last executing test programs: 29.405330455s ago: executing program 3 (id=498): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x24, r1, 0x5, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20043041}, 0x0) 28.819507972s ago: executing program 3 (id=501): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 28.818468808s ago: executing program 3 (id=502): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f0000002880)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 27.954521684s ago: executing program 3 (id=504): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x34, r1, 0x5, 0x0, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1685}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20043041}, 0x0) 27.200864597s ago: executing program 3 (id=507): r0 = socket$nl_crypto(0x10, 0x3, 0x15) accept4(r0, 0x0, 0x0, 0x800) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) syz_open_dev$usbmon(0x0, 0x0, 0x0) gettid() r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r3, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x200}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x401}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000340)=""/113, 0x71}, {&(0x7f0000000240)=""/78, 0x4e}, {&(0x7f0000000100)=""/98, 0x62}, {&(0x7f00000003c0)=""/100, 0x64}, {&(0x7f00000006c0)=""/200, 0xc8}], 0x8}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002080)=0x64, 0x21c) syz_open_dev$swradio(&(0x7f0000000100), 0x0, 0x2) 26.195181323s ago: executing program 3 (id=517): socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect(r0, &(0x7f0000000280)=@hci={0x1f, 0x2, 0x3}, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000ddffff94"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(0xffffffffffffffff, 0xfffffffc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) 10.681504513s ago: executing program 32 (id=517): socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect(r0, &(0x7f0000000280)=@hci={0x1f, 0x2, 0x3}, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000ddffff94"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(0xffffffffffffffff, 0xfffffffc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) 8.784481838s ago: executing program 0 (id=546): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f00000010c0)='./file0\x00', 0x20c01, 0x0) r0 = socket(0x2, 0x80805, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffe, 0xfffffffc}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r3, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xfffffffffffffe90, &(0x7f0000001080)=[{&(0x7f0000002440)="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", 0xbc6}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f0000001940)=[@ip_tos_int={{0x10, 0x29, 0x32}}, @ip_pktinfo={{0x18, 0xe, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x40}, 0x0) getsockopt$bt_hci(r0, 0x84, 0x71, &(0x7f0000003440)=""/4087, &(0x7f0000001080)=0xff7) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@abs={0x1}, 0x4f) r5 = socket$netlink(0x10, 0x3, 0x4) write(r5, &(0x7f00000000c0)="2900000014000d200d69a51d54efbdeb0101b6ff02159f7ec6cff25fb7f7930884191c47", 0x24) 8.229095651s ago: executing program 2 (id=547): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e20}, 0x7f) munlockall() recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000180), 0xe, 0x200040) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) syz_open_procfs(0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x10, 0x0, @fd, 0x0, {}, 0xf0000, 0x8}) syz_io_uring_submit(0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000dc0)={0x180, r5, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0x164, 0x8, 0x0, 0x1, [{0x74, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x1, @mcast1, 0x2}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}, {0xe8, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0xc0, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}]}]}, {0x4}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r6}]}, 0x180}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) connect$can_bcm(r8, &(0x7f0000000040)={0x1d, r9}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}}, 0x4) 7.846550369s ago: executing program 0 (id=549): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e20}, 0x7f) munlockall() recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000180), 0xe, 0x200040) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) syz_open_procfs(0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x10, 0x0, @fd, 0x0, {}, 0xf0000, 0x8}) syz_io_uring_submit(0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000dc0)={0x180, r5, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0x164, 0x8, 0x0, 0x1, [{0x74, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x1, @mcast1, 0x2}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}, {0xe8, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0xc0, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}]}]}, {0x4}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r6}]}, 0x180}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) connect$can_bcm(r8, &(0x7f0000000040)={0x1d, r9}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4) 5.191270465s ago: executing program 2 (id=560): ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, 0x0) socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 4.529876776s ago: executing program 0 (id=565): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f00000010c0)='./file0\x00', 0x20c01, 0x0) r0 = socket(0x2, 0x80805, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffe, 0xfffffffc}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r3, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xfffffffffffffe90, &(0x7f0000001080)=[{&(0x7f0000002440)="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", 0xbc6}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f0000001940)=[@ip_tos_int={{0x10, 0x29, 0x32}}, @ip_pktinfo={{0x18, 0xe, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x40}, 0x0) getsockopt$bt_hci(r0, 0x84, 0x71, &(0x7f0000003440)=""/4087, &(0x7f0000001080)=0xff7) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@abs={0x1}, 0x4f) r5 = socket$netlink(0x10, 0x3, 0x4) write(r5, &(0x7f00000000c0)="2900000014000d200d69a51d54efbdeb0101b6ff02159f7ec6cff25fb7f7930884191c47bb3f6b", 0x27) 4.16432392s ago: executing program 2 (id=566): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) r1 = socket(0x2, 0x5, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x410) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x11000) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x2, 0x0, {{@in6=@empty, @in6=@mcast2, 0x1, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000}, 0x400, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000cc0006"], 0x138}}, 0x4) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x9}, 0x8, 0x10, &(0x7f0000000000)={0x1, 0x0, 0x6}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000063019f000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000040)=ANY=[], 0xfdef) 3.766992402s ago: executing program 2 (id=570): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) 3.759422854s ago: executing program 2 (id=571): ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, 0x0) socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 3.130316765s ago: executing program 1 (id=573): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup(r2) r4 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0xecb0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r3, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r4, 0x47f5, 0x0, 0x0, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socket$kcm(0x29, 0x5, 0x0) r8 = syz_io_uring_setup(0x10c, &(0x7f0000000380)={0x0, 0x5885, 0x10, 0x0, 0x2c1}, &(0x7f0000000040)=0x0, &(0x7f0000000240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r10 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r10, 0x107, 0x12, 0x0, &(0x7f0000001cc0)) io_uring_enter(r8, 0x3516, 0x701f, 0x0, 0x0, 0x0) 3.092061789s ago: executing program 0 (id=574): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f0000002880)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 2.884622222s ago: executing program 2 (id=576): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r3, &(0x7f00000002c0), 0x220, 0x100, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = fcntl$dupfd(r4, 0x406, r4) write$sndseq(r5, 0x0, 0x0) ioctl$SG_GET_REQUEST_TABLE(r5, 0x2286, &(0x7f00000018c0)) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x22000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xa) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) r8 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r8, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e23, 0xb430, @mcast2, 0x1}, 0x1c) sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) 2.440045873s ago: executing program 1 (id=577): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8924, 0x0) 2.40799995s ago: executing program 1 (id=578): syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) fsopen(&(0x7f0000000000)='cifs\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) socket$pptp(0x18, 0x1, 0x2) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x60b, 0x500a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x4}}}}}]}}]}}, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[], 0x0) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="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", 0xff}, {&(0x7f0000001480)}], 0x3) 2.205050461s ago: executing program 0 (id=579): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) 2.204537134s ago: executing program 0 (id=580): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e20}, 0x7f) munlockall() recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000180), 0xe, 0x200040) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) syz_open_procfs(0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x10, 0x0, @fd, 0x0, {}, 0xf0000, 0x8}) syz_io_uring_submit(0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000dc0)={0x180, r5, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0x164, 0x8, 0x0, 0x1, [{0x74, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x1, @mcast1, 0x2}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}, {0xe8, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0xc0, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}]}]}, {0x4}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r6}]}, 0x180}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) connect$can_bcm(r8, &(0x7f0000000040)={0x1d, r9}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800000000fbdbdf2500a5c500", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0], 0x30}}, 0x4) 1.506105629s ago: executing program 4 (id=583): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYBLOB="01000000010000001c0012000c00010062726964"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xf}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x4924b68, 0x0) 1.40987316s ago: executing program 4 (id=584): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x2, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80000001, 0x2, 0x6db2, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.184629076s ago: executing program 1 (id=585): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x80880) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYBLOB="2503000000000000000008"], 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0xc4) r3 = add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) syz_open_procfs(0x0, &(0x7f0000000400)='attr\x00') process_vm_writev(0x0, &(0x7f0000001c80), 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00') writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000080)='-6', 0x3f}], 0x2) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000001c0)={0x7, @pix_mp={0x7fff, 0x2, 0x3432564e, 0x1, 0xc, [{0x1, 0x4}, {0xfa, 0x2}, {0x0, 0x4f11}, {0x5, 0x6}, {0x4, 0x3}, {0x400, 0x80000001}, {0x3ff, 0x2000002}, {0x5, 0x800000}], 0x9, 0xbe, 0x3}}) keyctl$read(0x20, r3, 0x0, 0x0) keyctl$setperm(0x5, 0x0, 0x52b242d) request_key(0x0, &(0x7f0000000200)={'syz', 0x3}, 0x0, 0xfffffffffffffffd) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000", @ANYRES16=r6, @ANYBLOB="01f2ff0000018094b7caca0e96a3bce6164b9929766166a70dde6c823e9dc0aaf1e0aaa322de36ab552bb65dc611ff2816b41501e61c0787f76b636ba03e4e4f1ace32db9e609ef004bb20428535878336cde2d7f80669931acf9627a95767a34e3d7b319cb1041b17aa0d54070ea6ef688067a07f00"/132], 0x18}}, 0x2000c050) 1.021520967s ago: executing program 4 (id=586): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005800500050000000000050020000100000005000800000000000600", @ANYRES8=r1], 0x7c}}, 0x80) 949.327983ms ago: executing program 4 (id=587): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup(r2) r4 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0xecb0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r3, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r4, 0x47f5, 0x0, 0x0, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r8 = socket$kcm(0x29, 0x5, 0x0) r9 = syz_io_uring_setup(0x10c, &(0x7f0000000380)={0x0, 0x5885, 0x10, 0x0, 0x2c1}, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket(0x11, 0x800000003, 0x0) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x40, 0x0, r8, 0x0, 0x0, 0x5c, 0x10}) io_uring_enter(r9, 0x3516, 0x701f, 0x0, 0x0, 0x0) 600.269355ms ago: executing program 4 (id=588): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup(r2) r4 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0xecb0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r3, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r4, 0x47f5, 0x0, 0x0, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r8 = socket$kcm(0x29, 0x5, 0x0) r9 = syz_io_uring_setup(0x10c, &(0x7f0000000380)={0x0, 0x5885, 0x10, 0x0, 0x2c1}, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) socket(0x11, 0x800000003, 0x0) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x40, 0x0, r8, 0x0, 0x0, 0x5c, 0x10}) io_uring_enter(r9, 0x3516, 0x701f, 0x0, 0x0, 0x0) 293.487156ms ago: executing program 1 (id=589): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup(r2) r4 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0xecb0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r3, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r4, 0x47f5, 0x0, 0x0, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r8 = socket$kcm(0x29, 0x5, 0x0) r9 = syz_io_uring_setup(0x10c, &(0x7f0000000380)={0x0, 0x5885, 0x10, 0x0, 0x2c1}, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x40, 0x0, r8, 0x0, 0x0, 0x5c, 0x10}) io_uring_enter(r9, 0x3516, 0x701f, 0x0, 0x0, 0x0) 161.451707ms ago: executing program 4 (id=590): socket$unix(0x1, 0x1, 0x0) r0 = syz_io_uring_setup(0xc97, &(0x7f0000000700)={0x0, 0x6015, 0x800, 0xff7fffff, 0x11c}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x4000, @fd_index=0x3, 0x5, 0x0, 0x0, 0x4}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_setup(0x5b03, &(0x7f00000003c0)={0x0, 0xef71, 0x800, 0x2, 0x2f1}, &(0x7f00000001c0)=0x0, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00'}, 0x18) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x40, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=591): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r3, &(0x7f00000002c0), 0x220, 0x100, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = fcntl$dupfd(r4, 0x406, r4) write$sndseq(r5, 0x0, 0x0) ioctl$SG_GET_REQUEST_TABLE(r5, 0x2286, &(0x7f00000018c0)) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x22000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xa) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) r8 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r8, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e23, 0xb430, @mcast2, 0x1}, 0x1c) sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:26442' (ED25519) to the list of known hosts. [ 40.556676][ T5956] cgroup: Unknown subsys name 'net' [ 40.695870][ T5956] cgroup: Unknown subsys name 'cpuset' [ 40.698738][ T5956] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 41.364924][ T5956] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 43.706438][ T5972] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 43.708652][ T5970] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 43.711004][ T5970] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 43.711029][ T5976] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 43.713183][ T5970] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 43.715757][ T5976] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 43.717722][ T5970] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 43.720274][ T5976] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 43.722342][ T5970] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 43.724781][ T5976] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 43.726867][ T5978] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 43.727158][ T5982] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 43.727329][ T5982] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 43.727693][ T5973] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 43.728140][ T5973] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 43.728312][ T5973] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 43.729057][ T5976] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 43.733046][ T5978] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 43.747187][ T5978] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 43.749556][ T5978] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 43.851050][ T5979] chnl_net:caif_netlink_parms(): no params data found [ 43.858139][ T5974] chnl_net:caif_netlink_parms(): no params data found [ 43.901779][ T5967] chnl_net:caif_netlink_parms(): no params data found [ 43.915884][ T5968] chnl_net:caif_netlink_parms(): no params data found [ 43.988702][ T5979] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.990832][ T5979] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.992998][ T5979] bridge_slave_0: entered allmulticast mode [ 43.995872][ T5979] bridge_slave_0: entered promiscuous mode [ 44.016908][ T5974] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.019518][ T5974] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.022198][ T5974] bridge_slave_0: entered allmulticast mode [ 44.025381][ T5974] bridge_slave_0: entered promiscuous mode [ 44.028265][ T5979] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.030465][ T5979] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.032611][ T5979] bridge_slave_1: entered allmulticast mode [ 44.034995][ T5979] bridge_slave_1: entered promiscuous mode [ 44.067791][ T5974] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.070744][ T5974] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.073675][ T5974] bridge_slave_1: entered allmulticast mode [ 44.077174][ T5974] bridge_slave_1: entered promiscuous mode [ 44.109465][ T5967] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.111982][ T5967] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.114569][ T5967] bridge_slave_0: entered allmulticast mode [ 44.117340][ T5967] bridge_slave_0: entered promiscuous mode [ 44.145876][ T5974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.151236][ T5979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.158138][ T5979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.161821][ T5967] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.165182][ T5967] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.168228][ T5967] bridge_slave_1: entered allmulticast mode [ 44.171388][ T5967] bridge_slave_1: entered promiscuous mode [ 44.183095][ T5968] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.185459][ T5968] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.187777][ T5968] bridge_slave_0: entered allmulticast mode [ 44.190048][ T5968] bridge_slave_0: entered promiscuous mode [ 44.193246][ T5974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.218671][ T5968] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.220855][ T5968] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.223022][ T5968] bridge_slave_1: entered allmulticast mode [ 44.225450][ T5968] bridge_slave_1: entered promiscuous mode [ 44.251177][ T5979] team0: Port device team_slave_0 added [ 44.254346][ T5967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.266567][ T5968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.269984][ T5974] team0: Port device team_slave_0 added [ 44.273080][ T5979] team0: Port device team_slave_1 added [ 44.277195][ T5967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.280857][ T5968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.284176][ T5974] team0: Port device team_slave_1 added [ 44.336069][ T5979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.338396][ T5979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.346343][ T5979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.358059][ T5967] team0: Port device team_slave_0 added [ 44.360761][ T5968] team0: Port device team_slave_0 added [ 44.362937][ T5974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.365595][ T5974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.373293][ T5974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.377298][ T5979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.379395][ T5979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.387230][ T5979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.391479][ T5967] team0: Port device team_slave_1 added [ 44.395914][ T5968] team0: Port device team_slave_1 added [ 44.397984][ T5974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.400567][ T5974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.409514][ T5974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.445512][ T5968] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.447617][ T5968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.455601][ T5968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.459404][ T5967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.461581][ T5967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.470147][ T5967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.474982][ T5967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.477476][ T5967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.486454][ T5967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.490357][ T5968] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.492467][ T5968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.501269][ T5968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.537962][ T5979] hsr_slave_0: entered promiscuous mode [ 44.540435][ T5979] hsr_slave_1: entered promiscuous mode [ 44.559057][ T5974] hsr_slave_0: entered promiscuous mode [ 44.561123][ T5974] hsr_slave_1: entered promiscuous mode [ 44.563082][ T5974] debugfs: 'hsr0' already exists in 'hsr' [ 44.565323][ T5974] Cannot create hsr debugfs directory [ 44.593221][ T5967] hsr_slave_0: entered promiscuous mode [ 44.596372][ T5967] hsr_slave_1: entered promiscuous mode [ 44.598613][ T5967] debugfs: 'hsr0' already exists in 'hsr' [ 44.600793][ T5967] Cannot create hsr debugfs directory [ 44.605962][ T5968] hsr_slave_0: entered promiscuous mode [ 44.607965][ T5968] hsr_slave_1: entered promiscuous mode [ 44.609839][ T5968] debugfs: 'hsr0' already exists in 'hsr' [ 44.611587][ T5968] Cannot create hsr debugfs directory [ 44.781320][ T5967] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 44.784852][ T5967] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 44.788125][ T5967] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 44.793105][ T5967] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 44.807713][ T5974] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 44.811329][ T5974] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 44.817213][ T5967] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.819721][ T5967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.822422][ T5967] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.825012][ T5967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.828453][ T5974] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 44.832015][ T5974] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 44.858143][ T5979] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 44.861755][ T5979] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 44.866716][ T5974] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.869149][ T5974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.871413][ T5974] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.873527][ T5974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.881516][ T5979] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 44.887816][ T5979] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 44.894881][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.897847][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.901423][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.905111][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.938363][ T5967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.942374][ T5968] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 44.946442][ T5968] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 44.950758][ T5968] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 44.955828][ T5968] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 