last executing test programs: 4.858216957s ago: executing program 3 (id=252): syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x1000, 0x2}, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x440}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300000600000000000000030000000000000000000000000000070000000002000100000004d602"], 0x30}}, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x20, 0x0, 0x8010002}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)={0x4}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x3000000) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000080) 4.680840099s ago: executing program 3 (id=253): ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000140)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000280)={0x1e, 0x2}) syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x1000, 0x8000}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x12, r4, 0x0, 0x0, 0x0, 0x10042}) io_uring_enter(r5, 0x8aa, 0x39, 0x0, 0x0, 0x0) 3.808632872s ago: executing program 3 (id=259): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40090}, 0x48000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000340)={&(0x7f0000001000), 0x0, 0x1}, 0x1) r3 = add_key$user(&(0x7f0000000200), 0x0, &(0x7f0000000340), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}}) r4 = openat$vmci(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000200)={@host}) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224"], 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x83c0550b, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, &(0x7f0000000000)={@local}) connect$unix(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) chdir(&(0x7f0000000080)='./file1\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x10, 0x96}) close_range(r0, 0xffffffffffffffff, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_CLOCK(r6, 0x8030ae7c, &(0x7f0000000040)) 3.061302227s ago: executing program 2 (id=265): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1200000000000000000000000080000000000000", @ANYRES8=0x0, @ANYRES64, @ANYRESOCT=0x0, @ANYRES8, @ANYBLOB="00000004000000000000008e4cc5300000000000"], 0x37) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0d00000004000000040000000500000000000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000010000000000000000000004000"/26], 0x48) mkdir(&(0x7f0000000480)='./file0/file0\x00', 0x54) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={r1}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000005c0)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x29, 0x8e, 0xfd, 0x8, 0x33, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @private0, 0x40, 0x7800, 0x61c52fe8, 0x7fff}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r2, 0x5457, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x3, "a9872c1672d92f052f98a1aa41eda503b5bcf2"}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, "5f730000a9003f00"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="cb0000d86f13987a00db06000200000000000000008500000041000000951f0000000000003b28baa101a3a2287be37fdf8265669090b2bcfed021a21fc2a0eef24eac080efccd6ada12bd93ee4bf0888b3e9c247d24226000fc118e52c32551c5"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffff5a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) syz_open_procfs(0x0, &(0x7f0000000340)='net/vlan/config\x00') preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000007c0)=""/209, 0xd1}, {&(0x7f0000000740)=""/111, 0x6f}], 0x2, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x29, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="60180000100001040003000004000000a268ea17", @ANYRES32=0x0, @ANYBLOB="02000200a8000600400012800b00010062726964676500003000028005002b00690000000c001e0000000000000000000c001f005c0c0000000000000c0022000800000000000000"], 0x60}}, 0x24008040) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x159080, 0x0) mount$overlay(0x0, &(0x7f0000000580)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 2.820792944s ago: executing program 1 (id=268): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xc, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffffff91, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) preadv2(r3, 0x0, 0x0, 0x2b, 0x0, 0x0) io_setup(0x4082, &(0x7f0000000380)) unshare(0x400) landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) getsockopt$netlink(r3, 0x10e, 0x2, &(0x7f0000000680)=""/193, &(0x7f00000000c0)=0xc1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYRES8=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000040)=0x1ff) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x12, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x40}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = io_uring_setup(0x253c, &(0x7f0000000000)={0x0, 0x0, 0x20, 0x0, 0x5}) close_range(r6, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x41b, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) 2.151378574s ago: executing program 3 (id=270): fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000030100c0"]) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000041403"], 0x48}, 0x1, 0x0, 0x0, 0x20000884}, 0x60) 2.049074501s ago: executing program 2 (id=271): r0 = socket(0x18, 0x5, 0x0) accept4$inet6(r0, 0x0, 0x0, 0x0) (fail_nth: 7) 1.991384245s ago: executing program 2 (id=272): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x14) socket$netlink(0x10, 0x3, 0x6) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time\x00') socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x24, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xe}, {0x0, 0xa}}}, 0x24}}, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1.990134589s ago: executing program 3 (id=273): ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000140)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000280)={0x1e, 0x2}) syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x1000, 0x8000}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x12, r4, 0x0, 0x0, 0x0, 0x10042}) io_uring_enter(r5, 0x8aa, 0x39, 0x0, 0x0, 0x0) 1.814178476s ago: executing program 1 (id=274): r0 = openat$ndctl0(0xffffff9c, &(0x7f0000000000), 0x1042, 0x0) write$rfkill(r0, 0xffffffffffffffff, 0x0) close(r0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getstats={0x1c, 0x5e, 0x2, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000140)={0x80000000, {{0x2, 0x4e21, @multicast1}}}, 0x8c) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r1, 0x10, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xa, 0x15}}}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xfff8}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x0, {0xf, 0x2, 0x7, 0x3ff}}}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac=@broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x140000c4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r2) sendmsg$inet(r0, &(0x7f0000001440)={&(0x7f00000003c0)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000400)="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", 0x1000}], 0x1}, 0x40040) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000001480)={0xff}) ioctl$SIOCAX25NOUID(r0, 0x89e3, &(0x7f00000014c0)) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000001500)) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001580), r2) sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000001680)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x5c, r3, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_DOMAIN={0x10, 0x1, '/dev/ndctl0\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x3}, @NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'nl80211\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x4004005) r4 = accept4$ax25(r0, &(0x7f00000016c0)={{0x3, @netrom}, [@null, @bcast, @netrom, @rose, @netrom, @netrom, @remote, @bcast]}, &(0x7f0000001740)=0x48, 0x80000) r5 = syz_open_dev$rtc(&(0x7f0000001780), 0xf1e9, 0x4000) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r5, 0x6628) write$6lowpan_enable(r0, &(0x7f00000017c0)='0', 0x1) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x80049367, &(0x7f0000001800)) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000001900)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x8400002}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x28, 0x3f7, 0x1, 0x70bd2a, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4048841}, 0x800) r6 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000001940)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x46d, 0xc20a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x3, 0x1, 0x6, 0x5, {0x9, 0x21, 0xddff, 0xfe, 0x1, {0x22, 0xdf7}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x7, 0x7, 0x6}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x8c, 0x20, 0x4}}]}}}]}}]}}, &(0x7f0000001e40)={0xa, &(0x7f0000001980)={0xa, 0x6, 0x310, 0x7f, 0x6, 0x4, 0x20, 0x1}, 0x3e, &(0x7f00000019c0)={0x5, 0xf, 0x3e, 0x1, [@generic={0x39, 0x10, 0xa, "1ba116777ba2f6af9bd6a39a0b0ffa513913ddc75773269a42f4ba68fcdc46ed784fa838abc6451b3e1d84bb5d9675361ee7d54bcb21"}]}, 0xa, [{0x4, &(0x7f0000001a00)=@lang_id={0x4, 0x3, 0x434}}, {0x4, &(0x7f0000001a40)=@lang_id={0x4, 0x3, 0x827}}, {0xfe, &(0x7f0000001a80)=@string={0xfe, 0x3, "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"}}, {0xa, &(0x7f0000001b80)=@string={0xa, 0x3, "e136cb62f0e7b46b"}}, {0x4, &(0x7f0000001bc0)=@lang_id={0x4, 0x3, 0x414}}, {0x4, &(0x7f0000001c00)=@lang_id={0x4, 0x3, 0x401}}, {0x4, &(0x7f0000001c40)=@lang_id={0x4, 0x3, 0x801}}, {0x4, &(0x7f0000001c80)=@lang_id={0x4, 0x3, 0xf0e9}}, {0xc1, &(0x7f0000001cc0)=@string={0xc1, 0x3, "51f049268d59c924552725a225362796f495411e2110dc49355f4604e3e9e84a2ec2dd6ecadbbecba92a37d44f1ba4394c12a317d982c2653cb1b065ddb40a0276c72bfcd34e64e9afbbaa0ae2fee6346006b2e1995bc17983dba4d0d300fe0ab9d0cc1dcc1931d2b090f5e06c50e10ddc2cd77f5ddc4da8326d17b980515ed2b23b52e075d42038becb3a60935469bff71595df0e53adbe8878fb83f5ae623d5a6dc5aa7b6c72cb66444970d0699e471ae9bd80f658a8b8908edd4ddefae8"}}, {0x72, &(0x7f0000001dc0)=@string={0x72, 0x3, "389d117f1dc458f29af980de4f8c72a14b4606a259bbacf229d137806c3c188b83fe2fd11dfbad8efdd7e1d96b8aab1b2b262ef1a65a59e7775749728b42193678b0a9b3ae24a905040d66ad53e6970c8844111427bacb5d4489fa82f3b7200236d81847bf3e6f177781f01fee584194"}}]}) syz_usb_control_io(r6, &(0x7f0000002140)={0x18, &(0x7f0000001ec0)={0x0, 0xd, 0xa1, {0xa1, 0x10, "29e2284fdfacdc52ca64699d885cff2e5207454d9756dbbf37eb8644acfcb88fbdca6eb071180b451a1c4f8fb717cb8e2c0eb3c1eff16261ed573d9718b453b61d3b0ebc90aa65c16c00d8de8383a1813735339ca32296a00b0ccc2b2d30f90ba07e7bee1c43cc6841d4d8efe23111d7ebeaf4c876e2090ebe18d4e99519e10ec78744b8c5057fb4ce96d2d4a7c15b84eec46bcd52546f3730cfa8f5ca86b2"}}, &(0x7f0000001f80)={0x0, 