.285956][ T6508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.116'. [ 62.289420][ T6508] netlink: 12 bytes leftover after parsing attributes in process `syz.2.116'. [ 62.707407][ T6520] ipvlan1: entered allmulticast mode [ 62.709016][ T6520] veth0_vlan: entered allmulticast mode [ 62.901027][ T6526] netlink: 4 bytes leftover after parsing attributes in process `syz.2.121'. [ 62.905820][ T6526] netlink: 173 bytes leftover after parsing attributes in process `syz.2.121'. [ 63.252597][ T30] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 63.402553][ T30] usb 8-1: device descriptor read/64, error -71 [ 63.692528][ T30] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 63.842637][ T30] usb 8-1: device descriptor read/64, error -71 [ 63.952712][ T30] usb usb8-port1: attempt power cycle [ 64.611586][ T6547] wg2: left promiscuous mode [ 64.612818][ T30] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 64.613048][ T6547] wg2: left allmulticast mode [ 64.615764][ T6550] blktrace: Concurrent blktraces are not allowed on nbd2 [ 64.625472][ T6547] wg2: entered promiscuous mode [ 64.626938][ T6547] wg2: entered allmulticast mode [ 64.633037][ T30] usb 8-1: device descriptor read/8, error -71 [ 64.909164][ T30] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 64.933291][ T30] usb 8-1: device descriptor read/8, error -71 [ 65.042986][ T30] usb usb8-port1: unable to enumerate USB device [ 66.249690][ T6591] wg2: left promiscuous mode [ 66.251162][ T6591] wg2: left allmulticast mode [ 66.252604][ T6589] nbd3: detected capacity change from 0 to 12 [ 66.255273][ T5923] block nbd3: Send control failed (result -89) [ 66.257579][ T5923] block nbd3: Request send failed, requeueing [ 66.260282][ T65] block nbd3: Receive control failed (result -32) [ 66.264192][ T54] block nbd3: Dead connection, failed to find a fallback [ 66.266841][ T6591] wg2: entered promiscuous mode [ 66.267098][ T54] block nbd3: shutting down sockets [ 66.268352][ T6591] wg2: entered allmulticast mode [ 66.270009][ T54] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 66.274549][ T54] Buffer I/O error on dev nbd3, logical block 0, async page read [ 66.276992][ T5923] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 66.279963][ T5923] Buffer I/O error on dev nbd3, logical block 0, async page read [ 66.282514][ T5923] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 66.285242][ T5923] Buffer I/O error on dev nbd3, logical block 0, async page read [ 66.287605][ T5923] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 66.290269][ T5923] Buffer I/O error on dev nbd3, logical block 0, async page read [ 66.292866][ T5923] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 66.295534][ T5923] Buffer I/O error on dev nbd3, logical block 0, async page read [ 66.297910][ T5923] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 66.300557][ T5923] Buffer I/O error on dev nbd3, logical block 0, async page read [ 66.303197][ T5923] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 66.305876][ T5923] Buffer I/O error on dev nbd3, logical block 0, async page read [ 66.308201][ T5923] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 66.310836][ T5923] Buffer I/O error on dev nbd3, logical block 0, async page read [ 66.313124][ T5923] ldm_validate_partition_table(): Disk read failed. [ 66.315224][ T5923] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 66.317856][ T5923] Buffer I/O error on dev nbd3, logical block 0, async page read [ 66.320712][ T5923] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 66.323407][ T5923] Buffer I/O error on dev nbd3, logical block 0, async page read [ 66.325838][ T5923] Dev nbd3: unable to read RDB block 0 [ 66.328172][ T5923] nbd3: unable to read partition table [ 66.329847][ T5923] nbd3: partition table beyond EOD, truncated [ 66.381691][ T5923] ldm_validate_partition_table(): Disk read failed. [ 66.384076][ T5923] Dev nbd3: unable to read RDB block 0 [ 66.385836][ T5923] nbd3: unable to read partition table [ 66.387580][ T5923] nbd3: partition table beyond EOD, truncated [ 66.771636][ T6597] fuse: Bad value for 'group_id' [ 66.775310][ T6597] fuse: Bad value for 'group_id' [ 68.761637][ T6637] wg2: left promiscuous mode [ 68.763152][ T6637] wg2: left allmulticast mode [ 68.772245][ T6637] wg2: entered promiscuous mode [ 68.773919][ T6637] wg2: entered allmulticast mode [ 69.042647][ T5933] usb 8-1: new low-speed USB device number 10 using dummy_hcd [ 69.202683][ T5933] usb 8-1: Invalid ep0 maxpacket: 16 [ 69.212178][ T6639] trusted_key: encrypted_key: insufficient parameters specified [ 69.342529][ T5933] usb 8-1: new low-speed USB device number 11 using dummy_hcd [ 69.493092][ T5933] usb 8-1: Invalid ep0 maxpacket: 16 [ 69.494814][ T5933] usb usb8-port1: attempt power cycle [ 69.842542][ T5933] usb 8-1: new low-speed USB device number 12 using dummy_hcd [ 69.873644][ T5933] usb 8-1: Invalid ep0 maxpacket: 16 [ 70.039910][ T5933] usb 8-1: new low-speed USB device number 13 using dummy_hcd [ 70.062988][ T5933] usb 8-1: Invalid ep0 maxpacket: 16 [ 70.064722][ T5933] usb usb8-port1: unable to enumerate USB device [ 70.793113][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.795050][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.090436][ T6673] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 71.263904][ T6677] wg2: left promiscuous mode [ 71.265373][ T6677] wg2: left allmulticast mode [ 71.274001][ T6677] wg2: entered promiscuous mode [ 71.275489][ T6677] wg2: entered allmulticast mode [ 71.372586][ T56] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 71.526687][ T56] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 71.533884][ T56] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 71.537495][ T56] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.540707][ T56] usb 6-1: Product: syz [ 71.542026][ T56] usb 6-1: Manufacturer: syz [ 71.543496][ T56] usb 6-1: SerialNumber: syz [ 71.546238][ T6675] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 71.757029][ T56] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 71.763087][ T56] usb 6-1: USB disconnect, device number 10 [ 72.202782][ T56] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 72.225521][ T6689] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:0 [ 72.362577][ T56] usb 6-1: Using ep0 maxpacket: 8 [ 72.366320][ T56] usb 6-1: config index 0 descriptor too short (expected 301, got 72) [ 72.368806][ T56] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 72.371861][ T56] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 72.378044][ T56] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 72.382260][ T56] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.386989][ T56] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2007, setting to 1024 [ 72.391370][ T56] usb 6-1: config 16 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 3 [ 72.396682][ T56] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 72.400281][ T56] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.406422][ T6675] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 72.619158][ T56] usb 6-1: usb_control_msg returned -32 [ 72.621119][ T56] usbtmc 6-1:16.0: can't read capabilities [ 72.755055][ T6698] overlayfs: failed to resolve './file0': -2 [ 73.235075][ T6705] can0: slcan on ttyS3. [ 73.235606][ T6706] netlink: 96 bytes leftover after parsing attributes in process `syz.0.169'. [ 73.241646][ T65] block nbd0: Receive control failed (result -32) [ 73.244936][ T6704] block nbd0: shutting down sockets [ 73.320667][ T6715] netlink: 20 bytes leftover after parsing attributes in process `syz.2.168'. [ 73.933202][ T6700] can0 (unregistered): slcan off ttyS3. [ 74.147671][ T56] usb 6-1: USB disconnect, device number 11 [ 74.270909][ T6746] wg2: left promiscuous mode [ 74.272281][ T6746] wg2: left allmulticast mode [ 74.280568][ T6746] wg2: entered promiscuous mode [ 74.282085][ T6746] wg2: entered allmulticast mode [ 74.752184][ T6755] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 74.874719][ T6756] fuse: Bad value for 'fd' [ 75.242662][ T6767] fuse: Bad value for 'user_id' [ 75.244219][ T6767] fuse: Bad value for 'user_id' [ 75.522663][ T6775] netlink: 16 bytes leftover after parsing attributes in process `syz.1.183'. [ 76.490861][ T6793] wg2: entered promiscuous mode [ 76.493064][ T6793] wg2: entered allmulticast mode [ 76.795996][ T6799] input: syz1 as /devices/virtual/input/input5 [ 76.805266][ T6799] FAULT_INJECTION: forcing a failure. [ 76.805266][ T6799] name failslab, interval 1, probability 0, space 0, times 0 [ 76.809211][ T6799] CPU: 2 UID: 0 PID: 6799 Comm: syz.2.189 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 76.812255][ T6799] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.815328][ T6799] Call Trace: [ 76.816291][ T6799] [ 76.817161][ T6799] dump_stack_lvl+0x16c/0x1f0 [ 76.818551][ T6799] should_fail_ex+0x497/0x5b0 [ 76.819912][ T6799] ? fs_reclaim_acquire+0xae/0x150 [ 76.821401][ T6799] should_failslab+0xc2/0x120 [ 76.822806][ T6799] __kmalloc_cache_noprof+0x68/0x420 [ 76.824314][ T6799] ? do_raw_spin_lock+0x12d/0x2c0 [ 76.825764][ T6799] ? create_io_worker+0x49/0x5f0 [ 76.827184][ T6799] create_io_worker+0xcc/0x5f0 [ 76.828588][ T6799] create_worker_cb+0x200/0x260 [ 76.830012][ T6799] task_work_run+0x14e/0x250 [ 76.831359][ T6799] ? __pfx_task_work_run+0x10/0x10 [ 76.832884][ T6799] get_signal+0x1d3/0x2610 [ 76.834181][ T6799] ? find_held_lock+0x2d/0x110 [ 76.835561][ T6799] ? __pfx_lock_release+0x10/0x10 [ 76.837009][ T6799] ? __pfx_get_signal+0x10/0x10 [ 76.838487][ T6799] arch_do_signal_or_restart+0x90/0x7e0 [ 76.840145][ T6799] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 76.841942][ T6799] ? __pfx_do_readv+0x10/0x10 [ 76.843317][ T6799] syscall_exit_to_user_mode+0x150/0x2a0 [ 76.844927][ T6799] do_int80_emulation+0x111/0x200 [ 76.846360][ T6799] asm_int80_emulation+0x1a/0x20 [ 76.847787][ T6799] RIP: 0023:0xf70fe579 [ 76.849039][ T6799] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 76.854506][ T6799] RSP: 002b:00000000f50f055c EFLAGS: 00000296 ORIG_RAX: 0000000000000091 [ 76.856890][ T6799] RAX: fffffffffffffe00 RBX: 0000000000000004 RCX: 0000000020000080 [ 76.859364][ T6799] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 76.861648][ T6799] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 76.864216][ T6799] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 76.866504][ T6799] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 76.868793][ T6799] [ 77.004482][ T6816] input: syz1 as /devices/virtual/input/input6 [ 77.094231][ T6825] netlink: 12 bytes leftover after parsing attributes in process `syz.0.190'. [ 77.106282][ T6825] netlink: 'syz.0.190': attribute type 12 has an invalid length. [ 77.819401][ T6868] 9pnet_fd: Insufficient options for proto=fd [ 77.877599][ T6870] mkiss: ax0: crc mode is auto. [ 78.052114][ T6875] netlink: del zone limit has 4 unknown bytes [ 78.302260][ T6887] program syz.2.200 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 78.735451][ T6893] wg2: left promiscuous mode [ 78.737007][ T6893] wg2: left allmulticast mode [ 78.746342][ T6893] wg2: entered promiscuous mode [ 78.747883][ T6893] wg2: entered allmulticast mode [ 79.366413][ T6905] netlink: 40 bytes leftover after parsing attributes in process `syz.0.204'. [ 79.376485][ T6905] syz.0.204 uses obsolete (PF_INET,SOCK_PACKET) [ 80.032002][ T6896] uprobe: syz.3.202:6896 failed to unregister, leaking uprobe [ 80.064974][ T40] audit: type=1326 audit(1737287128.196:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6896 comm="syz.3.202" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x7fc00000 [ 80.072602][ T40] audit: type=1326 audit(1737287128.196:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6896 comm="syz.3.202" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f74579 code=0x7fc00000 [ 80.079483][ T40] audit: type=1326 audit(1737287128.196:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6896 comm="syz.3.202" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x7fc00000 [ 80.086582][ T40] audit: type=1326 audit(1737287128.196:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6896 comm="syz.3.202" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x7fc00000 [ 80.093323][ T40] audit: type=1326 audit(1737287128.196:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6896 comm="syz.3.202" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x7fc00000 [ 80.099414][ T40] audit: type=1326 audit(1737287128.196:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6896 comm="syz.3.202" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x7fc00000 [ 80.108738][ T40] audit: type=1326 audit(1737287128.196:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6896 comm="syz.3.202" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x7fc00000 [ 80.115116][ T40] audit: type=1326 audit(1737287128.196:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6896 comm="syz.3.202" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x7fc00000 [ 80.118048][ T6919] FAULT_INJECTION: forcing a failure. [ 80.118048][ T6919] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.121209][ T40] audit: type=1326 audit(1737287128.196:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6896 comm="syz.3.202" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x7fc00000 [ 80.125198][ T6919] CPU: 1 UID: 0 PID: 6919 Comm: syz.2.207 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 80.131636][ T40] audit: type=1326 audit(1737287128.196:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6896 comm="syz.3.202" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74579 code=0x7fc00000 [ 80.134038][ T6919] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 80.134048][ T6919] Call Trace: [ 80.134053][ T6919] [ 80.134057][ T6919] dump_stack_lvl+0x16c/0x1f0 [ 80.134076][ T6919] should_fail_ex+0x497/0x5b0 [ 80.134092][ T6919] _copy_from_iter+0x29b/0x1400 [ 80.134107][ T6919] ? trace_lock_acquire+0x14e/0x1f0 [ 80.139072][ T6921] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 80.154104][ T6919] ? __alloc_skb+0x200/0x380 [ 80.155453][ T6919] ? __pfx__copy_from_iter+0x10/0x10 [ 80.157014][ T6919] ? __virt_addr_valid+0x1a4/0x590 [ 80.158505][ T6919] ? __virt_addr_valid+0x5e/0x590 [ 80.159978][ T6919] ? __phys_addr_symbol+0x30/0x80 [ 80.161463][ T6919] ? __check_object_size+0x488/0x710 [ 80.163030][ T6919] netlink_sendmsg+0x813/0xd70 [ 80.164421][ T6919] ? __pfx_netlink_sendmsg+0x10/0x10 [ 80.166083][ T6919] ____sys_sendmsg+0x9ae/0xb40 [ 80.167507][ T6919] ? __pfx_____sys_sendmsg+0x10/0x10 [ 80.169076][ T6919] ? get_compat_msghdr+0x11b/0x170 [ 80.170585][ T6919] ___sys_sendmsg+0x135/0x1e0 [ 80.171972][ T6919] ? __pfx____sys_sendmsg+0x10/0x10 [ 80.173517][ T6919] ? __pfx_lock_release+0x10/0x10 [ 80.174992][ T6919] ? trace_lock_acquire+0x14e/0x1f0 [ 80.176495][ T6919] ? __fget_files+0x206/0x3a0 [ 80.177878][ T6919] __sys_sendmsg+0x16e/0x220 [ 80.179253][ T6919] ? __pfx___sys_sendmsg+0x10/0x10 [ 80.180749][ T6919] __do_fast_syscall_32+0x73/0x120 [ 80.182286][ T6919] do_fast_syscall_32+0x32/0x80 [ 80.183702][ T6919] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 80.185531][ T6919] RIP: 0023:0xf70fe579 [ 80.186720][ T6919] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 80.192180][ T6919] RSP: 002b:00000000f50f055c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 80.194570][ T6919] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020000780 [ 80.196850][ T6919] RDX: 0000000004000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 80.199152][ T6919] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 80.201471][ T6919] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 80.203738][ T6919] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 80.205985][ T6919] [ 80.313979][ T6923] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 80.345941][ T6923] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 80.352369][ T6923] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.699132][ T6942] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 81.014012][ T832] cfg80211: failed to load regulatory.db [ 81.073000][ T5935] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.076709][ T5935] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.079280][ T5935] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.082104][ T5935] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.084747][ T5935] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 81.087750][ T5935] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.287703][ T6949] chnl_net:caif_netlink_parms(): no params data found [ 81.361911][ T6949] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.364098][ T6949] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.366230][ T6949] bridge_slave_0: entered allmulticast mode [ 81.368397][ T6949] bridge_slave_0: entered promiscuous mode [ 81.371147][ T6949] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.375426][ T6949] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.377524][ T6949] bridge_slave_1: entered allmulticast mode [ 81.379692][ T6949] bridge_slave_1: entered promiscuous mode [ 81.400371][ T6949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.406400][ T6949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.435576][ T6949] team0: Port device team_slave_0 added [ 81.439256][ T6949] team0: Port device team_slave_1 added [ 81.457365][ T6949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.459429][ T6949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.467285][ T6949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.471063][ T6949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.473251][ T6949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.480666][ T6949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.503296][ T6949] hsr_slave_0: entered promiscuous mode [ 81.505421][ T6949] hsr_slave_1: entered promiscuous mode [ 81.507397][ T6949] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.509612][ T6949] Cannot create hsr debugfs directory [ 81.587451][ T6949] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.591552][ T6949] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.596560][ T6949] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.601058][ T6949] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.614108][ T6949] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.616262][ T6949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.618426][ T6949] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.620468][ T6949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.645658][ T6949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.661236][ T6315] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.672383][ T6315] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.683758][ T6949] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.693263][ T6302] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.695295][ T6302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.703040][ T6315] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.705106][ T6315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.795302][ T6949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.883083][ T6949] veth0_vlan: entered promiscuous mode [ 81.887722][ T6949] veth1_vlan: entered promiscuous mode [ 81.900500][ T6949] veth0_macvtap: entered promiscuous mode [ 81.905959][ T6949] veth1_macvtap: entered promiscuous mode [ 81.912275][ T6949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.917861][ T6949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.920695][ T6949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.927162][ T6949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.930705][ T6949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.933899][ T6949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.937464][ T6949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.939991][ T6980] IPv6: Can't replace route, no match found [ 81.951276][ T6980] ======================================================= [ 81.951276][ T6980] WARNING: The mand mount option has been deprecated and [ 81.951276][ T6980] and is ignored by this kernel. Remove the mand [ 81.951276][ T6980] option from the mount to silence this warning. [ 81.951276][ T6980] ======================================================= [ 81.951688][ T6949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.964482][ T6949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.967278][ T6949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.971093][ T6949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.974009][ T6949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.976905][ T6949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.981264][ T6949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.985739][ T6949] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.988351][ T6949] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.990883][ T6949] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.993840][ T6949] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.015278][ T6299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.017560][ T6299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.030597][ T6315] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.033947][ T6315] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.172627][ T5935] Bluetooth: hci1: command tx timeout [ 83.437857][ T7022] ipvlan1: entered allmulticast mode [ 83.439842][ T7022] veth0_vlan: entered allmulticast mode [ 84.173687][ T6747] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 84.322496][ T6747] usb 9-1: device descriptor read/64, error -71 [ 84.844040][ T6747] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 85.072672][ T6747] usb 9-1: device descriptor read/64, error -71 [ 85.197971][ T6747] usb usb9-port1: attempt power cycle [ 85.254240][ T5935] Bluetooth: hci1: command tx timeout [ 85.573207][ T6747] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 85.592946][ T6747] usb 9-1: device descriptor read/8, error -71 [ 85.942567][ T6747] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 85.963008][ T6747] usb 9-1: device descriptor read/8, error -71 [ 86.073384][ T6747] usb usb9-port1: unable to enumerate USB device [ 86.664290][ T7074] [ 86.665119][ T7074] ====================================================== [ 86.667213][ T7074] WARNING: possible circular locking dependency detected [ 86.669302][ T7074] 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 Not tainted [ 86.672313][ T7074] ------------------------------------------------------ [ 86.674959][ T7074] syz.1.240/7074 is trying to acquire lock: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 86.676600][ T7074] ffff8880428894c0 (mapping.invalidate_lock#2){.+.+}-{4:4}, at: page_cache_ra_unbounded+0x173/0x750 [ 86.680081][ T7074] [ 86.680081][ T7074] but task is already holding lock: [ 86.682201][ T7074] ffff888021a44620 (&mm->mmap_lock){++++}-{4:4}, at: get_dump_page+0xb6/0x230 [ 86.684916][ T7074] [ 86.684916][ T7074] which lock already depends on the new lock. [ 86.684916][ T7074] [ 86.687872][ T7074] [ 86.687872][ T7074] the existing dependency chain (in reverse order) is: [ 86.690435][ T7074] [ 86.690435][ T7074] -> #5 (&mm->mmap_lock){++++}-{4:4}: [ 86.692572][ T7074] __might_fault+0x11b/0x190 [ 86.694038][ T7074] _copy_from_user+0x29/0xd0 [ 86.695493][ T7074] compat_blk_trace_setup+0xc9/0x200 [ 86.697150][ T7074] blk_trace_ioctl+0x24a/0x290 [ 86.698622][ T7074] compat_blkdev_ioctl+0x13c/0x750 [ 86.700957][ T7074] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 86.702657][ T7074] __do_fast_syscall_32+0x73/0x120 [ 86.704240][ T7074] do_fast_syscall_32+0x32/0x80 [ 86.705759][ T7074] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 86.707635][ T7074] [ 86.707635][ T7074] -> #4 (&q->debugfs_mutex){+.+.}-{4:4}: [ 86.709849][ T7074] __mutex_lock+0x19b/0xa60 [ 86.711257][ T7074] blk_mq_init_sched+0x42b/0x640 [ 86.712795][ T7074] elevator_init_mq+0x2cd/0x420 [ 86.714309][ T7074] add_disk_fwnode+0x113/0x1300 [ 86.715830][ T7074] sd_probe+0xa66/0xfa0 [ 86.717156][ T7074] really_probe+0x23e/0xa90 [ 86.718605][ T7074] __driver_probe_device+0x1de/0x440 [ 86.720227][ T7074] driver_probe_device+0x4c/0x1b0 [ 86.721784][ T7074] __device_attach_driver+0x1df/0x310 [ 86.723475][ T7074] bus_for_each_drv+0x157/0x1e0 [ 86.724978][ T7074] __device_attach_async_helper+0x1d3/0x290 [ 86.726688][ T7074] async_run_entry_fn+0x9c/0x530 [ 86.728179][ T7074] process_one_work+0x958/0x1b30 [ 86.729693][ T7074] worker_thread+0x6c8/0xf00 [ 86.731096][ T7074] kthread+0x2c1/0x3a0 [ 86.732400][ T7074] ret_from_fork+0x45/0x80 [ 86.733830][ T7074] ret_from_fork_asm+0x1a/0x30 [ 86.735316][ T7074] [ 86.735316][ T7074] -> #3 (&q->q_usage_counter(queue)#51){++++}-{0:0}: [ 86.737785][ T7074] blk_queue_enter+0x50f/0x640 [ 86.739274][ T7074] blk_mq_alloc_request+0x59b/0x950 [ 86.740924][ T7074] scsi_execute_cmd+0x20a/0xf30 [ 86.742338][ T7074] read_capacity_16+0x21a/0xe20 [ 86.743721][ T7074] sd_revalidate_disk.isra.0+0x1a06/0xa8d0 [ 86.745512][ T7074] sd_probe+0x8ee/0xfa0 [ 86.746823][ T7074] really_probe+0x23e/0xa90 [ 86.748228][ T7074] __driver_probe_device+0x1de/0x440 [ 86.749888][ T7074] driver_probe_device+0x4c/0x1b0 [ 86.751418][ T7074] __device_attach_driver+0x1df/0x310 [ 86.753136][ T7074] bus_for_each_drv+0x157/0x1e0 [ 86.754651][ T7074] __device_attach_async_helper+0x1d3/0x290 [ 86.756458][ T7074] async_run_entry_fn+0x9c/0x530 [ 86.757999][ T7074] process_one_work+0x958/0x1b30 [ 86.759542][ T7074] worker_thread+0x6c8/0xf00 [ 86.760945][ T7074] kthread+0x2c1/0x3a0 [ 86.762256][ T7074] ret_from_fork+0x45/0x80 [ 86.763651][ T7074] ret_from_fork_asm+0x1a/0x30 [ 86.765104][ T7074] [ 86.765104][ T7074] -> #2 (&q->limits_lock){+.+.