44.971006][ T5974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.979772][ T5967] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.989374][ T5974] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.993861][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.996742][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.005047][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.007265][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.010046][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.012219][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.018350][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.020590][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.052842][ T5979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.058784][ T5967] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 45.070008][ T5979] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.077111][ T5968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.083603][ T1183] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.086447][ T1183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.097659][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.100537][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.111102][ T5968] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.125681][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.128635][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.140554][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.143471][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.167662][ T5967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.180474][ T5968] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 45.183748][ T5968] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 45.198019][ T5967] veth0_vlan: entered promiscuous mode [ 45.202806][ T5967] veth1_vlan: entered promiscuous mode [ 45.207623][ T5974] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.220684][ T5967] veth0_macvtap: entered promiscuous mode [ 45.227572][ T5967] veth1_macvtap: entered promiscuous mode [ 45.234867][ T5974] veth0_vlan: entered promiscuous mode [ 45.240299][ T5974] veth1_vlan: entered promiscuous mode [ 45.245269][ T5967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.250982][ T5967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.256283][ T46] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.258916][ T46] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.265456][ T5979] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.267656][ T46] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.270306][ T46] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.286692][ T5968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.288994][ T5974] veth0_macvtap: entered promiscuous mode [ 45.304553][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.305626][ T5974] veth1_macvtap: entered promiscuous mode [ 45.306976][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.326165][ T5979] veth0_vlan: entered promiscuous mode [ 45.331633][ T1183] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.331780][ T5968] veth0_vlan: entered promiscuous mode [ 45.334823][ T1183] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.337541][ T5974] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.345852][ T5974] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.349716][ T5979] veth1_vlan: entered promiscuous mode [ 45.356133][ T5968] veth1_vlan: entered promiscuous mode [ 45.359281][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.363863][ T5967] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 45.364037][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.372414][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.381087][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.423618][ T5979] veth0_macvtap: entered promiscuous mode [ 45.428946][ T1183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.430899][ T5979] veth1_macvtap: entered promiscuous mode [ 45.431458][ T1183] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.437606][ T5968] veth0_macvtap: entered promiscuous mode [ 45.447761][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.449670][ T5979] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.450170][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.453777][ T5968] veth1_macvtap: entered promiscuous mode [ 45.461980][ T5968] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.467387][ T5968] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.473840][ T5979] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.478403][ T1183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.487202][ T1183] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.489880][ T1183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.492565][ T1183] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.497701][ T1183] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.500792][ T1183] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.507508][ T1183] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.511123][ T1183] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.550444][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.552949][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.561569][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.567327][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.567446][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.573973][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.576943][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 45.580044][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 45.585908][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.588576][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.648912][ T6056] block device autoloading is deprecated and will be removed. [ 45.651435][ T6056] syz.3.4: attempt to access beyond end of device [ 45.651435][ T6056] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 45.764411][ T5332] Bluetooth: hci1: command tx timeout [ 45.764473][ T5978] Bluetooth: hci3: command tx timeout [ 45.764509][ T63] Bluetooth: hci2: command tx timeout [ 45.774378][ T5978] Bluetooth: hci0: command tx timeout [ 45.866625][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 45.870031][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 45.876450][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 45.880149][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 45.886864][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 45.896801][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 45.977304][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 45.987515][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 46.195661][ T6073] syz.1.2 (6073): drop_caches: 2 [ 46.197558][ T6073] syz.1.2 (6073): drop_caches: 2 [ 46.816106][ T6095] syzkaller0: entered promiscuous mode [ 46.818107][ T6095] syzkaller0: entered allmulticast mode [ 47.844495][ T5978] Bluetooth: hci2: command tx timeout [ 47.844548][ T5332] Bluetooth: hci1: command tx timeout [ 47.854435][ T5978] Bluetooth: hci3: command tx timeout [ 47.854810][ T5332] Bluetooth: hci0: command tx timeout [ 48.234572][ T6116] syz.3.14: attempt to access beyond end of device [ 48.234572][ T6116] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 48.384532][ T6119] syz.2.18 (6119): drop_caches: 2 [ 48.387559][ T6119] syz.2.18 (6119): drop_caches: 2 [ 48.874350][ T34] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 48.932897][ T6123] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20'. [ 49.025159][ T34] usb 5-1: Using ep0 maxpacket: 16 [ 49.029410][ T34] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.032516][ T34] usb 5-1: config 0 interface 0 has no altsetting 0 [ 49.036659][ T34] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 49.040274][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.044683][ T34] usb 5-1: config 0 descriptor?? [ 49.135573][ T6139] binder_alloc: 6138: binder_alloc_buf, no vma [ 49.179284][ T6141] syz.1.23: attempt to access beyond end of device [ 49.179284][ T6141] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 49.278567][ T6121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.281343][ T6121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.357021][ T34] usbhid 5-1:0.0: can't add hid device: -71 [ 49.358945][ T34] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 49.361863][ T34] usb 5-1: USB disconnect, device number 2 [ 49.924498][ T5332] Bluetooth: hci3: command tx timeout [ 49.924689][ T63] Bluetooth: hci2: command tx timeout [ 49.928642][ T5978] Bluetooth: hci1: command tx timeout [ 49.934363][ T5978] Bluetooth: hci0: command tx timeout [ 50.082060][ T6156] process 'syz.1.28' launched './file0' with NULL argv: empty string added [ 50.210238][ T6159] syzkaller0: entered promiscuous mode [ 50.212352][ T6159] syzkaller0: entered allmulticast mode [ 50.322003][ T6164] syz.2.31 (6164): drop_caches: 2 [ 50.327814][ T6164] syz.2.31 (6164): drop_caches: 2 [ 51.274867][ T6186] syz.3.36 (6186): drop_caches: 2 [ 51.277006][ T6186] syz.3.36 (6186): drop_caches: 2 [ 52.004488][ T5978] Bluetooth: hci3: command tx timeout [ 52.014451][ T63] Bluetooth: hci1: command tx timeout [ 52.014466][ T5332] Bluetooth: hci2: command tx timeout [ 52.014802][ T5978] Bluetooth: hci0: command tx timeout [ 53.313065][ T6233] syzkaller0: entered promiscuous mode [ 53.315244][ T6233] syzkaller0: entered allmulticast mode [ 53.394330][ T1216] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 53.564331][ T1216] usb 8-1: Using ep0 maxpacket: 16 [ 53.567341][ T1216] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 53.570502][ T1216] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 53.574705][ T1216] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 53.577575][ T1216] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.580072][ T1216] usb 8-1: Product: syz [ 53.581393][ T1216] usb 8-1: Manufacturer: syz [ 53.582916][ T1216] usb 8-1: SerialNumber: syz [ 53.585394][ T1216] usb 8-1: config 0 descriptor?? [ 54.873236][ T6247] syzkaller0: entered promiscuous mode [ 54.875344][ T6247] syzkaller0: entered allmulticast mode [ 55.165118][ T6252] syzkaller0: entered promiscuous mode [ 55.167032][ T6252] syzkaller0: entered allmulticast mode [ 55.974474][ T53] usb 8-1: USB disconnect, device number 2 [ 56.023112][ T6272] syz.1.57 (6272): drop_caches: 2 [ 56.026781][ T6272] syz.1.57 (6272): drop_caches: 2 [ 57.262969][ T6307] syzkaller0: entered promiscuous mode [ 57.264843][ T6307] syzkaller0: entered allmulticast mode [ 58.068630][ T6316] syzkaller0: entered promiscuous mode [ 58.075249][ T6316] syzkaller0: entered allmulticast mode [ 58.417782][ T6322] syzkaller0: entered promiscuous mode [ 58.419624][ T6322] syzkaller0: entered allmulticast mode [ 59.383395][ T6340] syzkaller0: entered promiscuous mode [ 59.385357][ T6340] syzkaller0: entered allmulticast mode [ 59.745751][ T6349] syz.2.76 (6349): drop_caches: 2 [ 59.760776][ T6349] syz.2.76 (6349): drop_caches: 2 [ 60.622729][ T6368] syz.0.81 (6368): drop_caches: 2 [ 60.630442][ T6368] syz.0.81 (6368): drop_caches: 2 [ 61.564114][ T6390] syz.0.86 (6390): drop_caches: 2 [ 61.566190][ T6390] syz.0.86 (6390): drop_caches: 2 [ 62.413598][ T6406] syz.2.88 (6406): drop_caches: 2 [ 62.417962][ T6406] syz.2.88 (6406): drop_caches: 2 [ 62.588965][ T6411] Zero length message leads to an empty skb [ 62.764313][ T53] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 62.914378][ T53] usb 6-1: Using ep0 maxpacket: 16 [ 62.917360][ T53] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 62.920660][ T53] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 62.925192][ T53] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 62.928080][ T53] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.930569][ T53] usb 6-1: Product: syz [ 62.931932][ T53] usb 6-1: Manufacturer: syz [ 62.933457][ T53] usb 6-1: SerialNumber: syz [ 62.936743][ T53] usb 6-1: config 0 descriptor?? [ 64.259008][ T6426] syzkaller0: entered promiscuous mode [ 64.260766][ T6426] syzkaller0: entered allmulticast mode [ 64.424345][ T5975] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 64.584359][ T5975] usb 5-1: Using ep0 maxpacket: 16 [ 64.587442][ T5975] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.590616][ T5975] usb 5-1: config 0 interface 0 has no altsetting 0 [ 64.592754][ T5975] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 64.595686][ T5975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.599205][ T5975] usb 5-1: config 0 descriptor?? [ 64.819277][ T6429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.822438][ T6429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.867689][ T5975] usbhid 5-1:0.0: can't add hid device: -71 [ 64.869655][ T5975] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 64.872875][ T5975] usb 5-1: USB disconnect, device number 3 [ 65.356789][ T53] usb 6-1: USB disconnect, device number 2 [ 65.516646][ T6448] syz.1.100 (6448): drop_caches: 2 [ 65.524379][ T6448] syz.1.100 (6448): drop_caches: 2 [ 66.935920][ T6469] syz.2.105 (6469): drop_caches: 2 [ 66.940679][ T6469] syz.2.105 (6469): drop_caches: 2 [ 67.384377][ T1335] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 67.534393][ T1335] usb 5-1: Using ep0 maxpacket: 16 [ 67.537510][ T1335] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.540559][ T1335] usb 5-1: config 0 interface 0 has no altsetting 0 [ 67.542723][ T1335] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 67.545623][ T1335] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.549140][ T1335] usb 5-1: config 0 descriptor?? [ 67.766771][ T6471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.769471][ T6471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.847579][ T1335] usbhid 5-1:0.0: can't add hid device: -71 [ 67.850575][ T1335] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 67.855825][ T1335] usb 5-1: USB disconnect, device number 4 [ 68.722005][ T6502] syz.2.113 (6502): drop_caches: 2 [ 68.726125][ T6502] syz.2.113 (6502): drop_caches: 2 [ 69.134450][ T6510] syzkaller0: entered promiscuous mode [ 69.136362][ T6510] syzkaller0: entered allmulticast mode [ 69.694337][ T6053] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 69.854313][ T6053] usb 5-1: Using ep0 maxpacket: 16 [ 69.857087][ T6053] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 69.860271][ T6053] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 69.864852][ T6053] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 69.867698][ T6053] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.870143][ T6053] usb 5-1: Product: syz [ 69.871419][ T6053] usb 5-1: Manufacturer: syz [ 69.872841][ T6053] usb 5-1: SerialNumber: syz [ 69.875713][ T6053] usb 5-1: config 0 descriptor?? [ 70.557696][ T6540] syz.2.122: attempt to access beyond end of device [ 70.557696][ T6540] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 70.886079][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.888145][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.011131][ T6544] syzkaller0: entered promiscuous mode [ 71.013437][ T6544] syzkaller0: entered allmulticast mode [ 72.309107][ T60] usb 5-1: USB disconnect, device number 5 [ 72.336386][ T6563] syz.3.127: attempt to access beyond end of device [ 72.336386][ T6563] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 73.131752][ T6573] syz.1.131 (6573): drop_caches: 2 [ 73.133734][ T6573] syz.1.131 (6573): drop_caches: 2 [ 73.281113][ T6579] syz.3.132 (6579): drop_caches: 2 [ 73.282923][ T6579] syz.3.132 (6579): drop_caches: 2 [ 74.034579][ T6586] syzkaller0: entered promiscuous mode [ 74.036459][ T6586] syzkaller0: entered allmulticast mode [ 74.598004][ T6603] syz.2.138 (6603): drop_caches: 2 [ 74.600340][ T6603] syz.2.138 (6603): drop_caches: 2 [ 74.604321][ T60] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 74.774330][ T60] usb 8-1: Using ep0 maxpacket: 16 [ 74.777172][ T60] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 74.780365][ T60] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 74.784822][ T60] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 74.787676][ T60] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.790253][ T60] usb 8-1: Product: syz [ 74.791626][ T60] usb 8-1: Manufacturer: syz [ 74.793103][ T60] usb 8-1: SerialNumber: syz [ 74.795373][ T60] usb 8-1: config 0 descriptor?? [ 76.558381][ T6638] syz.1.146 (6638): drop_caches: 2 [ 76.560719][ T6638] syz.1.146 (6638): drop_caches: 2 [ 77.085581][ T53] usb 8-1: USB disconnect, device number 3 [ 77.124380][ T5975] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 77.284803][ T5975] usb 5-1: Using ep0 maxpacket: 16 [ 77.288244][ T5975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 77.293825][ T5975] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 77.297694][ T5975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.301069][ T5975] usb 5-1: Product: syz [ 77.302864][ T5975] usb 5-1: Manufacturer: syz [ 77.304843][ T5975] usb 5-1: SerialNumber: syz [ 77.307965][ T5975] usb 5-1: config 0 descriptor?? [ 77.312665][ T5975] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 77.316703][ T5975] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 77.585226][ T6655] syzkaller0: entered promiscuous mode [ 77.586987][ T6655] syzkaller0: entered allmulticast mode [ 77.917607][ T5975] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 78.986042][ T6679] bridge_slave_0: left allmulticast mode [ 78.987860][ T6679] bridge_slave_0: left promiscuous mode [ 78.989672][ T6679] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.993288][ T6679] bridge_slave_1: left allmulticast mode [ 78.995232][ T6679] bridge_slave_1: left promiscuous mode [ 78.997011][ T6679] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.001582][ T6679] bond0: (slave bond_slave_0): Releasing backup interface [ 79.005657][ T6679] bond0: (slave bond_slave_1): Releasing backup interface [ 79.010592][ T6679] team0: Port device team_slave_0 removed [ 79.014018][ T6679] team0: Port device team_slave_1 removed [ 79.017070][ T6679] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.019303][ T6679] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.022220][ T6679] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.024648][ T6679] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.307526][ T6687] syz.2.159 (6687): drop_caches: 2 [ 79.315741][ T6687] syz.2.159 (6687): drop_caches: 2 [ 79.375760][ T6642] em28xx 5-1:0.0: reading from i2c device at 0x138 failed (error=-5) [ 79.379773][ T5975] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 79.382214][ T5975] em28xx 5-1:0.0: board has no eeprom [ 79.444398][ T5975] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 79.447582][ T5975] em28xx 5-1:0.0: dvb set to bulk mode. [ 79.450454][ T6060] em28xx 5-1:0.0: Binding DVB extension [ 79.454880][ T5975] usb 5-1: USB disconnect, device number 6 [ 79.458188][ T5975] em28xx 5-1:0.0: Disconnecting em28xx [ 79.467436][ T6060] em28xx 5-1:0.0: Registering input extension [ 79.469943][ T5975] em28xx 5-1:0.0: Closing input extension [ 79.473493][ T5975] em28xx 5-1:0.0: Freeing device [ 81.133885][ T10] cfg80211: failed to load regulatory.db [ 81.799047][ T6730] netlink: 4 bytes leftover after parsing attributes in process `syz.0.169'. [ 81.858945][ T6731] syz.0.169 (6731): drop_caches: 2 [ 81.862557][ T6731] syz.0.169 (6731): drop_caches: 2 [ 82.251983][ T6753] syz.1.174 (6753): drop_caches: 2 [ 82.254912][ T6753] syz.1.174 (6753): drop_caches: 2 [ 82.484442][ T6022] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 82.644377][ T6022] usb 7-1: Using ep0 maxpacket: 16 [ 82.648058][ T6022] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.652465][ T6022] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 82.659330][ T6022] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 82.663420][ T6022] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.667479][ T6022] usb 7-1: Product: syz [ 82.669238][ T6022] usb 7-1: Manufacturer: syz [ 82.671301][ T6022] usb 7-1: SerialNumber: syz [ 82.674942][ T6022] usb 7-1: config 0 descriptor?? [ 83.279680][ T6765] syzkaller0: entered promiscuous mode [ 83.281459][ T6765] syzkaller0: entered allmulticast mode [ 85.018512][ T6022] usb 7-1: USB disconnect, device number 2 [ 85.115325][ T6784] netlink: 4 bytes leftover after parsing attributes in process `syz.3.181'. [ 85.176656][ T6787] syz.3.181 (6787): drop_caches: 2 [ 85.180947][ T6787] syz.3.181 (6787): drop_caches: 2 [ 85.438677][ T6791] syz.1.183 (6791): drop_caches: 2 [ 85.440487][ T6791] syz.1.183 (6791): drop_caches: 2 [ 91.689099][ T33] sched: DL replenish lagged too much [ 91.699990][ T6060] kworker/3:3: page allocation failure: order:4, mode:0x40cc0(GFP_KERNEL|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 91.704232][ T6060] CPU: 3 UID: 0 PID: 6060 Comm: kworker/3:3 Not tainted syzkaller #0 PREEMPT(full) [ 91.704263][ T6060] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 91.704271][ T6060] Workqueue: events acomp_stream_workfn [ 91.704292][ T6060] Call Trace: [ 91.704296][ T6060] [ 91.704300][ T6060] dump_stack_lvl+0x16c/0x1f0 [ 91.704316][ T6060] warn_alloc+0x248/0x3a0 [ 91.704329][ T6060] ? __pfx_warn_alloc+0x10/0x10 [ 91.704340][ T6060] ? psi_memstall_leave+0x1e6/0x2d0 [ 91.704352][ T6060] ? __alloc_pages_direct_compact+0x1af/0x580 [ 91.704364][ T6060] ? __pfx___alloc_pages_direct_compact+0x10/0x10 [ 91.704376][ T6060] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 91.704393][ T6060] __alloc_frozen_pages_noprof+0xea2/0x23f0 [ 91.704407][ T6060] ? __pfx_sched_balance_rq+0x10/0x10 [ 91.704418][ T6060] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 91.704430][ T6060] ? do_raw_spin_lock+0x12c/0x2b0 [ 91.704445][ T6060] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 91.704462][ T6060] ? sched_balance_newidle+0xd88/0x1470 [ 91.704472][ T6060] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 91.704488][ T6060] ? policy_nodemask+0xea/0x4e0 [ 91.704501][ T6060] alloc_pages_mpol+0x1fb/0x550 [ 91.704514][ T6060] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 91.704526][ T6060] ? lock_release+0x201/0x2f0 [ 91.704539][ T6060] ? do_raw_spin_unlock+0x172/0x230 [ 91.704555][ T6060] ___kmalloc_large_node+0xed/0x160 [ 91.704571][ T6060] __kmalloc_large_noprof+0x1c/0x70 [ 91.704585][ T6060] ? rcu_is_watching+0x12/0xc0 [ 91.704596][ T6060] crypto842_alloc_ctx+0x19/0x40 [ 91.704610][ T6060] acomp_stream_workfn+0x1c9/0x2b0 [ 91.704626][ T6060] process_one_work+0x9cf/0x1b70 [ 91.704643][ T6060] ? __pfx_wg_packet_decrypt_worker+0x10/0x10 [ 91.704657][ T6060] ? __pfx_process_one_work+0x10/0x10 [ 91.704674][ T6060] ? assign_work+0x1a0/0x250 [ 91.704688][ T6060] worker_thread+0x6c8/0xf10 [ 91.704698][ T6060] ? __kthread_parkme+0x19e/0x250 [ 91.704711][ T6060] ? __pfx_worker_thread+0x10/0x10 [ 91.704720][ T6060] kthread+0x3c5/0x780 [ 91.704733][ T6060] ? __pfx_kthread+0x10/0x10 [ 91.704747][ T6060] ? ret_from_fork+0x25/0x6f0 [ 91.704762][ T6060] ? rcu_is_watching+0x12/0xc0 [ 91.704772][ T6060] ? rcu_is_watching+0x12/0xc0 [ 91.704781][ T6060] ? __pfx_kthread+0x10/0x10 [ 91.704795][ T6060] ret_from_fork+0x5d4/0x6f0 [ 91.704809][ T6060] ? __pfx_kthread+0x10/0x10 [ 91.704823][ T6060] ret_from_fork_asm+0x1a/0x30 [ 91.704838][ T6060] [ 91.839385][ T6060] Mem-Info: [ 91.840344][ T6060] active_anon:537 inactive_anon:5829 isolated_anon:0 [ 91.840344][ T6060] active_file:1408 inactive_file:244 isolated_file:0 [ 91.840344][ T6060] unevictable:1768 dirty:162 writeback:0 [ 91.840344][ T6060] slab_reclaimable:5600 slab_unreclaimable:114532 [ 91.840344][ T6060] mapped:22378 shmem:2388 pagetables:1164 [ 91.840344][ T6060] sec_pagetables:296 bounce:0 [ 91.840344][ T6060] kernel_misc_reclaimable:0 [ 91.840344][ T6060] free:48517 free_pcp:530 free_cma:0 [ 91.853246][ T6060] Node 0 active_anon:32kB inactive_anon:4004kB active_file:1440kB inactive_file:560kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:1556kB dirty:64kB writeback:0kB shmem:3860kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8060kB pagetables:1144kB sec_pagetables:1120kB all_unreclaimable? no Balloon:0kB [ 91.863039][ T6060] Node 1 active_anon:2116kB inactive_anon:19312kB active_file:4192kB inactive_file:416kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:87956kB dirty:584kB writeback:0kB shmem:5692kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:4548kB pagetables:3512kB sec_pagetables:64kB all_unreclaimable? no Balloon:0kB [ 91.873085][ T6060] Node 0 DMA free:2084kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 91.883465][ T6060] lowmem_reserve[]: 0 288 288 288 288 [ 91.885417][ T6060] Node 0 DMA32 free:19924kB boost:29740kB min:42960kB low:46264kB high:49568kB reserved_highatomic:2048KB free_highatomic:144KB active_anon:32kB inactive_anon:4260kB active_file:1140kB inactive_file:664kB unevictable:3536kB writepending:64kB present:1032196kB managed:295148kB mlocked:0kB bounce:0kB free_pcp:440kB local_pcp:0kB free_cma:0kB [ 91.894750][ T6060] lowmem_reserve[]: 0 0 0 0 0 [ 91.896128][ T6060] Node 1 DMA32 free:214744kB boost:106060kB min:153200kB low:164984kB high:176768kB reserved_highatomic:2048KB free_highatomic:2024KB active_anon:2116kB inactive_anon:19312kB active_file:4192kB inactive_file:416kB unevictable:3536kB writepending:584kB present:1048432kB managed:948220kB mlocked:0kB bounce:0kB free_pcp:1484kB local_pcp:4kB free_cma:0kB [ 91.905435][ T6060] lowmem_reserve[]: 0 0 0 0 0 [ 91.906914][ T6060] Node 0 DMA: 2*4kB (U) 29*8kB (U) 10*16kB (U) 13*32kB (U) 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 2160kB [ 91.911401][ T6060] Node 0 DMA32: 105*4kB (UME) 197*8kB (UMEH) 236*16kB (UMH) 202*32kB (UMH) 89*64kB (UM) 24*128kB (UMH) 2*256kB (U) 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 22540kB [ 91.919632][ T6060] Node 1 DMA32: 401*4kB (UME) 983*8kB (UMEH) 1102*16kB (UMEH) 887*32kB (UMEH) 432*64kB (UMEH) 236*128kB (UMEH) 136*256kB (UMH) 69*512kB (UME) 30*1024kB (UH) 8*2048kB (UM) 0*4096kB = 230588kB [ 91.925554][ T6060] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 91.928241][ T6060] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 91.930889][ T6060] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 91.933663][ T6060] Node 1 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 91.936549][ T6060] 4054 total pagecache pages [ 91.938082][ T6060] 1 pages in swap cache [ 91.939460][ T6060] Free swap = 123948kB [ 91.941511][ T6060] Total swap = 124996kB [ 91.942773][ T6060] 524155 pages RAM [ 91.944546][ T6060] 0 pages HighMem/MovableOnly [ 91.946445][ T6060] 209473 pages reserved [ 91.948146][ T6060] 0 pages cma reserved [ 92.969869][ T6823] syz.3.192 (6823): drop_caches: 2 [ 92.971643][ T6823] syz.3.192 (6823): drop_caches: 2 [ 93.777918][ T6857] syz.3.203 (6857): drop_caches: 2 [ 93.781077][ T6857] syz.3.203 (6857): drop_caches: 2 [ 94.319126][ T6872] syzkaller0: entered promiscuous mode [ 94.320998][ T6872] syzkaller0: entered allmulticast mode [ 94.404029][ T6871] syz.2.208 (6871): drop_caches: 2 [ 94.406253][ T6871] syz.2.208 (6871): drop_caches: 2 [ 94.804710][ T1335] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 94.974437][ T1335] usb 8-1: Using ep0 maxpacket: 16 [ 94.981074][ T1335] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.985901][ T1335] usb 8-1: config 0 interface 0 has no altsetting 0 [ 94.988551][ T1335] usb 8-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 94.991866][ T1335] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.996243][ T1335] usb 8-1: config 0 descriptor?? [ 95.310239][ T1335] usbhid 8-1:0.0: can't add hid device: -71 [ 95.313963][ T1335] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 95.319241][ T1335] usb 8-1: USB disconnect, device number 4 [ 96.149909][ T6910] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.574455][ T6021] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 96.674367][ T6053] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 96.750396][ T6021] usb 8-1: Using ep0 maxpacket: 16 [ 96.834996][ T6053] usb 5-1: Using ep0 maxpacket: 16 [ 96.838855][ T6053] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.842861][ T6053] usb 5-1: config 0 interface 0 has no altsetting 0 [ 96.845239][ T6053] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 96.848071][ T6053] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.853190][ T6053] usb 5-1: config 0 descriptor?? [ 96.880546][ T6021] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.883708][ T6021] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 96.947841][ T6021] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 96.950722][ T6021] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.953331][ T6021] usb 8-1: Product: syz [ 96.955157][ T6021] usb 8-1: Manufacturer: syz [ 96.958008][ T6021] usb 8-1: SerialNumber: syz [ 96.964156][ T6021] usb 8-1: config 0 descriptor?? [ 97.076661][ T6916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.079856][ T6916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.149982][ T6929] syz.2.225 (6929): drop_caches: 2 [ 97.153421][ T6929] syz.2.225 (6929): drop_caches: 2 [ 97.204050][ T6053] usbhid 5-1:0.0: can't add hid device: -71 [ 97.206068][ T6053] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 97.209030][ T6053] usb 5-1: USB disconnect, device number 7 [ 97.844595][ T6942] syzkaller0: entered promiscuous mode [ 97.846468][ T6942] syzkaller0: entered allmulticast mode [ 98.955405][ T6022] usb 8-1: USB disconnect, device number 5 [ 99.759320][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 99.914587][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 99.917489][ T10] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.920449][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 99.922540][ T10] usb 6-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 99.926207][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.931080][ T10] usb 6-1: config 0 descriptor?? [ 100.014467][ T6022] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 100.143329][ T6966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.146936][ T6966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.154659][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 100.156865][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 100.161462][ T10] usb 6-1: USB disconnect, device number 3 [ 100.174373][ T6022] usb 5-1: Using ep0 maxpacket: 16 [ 100.177266][ T6022] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.180691][ T6022] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 100.186491][ T6022] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 100.189283][ T6022] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.191743][ T6022] usb 5-1: Product: syz [ 100.193036][ T6022] usb 5-1: Manufacturer: syz [ 100.196100][ T6022] usb 5-1: SerialNumber: syz [ 100.199610][ T6022] usb 5-1: config 0 descriptor?? [ 100.713905][ T6977] tipc: Started in network mode [ 100.716697][ T6977] tipc: Node identity 2aaadc9b0558, cluster identity 4711 [ 100.719995][ T6977] tipc: Enabled bearer , priority 0 [ 100.725774][ T6977] syzkaller0: entered promiscuous mode [ 100.728185][ T6977] syzkaller0: entered allmulticast mode [ 100.740682][ T6977] tipc: Resetting bearer [ 100.754760][ T6976] tipc: Resetting bearer [ 100.785359][ T6976] tipc: Disabling bearer [ 101.640480][ T6994] syzkaller0: entered promiscuous mode [ 101.642543][ T6994] syzkaller0: entered allmulticast mode [ 101.804340][ T6999] syz.2.248 (6999): drop_caches: 2 [ 101.819591][ T6999] syz.2.248 (6999): drop_caches: 2 [ 102.053028][ T7004] syz.3.249 (7004): drop_caches: 2 [ 102.058019][ T7004] syz.3.249 (7004): drop_caches: 2 [ 102.449161][ T7006] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.464279][ T7006] netlink: 188 bytes leftover after parsing attributes in process `syz.2.250'. [ 102.471701][ T10] usb 5-1: USB disconnect, device number 8 [ 102.490325][ T7008] binder: BINDER_SET_CONTEXT_MGR already set [ 102.495466][ T7008] binder: 7007:7008 ioctl 4018620d 80004a80 returned -16 [ 103.305604][ T7020] tipc: Started in network mode [ 103.307258][ T7020] tipc: Node identity 6293cd8fef39, cluster identity 4711 [ 103.309818][ T7020] tipc: Enabled bearer , priority 0 [ 103.312867][ T7021] syzkaller0: entered promiscuous mode [ 103.315398][ T7021] syzkaller0: entered allmulticast mode [ 103.319211][ T7029] tipc: Resetting bearer [ 103.333355][ T7017] tipc: Resetting bearer [ 103.372868][ T7017] tipc: Disabling bearer [ 103.432500][ T7038] tipc: Started in network mode [ 103.434110][ T7038] tipc: Node identity c66a0efb465e, cluster identity 4711 [ 103.437307][ T7038] tipc: Enabled bearer , priority 0 [ 103.440549][ T7038] syzkaller0: entered promiscuous mode [ 103.443581][ T7038] syzkaller0: entered allmulticast mode [ 103.450736][ T7038] tipc: Resetting bearer [ 103.465942][ T7037] tipc: Resetting bearer [ 103.482629][ T7037] tipc: Disabling bearer [ 103.710029][ T7050] syz.2.259: attempt to access beyond end of device [ 103.710029][ T7050] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 103.808796][ T7055] syz.3.260 (7055): drop_caches: 2 [ 103.810839][ T7055] syz.3.260 (7055): drop_caches: 2 [ 104.368329][ T7061] binder: BINDER_SET_CONTEXT_MGR already set [ 104.371500][ T7061] binder: 7060:7061 ioctl 4018620d 80004a80 returned -16 [ 104.968365][ T7076] syzkaller0: entered promiscuous mode [ 104.970392][ T7076] syzkaller0: entered allmulticast mode [ 105.883017][ T7093] syz.3.270 (7093): drop_caches: 2 [ 105.886880][ T7093] syz.3.270 (7093): drop_caches: 2 [ 106.824406][ T1335] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 106.974427][ T1335] usb 6-1: Using ep0 maxpacket: 16 [ 106.980576][ T1335] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.004380][ T1335] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 107.014645][ T1335] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 107.024342][ T1335] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.029334][ T1335] usb 6-1: Product: syz [ 107.031132][ T1335] usb 6-1: Manufacturer: syz [ 107.033062][ T1335] usb 6-1: SerialNumber: syz [ 107.036566][ T1335] usb 6-1: config 0 descriptor?? [ 107.106932][ T7110] binder: BINDER_SET_CONTEXT_MGR already set [ 107.109002][ T7110] binder: 7106:7110 ioctl 4018620d 80004a80 returned -16 [ 108.231071][ T7132] syz.0.284 (7132): drop_caches: 2 [ 108.236147][ T7132] syz.0.284 (7132): drop_caches: 2 [ 108.875566][ T7135] syz.3.285 (7135): drop_caches: 2 [ 108.877570][ T7135] syz.3.285 (7135): drop_caches: 2 [ 109.247380][ T7159] netlink: 52 bytes leftover after parsing attributes in process `syz.3.294'. [ 109.305233][ T6053] usb 6-1: USB disconnect, device number 4 [ 109.507432][ T7172] syz.2.296 (7172): drop_caches: 2 [ 109.511282][ T7172] syz.2.296 (7172): drop_caches: 2 [ 111.697132][ T7177] syz.1.299 (7177): drop_caches: 2 [ 111.699865][ T7177] syz.1.299 (7177): drop_caches: 2 [ 112.548326][ T7186] syz.3.301 (7186): drop_caches: 2 [ 112.550066][ T7186] syz.3.301 (7186): drop_caches: 2 [ 112.807646][ T7200] syz.2.303 (7200): drop_caches: 2 [ 112.809371][ T7200] syz.2.303 (7200): drop_caches: 2 [ 116.246835][ T13] kworker/u32:1: page allocation failure: order:0, mode:0x40820(GFP_ATOMIC|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 116.251099][ T13] CPU: 2 UID: 0 PID: 13 Comm: kworker/u32:1 Not tainted syzkaller #0 PREEMPT(full) [ 116.251113][ T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 116.251120][ T13] Workqueue: events_unbound nsim_dev_trap_report_work [ 116.251141][ T13] Call Trace: [ 116.251144][ T13] [ 116.251149][ T13] dump_stack_lvl+0x16c/0x1f0 [ 116.251163][ T13] warn_alloc+0x248/0x3a0 [ 116.251176][ T13] ? __pfx_warn_alloc+0x10/0x10 [ 116.251186][ T13] ? get_page_from_freelist+0x1efd/0x38e0 [ 116.251200][ T13] ? wake_all_kswapds+0x19e/0x300 [ 116.251215][ T13] __alloc_frozen_pages_noprof+0xea2/0x23f0 [ 116.251228][ T13] ? rcu_is_watching+0x12/0xc0 [ 116.251241][ T13] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 116.251255][ T13] ? ret_from_fork_asm+0x1a/0x30 [ 116.251268][ T13] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 116.251284][ T13] ? policy_nodemask+0xea/0x4e0 [ 116.251297][ T13] alloc_pages_mpol+0x1fb/0x550 [ 116.251310][ T13] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 116.251323][ T13] ? rcu_is_watching+0x12/0xc0 [ 116.251333][ T13] new_slab+0x265/0x330 [ 116.251343][ T13] ___slab_alloc+0xcf2/0x1740 [ 116.251352][ T13] ? __alloc_skb+0x2b2/0x380 [ 116.251366][ T13] ? __alloc_skb+0x2b2/0x380 [ 116.251377][ T13] ? __slab_alloc.constprop.0+0x56/0xb0 [ 116.251387][ T13] __slab_alloc.constprop.0+0x56/0xb0 [ 116.251397][ T13] kmem_cache_alloc_node_noprof+0xf5/0x3b0 [ 116.251409][ T13] ? __alloc_skb+0x2b2/0x380 [ 116.251420][ T13] __alloc_skb+0x2b2/0x380 [ 116.251431][ T13] ? __pfx___alloc_skb+0x10/0x10 [ 116.251442][ T13] ? kfree_skbmem+0x1a4/0x1f0 [ 116.251452][ T13] ? kfree_skbmem+0x1a4/0x1f0 [ 116.251461][ T13] nsim_dev_trap_report_work+0x2b1/0xcf0 [ 116.251478][ T13] process_one_work+0x9cf/0x1b70 [ 116.251496][ T13] ? __pfx_kfree_rcu_monitor+0x10/0x10 [ 116.251507][ T13] ? __pfx_process_one_work+0x10/0x10 [ 116.251523][ T13] ? assign_work+0x1a0/0x250 [ 116.251538][ T13] worker_thread+0x6c8/0xf10 [ 116.251548][ T13] ? __pfx_worker_thread+0x10/0x10 [ 116.251556][ T13] kthread+0x3c5/0x780 [ 116.251571][ T13] ? __pfx_kthread+0x10/0x10 [ 116.251585][ T13] ? rcu_is_watching+0x12/0xc0 [ 116.251595][ T13] ? __pfx_kthread+0x10/0x10 [ 116.251608][ T13] ret_from_fork+0x5d4/0x6f0 [ 116.251624][ T13] ? __pfx_kthread+0x10/0x10 [ 116.251638][ T13] ret_from_fork_asm+0x1a/0x30 [ 116.251652][ T13] [ 116.251655][ T13] Mem-Info: [ 116.333898][ T13] active_anon:2113 inactive_anon:3151 isolated_anon:0 [ 116.333898][ T13] active_file:3489 inactive_file:895 isolated_file:0 [ 116.333898][ T13] unevictable:1768 dirty:222 writeback:0 [ 116.333898][ T13] slab_reclaimable:5608 slab_unreclaimable:114421 [ 116.333898][ T13] mapped:24738 shmem:2291 pagetables:1173 [ 116.333898][ T13] sec_pagetables:302 bounce:0 [ 116.333898][ T13] kernel_misc_reclaimable:0 [ 116.333898][ T13] free:49754 free_pcp:251 free_cma:0 [ 116.350643][ T13] Node 0 active_anon:204kB