last executing test programs: 3.968468685s ago: executing program 2 (id=44): signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000800)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="240000002000010300000000fbdbdf2502008008000000030800000008000b00ff000000"], 0x24}}, 0x40) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioperm(0x0, 0x8000, 0x2) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f00800", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) r6 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r6) r7 = socket$vsock_stream(0x28, 0x1, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r8, 0x40045731, &(0x7f0000000140)=0x1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3dc658b5d3136a608009ff99e87e875554ac26d86c0c76db74e0a505b6bb4810b7517173cc6ca365be71db98e8cdc83f52964e86", @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB=',\x00']) recvmsg(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000300)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000380)=""/79, 0x4f}, {&(0x7f0000000180)=""/45, 0x2d}, {&(0x7f0000000440)=""/86, 0x56}, {&(0x7f00000004c0)=""/111, 0x6f}, {&(0x7f0000000600)=""/140, 0x8c}, {&(0x7f0000000540)}], 0x6}, 0x1) 2.989536952s ago: executing program 2 (id=47): ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x70ffb53cc4dd4bc0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[]) 2.919622123s ago: executing program 1 (id=50): socket$key(0xf, 0x3, 0x2) r0 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x1a1002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0xffffffb3, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet6(0xa, 0x6, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x5, 0x8000, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x1c, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r6, @ANYRESHEX=0x0, @ANYRES16=r5, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0xfca804a0, 0xe, 0x0, &(0x7f0000000800)="b80000050000000073c430f8a2e6", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) listen(r5, 0x80080400) io_uring_enter(0xffffffffffffffff, 0x2def, 0x4000, 0x0, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4) r8 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x1, 0x1) fchdir(r9) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 2.440138235s ago: executing program 3 (id=54): socket$key(0xf, 0x3, 0x2) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x1a1002, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0xffffffb3, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet6(0xa, 0x6, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x5, 0x8000, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x1c, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r6, @ANYRESHEX=0x0, @ANYRES16=r5, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0xfca804a0, 0xe, 0x0, &(0x7f0000000800)="b80000050000000073c430f8a2e6", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) listen(r5, 0x80080400) io_uring_enter(0xffffffffffffffff, 0x2def, 0x4000, 0x0, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4) r8 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x1, 0x1) fchdir(r9) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 2.137172688s ago: executing program 2 (id=55): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141101) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000009, 0x80010, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000001c0)={0x1}) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$UHID_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000140)=""/32, 0x20, 0x4, 0xffffffff, 0x0, 0x0, 0x6}}, 0x11c) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000080), 0x4) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r3) 1.927211651s ago: executing program 1 (id=56): signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000800)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="240000002000010300000000fbdbdf2502008008000000030800000008000b00ff000000"], 0x24}}, 0x40) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioperm(0x0, 0x8000, 0x2) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f00800", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) r6 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r6) r7 = socket$vsock_stream(0x28, 0x1, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r8, 0x40045731, &(0x7f0000000140)=0x1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3dc658b5d3136a608009ff99e87e875554ac26d86c0c76db74e0a505b6bb4810b7517173cc6ca365be71db98e8cdc83f52964e86", @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB=',\x00']) recvmsg(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000300)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000380)=""/79, 0x4f}, {&(0x7f0000000180)=""/45, 0x2d}, {&(0x7f0000000440)=""/86, 0x56}, {&(0x7f00000004c0)=""/111, 0x6f}, {&(0x7f0000000600)=""/140, 0x8c}, {&(0x7f0000000540)}], 0x6}, 0x1) 1.300087773s ago: executing program 0 (id=57): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0xffffffff, 0x141141) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) ioctl$sock_SIOCETHTOOL(r1, 0x8943, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000180)) dup(r0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0x77, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x0, 0x6, 0xf2ea}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x0, 0x2449, 0xfffffffffffffffd}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000040)={{@my=0x1}, @any, 0x0, 0x1, 0x9, 0xfffffffffffffffd, 0x80004}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r3, 0x7a4, &(0x7f0000000380)={{@host}, 0x8199, 0x800000000000000, 0x1}) 1.297703368s ago: executing program 0 (id=65): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$tipc(r4, &(0x7f0000000180)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44010}, 0x0) (fail_nth: 20) 1.22903808s ago: executing program 3 (id=58): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000fcffffffb7020000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000180)='./file0/file0\x00', 0x0, 0x0, 0x10000, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=unix,debug<0x0000000000000000,access=user,a', @ANYRESDEC=0xee01, @ANYBLOB=',access=user,posixacl,loose,smackfstransmute=bridge0\x00,fsmagic=0x0000000000000007,\x00']) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x17, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002000010300000007fbdbdf25020000040000000008000000"], 0x24}}, 0x40) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) pipe2$9p(&(0x7f0000000100), 0x80000) r4 = openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a45320, &(0x7f00000000c0)={{0x80, 0xf7}, 'port1\x00', 0x3ab, 0x2062f, 0x3, 0x7, 0x0, 0xc, 0x3fc, 0x0, 0x7, 0xfd}) readv(r4, &(0x7f0000000700)=[{&(0x7f0000000080)=""/63, 0x3f}], 0x1) openat$sequencer(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = accept4$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14, 0x80800) setsockopt$packet_fanout_data(r8, 0x107, 0x16, &(0x7f00000006c0)={0x0, &(0x7f0000000680)}, 0x21) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000001000030400000000fedbdf2500007400", @ANYRES32=r6, @ANYBLOB="00087e4a07500500280012800b0001a80d64676500001800028005011900020000000c00240001000100000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.225363845s ago: executing program 0 (id=67): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14b27e, 0x0) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r3, 0x7) copy_file_range(r2, 0x0, r2, 0x0, 0x81, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) (async) open(&(0x7f0000000180)='./bus\x00', 