0x3, 0x4, @lang_id={0x4}}, &(0x7f0000001fc0)={0x0, 0xf, 0xc3, {0x5, 0xf, 0xc3, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x4c, 0x1, 0x4}, @generic={0x6f, 0x10, 0x3, "43106c2ebd353e138a141118570950d74ca1410eb82e232598e64a5e2251dca400df40efb5a51886ce7811ff95449ed820a5e2da71d7d45ae8921edd3e607674acae84882d330f906e9b2084e0714540db9c6951faeab559e7afe958f7775d6c733a7c12e7cde01c86ca1ec9"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "2d654b116d26e1a64cf8b8def9c3417d"}, @ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0xff, 0x6, 0x9, 0x0, 0x10, [0x808000, 0x0, 0xc00f, 0xffc030, 0xff0030, 0x2040]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x4, 0x7e, 0x401}]}}, &(0x7f00000020c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x1, 0x1, 0x1, "17f9dae6", "239775ce"}}, &(0x7f0000002100)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x3, 0xa, 0x0, 0x1, 0x3, 0x3}}}, &(0x7f00000025c0)={0x44, &(0x7f0000002180)={0x20, 0x1, 0x50, "e4bacf5b2305cefab87628c7e74bca378f95ee46e0a9d0ff4ed04d656ff4fa6c1e3228c9b8c37694da85001fbca336112b466fe46ef7ec151cbe8da6f4c8f7be2c6622f6d7bea699fa5f8382735db7b9"}, &(0x7f0000002200)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000002240)={0x0, 0x8, 0x1, 0xb}, &(0x7f0000002280)={0x20, 0x0, 0x4, {0x2}}, &(0x7f00000022c0)={0x20, 0x0, 0x4, {0x40, 0x8}}, &(0x7f0000002300)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000002340)={0x40, 0x9, 0x1, 0xf}, &(0x7f0000002380)={0x40, 0xb, 0x2, "bd7f"}, &(0x7f00000023c0)={0x40, 0xf, 0x2, 0x546}, &(0x7f0000002400)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000002440)={0x40, 0x17, 0x6}, &(0x7f0000002480)={0x40, 0x19, 0x2, "40f1"}, &(0x7f00000024c0)={0x40, 0x1a, 0x2, 0xd1}, &(0x7f0000002500)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000002540)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000002580)={0x40, 0x21, 0x1, 0x2}}) fcntl$getownex(r5, 0x10, &(0x7f00000028c0)={0x0, 0x0}) r8 = fcntl$getown(r0, 0x9) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000002900)=0x0) r10 = getpgrp(0xffffffffffffffff) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0186405, &(0x7f0000002940)={0x5, 0x0, {0x0}, {0xffffffffffffffff}, 0xff, 0x4}) syz_clone3(&(0x7f0000002c00)={0x82000, &(0x7f0000002980), &(0x7f00000029c0), &(0x7f0000002a00)=0x0, {0x27}, &(0x7f0000002a40)=""/151, 0x97, &(0x7f0000002b00)=""/182, &(0x7f0000002bc0)=[0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x8, {r0}}, 0x58) syz_clone3(&(0x7f0000003e80)={0x100000000, &(0x7f0000002640), &(0x7f0000002680), &(0x7f00000026c0), {0x4}, &(0x7f0000002700)=""/145, 0x91, &(0x7f00000027c0)=""/214, &(0x7f0000003e40)=[r7, r8, r9, r10, r11, r12, 0x0, 0x0], 0x8, {r0}}, 0x58) 1.581033424s ago: executing program 0 (id=275): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002a00)={0x2, 0x6, 0x8, 0x3, 0x3, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x1, 0x6c1df3fe1a78f621}]}, 0x18}}, 0x20008084) r2 = io_uring_setup(0x6281, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141381) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x900, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x18) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x14, r7, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000050) r8 = socket$inet(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r8, 0x0, 0x43, 0x0, &(0x7f0000000100)) ioctl$TIOCGDEV(r5, 0x540e, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, 0x0, 0x0) openat$nullb(0xffffff9c, &(0x7f0000000100), 0x200, 0x0) socket$key(0xf, 0x3, 0x2) syz_open_dev$media(&(0x7f0000000180), 0x4007, 0x20803) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000380)={0x18, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xc, 0x0, 0x0, @uid}]}, 0x18}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) 1.521094908s ago: executing program 0 (id=276): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x8000000e, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000740)={0x30, 0x3, 0x1, 0x201, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x28c}]}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}, 0x30}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r4) sendmsg$IEEE802154_LLSEC_GETPARAMS(r4, &(0x7f00000005c0)={0x0, 0x6000, &(0x7f0000000580)={&(0x7f0000000500)={0x20, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_START_POLL(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)={0x24, r7, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x12}]}, 0x24}}, 0x0) sendmsg$NFC_CMD_DEP_LINK_UP(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x24, r7, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@NFC_ATTR_COMM_MODE={0x5}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x40001) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000ffff000000000005"], 0x1c}}, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000540), r2) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r2, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x64, r8, 0x300, 0x70bd27, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3d12}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}]}, 0x64}, 0x1, 0x0, 0x0, 0x414}, 0x20000090) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r6) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000002c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000300)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000900)={0x148, r9, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_KEY={0xc0, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x84, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x3c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7f}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "ff57ae1d3e9602bf3dc33fa00ee1e301"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "b7cc232ebfeedc00efaa9cf281489386c9d03fd51d442e4347f28dcd1278b760"}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_SEC_KEY={0x30, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}]}]}]}]}, 0x148}}, 0x80) 1.520578031s ago: executing program 0 (id=277): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xc, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffffff91, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) preadv2(r3, 0x0, 0x0, 0x2b, 0x0, 0x0) io_setup(0x4082, &(0x7f0000000380)) unshare(0x400) landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) getsockopt$netlink(r3, 0x10e, 0x2, &(0x7f0000000680)=""/193, &(0x7f00000000c0)=0xc1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYRES8=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000040)=0x1ff) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x12, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x40}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = io_uring_setup(0x253c, &(0x7f0000000000)={0x0, 0x0, 0x20, 0x0, 0x5}) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) close_range(r5, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x41b, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) 1.211292123s ago: executing program 1 (id=278): ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000140)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000280)={0x1e, 0x2}) syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x1000, 0x8000}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x12, r4, 0x0, 0x0, 0x0, 0x10042}) io_uring_enter(r5, 0x8aa, 0x39, 0x0, 0x0, 0x0) 1.131306695s ago: executing program 2 (id=279): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='qrtr_ns_service_announce_del\x00'}, 0x18) syz_io_uring_setup(0x2000581d, &(0x7f0000000140)={0x0, 0x7133, 0x0, 0x2, 0x124}, &(0x7f0000000040), &(0x7f0000000280)) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00', 0x3b}) ioctl$UI_DEV_CREATE(r0, 0x5501) write$input_event(r0, &(0x7f0000000000)={{0x77359400}}, 0xfe4f) (fail_nth: 2) 1.041159169s ago: executing program 3 (id=280): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x2000000000000376, &(0x7f0000000680)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x9, 0x5, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2008, 0x8b}, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SET_FP_MODE(0x2d, 0x0) ioctl$TIOCL_SETSEL(r0, 0x5410, &(0x7f0000000080)={0x2, {0x2, 0xffff, 0x0, 0x0, 0x0, 0xf}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x6) r1 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0x932, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0186405, &(0x7f0000000100)={0x8b5a, 0x809, {r1}, {0xffffffffffffffff}, 0x9, 0x8}) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mq_notify(r3, &(0x7f00000000c0)={0x0, 0x83, 0x2, @thr={&(0x7f0000000580)="79cc45cb934bb09ce3d8ee2d25611005951497b1aece939b5cf87ca8ecd89eb60ca7e21dd2144fd989e5ae2160803e70b121f7ef35377abcb6b03634e79eab650fd0de86b6f00c3a663cae89d931526de26480d53f93a2e630f46285ea2f2649da63fe", &(0x7f0000000500)="76b6ae5497f5808c05a090acd9b9a5e92d386b3719beefed6dae1d1bd2eac0e9bbf363b591beb17d6b2cf77bbaeaeed09cb3e2bff3a16ff6afcf08b7b8943a182bce2fb3616a2c64fc6a60f640ba06fe"}}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$sndmidi(0x0, 0x6, 0x80080) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000ac0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000400)={0x50, 0x0, r5, {0x7, 0x29, 0xc, 0x201060, 0xff6f, 0x100, 0x8, 0x3, 0x0, 0x0, 0x0, 0x3}}, 0x50) write$UHID_CREATE(r4, &(0x7f00000002c0)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000180)=""/32, 0x20, 0x0, 0x0, 0x3, 0x0, 0xa0}}, 0x120) r6 = socket$tipc(0x1e, 0x2, 0x0) ioctl$FICLONERANGE(r6, 0x4020940d, &(0x7f0000000600)={{}, 0x5, 0xfffffffffffffa63, 0x3}) munlockall() syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040341a02080000000000010902"], 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) write$UHID_DESTROY(r4, &(0x7f0000000040), 0x4) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) 941.096905ms ago: executing program 2 (id=281): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='qrtr_ns_service_announce_del\x00'}, 0x18) syz_io_uring_setup(0x2000581d, &(0x7f0000000140)={0x0, 0x7133, 0x0, 0x2, 0x124}, &(0x7f0000000040), &(0x7f0000000280)) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00', 0x3b}) ioctl$UI_DEV_CREATE(r0, 0x5501) write$input_event(r0, &(0x7f0000000000)={{0x77359400}}, 0xfe4f) 805.603104ms ago: executing program 2 (id=282): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xc, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffffff91, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) preadv2(r3, 0x0, 0x0, 0x2b, 0x0, 0x0) io_setup(0x4082, &(0x7f0000000380)) unshare(0x400) landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) getsockopt$netlink(r3, 