}-{4:4}: [ 86.767209][ T7074] __mutex_lock+0x19b/0xa60 [ 86.768621][ T7074] __nbd_set_size+0x2c0/0x730 [ 86.770071][ T7074] nbd_start_device+0x8fd/0xd70 [ 86.771542][ T7074] nbd_ioctl+0x21a/0xfd0 [ 86.772928][ T7074] compat_blkdev_ioctl+0x2f7/0x750 [ 86.774513][ T7074] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 86.776153][ T7074] __do_fast_syscall_32+0x73/0x120 [ 86.777741][ T7074] do_fast_syscall_32+0x32/0x80 [ 86.779255][ T7074] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 86.781193][ T7074] [ 86.781193][ T7074] -> #1 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 86.784013][ T7074] blk_mq_submit_bio+0x1fb6/0x24c0 [ 86.785570][ T7074] __submit_bio+0x384/0x540 [ 86.787012][ T7074] submit_bio_noacct_nocheck+0x698/0xd70 [ 86.788793][ T7074] submit_bio_noacct+0x93a/0x1e20 [ 86.790402][ T7074] block_read_full_folio+0x812/0xa50 [ 86.792092][ T7074] filemap_read_folio+0xc6/0x2a0 [ 86.793693][ T7074] filemap_get_pages+0x155f/0x1be0 [ 86.795295][ T7074] filemap_read+0x3ca/0xd70 [ 86.796716][ T7074] blkdev_read_iter+0x187/0x480 [ 86.798234][ T7074] vfs_read+0x87f/0xbe0 [ 86.799624][ T7074] ksys_read+0x12b/0x250 [ 86.801010][ T7074] do_syscall_64+0xcd/0x250 [ 86.802469][ T7074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.804309][ T7074] [ 86.804309][ T7074] -> #0 (mapping.invalidate_lock#2){.+.+}-{4:4}: [ 86.806638][ T7074] __lock_acquire+0x249e/0x3c40 [ 86.808145][ T7074] lock_acquire.part.0+0x11b/0x380 [ 86.809735][ T7074] down_read+0x9a/0x330 [ 86.811095][ T7074] page_cache_ra_unbounded+0x173/0x750 [ 86.812828][ T7074] page_cache_ra_order+0x8f2/0xc80 [ 86.814420][ T7074] page_cache_async_ra+0x5cb/0x8a0 [ 86.815997][ T7074] filemap_fault+0xd69/0x2820 [ 86.817456][ T7074] __do_fault+0x10a/0x490 [ 86.818873][ T7074] do_pte_missing+0xebd/0x3e00 [ 86.820400][ T7074] __handle_mm_fault+0x103c/0x2a40 [ 86.822031][ T7074] handle_mm_fault+0x3fa/0xaa0 [ 86.823594][ T7074] __get_user_pages+0x8d9/0x3b50 [ 86.825168][ T7074] get_dump_page+0xff/0x230 [ 86.826597][ T7074] dump_user_range+0x135/0x8c0 [ 86.828027][ T7074] elf_core_dump+0x2baa/0x3df0 [ 86.829512][ T7074] do_coredump+0x2dd5/0x43e0 [ 86.830937][ T7074] get_signal+0x23f3/0x2610 [ 86.832284][ T7074] arch_do_signal_or_restart+0x90/0x7e0 [ 86.833997][ T7074] syscall_exit_to_user_mode+0x150/0x2a0 [ 86.835669][ T7074] __do_fast_syscall_32+0x80/0x120 [ 86.837201][ T7074] do_fast_syscall_32+0x32/0x80 [ 86.838735][ T7074] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 86.840709][ T7074] [ 86.840709][ T7074] other info that might help us debug this: [ 86.840709][ T7074] [ 86.843639][ T7074] Chain exists of: [ 86.843639][ T7074] mapping.invalidate_lock#2 --> &q->debugfs_mutex --> &mm->mmap_lock [ 86.843639][ T7074] [ 86.847551][ T7074] Possible unsafe locking scenario: [ 86.847551][ T7074] [ 86.849714][ T7074] CPU0 CPU1 [ 86.851258][ T7074] ---- ---- [ 86.852839][ T7074] rlock(&mm->mmap_lock); [ 86.854113][ T7074] lock(&q->debugfs_mutex); [ 86.856062][ T7074] lock(&mm->mmap_lock); [ 86.857930][ T7074] rlock(mapping.invalidate_lock#2); [ 86.859438][ T7074] [ 86.859438][ T7074] *** DEADLOCK *** [ 86.859438][ T7074] [ 86.861656][ T7074] 2 locks held by syz.1.240/7074: [ 86.863100][ T7074] #0: ffff888066c10420 (sb_writers#5){.+.+}-{0:0}, at: get_signal+0x23f3/0x2610 [ 86.865515][ T7074] #1: ffff888021a44620 (&mm->mmap_lock){++++}-{4:4}, at: get_dump_page+0xb6/0x230 [ 86.868083][ T7074] [ 86.868083][ T7074] stack backtrace: [ 86.869749][ T7074] CPU: 0 UID: 0 PID: 7074 Comm: syz.1.240 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 86.872638][ T7074] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.875665][ T7074] Call Trace: [ 86.876632][ T7074] [ 86.877500][ T7074] dump_stack_lvl+0x116/0x1f0 [ 86.878829][ T7074] print_circular_bug+0x41c/0x610 [ 86.880220][ T7074] check_noncircular+0x31a/0x400 [ 86.881643][ T7074] ? __pfx_check_noncircular+0x10/0x10 [ 86.883196][ T7074] ? hlock_class+0x4e/0x130 [ 86.884530][ T7074] ? mark_lock+0xb5/0xc60 [ 86.885788][ T7074] ? lockdep_lock+0xc6/0x200 [ 86.887099][ T7074] ? __pfx_lockdep_lock+0x10/0x10 [ 86.888501][ T7074] ? mark_lock+0xb5/0xc60 [ 86.889718][ T7074] __lock_acquire+0x249e/0x3c40 [ 86.891114][ T7074] ? __pfx___lock_acquire+0x10/0x10 [ 86.892608][ T7074] ? hlock_class+0x4e/0x130 [ 86.893895][ T7074] lock_acquire.part.0+0x11b/0x380 [ 86.895348][ T7074] ? page_cache_ra_unbounded+0x173/0x750 [ 86.896960][ T7074] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 86.898541][ T7074] ? rcu_is_watching+0x12/0xc0 [ 86.899901][ T7074] ? trace_lock_acquire+0x14e/0x1f0 [ 86.901396][ T7074] ? __lock_acquire+0xcc5/0x3c40 [ 86.902828][ T7074] ? page_cache_ra_unbounded+0x173/0x750 [ 86.904389][ T7074] ? lock_acquire+0x2f/0xb0 [ 86.905698][ T7074] ? page_cache_ra_unbounded+0x173/0x750 [ 86.907259][ T7074] down_read+0x9a/0x330 [ 86.908410][ T7074] ? page_cache_ra_unbounded+0x173/0x750 [ 86.909993][ T7074] ? __pfx_down_read+0x10/0x10 [ 86.911360][ T7074] ? __pfx___lock_acquire+0x10/0x10 [ 86.912849][ T7074] page_cache_ra_unbounded+0x173/0x750 [ 86.914364][ T7074] page_cache_ra_order+0x8f2/0xc80 [ 86.915772][ T7074] page_cache_async_ra+0x5cb/0x8a0 [ 86.917250][ T7074] filemap_fault+0xd69/0x2820 [ 86.918604][ T7074] ? __pfx_filemap_fault+0x10/0x10 [ 86.920087][ T7074] ? do_pte_missing+0xdd7/0x3e00 [ 86.921494][ T7074] ? __pfx_lock_release+0x10/0x10 [ 86.922928][ T7074] __do_fault+0x10a/0x490 [ 86.924144][ T7074] do_pte_missing+0xebd/0x3e00 [ 86.925486][ T7074] __handle_mm_fault+0x103c/0x2a40 [ 86.926898][ T7074] ? find_held_lock+0x2d/0x110 [ 86.928230][ T7074] ? __pfx___handle_mm_fault+0x10/0x10 [ 86.929719][ T7074] ? follow_page_pte+0x3c3/0x1b20 [ 86.931146][ T7074] ? __pfx_lock_release+0x10/0x10 [ 86.932584][ T7074] ? follow_page_pte+0x3f7/0x1b20 [ 86.934029][ T7074] handle_mm_fault+0x3fa/0xaa0 [ 86.935401][ T7074] __get_user_pages+0x8d9/0x3b50 [ 86.936785][ T7074] ? __pfx___get_user_pages+0x10/0x10 [ 86.938297][ T7074] ? down_read_killable+0xcc/0x380 [ 86.939758][ T7074] ? __pfx_down_read_killable+0x10/0x10 [ 86.941303][ T7074] ? shmem_file_write_iter+0xcf/0x140 [ 86.942786][ T7074] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 86.944447][ T7074] ? __kernel_write_iter+0x59f/0xa80 [ 86.945879][ T7074] get_dump_page+0xff/0x230 [ 86.947148][ T7074] ? __pfx_get_dump_page+0x10/0x10 [ 86.948629][ T7074] ? __pfx___might_resched+0x10/0x10 [ 86.950027][ T7074] ? copy_mc_enhanced_fast_string+0xa/0x13 [ 86.951618][ T7074] dump_user_range+0x135/0x8c0 [ 86.952924][ T7074] ? __pfx_dump_user_range+0x10/0x10 [ 86.954326][ T7074] ? elf_coredump_extra_notes_write+0xbe/0x430 [ 86.956040][ T7074] ? __pfx_writenote+0x10/0x10 [ 86.957382][ T7074] elf_core_dump+0x2baa/0x3df0 [ 86.958659][ T7074] ? __pfx_elf_core_dump+0x10/0x10 [ 86.960140][ T7074] ? __kasan_kmalloc+0xaa/0xb0 [ 86.961524][ T7074] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 86.963012][ T7074] ? do_coredump+0x1665/0x43e0 [ 86.964268][ T7074] ? get_signal+0x23f3/0x2610 [ 86.965520][ T7074] ? syscall_exit_to_user_mode+0x150/0x2a0 [ 86.967044][ T7074] ? __do_fast_syscall_32+0x80/0x120 [ 86.968418][ T7074] ? do_fast_syscall_32+0x32/0x80 [ 86.969877][ T7074] ? rcu_is_watching+0x12/0xc0 [ 86.971207][ T7074] ? trace_lock_acquire+0x14e/0x1f0 [ 86.972663][ T7074] ? __pfx_sort+0x10/0x10 [ 86.973918][ T7074] ? get_signal+0x23f3/0x2610 [ 86.975215][ T7074] ? do_coredump+0x2dd5/0x43e0 [ 86.976496][ T7074] do_coredump+0x2dd5/0x43e0 [ 86.977746][ T7074] ? __pfx_do_coredump+0x10/0x10 [ 86.979102][ T7074] ? syscall_exit_to_user_mode+0x150/0x2a0 [ 86.980723][ T7074] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 86.982544][ T7074] get_signal+0x23f3/0x2610 [ 86.983843][ T7074] ? __pfx_get_signal+0x10/0x10 [ 86.985223][ T7074] ? rcu_is_watching+0x12/0xc0 [ 86.986620][ T7074] ? __local_bh_enable_ip+0xa4/0x120 [ 86.988112][ T7074] arch_do_signal_or_restart+0x90/0x7e0 [ 86.989667][ T7074] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 86.991353][ T7074] syscall_exit_to_user_mode+0x150/0x2a0 [ 86.992942][ T7074] __do_fast_syscall_32+0x80/0x120 [ 86.994388][ T7074] do_fast_syscall_32+0x32/0x80 [ 86.995748][ T7074] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 86.997467][ T7074] RIP: 0023:0xf707d280 [ 86.998680][ T7074] Code: 8a dc 15 b6 00 c3 8d 82 7a 8d ea ff 57 56 50 8d 82 87 8d ea ff 50 e8 8f f7 ff ff 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 90 <53> e8 1a e1 ff ff 81 c3 6e 6d 31 00 83 ec 18 65 a1 c8 ff ff ff 85 [ 87.004095][ T7074] RSP: 002b:00000000f504f9fc EFLAGS: 00000296 ORIG_RAX: 00000000000000f0 [ 87.006371][ T7074] RAX: 000000000000000b RBX: 00000000f73c4f88 RCX: 00000000f504fa8c [ 87.008568][ T7074] RDX: 00000000f504fa0c RSI: 0000000000000000 RDI: 00000000f73c4f8c [ 87.010790][ T7074] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 87.012983][ T7074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.015151][ T7074] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 87.017327][ T7074] [ 87.387139][ T6299] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.480960][ T6299] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.567330][ T6299] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.645665][ T6299] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.725844][ T6299] bridge_slave_1: left allmulticast mode [ 87.727951][ T6299] bridge_slave_1: left promiscuous mode [ 87.729842][ T6299] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.732642][ T6299] bridge_slave_0: left allmulticast mode [ 87.734297][ T6299] bridge_slave_0: left promiscuous mode [ 87.735951][ T6299] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.845425][ T6299] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.848517][ T6299] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.851405][ T6299] bond0 (unregistering): Released all slaves [ 88.156429][ T6299] hsr_slave_0: left promiscuous mode [ 88.159030][ T6299] hsr_slave_1: left promiscuous mode [ 88.161735][ T6299] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.164922][ T6299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.168256][ T6299] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.171239][ T6299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.176880][ T6299] veth1_macvtap: left promiscuous mode [ 88.178558][ T6299] veth0_macvtap: left promiscuous mode [ 88.180165][ T6299] veth1_vlan: left promiscuous mode [ 88.181718][ T6299] veth0_vlan: left promiscuous mode [ 88.306674][ T6299] team0 (unregistering): Port device team_slave_1 removed [ 88.336467][ T6299] team0 (unregistering): Port device team_slave_0 removed [ 88.847699][ T6299] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.907218][ T6299] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.976322][ T6299] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.038447][ T6299] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.143172][ T6299] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.195433][ T6299] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.255307][ T6299] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.326260][ T6299] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.408273][ T6299] bridge_slave_1: left allmulticast mode [ 89.410567][ T6299] bridge_slave_1: left promiscuous mode [ 89.413664][ T6299] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.417386][ T6299] bridge_slave_0: left allmulticast mode [ 89.419458][ T6299] bridge_slave_0: left promiscuous mode [ 89.421735][ T6299] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.767697][ T6299] bond0 (unregistering): Released all slaves [ 89.773648][ T6299] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.778175][ T6299] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.782162][ T6299] bond0 (unregistering): Released all slaves [ 89.864691][ T6299] tipc: Disabling bearer [ 89.870834][ T6299] tipc: Left network mode [ 90.177004][ T6299] hsr_slave_0: left promiscuous mode [ 90.179368][ T6299] hsr_slave_1: left promiscuous mode [ 90.183253][ T6299] hsr_slave_0: left promiscuous mode [ 90.185654][ T6299] hsr_slave_1: left promiscuous mode [ 90.187938][ T6299] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.190706][ T6299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.194286][ T6299] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.197000][ T6299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.201457][ T6299] veth1_macvtap: left promiscuous mode [ 90.203710][ T6299] veth0_macvtap: left promiscuous mode [ 90.205788][ T6299] veth1_vlan: left promiscuous mode [ 90.207824][ T6299] veth0_vlan: left promiscuous mode [ 90.210924][ T6299] veth1_macvtap: left promiscuous mode [ 90.212846][ T6299] veth0_macvtap: left promiscuous mode [ 90.214454][ T6299] veth1_vlan: left promiscuous mode [ 90.215965][ T6299] veth0_vlan: left promiscuous mode [ 90.269831][ T6299] team0 (unregistering): Port device vlan0 removed [ 90.853628][ T6299] team0 (unregistering): Port device team_slave_1 removed [ 90.881511][ T6299] team0 (unregistering): Port device team_slave_0 removed VM DIAGNOSIS: 11:45:34 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000066 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85146355 RDI=ffffffff9a66e200 RBP=ffffffff9a66e1c0 RSP=ffffc900030ce390 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=722d302e33312e36 R12=0000000000000000 R13=0000000000000066 R14=ffffffff851462f0 R15=0000000000000000 RIP=ffffffff8514637f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b400000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000000000300 CR3=000000006dcc8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4fcc72d5fe48b1e5 9781dc20322e40f1 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 28efbc2b9d2b5606 e7ef94c453ca2b2d ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 321273e61715d717 78b14e6443a18de5 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8f1c5e42bae12f4c ffbc088ebc1b2367 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000004340 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 07eb0000d7420000 003589f500358a57 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 684800007f3a0000 0000000002da0000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0b560000003589e2 00358992000000cc ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00358a6500358a6b 5dbc0000003586d3 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 47f583acea937bb1 d7291ff574500722 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a312e2f386a5d3bd 10a9e0068376d97b ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000207a4c RBX=0000000000000001 RCX=ffffffff8b1a9889 RDX=ffffed10056a6fee RSI=ffffffff8bb19b80 RDI=ffffffff81703079 RBP=ffffed10039de910 RSP=ffffc9000047fe08 R8 =0000000000000000 R9 =ffffed10056a6fed R10=ffff88802b537f6b R11=0000000000000001 R12=0000000000000001 R13=ffff88801cef4880 R14=ffffffff901d2c10 R15=0000000000000000 RIP=ffffffff8b1aac6f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000021000000 CR3=000000006d14e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff8207512b RDX=ffff88802118a440 RSI=0000000000000000 RDI=0000000000000005 RBP=ffff88804191c6a0 RSP=ffffc900036df798 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000001 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff81994e40 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7f66e40 CR3=000000000db7e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f7403ff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000000bf4d4 RBX=0000000000000003 RCX=ffffffff8b1a9889 RDX=ffffed10056e6fee RSI=ffffffff8bb19b80 RDI=ffffffff81703079 RBP=ffffed1003a51488 RSP=ffffc9000049fe08 R8 =0000000000000000 R9 =ffffed10056e6fed R10=ffff88802b737f6b R11=0000000000000001 R12=0000000000000003 R13=ffff88801d28a440 R14=ffffffff901d2c10 R15=0000000000000000 RIP=ffffffff8b1aac6f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f5cd0d4f440 CR3=0000000062f7c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000