0x14b27e, 0x0) (async) creat(&(0x7f0000000140)='./bus\x00', 0x0) (async) ftruncate(r3, 0x7) (async) copy_file_range(r2, 0x0, r2, 0x0, 0x81, 0x0) (async) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 1.165665282s ago: executing program 2 (id=59): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x80, 0x5, 0x10009}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x100000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) openat$fuse(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) 1.128025167s ago: executing program 0 (id=60): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141101) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000009, 0x80010, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000001c0)={0x1}) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$UHID_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000140)=""/32, 0x20, 0x4, 0xffffffff, 0x0, 0x0, 0x6}}, 0x11c) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000080), 0x4) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r3) 808.929496ms ago: executing program 1 (id=61): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), 0xffffffffffffffff) r2 = inotify_init1(0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) ftruncate(r3, 0x6000000) inotify_add_watch(r2, &(0x7f0000000080)='./file0\x00', 0x22000401) copy_file_range(r3, 0x0, r3, &(0x7f00000004c0)=0x100, 0x9, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000540)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010100000000000000000400000014000180060005"], 0x28}}, 0x0) 794.615054ms ago: executing program 2 (id=62): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="020029bd7000fcdbdf253d000000080001007063690011000500303030303a30303a31302e30000000001c008200736f75726300000000746963617374000000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x880}, 0x80) syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp\x00') 690.163244ms ago: executing program 2 (id=63): r0 = socket(0x10, 0x3, 0x0) fcntl$dupfd(r0, 0x406, r0) syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) unshare(0x600) pipe(&(0x7f00000001c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) userfaultfd(0x80001) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3fa, 0x0, 0x80000000, 0x9, 0x0, 0x0, 0x9, 0x5}, 0x0, 0x0) 686.86358ms ago: executing program 1 (id=64): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000013b80)=ANY=[@ANYBLOB="280000001b14010000000000000000000800030001fc0000080001000000000008003f"], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x10) 630.969979ms ago: executing program 1 (id=66): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0xffffffff, 0x141141) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) ioctl$sock_SIOCETHTOOL(r1, 0x8943, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000180)) dup(r0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0x77, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x0, 0x6, 0xf2ea}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x0, 0x2449, 0xfffffffffffffffd}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000040)={{@my=0x1}, @any, 0x0, 0x1, 0x9, 0xfffffffffffffffd, 0x80004}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r3, 0x7a4, &(0x7f0000000380)={{@host}, 0x8199, 0x800000000000000, 0x1}) 288.602002ms ago: executing program 3 (id=68): pipe2(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = memfd_create(&(0x7f00000000c0)='\xe9`\x10\x98[\x82?O3#\xfa\x02\xdc\x96\xa1\xbc\x80\x00+\xb6O', 0x0) write$binfmt_elf32(r1, &(0x7f0000000080)=ANY=[], 0x38) fcntl$setpipe(r0, 0x407, 0x8001a0) splice(r0, 0x0, r2, 0x0, 0x200002, 0xf000000) 230.387895ms ago: executing program 1 (id=69): open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="120000000700000008000000", @ANYRES32], 0x48) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000005c0), 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000480), 0x2, 0x80042) r3 = dup(r2) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000009c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000600)={0x2, 0x0, 0x0, 0xfdfdfffc}) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv-cbc-aes-sha256-neon\x00'}, 0x58) r5 = accept4(r0, 0x0, 0x0, 0x0) syz_usb_connect(0x6, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000400), 0x6, 0x101802) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000000440)=""/71) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) r8 = syz_open_dev$hidraw(&(0x7f0000001c40), 0x1, 0x4b842) write$hidraw(r8, &(0x7f0000000bc0), 0xffffffae) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100fdffffff000000003900000008000300", @ANYRES32=r11, @ANYBLOB="14005a800c"], 0x30}}, 0x0) r12 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r12, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x2, 0x1, 0x0, 0x2, 0x2}, 0x10}}, 0x0) sendmmsg(r12, &(0x7f0000001100), 0x0, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080025bd7000fddbdf25520000000800cb00ca5c00000800cb000700000005008900190000000600480005000000060048000500000005808800000000000800cb00a41100000400cf0005008800080000000a0006000802110000000000"], 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x24004090) 180.395674ms ago: executing program 3 (id=70): bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) setrlimit(0x7, &(0x7f0000000740)={0x0, 0x7fff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000200)=0xffffffff, 0x4) sendmsg$unix(r1, &(0x7f0000000180)={&(0x7f0000000200)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0}, 0x40c0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4048aecb, &(0x7f0000000080)=ANY=[]) ioctl$KVM_GET_VCPU_EVENTS(r5, 0xc048aeca, &(0x7f0000000100)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@decl_tag={0x2, 0x0, 0x0, 0x11, 0x5, 0xffffffffffffffff}]}, {0x0, [0x2e, 0x61]}}, 0x0, 0x2c, 0x0, 0x1, 0x29d, 0x0, @void, @value}, 0x28) r6 = socket(0x40000000015, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x2713, 0x0, &(0x7f0000000040)) 180.178947ms ago: executing program 3 (id=71): r0 = socket$netlink(0x10, 0x3, 0x0) iopl(0x3) r1 = fsopen(&(0x7f0000000000)='qnx6\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000080)='\x00\x00\x00\x00\x00\x00', 0x0, 0xffffffffffffff9c) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000000500000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r2, 0x0, 0x4}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x27) r4 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r4) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) syslog(0x0, 0x0, 0x0) fsync(0xffffffffffffffff) getpeername(r0, &(0x7f0000001100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000001180)=0x80) write$binfmt_script(r5, &(0x7f00000004c0)={'#! ', './file0'}, 0x1f7000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r6, 0xffff0000, 0x10, 0x0, &(0x7f00000009c0)="2b206d0748010097737ea49da2aa7bbf", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 71.844904ms ago: executing program 0 (id=72): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40012042) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x9d071, r1, 0xc00c2000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'dummy0\x00', 0x0}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) writev(r3, &(0x7f0000000900)=[{&(0x7f0000000800)='@', 0x1}], 0x1) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 254.607µs ago: executing program 0 (id=73): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newtaction={0x1e0, 0x30, 0x1, 0x0, 0x25dfdbfd, {}, [{0x1cc, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0x80}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_mpls={0x184, 