0x10e, 0x2, &(0x7f0000000680)=""/193, &(0x7f00000000c0)=0xc1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYRES8=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000040)=0x1ff) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x12, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x40}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = io_uring_setup(0x253c, &(0x7f0000000000)={0x0, 0x0, 0x20, 0x0, 0x5}) close_range(r6, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x41b, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) 337.281006ms ago: executing program 0 (id=283): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000004000000040000000800000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000008000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000500"], 0x50) 336.964899ms ago: executing program 0 (id=284): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2b, 'rdma'}]}, 0x6) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xfffffefffffb7f7e, &(0x7f0000000000)={0xa, 0xfffd, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "0300000000d700"}, 0x28) sendto$inet6(r3, 0x0, 0x0, 0x8080, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0xc7}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc86a00", "4617a9f6040839230fb7fead776dd8dc", "c6db0872", "a44a883fca4400"}, 0x28) recvmmsg(r5, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)=""/183, 0xb7}], 0x1}}, {{0x0, 0x0, 0x0}, 0x7}], 0x2, 0x2, 0x0) recvmmsg(r5, &(0x7f0000001780)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0, 0x0) shutdown(r5, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r6, 0x40505331, &(0x7f0000000100)={{}, {0xe}, 0x0, 0xbf}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x54) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x84, &(0x7f0000000180)={r8, @in={{0x2, 0x4e24, @empty}}}, 0x90) setsockopt$inet_sctp6_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f00000000c0)=0x8000, 0x4) r9 = io_uring_setup(0x653, &(0x7f0000000000)={0x0, 0x804, 0x0, 0x4, 0x3c3}) openat$ptp0(0xffffff9c, &(0x7f0000000080), 0x400000, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r9, 0xf, &(0x7f0000000540)={0x1002, 0x0, 0x0, 0x0, 0x28}, 0x20) 332.299634ms ago: executing program 1 (id=285): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000004000000040000000800000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000008000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000500"], 0x50) (fail_nth: 3) 261.143706ms ago: executing program 1 (id=286): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, &(0x7f0000000100), 0x0, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setgroups(0x3, &(0x7f0000000300)=[0xee00, 0x0, 0x0]) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'pimreg0\x00', 0x1}) ioctl$TUNSETOFFLOAD(r3, 0x400454ce, 0x5) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'pimreg0\x00', 0x1}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, r4, 0xd9b2794f6a139537, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001d00000020000180140002006e657464657673696d30000000000000080003"], 0x34}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000380)={@private, @broadcast, 0x0}, &(0x7f00000003c0)=0xc) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x118000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xa4, 0x0, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8040}, 0x8080) r7 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) ioctl$TCSETAF(r7, 0x5408, &(0x7f00000000c0)={0xffff, 0x5, 0x0, 0x79, 0x3, "5acf8f53872ebc82"}) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x1}}}}}}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xc61adc2c1c21d671, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x80000001}, [@call={0x85, 0x0, 0x0, 0x64}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) writev(r7, &(0x7f00000024c0)=[{&(0x7f0000000480)="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", 0x10f}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000840)={0x1f4, r4, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xe, 0x46}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_IE={0x18, 0x2a, [@ibss={0x6, 0x2, 0x3}, @mesh_id={0x72, 0x6}, @cf={0x4, 0x6, {0x4, 0x80, 0x3, 0x2}}]}, @NL80211_ATTR_SSID={0x19, 0x34, @random="610d67139ece156e0640757795d0cf6298531bcf1a"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="9ca9c04b56d1"}, @NL80211_ATTR_IE={0x17d, 0x2a, [@chsw_timing={0x68, 0x4, {0x1, 0x5}}, @ssid={0x0, 0x19, @random="f650361bca328e8122509aae587cafa196fb92a1486c8627b5"}, @preq={0x82, 0x72, {{0x0, 0x1}, 0x3, 0x7, 0x1, @device_b, 0x0, @void, 0x21, 0x2, 0x8, [{{0x1}, @broadcast, 0x2f7}, {{0x1, 0x0, 0x1}, @device_a, 0x9}, {{0x1, 0x0, 0x1}, @device_b}, {{}, @broadcast, 0x7}, {{0x1, 0x0, 0x1}, @device_b, 0xc6f0}, {{0x1}, @device_a, 0x4}, {{0x1, 0x0, 0x1}, @device_b, 0xd3}, {{0x1}, @device_a, 0x6}]}}, @peer_mgmt={0x75, 0x6, {0x0, 0x9, @void, @val=0x39, @void}}, @gcr_ga={0xbd, 0x6, @broadcast}, @mic={0x8c, 0x18, {0x7dd, "735b9ece21cb", @long="7c53927e56c0d3d24441131f7a5c91fb"}}, @mic={0x8c, 0x18, {0x8ec, "d414a5d330e4", @long="1e544e39d7032db853db6699c00829f2"}}, @dsss={0x3, 0x1, 0xaf}, @measure_req={0x26, 0x9b, {0x1, 0x8, 0x8, "92f558a2e09cc8ecf552c216d4db1d2e90716ad8db7c44d1bada31f0b0718fdaee3b206bca2e09760da534ce8d9d10676d738f834bbfe1c4cd07bbb5aeca9574cbde70f86d06c05b9e883a5dc533056515f25724a28d206a6d6a98b925a49d68fb2e655dfac6159e2ae714591142226283e4106152c4c64258162616d045eb7b08ed2cf48a4d1b476e48b52a212c6e7c63debf7d0be8d8cd"}}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x800}, 0x20000) 160.963801ms ago: executing program 0 (id=287): syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000740)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newtaction={0x218, 0x30, 0x1, 0x70bd2c, 0x0, {}, [{0x204, 0x1, [@m_csum={0x114, 0x6, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xc12a, 0xffff4294, 0x10000000, 0xad, 0x4}, 0x59}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x4, 0x0, 0x7, 0x9}, 0x7d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x9, 0x4, 0x4, 0x80000000}, 0xb}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xff, 0x7fff, 0xfffffffffffffff8, 0xfff, 0xffff}, 0x3d}}]}, {0x75, 0x6, "68178685803f2df68fd5807860f1beb88479c13e6ec84c247be8b5330d5ff1a8215bd4d5db9b811cbb695ffff5ef3faf75e1f9d89c3e97dc531d7084e8233d8fd92430714bc9dbac09ae60c0f2545dc1b39264418ba4dbbf01b171990776cefe6416e5cb41674b9c0f6eb98618d57edca0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ife={0xec, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0xc1, 0x6, "a7d7fca4bb14c5c6b14377320989c49729c7bb68b81e4e2eed95fb834b79c7e5b94bad4a8bf8e1ab7bf109000000000000000d0d60230a81f1e0406ff9286a1bf2a243010000004a70b3de97003467855a9aa1d1685958f7ef1d8e45b3d688e2fdc1e0ac97e0f0e8a0fd3f7f9198c4a723027a43bf358822d3ea7b6cb44df30143c95eebd070c7090e0b1fc04f54d04fd3de3d3226cd7b29c8017f0d0dc052eb9f94ebb0165ba3fcab030407c560d4ab6690e9b39c6b3b383bbab4f8ae"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x218}, 0x1, 0x0, 0x0, 0x4801}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) openat$ptp0(0xffffff9c, &(0x7f0000000000), 0x80c80, 0x0) fallocate(0xffffffffffffffff, 0x2, 0x400000000000004, 0x5) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x200, 0x0) mount(&(0x7f0000000100)=@nullb, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) 0s ago: executing program 1 (id=288): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x14) socket$netlink(0x10, 0x3, 0x6) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time\x00') socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x24, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xe}, {0x0, 0xa}}}, 0x24}}, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=289): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x9) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000013", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fcdbdf2507000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x3c, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_SETUP={0x14, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5, 0x6, 0x1}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x3c}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:14146' (ED25519) to the list of known hosts. [ 41.745323][ T5930] cgroup: Unknown subsys name 'net' [ 41.932582][ T5930] cgroup: Unknown subsys name 'cpuset' [ 41.935714][ T5930] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 42.667764][ T5930] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 44.535308][ T5950] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 44.538264][ T5950] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 44.540884][ T5950] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 44.543575][ T5950] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 44.544387][ T5954] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 44.544985][ T5956] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 44.545184][ T5953] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 44.546670][ T5956] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 44.546704][ T5950] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 44.546763][ T5953] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 44.547045][ T5950] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 44.547833][ T5950] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 44.550930][ T5954] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 44.554087][ T5956] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 44.554214][ T5297] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 44.554453][ T5297] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 44.554559][ T5297] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 44.555378][ T5297] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 44.558790][ T5956] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 44.562911][ T5297] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 44.563352][ T5956] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 44.565190][ T5297] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 44.567273][ T5956] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 44.569436][ T5297] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 44.760188][ T5947] chnl_net:caif_netlink_parms(): no params data found [ 44.775596][ T5941] chnl_net:caif_netlink_parms(): no params data found [ 44.791358][ T5949] chnl_net:caif_netlink_parms(): no params data found [ 44.814462][ T5944] chnl_net:caif_netlink_parms(): no params data found [ 44.929222][ T5947] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.932394][ T5947] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.934628][ T5947] bridge_slave_0: entered allmulticast mode [ 44.936852][ T5947] bridge_slave_0: entered promiscuous mode [ 44.944509][ T5941] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.946582][ T5941] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.948658][ T5941] bridge_slave_0: entered allmulticast mode [ 44.950906][ T5941] bridge_slave_0: entered promiscuous mode [ 44.959019][ T5947] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.961764][ T5947] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.964518][ T5947] bridge_slave_1: entered allmulticast mode [ 44.966730][ T5947] bridge_slave_1: entered promiscuous mode [ 44.979408][ T5941] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.981570][ T5941] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.983661][ T5941] bridge_slave_1: entered allmulticast mode [ 44.985809][ T5941] bridge_slave_1: entered promiscuous mode [ 45.042752][ T5949] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.045224][ T5949] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.047296][ T5949] bridge_slave_0: entered allmulticast mode [ 45.049501][ T5949] bridge_slave_0: entered promiscuous mode [ 45.052222][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.054290][ T5949] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.056342][ T5949] bridge_slave_1: entered allmulticast mode [ 45.058484][ T5949] bridge_slave_1: entered promiscuous mode [ 45.061715][ T5947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.064430][ T5944] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.066487][ T5944] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.068554][ T5944] bridge_slave_0: entered allmulticast mode [ 45.072923][ T5944] bridge_slave_0: entered promiscuous mode [ 45.076165][ T5941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.096532][ T5947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.099219][ T5944] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.101534][ T5944] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.103602][ T5944] bridge_slave_1: entered allmulticast mode [ 45.105725][ T5944] bridge_slave_1: entered promiscuous mode [ 45.108577][ T5941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.112342][ T5949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.150968][ T5949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.164089][ T5947] team0: Port device team_slave_0 added [ 45.176815][ T5941] team0: Port device team_slave_0 added [ 45.186924][ T5947] team0: Port device team_slave_1 added [ 45.189840][ T5944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.193531][ T5941] team0: Port device team_slave_1 added [ 45.204692][ T5949] team0: Port device team_slave_0 added [ 45.216188][ T5944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.226887][ T5949] team0: Port device team_slave_1 added [ 45.236966][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.238963][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.249718][ T5947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.287425][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.289465][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.296828][ T5947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.302440][ T5944] team0: Port device team_slave_0 added [ 45.304447][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.306443][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.313793][ T5941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.327760][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.330480][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.339281][ T5949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.343921][ T5944] team0: Port device team_slave_1 added [ 45.345957][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.347948][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.355527][ T5941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.362660][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.364669][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.372408][ T5949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.393401][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.395575][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.403016][ T5944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.407182][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.409248][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.416500][ T5944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.453918][ T5941] hsr_slave_0: entered promiscuous mode [ 45.456146][ T5941] hsr_slave_1: entered promiscuous mode [ 45.467768][ T5947] hsr_slave_0: entered promiscuous mode [ 45.470631][ T5947] hsr_slave_1: entered promiscuous mode [ 45.473234][ T5947] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.475513][ T5947] Cannot create hsr debugfs directory [ 45.530456][ T5944] hsr_slave_0: entered promiscuous mode [ 45.532489][ T5944] hsr_slave_1: entered promiscuous mode [ 45.534380][ T5944] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.536553][ T5944] Cannot create hsr debugfs directory [ 45.551719][ T5949] hsr_slave_0: entered promiscuous mode [ 45.553725][ T5949] hsr_slave_1: entered promiscuous mode [ 45.555627][ T5949] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.557828][ T5949] Cannot create hsr debugfs directory [ 45.712721][ T5941] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 45.716927][ T5941] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 45.720454][ T5941] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 45.725949][ T5941] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 45.739974][ T5944] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 45.743967][ T5944] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 45.747130][ T5944] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 45.751902][ T5944] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 45.788658][ T5947] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 45.793495][ T5947] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 45.804108][ T5947] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 45.814434][ T5947] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 45.825149][ T5949] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 45.834750][ T5949] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 45.837953][ T5949] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 45.842165][ T5949] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 45.870548][ T5941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.883623][ T5944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.889597][ T5941] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.904803][ T5944] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.909008][ T167] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.911286][ T167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.923091][ T167] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.925206][ T167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.928231][ T167] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.930636][ T167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.942129][ T5947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.945821][ T167] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.947877][ T167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.958638][ T5949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.975056][ T5949] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.980905][ T5947] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.987115][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.989197][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.000472][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.002739][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.007266][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.009851][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.016527][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.018862][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.092569][ T5944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.112181][ T5944] veth0_vlan: entered promiscuous mode [ 46.118249][ T5944] veth1_vlan: entered promiscuous mode [ 46.124366][ T5941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.135914][ T5949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.144414][ T5944] veth0_macvtap: entered promiscuous mode [ 46.155923][ T5944] veth1_macvtap: entered promiscuous mode [ 46.172950][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.179212][ T5947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.183001][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.185725][ T5949] veth0_vlan: entered promiscuous mode [ 46.195626][ T5941] veth0_vlan: entered promiscuous mode [ 46.199230][ T5944] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.201919][ T5944] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.204164][ T5944] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.206408][ T5944] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.213838][ T5941] veth1_vlan: entered promiscuous mode [ 46.226587][ T5949] veth1_vlan: entered promiscuous mode [ 46.256066][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.258723][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.258941][ T5941] veth0_macvtap: entered promiscuous mode [ 46.263912][ T5947] veth0_vlan: entered promiscuous mode [ 46.275472][ T5941] veth1_macvtap: entered promiscuous mode [ 46.280579][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.282730][ T5947] veth1_vlan: entered promiscuous mode [ 46.283294][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.293204][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.296213][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.300783][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.311891][ T5949] veth0_macvtap: entered promiscuous mode [ 46.315183][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.318849][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.323708][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.325044][ T5944] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 46.330275][ T5949] veth1_macvtap: entered promiscuous mode [ 46.333656][ T5941] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.336179][ T5941] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.338671][ T5941] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.341318][ T5941] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.368581][ T5947] veth0_macvtap: entered promiscuous mode [ 46.374678][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.378580][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.383067][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.387006][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.387853][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.394218][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.398022][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.402134][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.404888][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.407907][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.411692][ T5947] veth1_macvtap: entered promiscuous mode [ 46.419195][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.420792][ T5947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.421609][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.424483][ T5947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.424491][ T5947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.424499][ T5947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.435439][ T5947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.438413][ T5947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.442377][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.447545][ T5947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.450655][ T5947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.453420][ T5947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.456362][ T5947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.459135][ T5947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.462167][ T5947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.465506][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.475325][ T5949] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.477891][ T5949] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.480738][ T5949] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.483282][ T5949] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.486850][ T5947] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.490579][ T5947] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.493693][ T5947] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.496887][ T5947] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.503705][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.506120][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.533791][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.535825][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.557752][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.557929][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.560430][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.563120][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.582060][ T167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.584339][ T167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.659563][ T5297] Bluetooth: hci1: command tx timeout [ 46.659864][ T5943] Bluetooth: hci3: command tx timeout [ 46.662096][ T5297] Bluetooth: hci0: command tx timeout [ 46.663097][ T5943] Bluetooth: hci2: command tx timeout [ 46.686193][ T6012] ======================================================= [ 46.686193][ T6012] WARNING: The mand mount option has been deprecated and [ 46.686193][ T6012] and is ignored by this kernel. Remove the mand [ 46.686193][ T6012] option from the mount to silence this warning. [ 46.686193][ T6012] ======================================================= [ 46.773306][ T6017] netfs: Couldn't get user pages (rc=-14) [ 46.819808][ T6015] process 'syz.2.3' launched './file0' with NULL argv: empty string added [ 46.834382][ T6021] ipt_REJECT: ECHOREPLY no longer supported. [ 47.630571][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 47.710257][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 47.714530][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 47.717781][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 47.799938][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 47.855716][ T6036] ipt_REJECT: ECHOREPLY no longer supported. [ 47.889867][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 47.910938][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 47.961115][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 47.970404][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 48.069879][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 48.127771][ T6047] 9pnet_virtio: no channels available for device syz [ 48.505285][ T6053] Bluetooth: MGMT ver 1.23 [ 48.717768][ T5943] Bluetooth: hci0: command tx timeout [ 48.717811][ T5956] Bluetooth: hci3: command tx timeout [ 48.720076][ T5943] Bluetooth: hci1: command tx timeout [ 48.721185][ T5297] Bluetooth: hci2: command tx timeout [ 48.741219][ T6058] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13'. [ 49.223259][ T6064] ipt_REJECT: ECHOREPLY no longer supported. [ 49.487315][ T6070] netlink: 596 bytes leftover after parsing attributes in process `syz.2.15'. [ 49.557937][ T6071] Driver unsupported XDP return value 0 on prog (id 4) dev N/A, expect packet loss! [ 50.350332][ T6096] capability: warning: `syz.3.21' uses deprecated v2 capabilities in a way that may be insecure [ 50.436544][ T6096] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 50.470040][ T6102] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22'. [ 50.789899][ T5956] Bluetooth: hci1: command tx timeout [ 50.791508][ T5956] Bluetooth: hci3: command tx timeout [ 50.793075][ T5956] Bluetooth: hci0: command tx timeout [ 50.794687][ T5956] Bluetooth: hci2: command tx timeout [ 51.119380][ T6117] ipt_REJECT: ECHOREPLY no longer supported. [ 51.121023][ T63] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 51.249749][ T63] usb 8-1: device descriptor read/64, error -71 [ 51.489777][ T63] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 51.619783][ T63] usb 8-1: device descriptor read/64, error -71 [ 51.730028][ T63] usb usb8-port1: attempt power cycle [ 51.885279][ T6122] Scaler: ================= START STATUS ================= [ 51.887491][ T6122] Scaler: ================== END STATUS ================== [ 52.069741][ T63] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 52.090198][ T63] usb 8-1: device descriptor read/8, error -71 [ 52.105033][ T6127] syz.0.28 uses obsolete (PF_INET,SOCK_PACKET) [ 52.329815][ T63] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 52.350637][ T63] usb 8-1: device descriptor read/8, error -71 [ 52.460443][ T63] usb usb8-port1: unable to enumerate USB device [ 52.869904][ T5956] Bluetooth: hci0: command tx timeout [ 52.872022][ T5297] Bluetooth: hci2: command tx timeout [ 52.872063][ T5951] Bluetooth: hci3: command tx timeout [ 52.872090][ T5951] Bluetooth: hci1: command tx timeout [ 53.534002][ T6132] Zero length message leads to an empty skb [ 53.922206][ T6141] ipt_REJECT: ECHOREPLY no longer supported. [ 54.130795][ T6152] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 54.771741][ T6165] ALSA: seq fatal error: cannot create timer (-22) [ 54.972801][ T6172] netlink: 4 bytes leftover after parsing attributes in process `syz.0.38'. [ 54.975682][ T6172] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.978696][ T6172] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.985302][ T6172] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.987696][ T6172] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.345743][ T6178] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 55.374688][ T6178] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 56.213254][ T6187] ipt_REJECT: ECHOREPLY no longer supported. [ 56.514471][ T6197] ipt_REJECT: ECHOREPLY no longer supported. [ 56.531807][ T6198] ipt_REJECT: ECHOREPLY no longer supported. [ 57.660900][ T6218] ipt_REJECT: ECHOREPLY no longer supported. [ 58.273160][ T6235] ipt_REJECT: ECHOREPLY no longer supported. [ 58.759909][ T6248] capability: warning: `syz.0.56' uses 32-bit capabilities (legacy support in use) [ 59.469836][ T5983] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 59.713890][ T5983] usb 8-1: Using ep0 maxpacket: 8 [ 59.791575][ T5983] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 59.793963][ T5983] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 59.796725][ T5983] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 59.799528][ T5983] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 59.802418][ T5983] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 59.806329][ T5983] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 59.808917][ T5983] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.050034][ T5983] usb 8-1: usb_control_msg returned -32 [ 60.051800][ T5983] usbtmc 8-1:16.0: can't read capabilities [ 60.894103][ T6288] usbtmc 8-1:16.0: usb_control_msg returned -32 [ 61.106986][ T63] usb 8-1: USB disconnect, device number 6 [ 61.431643][ T6303] ipt_REJECT: ECHOREPLY no longer supported. [ 61.859716][ T40] audit: type=1326 audit(1737140379.211:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6312 comm="syz.3.73" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 61.865938][ T40] audit: type=1326 audit(1737140379.221:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6312 comm="syz.3.73" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 61.872196][ T40] audit: type=1326 audit(1737140379.221:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6312 comm="syz.3.73" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 61.878136][ T40] audit: type=1326 audit(1737140379.221:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6312 comm="syz.3.73" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 61.884428][ T40] audit: type=1326 audit(1737140379.221:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6312 comm="syz.3.73" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 61.890361][ T40] audit: type=1326 audit(1737140379.231:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6312 comm="syz.3.73" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 61.896242][ T40] audit: type=1326 audit(1737140379.231:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6312 comm="syz.3.73" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 61.902444][ T40] audit: type=1326 audit(1737140379.241:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6312 comm="syz.3.73" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 61.908645][ T40] audit: type=1326 audit(1737140379.241:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6312 