inactive_anon:708kB active_file:2388kB inactive_file:3092kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:2404kB dirty:276kB writeback:0kB shmem:3552kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8176kB pagetables:1516kB sec_pagetables:1124kB all_unreclaimable? no Balloon:0kB [ 116.363406][ T13] Node 1 active_anon:6848kB inactive_anon:11288kB active_file:11568kB inactive_file:488kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:88248kB dirty:612kB writeback:0kB shmem:5612kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4368kB pagetables:3176kB sec_pagetables:84kB all_unreclaimable? no Balloon:0kB [ 116.376067][ T13] Node 0 DMA free:1660kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 116.388328][ T13] lowmem_reserve[]: 0 288 288 288 288 [ 116.390019][ T13] Node 0 DMA32 free:32148kB boost:0kB min:13220kB low:16524kB high:19828kB reserved_highatomic:2048KB free_highatomic:1208KB active_anon:204kB inactive_anon:1268kB active_file:2672kB inactive_file:3092kB unevictable:3536kB writepending:276kB present:1032196kB managed:295148kB mlocked:0kB bounce:0kB free_pcp:8544kB local_pcp:0kB free_cma:0kB [ 116.403344][ T13] lowmem_reserve[]: 0 0 0 0 0 [ 116.409009][ T13] Node 1 DMA32 free:328420kB boost:106060kB min:153200kB low:164984kB high:176768kB reserved_highatomic:2048KB free_highatomic:1960KB active_anon:6848kB inactive_anon:11288kB active_file:11568kB inactive_file:488kB unevictable:3536kB writepending:612kB present:1048432kB managed:948220kB mlocked:0kB bounce:0kB free_pcp:520kB local_pcp:32kB free_cma:0kB [ 116.421385][ T13] lowmem_reserve[]: 0 0 0 0 0 [ 116.422919][ T13] Node 0 DMA: 36*4kB (U) 40*8kB (U) 17*16kB (U) 5*32kB (U) 0*64kB 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 2304kB [ 116.427554][ T13] Node 0 DMA32: 356*4kB (UMEH) 763*8kB (UMEH) 596*16kB (UMEH) 255*32kB (UMH) 33*64kB (UMH) 10*128kB (UH) 4*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 29640kB [ 116.432503][ T13] Node 1 DMA32: 144*4kB (UME) 3738*8kB (UMEH) 2860*16kB (UMEH) 1451*32kB (UMEH) 503*64kB (UMEH) 328*128kB (UMEH) 156*256kB (UMH) 74*512kB (UMEH) 41*1024kB (UM) 7*2048kB (U) 0*4096kB = 330992kB [ 116.438336][ T13] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 116.441674][ T13] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 116.444602][ T13] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 116.447544][ T13] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 116.450418][ T13] 6706 total pagecache pages [ 116.451889][ T13] 30 pages in swap cache [ 116.453233][ T13] Free swap = 120004kB [ 116.454707][ T13] Total swap = 124996kB [ 116.456048][ T13] 524155 pages RAM [ 116.457251][ T13] 0 pages HighMem/MovableOnly [ 116.458741][ T13] 209473 pages reserved [ 116.460048][ T13] 0 pages cma reserved [ 116.461332][ T13] SLUB: Unable to allocate memory on CPU 2 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 116.464420][ T13] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 1, min order: 0 [ 116.467637][ T13] node 0: slabs: 26, objs: 650, free: 0 [ 116.469422][ T13] node 1: slabs: 1375, objs: 23117, free: 937 [ 116.783900][ T7227] syz.1.311 (7227): drop_caches: 2 [ 116.790562][ T7227] syz.1.311 (7227): drop_caches: 2 [ 116.876335][ T7228] syz.3.306: attempt to access beyond end of device [ 116.876335][ T7228] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 116.987362][ T7231] bridge_slave_0: left allmulticast mode [ 116.989307][ T7231] bridge_slave_0: left promiscuous mode [ 116.991227][ T7231] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.007321][ T7231] bridge_slave_1: left allmulticast mode [ 117.013772][ T7231] bridge_slave_1: left promiscuous mode [ 117.019572][ T7231] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.051399][ T7231] bond0: (slave bond_slave_0): Releasing backup interface [ 117.060893][ T7231] bond0: (slave bond_slave_1): Releasing backup interface [ 117.080892][ T7231] team0: Port device team_slave_0 removed [ 117.103775][ T7231] team0: Port device team_slave_1 removed [ 117.189741][ T7231] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.192102][ T7231] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.199577][ T7231] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.202000][ T7231] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.494681][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 117.665217][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 117.668930][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.673166][ T10] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 117.682687][ T10] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 117.685951][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.688585][ T10] usb 7-1: Product: syz [ 117.689977][ T10] usb 7-1: Manufacturer: syz [ 117.691512][ T10] usb 7-1: SerialNumber: syz [ 117.695148][ T10] usb 7-1: config 0 descriptor?? [ 117.751268][ T7245] syz.3.319: attempt to access beyond end of device [ 117.751268][ T7245] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 117.945125][ T1216] usb 7-1: USB disconnect, device number 3 [ 118.126338][ T7250] syz.1.320 (7250): drop_caches: 2 [ 118.129528][ T7250] syz.1.320 (7250): drop_caches: 2 [ 118.481911][ T7252] tipc: Started in network mode [ 118.483601][ T7252] tipc: Node identity b2810e1290a8, cluster identity 4711 [ 118.486610][ T7252] tipc: Enabled bearer , priority 0 [ 118.489595][ T7252] syzkaller0: entered promiscuous mode [ 118.491451][ T7252] syzkaller0: entered allmulticast mode [ 118.499105][ T7252] tipc: Resetting bearer [ 118.507837][ T7251] tipc: Resetting bearer [ 118.514434][ T7251] tipc: Disabling bearer [ 118.911065][ T7264] netlink: 44 bytes leftover after parsing attributes in process `syz.1.325'. [ 119.368956][ T7279] syz.1.330 (7279): drop_caches: 2 [ 119.375009][ T7279] syz.1.330 (7279): drop_caches: 2 [ 119.853915][ T7293] syz.0.335 (7293): drop_caches: 2 [ 119.867493][ T7293] syz.0.335 (7293): drop_caches: 2 [ 120.639446][ T7298] syz.2.336 (7298): drop_caches: 2 [ 120.641939][ T7298] syz.2.336 (7298): drop_caches: 2 [ 121.301769][ T7302] syz.1.338 (7302): drop_caches: 2 [ 121.303884][ T7302] syz.1.338 (7302): drop_caches: 2 [ 122.345942][ T7327] bridge_slave_0: left allmulticast mode [ 122.347824][ T7327] bridge_slave_0: left promiscuous mode [ 122.380928][ T7327] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.544478][ T7327] bridge_slave_1: left allmulticast mode [ 122.546362][ T7327] bridge_slave_1: left promiscuous mode [ 122.548223][ T7327] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.596185][ T7327] bond0: (slave bond_slave_0): Releasing backup interface [ 122.608568][ T7327] bond0: (slave bond_slave_1): Releasing backup interface [ 122.635674][ T7327] team0: Port device team_slave_0 removed [ 122.657916][ T7327] team0: Port device team_slave_1 removed [ 122.663207][ T7327] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.667161][ T7327] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.680585][ T7327] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.684601][ T7327] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.792908][ T7336] syz.3.346 (7336): drop_caches: 2 [ 122.796175][ T7336] syz.3.346 (7336): drop_caches: 2 [ 127.531066][ T7369] binder: BINDER_SET_CONTEXT_MGR already set [ 127.533009][ T7369] binder: 7368:7369 ioctl 4018620d 80004a80 returned -16 [ 132.534886][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.544457][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 145.276902][ T7402] syz.0.366: attempt to access beyond end of device [ 145.276902][ T7402] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 145.308520][ T7404] syz.1.362: attempt to access beyond end of device [ 145.308520][ T7404] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 147.264361][ T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 147.414698][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 147.417766][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.421330][ T10] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 147.428298][ T10] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 147.431111][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.433745][ T10] usb 6-1: Product: syz [ 147.435304][ T10] usb 6-1: Manufacturer: syz [ 147.436967][ T10] usb 6-1: SerialNumber: syz [ 147.439348][ T10] usb 6-1: config 0 descriptor?? [ 148.326642][ T7427] syz.2.373 (7427): drop_caches: 2 [ 148.330353][ T7427] syz.2.373 (7427): drop_caches: 2 [ 149.721159][ T6021] usb 6-1: USB disconnect, device number 5 [ 149.880040][ T7451] syz.1.380 (7451): drop_caches: 2 [ 149.882111][ T7451] syz.1.380 (7451): drop_caches: 2 [ 149.920491][ T7453] binder: BINDER_SET_CONTEXT_MGR already set [ 149.923056][ T7453] binder: 7452:7453 ioctl 4018620d 80004a80 returned -16 [ 150.807584][ T7459] syz.1.382 (7459): drop_caches: 2 [ 150.810398][ T7459] syz.1.382 (7459): drop_caches: 2 [ 151.033300][ T7463] syz.2.383 (7463): drop_caches: 2 [ 151.035551][ T7463] syz.2.383 (7463): drop_caches: 2 [ 151.679863][ T7475] netlink: 360 bytes leftover after parsing attributes in process `syz.2.388'. [ 151.751362][ T7478] syzkaller0: entered promiscuous mode [ 151.753711][ T7478] syzkaller0: entered allmulticast mode [ 152.484387][ T6060] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 152.723297][ T7500] netlink: 360 bytes leftover after parsing attributes in process `syz.1.396'. [ 152.817241][ T6060] usb 8-1: Using ep0 maxpacket: 16 [ 152.879889][ T7505] syz.1.397 (7505): drop_caches: 2 [ 152.882229][ T7505] syz.1.397 (7505): drop_caches: 2 [ 153.019615][ T6060] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.023035][ T6060] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 153.061696][ T6060] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 153.074700][ T6060] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.077989][ T6060] usb 8-1: Product: syz [ 153.079602][ T6060] usb 8-1: Manufacturer: syz [ 153.081251][ T6060] usb 8-1: SerialNumber: syz [ 153.095996][ T6060] usb 8-1: config 0 descriptor?? [ 153.447422][ T7514] syz.0.399 (7514): drop_caches: 2 [ 153.450689][ T7514] syz.0.399 (7514): drop_caches: 2 [ 155.379132][ T1335] usb 8-1: USB disconnect, device number 6 [ 165.018757][ T7559] syz.2.413: attempt to access beyond end of device [ 165.018757][ T7559] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 165.170498][ T7555] syz.0.410: attempt to access beyond end of device [ 165.170498][ T7555] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 166.262786][ T7588] syz.0.419 (7588): drop_caches: 2 [ 166.264733][ T7588] syz.0.419 (7588): drop_caches: 2 [ 166.604372][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 166.764339][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 166.772579][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.775832][ T10] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 166.780226][ T10] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 166.783021][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.798996][ T10] usb 6-1: Product: syz [ 166.814284][ T10] usb 6-1: Manufacturer: syz [ 166.815845][ T10] usb 6-1: SerialNumber: syz [ 166.820536][ T10] usb 6-1: config 0 descriptor?? [ 167.065783][ T7603] syz.2.424 (7603): drop_caches: 2 [ 167.068530][ T7603] syz.2.424 (7603): drop_caches: 2 [ 167.224107][ T7599] syz.0.422 (7599): drop_caches: 2 [ 167.226582][ T7599] syz.0.422 (7599): drop_caches: 2 [ 167.906079][ T7612] netlink: 360 bytes leftover after parsing attributes in process `syz.2.428'. [ 168.561740][ T7626] syz.2.432 (7626): drop_caches: 2 [ 168.575595][ T7626] syz.2.432 (7626): drop_caches: 2 [ 168.935005][ T6060] usb 6-1: USB disconnect, device number 6 [ 169.759060][ T7631] syz.0.434 (7631): drop_caches: 2 [ 169.766028][ T7631] syz.0.434 (7631): drop_caches: 2 [ 170.256827][ T5972] Bluetooth: hci1: command 0x0406 tx timeout [ 170.258810][ T5972] Bluetooth: hci0: command 0x0406 tx timeout [ 170.260651][ T5972] Bluetooth: hci2: command 0x0406 tx timeout [ 170.443359][ T7647] syz.2.437 (7647): drop_caches: 2 [ 170.451629][ T7647] syz.2.437 (7647): drop_caches: 2 [ 170.984698][ T7649] bridge_slave_0: left allmulticast mode [ 170.989429][ T7649] bridge_slave_0: left promiscuous mode [ 171.106815][ T7649] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.937851][ T7649] bridge_slave_1: left allmulticast mode [ 171.939684][ T7649] bridge_slave_1: left promiscuous mode [ 171.948762][ T7649] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.150943][ T7649] bond0: (slave bond_slave_0): Releasing backup interface [ 172.236962][ T7649] bond0: (slave bond_slave_1): Releasing backup interface [ 172.368492][ T7649] team0: Port device team_slave_0 removed [ 172.412625][ T7675] syz.3.444 (7675): drop_caches: 