0x20, 0x0, 0x0, {{0x9}, {0x68, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x5921}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PROTO={0x6, 0x4, 0x22f0}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8914}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x3, 0x1, 0x2, 0x6, 0x4}, 0x4}}, @TCA_MPLS_LABEL={0x8, 0x5, 0xc17d7}, @TCA_MPLS_PROTO={0x6, 0x4, 0x22eb}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8808}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0xf4, 0x6, "7ca3f80e63c3ebb80dfe0f9de303bd3c4fef686b86ded7c3dd6527feb9a5dca0abc493913a2875af5675c4fb593f56779e9a728ccdeaff2e6d03f049a7ee1c504ec3b82e0d28a335cecc8508598bb9b378a55d9605443c64fd67f2c6e4359a0fd48b0f9cf94bebd26a04246893d79e11961c23322cbb055aab55571ca273a1c164936afc6f817da28ce44580e84e7ed8b8846bd569dfd5406c64b7fdca5134c9d9772198c466b128ec00e1f4670220fde49b531a85d97b6805312c18fdad7a6c4753686874f8dab4e65d49f3d6abd09b3682752679c4d44a97e3104a216ee3c3bbbb8bf6e7f63ea6ef55f82532d2bc61"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000000)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) inotify_init() r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)=@newtaction={0xa8, 0x30, 0x1, 0x0, 0x0, {}, [{0x94, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa8}}, 0x8000) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000100)="bdbbcef285513ed7767e37ab6c5a07423ef89880a49764e3fa22772a11a0dd54a5ba94108aa9505bd348f6927219450b92eb1832a2c775fcc820c3c8cc9f8d974ef5941347cb3b79c143fc8c4f8a00d4905d022bd6b7691da2492657e5af52ac331594ac99ba87a30b9238b25a5531a2dfdb06b0f2cdc0b2de12caaf604fd4e5c4e2bcc32d7234250e722f7ef7d2973b40706519ed7af7bf6f589c110ceb48ea2c09ca98127f1faf1e87fbdeb73a7936d59c6626", 0xb4) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) 0s ago: executing program 3 (id=74): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r3, r4, 0x4, 0x0, 0x0, @void, @value}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r5, r6, 0x26, 0x0, 0x0, @void, @value}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newsa={0x134, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x4e21}, {@in=@remote, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}]}, 0x134}, 0x1, 0x0, 0x0, 0x40040}, 0x0) process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) r8 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$GIO_UNISCRNMAP(r8, 0x4b69, &(0x7f0000000100)=""/147) r9 = socket$key(0xf, 0x3, 0x2) r10 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000280)=0x2) sendmsg$key(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x4) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x16, 0x0, 0x7, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r11, 0x0, 0x0}, 0x20) r12 = dup(r0) ioctl$VT_GETSTATE(r12, 0x5603, &(0x7f0000000240)={0x4, 0x6, 0x2}) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a0006000001000003f1dc000000000040000200"/83], 0x80}}, 0x0) sendmmsg(r9, &(0x7f0000000180), 0x400008a, 0x0) 0s ago: executing program 3 (id=75): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) close(r1) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0xa0002000}) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1, 0x1}, 0x10) move_mount(r1, 0x0, 0xffffffffffffff9c, 0x0, 0x45) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@mcast2, 0x0}, &(0x7f00000002c0)=0x14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x301, 0x6c, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x58}]}]}, 0x5c}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000300)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, r4}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000340)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYBLOB="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", @ANYRESOCT=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000005000000b7000000000000009500000000000000", @ANYRES8=r1], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:2289' (ED25519) to the list of known hosts. [ 42.100489][ T5877] cgroup: Unknown subsys name 'net' [ 42.225971][ T5877] cgroup: Unknown subsys name 'cpuset' [ 42.230040][ T5877] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 43.338599][ T5877] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.108219][ T5937] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.110670][ T5937] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.113453][ T5937] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.116544][ T5937] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.118760][ T5937] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.120958][ T5937] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.123868][ T5937] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.126439][ T5937] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.128767][ T5937] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.131589][ T5937] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.135087][ T5952] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.138197][ T5952] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.138354][ T5948] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.144307][ T5948] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.147618][ T5945] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.151423][ T5945] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.152820][ T5951] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.156680][ T5951] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.161575][ T5945] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.164950][ T5951] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.505008][ T5947] chnl_net:caif_netlink_parms(): no params data found [ 47.522488][ T5936] chnl_net:caif_netlink_parms(): no params data found [ 47.576197][ T5934] chnl_net:caif_netlink_parms(): no params data found [ 47.677507][ T5938] chnl_net:caif_netlink_parms(): no params data found [ 47.731555][ T5947] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.734338][ T5947] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.737198][ T5947] bridge_slave_0: entered allmulticast mode [ 47.739858][ T5947] bridge_slave_0: entered promiscuous mode [ 47.820380][ T5947] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.822655][ T5947] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.825164][ T5947] bridge_slave_1: entered allmulticast mode [ 47.827775][ T5947] bridge_slave_1: entered promiscuous mode [ 47.907896][ T5934] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.910310][ T5934] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.913450][ T5934] bridge_slave_0: entered allmulticast mode [ 47.916849][ T5934] bridge_slave_0: entered promiscuous mode [ 47.944690][ T5936] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.947664][ T5936] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.950595][ T5936] bridge_slave_0: entered allmulticast mode [ 47.953998][ T5936] bridge_slave_0: entered promiscuous mode [ 47.986389][ T5934] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.989487][ T5934] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.992541][ T5934] bridge_slave_1: entered allmulticast mode [ 47.997996][ T5934] bridge_slave_1: entered promiscuous mode [ 48.034242][ T5947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.037258][ T5936] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.039438][ T5936] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.041764][ T5936] bridge_slave_1: entered allmulticast mode [ 48.045156][ T5936] bridge_slave_1: entered promiscuous mode [ 48.103176][ T5947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.127971][ T5936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.131348][ T5938] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.134437][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.137373][ T5938] bridge_slave_0: entered allmulticast mode [ 48.141261][ T5938] bridge_slave_0: entered promiscuous mode [ 48.147892][ T5934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.174945][ T5936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.206125][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.208956][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.211165][ T5938] bridge_slave_1: entered allmulticast mode [ 48.214142][ T5938] bridge_slave_1: entered promiscuous mode [ 48.217967][ T5934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.250252][ T5936] team0: Port device team_slave_0 added [ 48.284303][ T5947] team0: Port device team_slave_0 added [ 48.287476][ T5936] team0: Port device team_slave_1 added [ 48.321768][ T5947] team0: Port device team_slave_1 added [ 48.351825][ T5938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.358321][ T5934] team0: Port device team_slave_0 added [ 48.376012][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.378166][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.386779][ T5947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.409203][ T5938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.414176][ T5934] team0: Port device team_slave_1 added [ 48.416561][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.418636][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.426315][ T5947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.429984][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.432060][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.440009][ T5936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.497445][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.499979][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.509368][ T5934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.527672][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.529873][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.537860][ T5936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.561616][ T5938] team0: Port device team_slave_0 added [ 48.565048][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.567700][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.575993][ T5934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.591864][ T5938] team0: Port device team_slave_1 added [ 48.632161][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.634405][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.642590][ T5938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.685993][ T5947] hsr_slave_0: entered promiscuous mode [ 48.688626][ T5947] hsr_slave_1: entered promiscuous mode [ 48.692044][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.694316][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.703096][ T5938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.758880][ T5934] hsr_slave_0: entered promiscuous mode [ 48.761151][ T5934] hsr_slave_1: entered promiscuous mode [ 48.763648][ T5934] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.766077][ T5934] Cannot create hsr debugfs directory [ 48.801118][ T5936] hsr_slave_0: entered promiscuous mode [ 48.804690][ T5936] hsr_slave_1: entered promiscuous mode [ 48.806947][ T5936] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.809233][ T5936] Cannot create hsr debugfs directory [ 48.907675][ T5938] hsr_slave_0: entered promiscuous mode [ 48.909825][ T5938] hsr_slave_1: entered promiscuous mode [ 48.911843][ T5938] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.914357][ T5938] Cannot create hsr debugfs directory [ 49.153329][ T67] Bluetooth: hci3: command tx timeout [ 49.233125][ T5951] Bluetooth: hci0: command tx timeout [ 49.234550][ T67] Bluetooth: hci2: command tx timeout [ 49.242859][ T67] Bluetooth: hci1: command tx timeout [ 49.289212][ T5947] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.295990][ T5947] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.305911][ T5947] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.310656][ T5947] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.338076][ T5936] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.344744][ T5936] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.353076][ T5936] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.358103][ T5936] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.411661][ T5934] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.416039][ T5934] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.420086][ T5934] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.424765][ T5934] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.498665][ T5938] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.502936][ T5938] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.507031][ T5938] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.511045][ T5938] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.535616][ T5947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.546853][ T5936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.580851][ T5947] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.588336][ T5936] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.595475][ T91] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.598062][ T91] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.619078][ T91] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.621294][ T91] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.646248][ T91] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.648794][ T91] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.656101][ T91] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.658225][ T91] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.683623][ T5934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.718745][ T5938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.730245][ T5934] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.742598][ T5938] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.750491][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.752919][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.771174][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.773505][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.779534][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.782501][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.799599][ T91] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.802591][ T91] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.887600][ T5947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.903984][ T5936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.925820][ T5947] veth0_vlan: entered promiscuous mode [ 49.935827][ T5947] veth1_vlan: entered promiscuous mode [ 49.957717][ T5936] veth0_vlan: entered promiscuous mode [ 49.964277][ T5936] veth1_vlan: entered promiscuous mode [ 49.979903][ T5947] veth0_macvtap: entered promiscuous mode [ 49.985076][ T5947] veth1_macvtap: entered promiscuous mode [ 49.999514][ T5936] veth0_macvtap: entered promiscuous mode [ 50.003554][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.011478][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.019590][ T5936] veth1_macvtap: entered promiscuous mode [ 50.031286][ T5934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.035501][ T5947] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.039268][ T5947] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.042951][ T5947] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.046640][ T5947] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.053843][ T5938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.075570][ T5936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.079840][ T5936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.085546][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.101130][ T5936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.104912][ T5936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.110052][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.125788][ T5936] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.129155][ T5936] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.132607][ T5936] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.136983][ T5936] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.158245][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.160671][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.177613][ T5938] veth0_vlan: entered promiscuous mode [ 50.196570][ T5938] veth1_vlan: entered promiscuous mode [ 50.202616][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.205530][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.226318][ T5934] veth0_vlan: entered promiscuous mode [ 50.231963][ T5938] veth0_macvtap: entered promiscuous mode [ 50.234930][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.237398][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.241447][ T5938] veth1_macvtap: entered promiscuous mode [ 50.245668][ T5934] veth1_vlan: entered promiscuous mode [ 50.250788][ T5947] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.264169][ T91] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.266756][ T91] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.275303][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.278526][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.281483][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.286323][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.290753][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.298229][ T5934] veth0_macvtap: entered promiscuous mode [ 50.303936][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.307194][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.310356][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.314264][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.318311][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.323526][ T5934] veth1_macvtap: entered promiscuous mode [ 50.329985][ T5938] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.334228][ T5938] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.337516][ T5938] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.340365][ T5938] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.356513][ T5934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.359860][ T5934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.362901][ T5934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.366226][ T5934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.369258][ T5934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.372321][ T5934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.377036][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.384982][ T5934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.389102][ T5934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.393771][ T5934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.397979][ T5934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.401142][ T5934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.404516][ T5934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.408360][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.424000][ T5934] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.427167][ T5934] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.430481][ T5934] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.434064][ T5934] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.456284][ T91] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.459369][ T91] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.481407][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.484049][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.510610][ T91] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.519016][ T91] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.553198][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.555688][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.933203][ T5980] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 51.082836][ T5980] usb 7-1: Using ep0 maxpacket: 8 [ 51.087106][ T5980] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 51.090108][ T5980] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 51.093689][ T5980] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 51.096971][ T5980] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 51.100720][ T5980] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 51.106333][ T5980] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 51.109485][ T5980] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.233051][ T67] Bluetooth: hci3: command tx timeout [ 51.313217][ T67] Bluetooth: hci1: command tx timeout [ 51.315429][ T67] Bluetooth: hci2: command tx timeout [ 51.317659][ T67] Bluetooth: hci0: command tx timeout [ 51.319596][ T5980] usb 7-1: GET_CAPABILITIES returned 0 [ 51.328001][ T5980] usbtmc 7-1:16.0: can't read capabilities [ 51.371687][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 51.561005][ T6031] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9'. [ 51.622209][ T3544] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 51.672686][ T6016] usb 7-1: usbtmc_ioctl_clear_out_halt returned -32 [ 51.752485][ T5997] usb 7-1: USB disconnect, device number 2 [ 51.756861][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 51.772858][ T3544] usb 6-1: Using ep0 maxpacket: 32 [ 51.776866][ T3544] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 51.779401][ T3544] usb 6-1: config 0 has no interface number 0 [ 51.781314][ T3544] usb 6-1: config 0 interface 184 has no altsetting 0 [ 51.796401][ T3544] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 51.799381][ T3544] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.801866][ T3544] usb 6-1: Product: syz [ 51.803509][ T3544] usb 6-1: Manufacturer: syz [ 51.804941][ T3544] usb 6-1: SerialNumber: syz [ 51.809404][ T3544] usb 6-1: config 0 descriptor?? [ 51.812674][ T3544] smsc75xx v1.0.0 [ 51.814084][ T3544] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 51.817383][ T3544] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -22 [ 51.887563][ T6040] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 51.889743][ T6040] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 51.892874][ T6040] vhci_hcd vhci_hcd.0: Device attached [ 51.899048][ T6040] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(11) [ 51.901329][ T6040] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 51.904674][ T6040] vhci_hcd vhci_hcd.0: Device attached [ 51.908519][ T6040] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 51.913687][ T6040] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(15) [ 51.916002][ T6040] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 51.918747][ T6040] vhci_hcd vhci_hcd.0: Device attached [ 51.925279][ T6040] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(18) [ 51.927885][ T6040] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 