comm="syz.3.73" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf706e5a7 code=0x7ffc0000 [ 61.914784][ T40] audit: type=1326 audit(1737140379.241:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6312 comm="syz.3.73" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 61.925717][ T6315] mmap: syz.3.73 (6315) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 61.941367][ T6315] netlink: 8 bytes leftover after parsing attributes in process `syz.3.73'. [ 61.943941][ T6315] netlink: 24 bytes leftover after parsing attributes in process `syz.3.73'. [ 62.263522][ T6329] ipt_REJECT: ECHOREPLY no longer supported. [ 62.796099][ T6344] netlink: 8 bytes leftover after parsing attributes in process `syz.3.82'. [ 62.799649][ T6344] netlink: 12 bytes leftover after parsing attributes in process `syz.3.82'. [ 62.927429][ T6348] GUP no longer grows the stack in syz.3.83 (6348): 20004000-2000a000 (20002000) [ 62.930268][ T6348] CPU: 3 UID: 0 PID: 6348 Comm: syz.3.83 Not tainted 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 62.933265][ T6348] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 62.936260][ T6348] Call Trace: [ 62.937232][ T6348] [ 62.938135][ T6348] dump_stack_lvl+0x16c/0x1f0 [ 62.939499][ T6348] gup_vma_lookup+0x1d2/0x220 [ 62.940885][ T6348] __get_user_pages+0x236/0x3b50 [ 62.942302][ T6348] ? find_held_lock+0x2d/0x110 [ 62.943664][ T6348] ? mtree_load+0x30a/0xa40 [ 62.944979][ T6348] ? __pfx_lock_release+0x10/0x10 [ 62.946404][ T6348] ? __pfx___get_user_pages+0x10/0x10 [ 62.947929][ T6348] get_user_pages_remote+0x25e/0xb30 [ 62.949463][ T6348] ? __pfx_get_user_pages_remote+0x10/0x10 [ 62.951126][ T6348] __access_remote_vm+0x3a5/0x7b0 [ 62.952584][ T6348] ? __pfx___access_remote_vm+0x10/0x10 [ 62.954158][ T6348] ? lock_acquire+0x2f/0xb0 [ 62.955456][ T6348] ? proc_pid_cmdline_read+0x25b/0x8d0 [ 62.957010][ T6348] proc_pid_cmdline_read+0x4f4/0x8d0 [ 62.958588][ T6348] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 62.960299][ T6348] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 62.961961][ T6348] vfs_readv+0x6bf/0x890 [ 62.963160][ T6348] ? __pfx___lock_acquire+0x10/0x10 [ 62.964646][ T6348] ? __pfx_vfs_readv+0x10/0x10 [ 62.966005][ T6348] ? __fget_files+0x1fc/0x3a0 [ 62.967331][ T6348] ? __pfx_lock_release+0x10/0x10 [ 62.968774][ T6348] ? __fget_files+0x206/0x3a0 [ 62.970143][ T6348] ? do_preadv+0x1b1/0x270 [ 62.971411][ T6348] do_preadv+0x1b1/0x270 [ 62.972625][ T6348] ? __pfx_do_preadv+0x10/0x10 [ 62.973969][ T6348] __do_fast_syscall_32+0x73/0x120 [ 62.975432][ T6348] do_fast_syscall_32+0x32/0x80 [ 62.976834][ T6348] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 62.978673][ T6348] RIP: 0023:0xf706e579 [ 62.979862][ T6348] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 62.985308][ T6348] RSP: 002b:00000000f503f55c EFLAGS: 00000296 ORIG_RAX: 000000000000014d [ 62.987671][ T6348] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000020000040 [ 62.989921][ T6348] RDX: 0000000000000001 RSI: 0000000000000300 RDI: 0000000000000000 [ 62.992159][ T6348] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 62.994405][ T6348] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 62.996647][ T6348] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 62.998926][ T6348] [ 64.162088][ T6383] ptrace attach of "/syz-executor exec"[5941] was attempted by "/syz-executor exec"[6383] [ 64.781553][ T6415] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 64.783430][ T6415] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 64.794155][ T6415] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 64.795821][ T6415] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 64.799257][ T6415] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 64.801110][ T6415] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 64.806098][ T6415] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 64.807821][ T6415] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 65.325657][ T6440] binder: Binderfs stats mode cannot be changed during a remount [ 65.427684][ T6443] netlink: 16 bytes leftover after parsing attributes in process `syz.2.102'. [ 65.494505][ T6449] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 65.770473][ T57] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 65.837751][ T6457] netlink: 288 bytes leftover after parsing attributes in process `syz.3.106'. [ 65.953717][ T57] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 65.956784][ T57] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 65.959514][ T57] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 65.962288][ T57] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.973498][ T6446] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 65.989329][ T57] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 67.272014][ T6493] can: request_module (can-proto-0) failed. [ 67.421607][ T6497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.117'. [ 68.093529][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 68.093539][ T40] audit: type=1326 audit(1737140385.461:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6522 comm="syz.0.126" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x0 [ 68.483108][ T1319] usb 7-1: USB disconnect, device number 2 [ 69.317292][ T6575] netlink: 44 bytes leftover after parsing attributes in process `syz.2.142'. [ 69.789154][ T6593] netlink: 44 bytes leftover after parsing attributes in process `syz.2.147'. [ 69.792332][ T6593] FAULT_INJECTION: forcing a failure. [ 69.792332][ T6593] name failslab, interval 1, probability 0, space 0, times 0 [ 69.795973][ T6593] CPU: 2 UID: 0 PID: 6593 Comm: syz.2.147 Not tainted 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 69.798976][ T6593] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 69.802069][ T6593] Call Trace: [ 69.803133][ T6593] [ 69.804035][ T6593] dump_stack_lvl+0x16c/0x1f0 [ 69.805469][ T6593] should_fail_ex+0x497/0x5b0 [ 69.806792][ T6593] ? fs_reclaim_acquire+0xae/0x150 [ 69.808209][ T6593] should_failslab+0xc2/0x120 [ 69.809612][ T6593] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 69.811305][ T6593] ? __alloc_skb+0x2b3/0x380 [ 69.812669][ T6593] ? bpf_lsm_capable+0x9/0x10 [ 69.814041][ T6593] __alloc_skb+0x2b3/0x380 [ 69.815345][ T6593] ? __pfx___alloc_skb+0x10/0x10 [ 69.816723][ T6593] ? genl_rcv_msg+0x4c0/0x800 [ 69.818208][ T6593] ? genl_rcv_msg+0x4bd/0x800 [ 69.819647][ T6593] netlink_ack+0x164/0xb20 [ 69.821128][ T6593] netlink_rcv_skb+0x327/0x410 [ 69.822516][ T6593] ? __pfx_genl_rcv_msg+0x10/0x10 [ 69.823980][ T6593] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 69.825535][ T6593] ? down_read+0xc9/0x330 [ 69.826771][ T6593] ? __pfx_down_read+0x10/0x10 [ 69.828203][ T6593] ? netlink_deliver_tap+0x1ae/0xca0 [ 69.829805][ T6593] genl_rcv+0x28/0x40 [ 69.830960][ T6593] netlink_unicast+0x53c/0x7f0 [ 69.832316][ T6593] ? __pfx_netlink_unicast+0x10/0x10 [ 69.833865][ T6593] ? __phys_addr_symbol+0x30/0x80 [ 69.835328][ T6593] ? __check_object_size+0x488/0x710 [ 69.836886][ T6593] netlink_sendmsg+0x8b8/0xd70 [ 69.838296][ T6593] ? __pfx_netlink_sendmsg+0x10/0x10 [ 69.839875][ T6593] ____sys_sendmsg+0x9ae/0xb40 [ 69.841287][ T6593] ? __pfx_____sys_sendmsg+0x10/0x10 [ 69.842782][ T6593] ? get_compat_msghdr+0x11b/0x170 [ 69.844265][ T6593] ___sys_sendmsg+0x135/0x1e0 [ 69.845653][ T6593] ? __pfx____sys_sendmsg+0x10/0x10 [ 69.847157][ T6593] ? __pfx_lock_release+0x10/0x10 [ 69.848621][ T6593] ? trace_lock_acquire+0x14e/0x1f0 [ 69.850141][ T6593] ? __fget_files+0x206/0x3a0 [ 69.851503][ T6593] __sys_sendmsg+0x16e/0x220 [ 69.852845][ T6593] ? __pfx___sys_sendmsg+0x10/0x10 [ 69.854328][ T6593] __do_fast_syscall_32+0x73/0x120 [ 69.855810][ T6593] do_fast_syscall_32+0x32/0x80 [ 69.857272][ T6593] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 69.859122][ T6593] RIP: 0023:0xf706e579 [ 69.860317][ T6593] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 69.865839][ T6593] RSP: 002b:00000000f506055c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 69.868237][ T6593] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000020000000 [ 69.870521][ T6593] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 69.872760][ T6593] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 69.875030][ T6593] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 69.877316][ T6593] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 69.879607][ T6593] [ 70.137066][ T6609] warning: `syz.0.152' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 70.148632][ T6609] nft_compat: unsupported protocol 0 [ 70.182426][ T6612] mmap: syz.3.153 (6612): VmData 37404672 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 70.795350][ T1412] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.797212][ T1412] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.237700][ T6642] bridge_slave_0: left allmulticast mode [ 71.239477][ T6642] bridge_slave_0: left promiscuous mode [ 71.242137][ T6642] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.573523][ T6642] bridge_slave_1: left allmulticast mode [ 71.575681][ T6642] bridge_slave_1: left promiscuous mode [ 71.577910][ T6642] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.584829][ T6642] bond0: (slave bond_slave_0): Releasing backup interface [ 71.590107][ T6642] bond0: (slave bond_slave_1): Releasing backup interface [ 71.601680][ T6642] team0: Port device team_slave_0 removed [ 71.605797][ T6642] team0: Port device team_slave_1 removed [ 71.607781][ T6642] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.610014][ T6642] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.612736][ T6642] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.615005][ T6642] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.052521][ T6662] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 72.837149][ T6709] syz.0.175 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 72.840610][ T6709] MTD: Couldn't look up '/dev/nbd0': -2 [ 72.963431][ T6721] fuse: Bad value for 'fd' [ 73.132731][ T6730] 9pnet_fd: Insufficient options for proto=fd [ 73.492401][ T6746] netlink: 4 bytes leftover after parsing attributes in process `syz.3.188'. [ 73.880265][ T6757] ubi0: attaching mtd0 [ 73.886555][ T6757] ubi0: scanning is finished [ 73.886567][ T6757] ubi0: empty MTD device detected [ 73.982394][ T6757] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 73.984593][ T6757] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 73.986950][ T6757] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 73.988896][ T6757] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 73.992297][ T6757] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 