2 [ 172.416434][ T7675] syz.3.444 (7675): drop_caches: 2 [ 172.482310][ T7649] team0: Port device team_slave_1 removed [ 172.526112][ T7649] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.529369][ T7649] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.598086][ T7649] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.600702][ T7649] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.550051][ T7679] syz.0.445 (7679): drop_caches: 2 [ 173.622667][ T7679] syz.0.445 (7679): drop_caches: 2 [ 173.828879][ T7684] syz.3.446 (7684): drop_caches: 2 [ 173.833828][ T7684] syz.3.446 (7684): drop_caches: 2 [ 180.239499][ T7701] netlink: 16 bytes leftover after parsing attributes in process `syz.2.452'. [ 180.242563][ T7701] netlink: 24 bytes leftover after parsing attributes in process `syz.2.452'. [ 181.711224][ T7709] syz.0.451 (7709): drop_caches: 2 [ 181.713713][ T7709] syz.0.451 (7709): drop_caches: 2 [ 181.817456][ T7719] syz.2.456 (7719): drop_caches: 2 [ 181.820190][ T7719] syz.2.456 (7719): drop_caches: 2 [ 183.043846][ T7726] syz.0.460 (7726): drop_caches: 2 [ 183.106197][ T7731] syz.3.459 (7731): drop_caches: 2 [ 183.114723][ T7726] syz.0.460 (7726): drop_caches: 2 [ 183.119385][ T7731] syz.3.459 (7731): drop_caches: 2 [ 185.309602][ T7759] syz.1.469 (7759): drop_caches: 2 [ 185.311761][ T7759] syz.1.469 (7759): drop_caches: 2 [ 185.554308][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 190.156204][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 190.209701][ T10] usb 5-1: device descriptor read/all, error -71 [ 191.871667][ T7788] syz.0.475 (7788): drop_caches: 2 [ 191.884766][ T7788] syz.0.475 (7788): drop_caches: 2 [ 193.457789][ T7802] syz.3.482 (7802): drop_caches: 2 [ 193.459674][ T7802] syz.3.482 (7802): drop_caches: 2 [ 193.793915][ T7831] netlink: 44 bytes leftover after parsing attributes in process `syz.2.492'. [ 193.876006][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.883256][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.267020][ T7842] syzkaller0: entered promiscuous mode [ 195.269946][ T7842] syzkaller0: entered allmulticast mode [ 195.399079][ T7864] syz.1.500 (7864): drop_caches: 2 [ 195.408879][ T7864] syz.1.500 (7864): drop_caches: 2 [ 195.551235][ T7866] netlink: 44 bytes leftover after parsing attributes in process `syz.2.503'. [ 197.476638][ T7898] tipc: Enabled bearer , priority 0 [ 197.479404][ T7898] syzkaller0: entered promiscuous mode [ 197.481183][ T7898] syzkaller0: entered allmulticast mode [ 197.493109][ T7898] tipc: Resetting bearer [ 197.622667][ T7897] tipc: Resetting bearer [ 197.725632][ T7897] tipc: Disabling bearer [ 197.942705][ T7902] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 198.309074][ T7918] netlink: 4 bytes leftover after parsing attributes in process `syz.2.524'. [ 198.323207][ T7918] netlink: 200 bytes leftover after parsing attributes in process `syz.2.524'. [ 198.341293][ T7918] netlink: 4 bytes leftover after parsing attributes in process `syz.2.524'. [ 199.027797][ T7906] syzkaller0: entered promiscuous mode [ 199.029568][ T7906] syzkaller0: entered allmulticast mode [ 199.323768][ T7923] netlink: 4 bytes leftover after parsing attributes in process `syz.0.525'. [ 213.631371][ T63] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 213.633942][ T63] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 213.636444][ T63] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 213.638897][ T63] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 213.641355][ T63] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 213.784315][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 213.934405][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 213.939375][ T10] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.942905][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 213.945770][ T10] usb 6-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 213.949548][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.956222][ T10] usb 6-1: config 0 descriptor?? [ 214.047315][ T7961] tipc: Enabled bearer , priority 0 [ 214.049505][ T7962] syzkaller0: entered promiscuous mode [ 214.051480][ T7962] syzkaller0: entered allmulticast mode [ 214.075246][ T7956] tipc: Resetting bearer [ 214.092907][ T7956] tipc: Disabling bearer [ 214.093396][ T7973] netlink: 4 bytes leftover after parsing attributes in process `syz.0.537'. [ 214.119685][ T7973] netlink: 12 bytes leftover after parsing attributes in process `syz.0.537'. [ 214.210422][ T7955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.213197][ T7955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.230621][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 214.240248][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 214.243538][ T10] usb 6-1: USB disconnect, device number 7 [ 214.313053][ T7959] chnl_net:caif_netlink_parms(): no params data found [ 214.384997][ T7981] netlink: 200 bytes leftover after parsing attributes in process `syz.0.539'. [ 214.498475][ T7959] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.500752][ T7959] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.503030][ T7959] bridge_slave_0: entered allmulticast mode [ 214.506742][ T7959] bridge_slave_0: entered promiscuous mode [ 214.509642][ T7959] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.511970][ T7959] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.514551][ T7959] bridge_slave_1: entered allmulticast mode [ 214.517367][ T7959] bridge_slave_1: entered promiscuous mode [ 214.528822][ T7993] netlink: 4 bytes leftover after parsing attributes in process `syz.2.542'. [ 214.536433][ T7993] netlink: 4 bytes leftover after parsing attributes in process `syz.2.542'. [ 214.643988][ T7998] syz.2.542 uses obsolete (PF_INET,SOCK_PACKET) [ 214.681500][ T8001] syz.0.541 (8001): drop_caches: 2 [ 214.683286][ T8001] syz.0.541 (8001): drop_caches: 2 [ 214.723851][ T1138] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.806947][ T7959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.832321][ T1138] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.900169][ T7959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.922781][ T1138] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.967482][ T7959] team0: Port device team_slave_0 added [ 214.971958][ T7959] team0: Port device team_slave_1 added [ 215.004335][ T7947] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 215.030790][ T1138] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.039074][ T7959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.041937][ T7959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.050786][ T7959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.066494][ T7959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.068747][ T7959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.076978][ T7959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.107980][ T7959] hsr_slave_0: entered promiscuous mode [ 215.110080][ T7959] hsr_slave_1: entered promiscuous mode [ 215.112039][ T7959] debugfs: 'hsr0' already exists in 'hsr' [ 215.114541][ T7959] Cannot create hsr debugfs directory [ 215.154379][ T7947] usb 6-1: Using ep0 maxpacket: 16 [ 215.161776][ T7947] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.165183][ T7947] usb 6-1: config 0 interface 0 has no altsetting 0 [ 215.167224][ T7947] usb 6-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 215.169782][ T7947] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.172865][ T7947] usb 6-1: config 0 descriptor?? [ 215.356546][ T1138] bond0 (unregistering): Released all slaves [ 215.407243][ T7959] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 215.417993][ T7959] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 215.420374][ T8004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.423848][ T8004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.425915][ T7959] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 215.436720][ T7959] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 215.476082][ T1138] tipc: Left network mode [ 215.506886][ T7947] usbhid 6-1:0.0: can't add hid device: -71 [ 215.508999][ T7947] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 215.512313][ T7947] usb 6-1: USB disconnect, device number 8 [ 215.522253][ T7959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.556264][ T7959] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.564790][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.567044][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.570951][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.573124][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.684306][ T63] Bluetooth: hci4: command tx timeout [ 215.727037][ T7959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.851390][ T1138] hsr_slave_0: left promiscuous mode [ 215.864992][ T1138] hsr_slave_1: left promiscuous mode [ 215.869741][ T1138] veth1_macvtap: left promiscuous mode [ 215.871509][ T1138] veth0_macvtap: left promiscuous mode [ 215.873437][ T1138] veth1_vlan: left promiscuous mode [ 215.875415][ T1138] veth0_vlan: left promiscuous mode [ 217.095744][ T8065] netlink: 4 bytes leftover after parsing attributes in process `syz.1.550'. [ 217.104752][ T8062] netlink: 200 bytes leftover after parsing attributes in process `syz.1.550'. [ 217.107040][ T7959] veth0_vlan: entered promiscuous mode [ 217.108375][ T8062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.550'. [ 217.111239][ T7959] veth1_vlan: entered promiscuous mode [ 217.127084][ T7959] veth0_macvtap: entered promiscuous mode [ 217.138218][ T7959] veth1_macvtap: entered promiscuous mode [ 217.152456][ T7959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.158490][ T7959] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.190414][ T1147] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.193149][ T1147] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.199274][ T1147] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.202332][ T1147] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.239574][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.247666][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.257566][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.260262][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.418003][ T8080] netlink: 32 bytes leftover after parsing attributes in process `syz.4.552'. [ 217.647859][ T1216] libceph: connect (1)[c::]:6789 error -101 [ 217.649971][ T1216] libceph: mon0 (1)[c::]:6789 connect error [ 217.691379][ T8098] netlink: 'syz.4.554': attribute type 7 has an invalid length. [ 217.694120][ T8098] netlink: 32 bytes leftover after parsing attributes in process `syz.4.554'. [ 217.764353][ T63] Bluetooth: hci4: command tx timeout [ 218.169717][ T8085] ceph: No mds server is up or the cluster is laggy [ 218.175275][ T1216] libceph: connect (1)[c::]:6789 error -101 [ 218.177699][ T1216] libceph: mon0 (1)[c::]:6789 connect error [ 218.180192][ T1216] libceph: connect (1)[c::]:6789 error -101 [ 218.182571][ T1216] libceph: mon0 (1)[c::]:6789 connect error [ 218.444652][ T1216] libceph: connect (1)[c::]:6789 error -101 [ 218.447339][ T1216] libceph: mon0 (1)[c::]:6789 connect error [ 218.615692][ T8104] ceph: No mds server is up or the cluster is laggy [ 218.953516][ T8121] syzkaller0: entered promiscuous mode [ 218.955861][ T8121] syzkaller0: entered allmulticast mode [ 219.102739][ T8126] __nla_validate_parse: 2 callbacks suppressed [ 219.102751][ T8126] netlink: 4 bytes leftover after parsing attributes in process `syz.4.561'. [ 219.306117][ T8134] syz.4.562 (8134): drop_caches: 2 [ 219.314815][ T8134] syz.4.562 (8134): drop_caches: 2 [ 219.435483][ T6021] libceph: connect (1)[c::]:6789 error -101 [ 219.437477][ T6021] libceph: mon0 (1)[c::]:6789 connect error [ 219.694874][ T6021] libceph: connect (1)[c::]:6789 error -101 [ 219.696931][ T6021] libceph: mon0 (1)[c::]:6789 connect error [ 219.839439][ T8129] ceph: No mds server is up or the cluster is laggy [ 219.850474][ T63] Bluetooth: hci4: command tx timeout [ 220.146340][ T8149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.566'. [ 220.156165][ T8148] netlink: 200 bytes leftover after parsing attributes in process `syz.2.566'. [ 220.177709][ T8151] netlink: 'syz.4.567': attribute type 6 has an invalid length. [ 220.180199][ T8151] netlink: 32 bytes leftover after parsing attributes in process `syz.4.567'. [ 220.911618][ T6021] libceph: connect (1)[c::]:6789 error -101 [ 220.913913][ T6021] libceph: mon0 (1)[c::]:6789 connect error [ 221.028759][ T8168] syzkaller0: entered promiscuous mode [ 221.030949][ T8168] syzkaller0: entered allmulticast mode [ 221.036275][ T8168] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 