51.930262][ T6040] vhci_hcd vhci_hcd.0: Device attached [ 51.996632][ T6051] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(21) [ 51.998735][ T6051] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 52.001180][ T6051] vhci_hcd vhci_hcd.0: Device attached [ 52.007255][ T6051] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 52.011528][ T6051] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 52.034227][ T6051] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 52.042459][ T6022] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.045428][ T6022] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.073007][ T3544] vhci_hcd: vhci_device speed not set [ 52.133075][ T3544] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 52.311326][ T6022] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.325784][ T6022] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.397270][ T6052] vhci_hcd: connection closed [ 52.397647][ T6043] vhci_hcd: connection closed [ 52.398323][ T6047] vhci_hcd: connection closed [ 52.399725][ T65] vhci_hcd: stop threads [ 52.399800][ T6041] vhci_hcd: connection reset by peer [ 52.400237][ T6045] vhci_hcd: connection closed [ 52.409979][ T65] vhci_hcd: release socket [ 52.414742][ T65] vhci_hcd: disconnect device [ 52.417955][ T65] vhci_hcd: stop threads [ 52.420756][ T65] vhci_hcd: release socket [ 52.422885][ T65] vhci_hcd: disconnect device [ 52.425861][ T65] vhci_hcd: stop threads [ 52.427925][ T65] vhci_hcd: release socket [ 52.429935][ T65] vhci_hcd: disconnect device [ 52.432154][ T65] vhci_hcd: stop threads [ 52.435111][ T65] vhci_hcd: release socket [ 52.437035][ T65] vhci_hcd: disconnect device [ 52.439087][ T65] vhci_hcd: stop threads [ 52.440782][ T65] vhci_hcd: release socket [ 52.442241][ T65] vhci_hcd: disconnect device [ 52.782949][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 53.312870][ T5951] Bluetooth: hci3: command tx timeout [ 53.403868][ T67] Bluetooth: hci1: command tx timeout [ 53.405798][ T5951] Bluetooth: hci2: command tx timeout [ 53.614760][ T6066] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 53.617048][ T6066] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 53.622547][ T6066] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 53.628247][ T6066] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 53.631108][ T6066] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 53.634760][ T6066] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 53.637902][ T6066] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 53.640343][ T6066] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 53.645547][ T6066] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 53.648852][ T6066] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 53.651300][ T6066] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 53.655377][ T6066] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 53.933937][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 53.936972][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 53.942929][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 53.963518][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 53.966893][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 53.970264][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 53.973636][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 54.201253][ T6095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20'. [ 54.374157][ T6099] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21'. [ 54.701748][ T58] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 54.707231][ T58] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 54.709854][ T58] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 54.712410][ T58] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 54.716713][ T58] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 54.719832][ T58] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 54.722344][ T58] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 54.725960][ T58] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 54.729109][ T58] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 54.731834][ T58] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 54.735068][ T58] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 54.737780][ T58] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 54.740375][ T58] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 54.743227][ T58] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 54.745862][ T58] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 54.748344][ T58] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 54.750892][ T58] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 54.753798][ T58] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 54.756424][ T58] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 54.758865][ T58] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 54.761286][ T58] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 54.763887][ T58] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 54.766404][ T58] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 54.768878][ T58] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 54.771297][ T58] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 54.773854][ T58] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 54.776445][ T58] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 54.779152][ T58] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 54.781674][ T58] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 54.784294][ T58] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 54.786821][ T58] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 54.789364][ T58] hid-generic 0004:FFFFFFFF:0000.0002: unknown main item tag 0x0 [ 54.794728][ T58] hid-generic 0004:FFFFFFFF:0000.0002: hidraw1: HID v0.00 Device [syz0] on syz0 [ 54.942850][ T5998] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 54.993282][ T5951] Bluetooth: hci0: command 0x0419 tx timeout [ 54.996992][ T6113] netlink: 4 bytes leftover after parsing attributes in process `syz.2.26'. [ 55.049356][ T9] usb 6-1: USB disconnect, device number 2 [ 55.116053][ T5998] usb 8-1: config 0 has no interfaces? [ 55.118716][ T5998] usb 8-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 55.122798][ T5998] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.131239][ T5998] usb 8-1: config 0 descriptor?? [ 55.417499][ T6129] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 55.423203][ T6129] /dev/nullb0: Can't open blockdev [ 55.632868][ T5951] Bluetooth: hci1: command 0x0c1a tx timeout [ 55.712893][ T67] Bluetooth: hci2: command 0x0c1a tx timeout [ 55.715590][ T5951] Bluetooth: hci3: command 0x0c1a tx timeout [ 55.789861][ T6135] syz.2.31: attempt to access beyond end of device [ 55.789861][ T6135] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 55.877136][ T34] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 55.879800][ T34] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 55.886059][ T34] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 55.889187][ T34] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 55.892570][ T34] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 55.896803][ T34] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 55.899666][ T34] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 55.902216][ T34] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 55.905435][ T34] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 55.908159][ T34] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 55.910916][ T34] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 55.919107][ T34] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 55.922448][ T34] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 55.927350][ T34] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 55.930899][ T34] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 55.936239][ T34] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 55.939615][ T34] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 55.943887][ T34] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 55.947314][ T34] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 55.950787][ T34] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 55.958571][ T34] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 55.962162][ T34] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 55.965585][ T34] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 55.970541][ T34] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 55.977835][ T34] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 55.983397][ T34] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 55.988956][ T34] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 55.996085][ T34] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 56.001287][ T34] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 56.009671][ T34] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 56.015622][ T34] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 56.021000][ T34] hid-generic 0004:FFFFFFFF:0000.0003: unknown main item tag 0x0 [ 56.035432][ T34] hid-generic 0004:FFFFFFFF:0000.0003: hidraw2: HID v0.00 Device [syz0] on syz0 [ 56.133029][ T5977] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 56.305470][ T5977] usb 7-1: config 0 has no interfaces? [ 56.307299][ T5977] usb 7-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 56.310033][ T5977] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.321947][ T5977] usb 7-1: config 0 descriptor?? [ 56.582105][ T6152] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 56.585694][ T6152] /dev/nullb0: Can't open blockdev [ 56.611099][ T6153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.35'. [ 56.791126][ T6153] netlink: 24 bytes leftover after parsing attributes in process `syz.0.35'. [ 56.797234][ T6153] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.801609][ T6153] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.888401][ T58] usb 8-1: USB disconnect, device number 2 [ 57.073837][ T5951] Bluetooth: hci0: command 0x0419 tx timeout [ 57.425537][ T6164] fuse: Bad value for 'fd' [ 57.472889][ T3544] vhci_hcd: vhci_device speed not set [ 57.560596][ T58] usb 7-1: USB disconnect, device number 3 [ 57.713691][ T5951] Bluetooth: hci1: command 0x0c1a tx timeout [ 57.793445][ T5951] Bluetooth: hci3: command 0x0c1a tx timeout [ 57.793487][ T67] Bluetooth: hci2: command 0x0c1a tx timeout [ 58.163999][ T6159] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 58.166228][ T6159] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 58.168404][ T6159] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 58.170594][ T6159] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 58.210629][ T6177] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 58.376952][ T6187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.43'. [ 58.634392][ T6050] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 58.642438][ T6050] hid-generic 0000:0000:0000.0004: hidraw1: HID v0.00 Device [syz1] on syz0 [ 58.656775][ T6196] 9pnet_fd: Insufficient options for proto=fd [ 58.779679][ T6197] fido_id[6197]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 58.884241][ T5309] usb usb38-port1: attempt power cycle [ 59.393108][ T5951] Bluetooth: hci0: command 0x0419 tx timeout [ 59.523198][ T5309] usb usb38-port1: unable to enumerate USB device [ 59.614591][ T40] audit: type=1326 audit(1747196998.317:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6215 comm="syz.3.51" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 59.621411][ T40] audit: type=1326 audit(1747196998.317:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6215 comm="syz.3.51" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 59.628244][ T40] audit: type=1326 audit(1747196998.317:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6215 comm="syz.3.51" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 59.635017][ T40] audit: type=1326 audit(1747196998.317:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6215 comm="syz.3.51" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 59.642040][ T40] audit: type=1326 audit(1747196998.317:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6215 comm="syz.3.51" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 59.649727][ T40] audit: type=1326 audit(1747196998.317:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6215 comm="syz.3.51" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 59.658237][ T40] audit: type=1326 audit(1747196998.317:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6215 comm="syz.3.51" exe="/syz-executor" sig=0 arch=40000003 syscall=378 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 59.673738][ T40] audit: type=1326 audit(1747196998.317:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6215 comm="syz.3.51" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 59.682111][ T40] audit: type=1326 audit(1747196998.317:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6215 comm="syz.3.51" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 59.690391][ T40] audit: type=1326 audit(1747196998.317:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6215 comm="syz.3.51" exe="/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 60.082915][ T5998] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 60.192870][ T5951] Bluetooth: hci3: command 0x0c1a tx timeout [ 60.195309][ T5951] Bluetooth: hci2: command 0x0c1a tx timeout [ 60.202898][ T67] Bluetooth: hci1: command 0x0c1a tx timeout [ 60.245566][ T5998] usb 5-1: not running at top speed; connect to a high speed hub [ 60.249242][ T5998] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 196, changing to 4 [ 60.253292][ T5998] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1040, setting to 1023 [ 60.259405][ T5998] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 60.262655][ T5998] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.266018][ T5998] usb 5-1: Product: syz [ 60.267583][ T5998] usb 5-1: Manufacturer: syz [ 60.269208][ T5998] usb 5-1: SerialNumber: syz [ 60.496017][ T5998] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 60.559187][ T5998] usb 5-1: USB disconnect, device number 2 [ 60.587939][ T5939] udevd[5939]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 60.735029][ T6242] 9pnet_fd: Insufficient options for proto=fd [ 61.090325][ T6246] tipc: Failed to clone mcast rcv buffer [ 61.179481][ T6249] random: crng reseeded on system resumption [ 61.429805][ T6260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.58'. [ 61.472809][ T67] Bluetooth: hci0: command 0x0419 tx timeout [ 61.545073][ T6260] netlink: 24 bytes leftover after parsing attributes in process `syz.3.58'. [ 61.548433][ T6260] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.550890][ T6260] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.597931][ T6266] netlink: 'syz.1.61': attribute type 5 has an invalid length. [ 62.459346][ T6300] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] SMP KASAN NOPTI [ 62.463943][ T6300] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037] [ 62.468474][ T6300] CPU: 2 UID: 0 PID: 6300 Comm: syz.3.75 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(full) [ 62.473055][ T6300] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 62.477227][ T6300] RIP: 0010:do_move_mount+0x1fd/0x1930 [ 62.479388][ T6300] Code: 03 80 3c 02 00 0f 85 65 13 00 00 49 8d 44 24 48 4d 8b 76 18 48 89 c2 48 89 44 24 40 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 78 13 00 00 49 8b 44 24 48 48 89 44 24 20 4d 39 [ 62.482949][ T34] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 62.486947][ T6300] RSP: 0018:ffffc9000390fda8 EFLAGS: 00010206 [ 62.491714][ T6300] RAX: dffffc0000000000 RBX: ffff88804f971b00 RCX: ffffc9000c402000 [ 62.494432][ T6300] RDX: 0000000000000006 RSI: ffffffff823c0404 RDI: ffff888065d26288 [ 62.497394][ T6300] RBP: ffff88801c37a720 R08: 0000000000000007 R09: fffffffffffff000 [ 62.499998][ T6300] R10: ffff88804f971b00 R11: 0000000000000000 R12: ffffffffffffffea [ 62.502430][ T6300] R13: ffff888044ec3800 R14: ffff888044ec3800 R15: ffffc9000390fe80 [ 62.504904][ T6300] FS: 0000000000000000(0000) GS:ffff8880979ea000(0063) knlGS:00000000f5066b40 [ 62.507734][ T6300] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 62.509810][ T6300] CR2: 00007f58257d2e9c CR3: 000000004e4b8000 CR4: 0000000000352ef0 [ 62.512176][ T6300] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 62.514659][ T6300] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 62.517170][ T6300] Call Trace: [ 62.518236][ T6300] [ 62.519198][ T6300] __do_sys_move_mount+0x555/0x7c0 [ 62.520825][ T6300] ? __pfx___do_sys_move_mount+0x10/0x10 [ 62.522598][ T6300] ? rcu_is_watching+0x12/0xc0 [ 62.524176][ T6300] ? rcu_is_watching+0x12/0xc0 [ 62.525719][ T6300] __do_fast_syscall_32+0x73/0x120 [ 62.527345][ T6300] do_fast_syscall_32+0x32/0x80 [ 62.528902][ T6300] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 62.530890][ T6300] RIP: 0023:0xf7f44579 [ 62.532191][ T6300] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 62.538841][ T6300] RSP: 002b:00000000f506655c EFLAGS: 00000296 ORIG_RAX: 00000000000001ad [ 62.542158][ T6300] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000 [ 62.544368][ T6302] warning: `syz.0.73' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 62.544847][ T6300] RDX: 00000000ffffff9c RSI: 0000000000000000 RDI: 0000000000000045 [ 62.544856][ T6300] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 62.553335][ T6300] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 62.555829][ T6300] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 62.558320][ T6300] [ 62.559317][ T6300] Modules linked in: [ 62.561616][ T6300] ---[ end trace 0000000000000000 ]--- [ 62.565787][ T6300] RIP: 0010:do_move_mount+0x1fd/0x1930 [ 62.567585][ T6300] Code: 03 80 3c 02 00 0f 85 65 13 00 00 49 8d 44 24 48 4d 8b 76 18 48 89 c2 48 89 44 24 40 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 78 13 00 00 49 8b 44 24 48 48 89 44 24 20 4d 39 [ 62.573637][ T6300] RSP: 0018:ffffc9000390fda8 EFLAGS: 00010206 [ 62.575579][ T6300] RAX: dffffc0000000000 RBX: ffff88804f971b00 RCX: ffffc9000c402000 [ 62.578314][ T6300] RDX: 0000000000000006 RSI: ffffffff823c0404 RDI: ffff888065d26288 [ 62.581734][ T6300] RBP: ffff88801c37a720 R08: 0000000000000007 R09: fffffffffffff000 [ 62.584639][ T6300] R10: ffff88804f971b00 R11: 0000000000000000 R12: ffffffffffffffea [ 62.587649][ T6300] R13: ffff888044ec3800 R14: ffff888044ec3800 R15: ffffc9000390fe80 [ 62.590848][ T6300] FS: 0000000000000000(0000) GS:ffff8880979ea000(0063) knlGS:00000000f5066b40 [ 62.595105][ T6300] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 62.597726][ T6300] CR2: 00007f58257d2e9c CR3: 000000004e4b8000 CR4: 0000000000352ef0 [ 62.600499][ T6300] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 62.603701][ T6300] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 62.606886][ T6300] Kernel panic - not syncing: Fatal exception [ 62.609969][ T6300] Kernel Offset: disabled [ 62.611704][ T6300] Rebooting in 86400 seconds.. VM DIAGNOSIS: 04:30:01 Registers: info registers vcpu 0 CPU#0 RAX=000000000006a0fc RBX=0000000000000000 RCX=ffffffff8b6973e9 RDX=ffffed10056465be RSI=ffffffff8bf47260 RDI=ffffffff81913781 RBP=fffffbfff1c12ee8 RSP=ffffffff8e007e10 R8 =0000000000000000 R9 =ffffed10056465bd R10=ffff88802b232deb R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e097740 R14=ffffffff90851e10 R15=0000000000000000 RIP=ffffffff8b695c7f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977ea000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000000c3f5ea3 CR3=000000004ba2f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002000002 Opmask01=0000000080000000 Opmask02=00000000ffffffff Opmask03=0000000001041000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055c7922417b0 000055c7922417b0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055c7922284c0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f948d5f1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f948d5f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73001605121f0073 431e161e035c1810 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1c1f115c435d4316 10120300161e121d ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e69646165520073 25203a656c696620 7974706d6520676e 697070696b530065 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4245484d4952005f 090c164940454a0c 55585c41490c4b42 455c5c4547530049 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 29651aeabd8ddea3 000055c2ce58ff57 0000000000000251 0000000000000031 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001c1 6c2f007365007974 00736576616c7300 306d656d702f6b63 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 322e392d3533712d 63707276703a2939 3030322c39484349 2b35335128435064 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7261646e6174536e 703a554d45516e76 733a302e3072623a 343130322f31302f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343064623a312b32 316f70627e322d33 2e36312e312d6e61 696265642d332e36 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000007b11c RBX=0000000000000001 RCX=ffffffff8b6973e9 RDX=ffffed10056665be RSI=ffffffff8bf47260 RDI=ffffffff81913781 RBP=ffffed1003b52488 RSP=ffffc9000046fdf8 R8 =0000000000000000 R9 =ffffed10056665bd R10=ffff88802b332deb R11=0000000000000000 R12=0000000000000001 R13=ffff88801da92440 R14=ffffffff90851e10 R15=0000000000000000 RIP=ffffffff8b695c7f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880978ea000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7406188 CR3=0000000065d27000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854c3af5 RDI=ffffffff9ade1c40 RBP=ffffffff9ade1c00 RSP=ffffc9000390f7a0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=000000004153414b R12=0000000000000000 R13=0000000000000030 R14=ffffffff9ade1c00 R15=ffffffff854c3a90 RIP=ffffffff854c3b1f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880979ea000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f58257d2e9c CR3=000000004e4b8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000000535c4 RBX=0000000000000003 RCX=ffffffff8b6973e9 RDX=ffffed10056a65be RSI=ffffffff8bf47260 RDI=ffffffff81913781 RBP=ffffed10037e4000 RSP=ffffc9000048fdf8 R8 =0000000000000000 R9 =ffffed10056a65bd R10=ffff88802b532deb R11=0000000000000000 R12=0000000000000003 R13=ffff88801bf20000 R14=ffffffff90851e10 R15=0000000000000000 RIP=ffffffff8b695c7f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097aea000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fccbdf9de9c CR3=0000000065019000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000010000000000 0000000400000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000