73.994270][ T6757] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 73.996483][ T6757] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 225879822 [ 73.999250][ T6757] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 74.002829][ T6759] ubi0: background thread "ubi_bgt0d" started, PID 6759 [ 74.046608][ T6760] tmpfs: Unknown parameter 'ota' [ 74.359727][ T57] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 74.526939][ T57] usb 6-1: config 0 has no interfaces? [ 74.529138][ T57] usb 6-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 74.547868][ T57] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.572384][ T57] usb 6-1: config 0 descriptor?? [ 74.909191][ T6780] Invalid logical block size (50331648) [ 74.935093][ T6782] netlink: 12 bytes leftover after parsing attributes in process `syz.3.198'. [ 75.024481][ T6787] program syz.3.199 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.034066][ T6803] ipt_REJECT: ECHOREPLY no longer supported. [ 76.910384][ T6830] bridge1: entered promiscuous mode [ 76.912555][ T6830] bridge1: entered allmulticast mode [ 76.925101][ T6830] team0: Port device bridge1 added [ 76.956912][ T57] usb 6-1: USB disconnect, device number 2 [ 77.956837][ T6854] netlink: 4 bytes leftover after parsing attributes in process `syz.0.220'. [ 78.648742][ T6875] afs: Unknown parameter 'dynba8\'OPxJ' [ 79.024746][ T6891] netlink: 'syz.2.228': attribute type 7 has an invalid length. [ 79.027805][ T6891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.228'. [ 80.433849][ T6926] ipt_REJECT: ECHOREPLY no longer supported. [ 81.062217][ T64] cfg80211: failed to load regulatory.db [ 83.129822][ T1319] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 83.449757][ T1319] usb 8-1: Using ep0 maxpacket: 16 [ 83.453003][ T1319] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 83.455888][ T1319] usb 8-1: config 0 has no interfaces? [ 83.457503][ T1319] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 83.460166][ T1319] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.463872][ T1319] usb 8-1: config 0 descriptor?? [ 83.478435][ T7011] ubi0: detaching mtd0 [ 83.482482][ T7011] ubi0: mtd0 is detached [ 83.726639][ T7017] overlayfs: failed to resolve './file0': -2 [ 83.875570][ T6997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.880063][ T6997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.883706][ T8] usb 8-1: USB disconnect, device number 7 [ 84.511469][ T7032] netlink: 56 bytes leftover after parsing attributes in process `syz.3.270'. [ 84.572782][ T7035] FAULT_INJECTION: forcing a failure. [ 84.572782][ T7035] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 84.576690][ T7035] CPU: 1 UID: 0 PID: 7035 Comm: syz.2.271 Not tainted 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 84.579726][ T7035] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 84.582809][ T7035] Call Trace: [ 84.583785][ T7035] [ 84.584659][ T7035] dump_stack_lvl+0x16c/0x1f0 [ 84.586033][ T7035] should_fail_ex+0x497/0x5b0 [ 84.587405][ T7035] _copy_to_user+0x32/0xd0 [ 84.588722][ T7035] simple_read_from_buffer+0xd0/0x160 [ 84.590288][ T7035] proc_fail_nth_read+0x198/0x270 [ 84.591754][ T7035] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 84.593381][ T7035] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 84.594987][ T7035] vfs_read+0x1df/0xbe0 [ 84.596206][ T7035] ? __fget_files+0x1fc/0x3a0 [ 84.597584][ T7035] ? __pfx___mutex_lock+0x10/0x10 [ 84.599061][ T7035] ? __pfx_vfs_read+0x10/0x10 [ 84.600466][ T7035] ? __fget_files+0x206/0x3a0 [ 84.601834][ T7035] ksys_read+0x12b/0x250 [ 84.603071][ T7035] ? __pfx_ksys_read+0x10/0x10 [ 84.604478][ T7035] __do_fast_syscall_32+0x73/0x120 [ 84.605962][ T7035] do_fast_syscall_32+0x32/0x80 [ 84.607380][ T7035] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 84.609232][ T7035] RIP: 0023:0xf706e579 [ 84.610418][ T7035] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 84.615945][ T7035] RSP: 002b:00000000f5060590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 84.618359][ T7035] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5060620 [ 84.620642][ T7035] RDX: 000000000000000f RSI: 00000000f73a3ff4 RDI: 0000000000000000 [ 84.622922][ T7035] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 84.625212][ T7035] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 84.627490][ T7035] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 84.629781][ T7035] [ 85.569030][ T7058] input: syz1 as /devices/virtual/input/input6 [ 85.576805][ T7058] FAULT_INJECTION: forcing a failure. [ 85.576805][ T7058] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.580856][ T7058] CPU: 2 UID: 0 PID: 7058 Comm: syz.2.279 Not tainted 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 85.583937][ T7058] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.587051][ T7058] Call Trace: [ 85.588026][ T7058] [ 85.588904][ T7058] dump_stack_lvl+0x16c/0x1f0 [ 85.590274][ T7058] should_fail_ex+0x497/0x5b0 [ 85.591641][ T7058] _copy_from_user+0x2e/0xd0 [ 85.593005][ T7058] input_event_from_user+0x22d/0x3b0 [ 85.594539][ T7058] ? __pfx_input_event_from_user+0x10/0x10 [ 85.596228][ T7058] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 85.597947][ T7058] ? input_event+0x8e/0xa0 [ 85.599265][ T7058] uinput_write+0xbb6/0x12b0 [ 85.600635][ T7058] ? __pfx_uinput_write+0x10/0x10 [ 85.602094][ T7058] ? bpf_lsm_file_permission+0x9/0x10 [ 85.603641][ T7058] ? security_file_permission+0x71/0x210 [ 85.605263][ T7058] ? __pfx_uinput_write+0x10/0x10 [ 85.606831][ T7058] vfs_write+0x24c/0x1150 [ 85.608458][ T7058] ? __fget_files+0x1fc/0x3a0 [ 85.609839][ T7058] ? __pfx_lock_release+0x10/0x10 [ 85.611306][ T7058] ? __pfx_vfs_write+0x10/0x10 [ 85.612833][ T7058] ? lock_acquire+0x2f/0xb0 [ 85.614664][ T7058] ? __fget_files+0x40/0x3a0 [ 85.616535][ T7058] ? __fget_files+0x206/0x3a0 [ 85.618417][ T7058] ksys_write+0x207/0x250 [ 85.620179][ T7058] ? __pfx_ksys_write+0x10/0x10 [ 85.622161][ T7058] __do_fast_syscall_32+0x73/0x120 [ 85.624215][ T7058] do_fast_syscall_32+0x32/0x80 [ 85.626196][ T7058] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 85.628770][ T7058] RIP: 0023:0xf706e579 [ 85.630666][ T7058] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 85.637090][ T7058] RSP: 002b:00000000f503f55c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 85.637111][ T7058] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000000 [ 85.637118][ T7058] RDX: 000000000000fe4f RSI: 0000000000000000 RDI: 0000000000000000 [ 85.637124][ T7058] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 85.637130][ T7058] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 85.637136][ T7058] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 85.637149][ T7058] [ 85.664259][ T64] hid-generic 0000:0000:0003.0002: unknown main item tag 0x6 [ 85.666518][ T64] hid-generic 0000:0000:0003.0002: unknown main item tag 0x2 [ 85.668642][ T64] hid-generic 0000:0000:0003.0002: unknown main item tag 0x3 [ 85.671657][ T64] hid-generic 0000:0000:0003.0002: unknown main item tag 0x2 [ 85.673796][ T64] hid-generic 0000:0000:0003.0002: unknown main item tag 0x7 [ 85.675898][ T64] hid-generic 0000:0000:0003.0002: unknown main item tag 0x2 [ 85.678007][ T64] hid-generic 0000:0000:0003.0002: unknown main item tag 0x3 [ 85.684506][ T64] hid-generic 0000:0000:0003.0002: unknown main item tag 0x2 [ 85.699819][ T64] hid-generic 0000:0000:0003.0002: unknown main item tag 0x7 [ 85.701951][ T64] hid-generic 0000:0000:0003.0002: unknown main item tag 0x7 [ 85.704061][ T64] hid-generic 0000:0000:0003.0002: unknown main item tag 0x2 [ 85.706165][ T64] hid-generic 0000:0000:0003.0002: unknown main item tag 0x3 [ 85.711546][ T64] hid-generic 0000:0000:0003.0002: hidraw1: HID v0.00 Device [syz1] on syz0 [ 85.757642][ T7066] input: syz1 as /devices/virtual/input/input7 [ 85.939747][ T5945] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 86.091867][ T5945] usb 8-1: config index 0 descriptor too short (expected 28009, got 36) [ 86.094324][ T5945] usb 8-1: config 116 has too many interfaces: 105, using maximum allowed: 32 [ 86.096882][ T5945] usb 8-1: config 116 has an invalid descriptor of length 48, skipping remainder of the config [ 86.100867][ T5945] usb 8-1: config 116 has 0 interfaces, different from the descriptor's value: 105 [ 86.103551][ T5945] usb 8-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 86.106151][ T5945] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.389058][ T5945] usb 8-1: string descriptor 0 read error: -71 [ 86.394450][ T5945] usb 8-1: USB disconnect, device number 8 [ 86.564334][ T7079] [U] M٭q& K4 [ 86.565811][ T7079] [U] [)U}ǔJ}Nsef* nZf[F_h'W"x~;vA)^`1C':zFOb *?۟czs<8zN񷐚Ey TT<$cR斻/Vg {y~Y5\;zDxyA"xIf{`A$㭡55?samo*K [ 86.573365][ T7078] [U] [ 86.854575][ T7091] ubi0: attaching mtd0 [ 86.857247][ T7091] ubi0: scanning is finished [ 86.860013][ T7091] ------------[ cut here ]------------ [ 86.861849][ T7091] notifier callback ubi_wl_reboot_notifier already registered [ 86.862474][ T7091] WARNING: CPU: 2 PID: 7091 at kernel/notifier.c:23 notifier_chain_register+0x157/0x420 [ 86.867505][ T7091] Modules linked in: [ 86.869010][ T7091] CPU: 2 UID: 0 PID: 7091 Comm: syz.2.289 Not tainted 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 86.873473][ T7091] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.876622][ T7091] RIP: 0010:notifier_chain_register+0x157/0x420 [ 86.878892][ T7091] Code: 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 80 3c 02 00 0f 85 c2 02 00 00 49 8b 75 00 48 c7 c7 20 10 4c 8b e8 9a 78 f4 ff 90 <0f> 0b 90 90 bb ef ff ff ff e8 9b b0 33 00 89 d8 48 83 c4 18 5b 5d [ 86.884996][ T7091] RSP: 0018:ffffc90026d2fa28 EFLAGS: 00010286 [ 86.886822][ T7091] RAX: 0000000000000000 RBX: ffff8880478bd8c8 RCX: ffffc9000c402000 [ 86.889767][ T7091] RDX: 0000000000080000 RSI: ffffffff815a17d6 RDI: 0000000000000001 [ 86.892245][ T7091] RBP: 000000007fffffff R08: 0000000000000001 R09: 0000000000000000 [ 86.894581][ T7091] R10: 0000000000000001 R11: 0000000000000002 R12: 0000000000000001 [ 86.896898][ T7091] R13: ffff8880478bd8c8 R14: ffffffff8f6142a8 R15: dffffc0000000000 [ 86.899202][ T7091] FS: 0000000000000000(0000) GS:ffff88802b600000(0063) knlGS:00000000f5060b40 [ 86.901912][ T7091] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 86.903818][ T7091] CR2: 00000000f7170360 CR3: 000000007218e000 CR4: 0000000000352ef0 [ 86.906118][ T7091] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 86.908421][ T7091] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 86.910834][ T7091] Call Trace: [ 86.911808][ T7091] [ 86.912691][ T7091] ? __warn+0xea/0x3c0 [ 86.913886][ T7091] ? preempt_schedule_notrace+0x62/0xe0 [ 86.915481][ T7091] ? notifier_chain_register+0x157/0x420 [ 86.917106][ T7091] ? report_bug+0x3c0/0x580 [ 86.918433][ T7091] ? handle_bug+0x54/0xa0 [ 86.919781][ T7091] ? exc_invalid_op+0x17/0x50 [ 86.921578][ T7091] ? asm_exc_invalid_op+0x1a/0x20 [ 86.923045][ T7091] ? __warn_printk+0x1a6/0x350 [ 86.924439][ T7091] ? notifier_chain_register+0x157/0x420 [ 86.926045][ T7091] ? notifier_chain_register+0x156/0x420 [ 86.927667][ T7091] blocking_notifier_chain_register+0x76/0xd0 [ 86.929433][ T7091] ubi_wl_init+0x1018/0x17b0 [ 86.930856][ T7091] ubi_attach+0x1cdd/0x4dc0 [ 86.932202][ T7091] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 86.934031][ T7091] ? lockdep_init_map_type+0x16d/0x7d0 [ 86.935597][ T7091] ? __pfx_ubi_attach+0x10/0x10 [ 86.937012][ T7091] ? ubi_attach_mtd_dev+0x1543/0x3590 [ 86.938566][ T7091] ubi_attach_mtd_dev+0x158f/0x3590 [ 86.940164][ T7091] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 86.941784][ T7091] ? __pfx_get_mtd_device+0x10/0x10 [ 86.943303][ T7091] ctrl_cdev_ioctl+0x339/0x3d0 [ 86.944729][ T7091] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 86.946268][ T7091] ? __fget_files+0x206/0x3a0 [ 86.947636][ T7091] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 86.949205][ T7091] compat_ptr_ioctl+0x6b/0xa0 [ 86.950700][ T7091] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 86.952255][ T7091] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 86.953797][ T7091] __do_fast_syscall_32+0x73/0x120 [ 86.955277][ T7091] do_fast_syscall_32+0x32/0x80 [ 86.956700][ T7091] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 86.958528][ T7091] RIP: 0023:0xf706e579 [ 86.959815][ T7091] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 86.965335][ T7091] RSP: 002b:00000000f506055c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 86.967722][ T7091] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000040186f40 [ 86.970113][ T7091] RDX: 0000000020000502 RSI: 0000000000000000 RDI: 0000000000000000 [ 86.972393][ T7091] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 86.974668][ T7091] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 86.976975][ T7091] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 86.979285][ T7091] [ 86.980268][ T7091] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 86.982377][ T7091] CPU: 2 UID: 0 PID: 7091 Comm: syz.2.289 Not tainted 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 86.985394][ T7091] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.988485][ T7091] Call Trace: [ 86.989469][ T7091] [ 86.990387][ T7091] dump_stack_lvl+0x3d/0x1f0 [ 86.991733][ T7091] panic+0x71d/0x800 [ 86.992885][ T7091] ? __pfx_panic+0x10/0x10 [ 86.994188][ T7091] ? show_trace_log_lvl+0x29d/0x3d0 [ 86.995701][ T7091] ? notifier_chain_register+0x157/0x420 [ 86.997331][ T7091] check_panic_on_warn+0xab/0xb0 [ 86.998766][ T7091] __warn+0xf6/0x3c0 [ 86.999974][ T7091] ? preempt_schedule_notrace+0x62/0xe0 [ 87.001594][ T7091] ? notifier_chain_register+0x157/0x420 [ 87.003217][ T7091] report_bug+0x3c0/0x580 [ 87.004486][ T7091] handle_bug+0x54/0xa0 [ 87.005714][ T7091] exc_invalid_op+0x17/0x50 [ 87.007042][ T7091] asm_exc_invalid_op+0x1a/0x20 [ 87.008530][ T7091] RIP: 0010:notifier_chain_register+0x157/0x420 [ 87.010598][ T7091] Code: 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 80 3c 02 00 0f 85 c2 02 00 00 49 8b 75 00 48 c7 c7 20 10 4c 8b e8 9a 78 f4 ff 90 <0f> 0b 90 90 bb ef ff ff ff e8 9b b0 33 00 89 d8 48 83 c4 18 5b 5d [ 87.016272][ T7091] RSP: 0018:ffffc90026d2fa28 EFLAGS: 00010286 [ 87.018095][ T7091] RAX: 0000000000000000 RBX: ffff8880478bd8c8 RCX: ffffc9000c402000 [ 87.020505][ T7091] RDX: 0000000000080000 RSI: ffffffff815a17d6 RDI: 0000000000000001 [ 87.022829][ T7091] RBP: 000000007fffffff R08: 0000000000000001 R09: 0000000000000000 [ 87.025156][ T7091] R10: 0000000000000001 R11: 0000000000000002 R12: 0000000000000001 [ 87.027472][ T7091] R13: ffff8880478bd8c8 R14: ffffffff8f6142a8 R15: dffffc0000000000 [ 87.029859][ T7091] ? __warn_printk+0x1a6/0x350 [ 87.031285][ T7091] ? notifier_chain_register+0x156/0x420 [ 87.032979][ T7091] blocking_notifier_chain_register+0x76/0xd0 [ 87.034770][ T7091] ubi_wl_init+0x1018/0x17b0 [ 87.036159][ T7091] ubi_attach+0x1cdd/0x4dc0 [ 87.037534][ T7091] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 87.039447][ T7091] ? lockdep_init_map_type+0x16d/0x7d0 [ 87.041088][ T7091] ? __pfx_ubi_attach+0x10/0x10 [ 87.042553][ T7091] ? ubi_attach_mtd_dev+0x1543/0x3590 [ 87.044130][ T7091] ubi_attach_mtd_dev+0x158f/0x3590 [ 87.045681][ T7091] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 87.047335][ T7091] ? __pfx_get_mtd_device+0x10/0x10 [ 87.048874][ T7091] ctrl_cdev_ioctl+0x339/0x3d0 [ 87.050345][ T7091] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 87.051894][ T7091] ? __fget_files+0x206/0x3a0 [ 87.053303][ T7091] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 87.054872][ T7091] compat_ptr_ioctl+0x6b/0xa0 [ 87.056258][ T7091] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 87.057850][ T7091] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 87.059450][ T7091] __do_fast_syscall_32+0x73/0x120 [ 87.061022][ T7091] do_fast_syscall_32+0x32/0x80 [ 87.062499][ T7091] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 87.064362][ T7091] RIP: 0023:0xf706e579 [ 87.065581][ T7091] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 87.071272][ T7091] RSP: 002b:00000000f506055c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 87.073739][ T7091] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000040186f40 [ 87.076065][ T7091] RDX: 0000000020000502 RSI: 0000000000000000 RDI: 0000000000000000 [ 87.078411][ T7091] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 87.080814][ T7091] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 87.083131][ T7091] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 87.085475][ T7091] [ 87.086987][ T7091] Kernel Offset: disabled [ 87.088287][ T7091] Rebooting in 86400 seconds.. VM DIAGNOSIS: 19:00:04 Registers: info registers vcpu 0 CPU#0 RAX=00000000001b4a11 RBX=0000000000000000 RCX=ffffffff8b1a8889 RDX=0000000000000000 RSI=ffffffff8b4cd300 RDI=ffffffff8bb17300 RBP=fffffbfff1b52ef8 RSP=ffffffff8da07df8 R8 =0000000000000001 R9 =ffffed1005686fed R10=ffff88802b437f6b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8da977c0 R14=ffffffff901cf7d0 R15=0000000000000000 RIP=ffffffff8b2014b0 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020000028 CR3=0000000069442000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 EAX=891a55e2 EBX=ffffffff ECX=891a5330 EDX=ffffffff ESI=f73d5078 EDI=f646d008 EBP=f7f05610 ESP=ff9c1f90 EIP=f70ab23c EFL=00000286 [--S--P-] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0023 00000000 ffffffff 00c0fb00 DPL=3 CS32 [-RA] SS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 00000000 ffffffff 00c00000 GS =0063 56fee440 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 00000000 ffffffff 00c00000 TR =0040 0004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c3327a1 CR3=0000000074138000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85145dd5 RDI=ffffffff9a66a200 RBP=ffffffff9a66a1c0 RSP=ffffc90026d2f388 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000006 R12=0000000000000000 R13=0000000000000020 R14=ffffffff85145d70 R15=0000000000000000 RIP=ffffffff85145dff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b600000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7170360 CR3=000000007218e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000001 Opmask01=0000000000000010 Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc22789220 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6565656565656565 6565656565656565 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffff0000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 696e696620736920 676e696e6e616373 203a30696275205d 3139303754205b00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6364636620736320 6764636464616373 2030306362752057 3133303754205100 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5220000030303030 3030200000332030 0000303d20656200 00176e694b2a206e ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5220000022303030 3030200000070501 0000303520653100 0014563541202016 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6ca4437228e68a4b fc738995aa0d0f72 4ed99c7089ec310b 9d14563f5374a173 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7d650a0a6d636c64 65692a6f627e2a6c 0a0a3a37786f680a 001dbc8a4120b1e7 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000000db09f RBX=0000000000000003 RCX=ffffffff8b1a8889 RDX=0000000000000000 RSI=ffffffff8b4cd300 RDI=ffffffff8bb17300 RBP=ffffed1003a52488 RSP=ffffc9000049fe08 R8 =0000000000000001 R9 =ffffed10056e6fed R10=ffff88802b737f6b R11=0000000000000000 R12=0000000000000003 R13=ffff88801d292440 R14=ffffffff901cf7d0 R15=0000000000000000 RIP=ffffffff8b1a9c6f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000005852899c CR3=000000002acea000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000044000001 Opmask01=0000000000000000 Opmask02=000000007ffeffff Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4b5f5455504e495f 4449006b636f6c62 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd4f4c4980 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd4f4c4310 0000003000000010 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000ff00000000 00ff000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 49d9a58d5e480202 7373256541807cb4 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73737373737373e2 7373737373737373 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d25203a7325206b 6e696c6d79732065 7461657263206f74 2064656c69614600 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4800051f5600054e 4b4c49485c560540 5144405746054a51 054140494c444600 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000101 0000000000000000 32706f6f6c2f6b63 6f6c622f6c617574 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000d1 0000000000000031 7761726469682f77 61726469682f3230 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 69305f474f5b647c 69303b2433273f39 7b27697a787c7a30 23333a3a38263342 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a3a263e383a3a26 39383a3a2638383a 3a263b383a3a263a 383a3a26493b3a3a ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692054524f50202c 2064696c61696d20 0070253a20252054 524f504d49005452 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692020520050202c 2025204f504d4900 0061253a20252000 2527204d49005452 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000