221.044231][ T8168] netlink: 12 bytes leftover after parsing attributes in process `syz.4.572'. [ 221.174856][ T6021] libceph: connect (1)[c::]:6789 error -101 [ 221.176915][ T6021] libceph: mon0 (1)[c::]:6789 connect error [ 221.232017][ T8163] ceph: No mds server is up or the cluster is laggy [ 221.934692][ T63] Bluetooth: hci4: command tx timeout [ 221.974366][ T6060] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 222.124663][ T6060] usb 6-1: Using ep0 maxpacket: 16 [ 222.185251][ T6060] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.189254][ T6060] usb 6-1: config 0 interface 0 has no altsetting 0 [ 222.192160][ T6060] usb 6-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 222.196027][ T6060] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.200606][ T6060] usb 6-1: config 0 descriptor?? [ 222.260169][ T8194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.580'. [ 222.303136][ T8196] netlink: 'syz.4.581': attribute type 3 has an invalid length. [ 222.407556][ T8188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.411207][ T8188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.420255][ T6060] usbhid 6-1:0.0: can't add hid device: -71 [ 222.422318][ T6060] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 222.427432][ T6060] usb 6-1: USB disconnect, device number 9 [ 222.655242][ T8202] netlink: 4 bytes leftover after parsing attributes in process `syz.4.583'. [ 222.665788][ T8202] netlink: 16 bytes leftover after parsing attributes in process `syz.4.583'. [ 222.770056][ T8206] syzkaller0: entered promiscuous mode [ 222.772419][ T8206] syzkaller0: entered allmulticast mode [ 224.334424][ T5979] BUG: sleeping function called from invalid context at mm/vmalloc.c:3409 [ 224.337704][ T5979] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5979, name: syz-executor [ 224.343280][ T5979] preempt_count: 1, expected: 0 [ 224.345014][ T5979] RCU nest depth: 0, expected: 0 [ 224.346912][ T5979] INFO: lockdep is turned off. [ 224.348886][ T5979] Preemption disabled at: [ 224.348895][ T5979] [] schedule+0xe0/0x3a0 [ 224.353191][ T5979] CPU: 3 UID: 0 PID: 5979 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 224.353211][ T5979] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 224.353220][ T5979] Call Trace: [ 224.353226][ T5979] [ 224.353232][ T5979] dump_stack_lvl+0x16c/0x1f0 [ 224.353256][ T5979] __might_resched+0x3c0/0x5e0 [ 224.353273][ T5979] ? __pfx___might_resched+0x10/0x10 [ 224.353288][ T5979] ? pcpu_block_update+0x562/0x660 [ 224.353312][ T5979] ? pcpu_chunk_relocate+0x126/0x190 [ 224.353329][ T5979] vfree+0x75/0xb50 [ 224.353354][ T5979] ? rcu_is_watching+0x12/0xc0 [ 224.353370][ T5979] ? kfree+0x24f/0x4d0 [ 224.353385][ T5979] ? free_percpu+0x6db/0x13c0 [ 224.353401][ T5979] futex_hash_free+0x98/0xc0 [ 224.353419][ T5979] __mmdrop+0x33f/0x580 [ 224.353435][ T5979] ? rcu_is_watching+0x12/0xc0 [ 224.353450][ T5979] finish_task_switch.isra.0+0x7a4/0xc10 [ 224.353467][ T5979] ? __switch_to+0x7a5/0x11a0 [ 224.353486][ T5979] __schedule+0x1198/0x5de0 [ 224.353500][ T5979] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 224.353512][ T5979] ? debug_object_activate+0x2ec/0x4c0 [ 224.353525][ T5979] ? __pfx_debug_object_activate+0x10/0x10 [ 224.353538][ T5979] ? __pfx___schedule+0x10/0x10 [ 224.353550][ T5979] ? schedule+0x2d7/0x3a0 [ 224.353560][ T5979] ? rcu_is_watching+0x12/0xc0 [ 224.353569][ T5979] ? lock_release+0x201/0x2f0 [ 224.353583][ T5979] schedule+0xe7/0x3a0 [ 224.353594][ T5979] do_nanosleep+0x21a/0x570 [ 224.353603][ T5979] ? __pfx_do_nanosleep+0x10/0x10 [ 224.353612][ T5979] ? __asan_memset+0x23/0x50 [ 224.353622][ T5979] ? __hrtimer_setup+0x176/0x280 [ 224.353638][ T5979] hrtimer_nanosleep+0x155/0x380 [ 224.353647][ T5979] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 224.353658][ T5979] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 224.353673][ T5979] ? get_old_timespec32+0xda/0x130 [ 224.353686][ T5979] ? __pfx_get_old_timespec32+0x10/0x10 [ 224.353699][ T5979] common_nsleep+0xa1/0xd0 [ 224.353711][ T5979] __ia32_sys_clock_nanosleep_time32+0x33d/0x4f0 [ 224.353722][ T5979] ? __pfx___ia32_sys_clock_nanosleep_time32+0x10/0x10 [ 224.353733][ T5979] ? rcu_is_watching+0x12/0xc0 [ 224.353743][ T5979] __do_fast_syscall_32+0x7c/0x3a0 [ 224.353757][ T5979] do_fast_syscall_32+0x32/0x80 [ 224.353770][ T5979] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 224.353783][ T5979] RIP: 0023:0xf7f34579 [ 224.353791][ T5979] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 224.353801][ T5979] RSP: 002b:00000000ffa10fb0 EFLAGS: 00000293 ORIG_RAX: 000000000000010b [ 224.353812][ T5979] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 224.353818][ T5979] RDX: 00000000ffa10fe4 RSI: 00000000ffa10fdc RDI: 00000000ffa10fe4 [ 224.353824][ T5979] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 224.353829][ T5979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 224.353835][ T5979] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 224.353843][ T5979] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 224.931182][ T1147] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.058736][ T1147] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.143431][ T1147] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.231215][ T1147] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.489481][ T1147] bond0 (unregistering): Released all slaves [ 225.571037][ T1147] tipc: Left network mode [ 225.815874][ T1147] hsr_slave_0: left promiscuous mode [ 225.819749][ T1147] hsr_slave_1: left promiscuous mode [ 225.825137][ T1147] veth1_macvtap: left promiscuous mode [ 225.827274][ T1147] veth0_macvtap: left promiscuous mode [ 225.829134][ T1147] veth1_vlan: left promiscuous mode [ 225.831037][ T1147] veth0_vlan: left promiscuous mode [ 227.133061][ T1147] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.198490][ T1147] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.287541][ T1147] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.357494][ T1147] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.435507][ T1147] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.507673][ T1147] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.568448][ T1147] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.637436][ T1147] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.711784][ T1147] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.789371][ T1147] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.857450][ T1147] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.918096][ T1147] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.993772][ T1147] bridge_slave_1: left allmulticast mode [ 227.995701][ T1147] bridge_slave_1: left promiscuous mode [ 227.997548][ T1147] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.000510][ T1147] bridge_slave_0: left allmulticast mode [ 228.002324][ T1147] bridge_slave_0: left promiscuous mode [ 228.004497][ T1147] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.211143][ T1147] bond0 (unregistering): Released all slaves [ 228.272155][ T1147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.275975][ T1147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.279286][ T1147] bond0 (unregistering): Released all slaves [ 228.360288][ T1147] bond0 (unregistering): Released all slaves [ 228.437407][ T1147] tipc: Left network mode [ 228.440489][ T1147] tipc: Left network mode [ 228.855224][ T1147] hsr_slave_0: left promiscuous mode [ 228.857933][ T1147] hsr_slave_1: left promiscuous mode [ 228.862735][ T1147] hsr_slave_0: left promiscuous mode [ 228.866020][ T1147] hsr_slave_1: left promiscuous mode [ 228.868557][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.871599][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.875232][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.878409][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.886273][ T1147] hsr_slave_0: left promiscuous mode [ 228.888692][ T1147] hsr_slave_1: left promiscuous mode [ 228.895292][ T1147] veth1_macvtap: left promiscuous mode [ 228.897551][ T1147] veth0_macvtap: left promiscuous mode [ 228.899764][ T1147] veth1_vlan: left promiscuous mode [ 228.901846][ T1147] veth0_vlan: left promiscuous mode [ 228.905251][ T1147] veth1_macvtap: left promiscuous mode [ 228.907396][ T1147] veth0_macvtap: left promiscuous mode [ 228.909597][ T1147] veth1_vlan: left promiscuous mode [ 228.911685][ T1147] veth0_vlan: left promiscuous mode [ 228.914462][ T1147] veth1_macvtap: left promiscuous mode [ 228.916585][ T1147] veth0_macvtap: left promiscuous mode [ 228.918796][ T1147] veth1_vlan: left promiscuous mode [ 228.920878][ T1147] veth0_vlan: left promiscuous mode [ 229.107184][ T1147] team0 (unregistering): Port device team_slave_1 removed [ 229.112452][ T1147] team0 (unregistering): Port device team_slave_0 removed VM DIAGNOSIS: 00:06:20 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000001 RBX=00007ffedf5cdad0 RCX=0000000000000000 RDX=fffff520005e5fd7 RSI=00007ffedf5cdad8 RDI=ffffc90002f2feb8 RBP=0000000000000008 RSP=ffffc90002f2fe48 R8 =0000000000000001 R9 =fffff520005e5fd6 R10=ffffc90002f2feb7 R11=0000000000000000 R12=0000000000000000 R13=ffffc90002f2feb0 R14=ffffc90002f2feb0 R15=0000000000000002 RIP=ffffffff84e0aff5 RFL=00040246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f5fac993300 ffffffff 00c00000 GS =0000 ffff8880974c4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080b64000 CR3=000000004b55c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fffffffff5080a80 030fffffffff0204 080008848c080003 8002010000020806 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fffffffffffffff3 082d80030008000a 8002040607be0068 70656301ffffffff ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 060a0106e4003a3a 3a6301ffffffffff fffffff508018003 656372756f7301ff ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000100000608060a 0106d600010dc200 08000180022d8002 0208000100000608 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000102080006 08003e0800060174 801b800202d89408 0001000008080606 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 012bca0604001b94 0304e404001b9003 0004001b8c030004 001b88030004001b ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 84030804001b8003 0208000808001808 00060875c6000800 0008000008000c08 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000100000608060a 0106d600010dc200 08000180022d8002 0208000100000608 ZMM25=4e75de144e75de14 4e75de144e75de14 4e75de144e75de14 4e75de144e75de14 4e75de144e75de14 4e75de144e75de14 4e75de144e75de14 4e75de144e75de14 ZMM26=cac8c643cac8c643 cac8c643cac8c643 cac8c643cac8c643 cac8c643cac8c643 cac8c643cac8c643 cac8c643cac8c643 cac8c643cac8c643 cac8c643cac8c643 ZMM27=725f6c76725f6c76 725f6c76725f6c76 725f6c76725f6c76 725f6c76725f6c76 725f6c76725f6c76 725f6c76725f6c76 725f6c76725f6c76 725f6c76725f6c76 ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=5e0600005e060000 5e0600005e060000 5e0600005e060000 5e0600005e060000 5e0600005e060000 5e0600005e060000 5e0600005e060000 5e0600005e060000 info registers vcpu 1 CPU#1 EAX=f6bda100 EBX=ffffffff ECX=00000000 EDX=84de5e01 ESI=81ca75da EDI=f6885008 EBP=f6bb2000 ESP=ffba0260 EIP=f70c7ce8 EFL=00000287 [--S--PC] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0023 00000000 ffffffff 00c0fb00 DPL=3 CS32 [-RA] SS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 00000000 ffffffff 00c00000 GS =0063 56d2c440 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 00000000 ffffffff 00c00000 TR =0040 0004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000031e0fffc CR3=000000006cbf8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=dffffc0000000000 RBX=0000000000000003 RCX=ffffc90000510001 RDX=0000000000000000 RSI=ffffffff8215a201 RDI=ffff88801c3a0444 RBP=ffff88801c3a0000 RSP=ffffc9000050eed0 R8 =0000000000000001 R9 =0000000000000000 R10=ffffc9000050ef58 R11=0000000000012038 R12=ffffffff81a67470 R13=ffffc9000050ef58 R14=0000000000000000 R15=ffff88801c3a0000 RIP=ffffffff81a036ad RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880976c4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000040 CR3=0000000076f52000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000002c RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85616b45 RDI=ffffffff9b0f8680 RBP=ffffffff9b0f8640 RSP=ffffc9000329f3f8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=696d6f74615f6e69 R12=0000000000000000 R13=000000000000002c R14=ffffffff9b0f8640 R15=ffffffff85616ae0 RIP=ffffffff85616b6f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880977c4000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080080000 CR3=0000000068ff8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000