last executing test programs: 5.007561129s ago: executing program 0 (id=62): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES64=r0], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ac8000000060a09040000000000000000020002000900010073797a30000000000900020073797a320000000048000480440001800c0001007061796c6f61640034000280080004400000000008000840000000000800024000000000080005400000000008000340000000860800064000000020"], 0xf0}}, 0x0) syz_usb_connect(0x6, 0x7a, 0x0, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r3, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x4], 0x0, 0x1}}, 0x40) r5 = dup(r2) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 4.037046081s ago: executing program 0 (id=70): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x500, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3.910176728s ago: executing program 0 (id=71): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800}}, 0x2, 0x65, 0x9, 0x76a4, 0x1, 0xb7, 0x4}, &(0x7f00000000c0)=0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$phonet_pipe(0x23, 0x5, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x10, &(0x7f0000000480)=ANY=[@ANYRESDEC], &(0x7f0000000300)='syzkaller\x00', 0x8, 0xac, &(0x7f0000000140)=""/172, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0), 0x0, 0x10, 0x3, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c80)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, 0x0, 0x20048080) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) io_uring_setup(0x2195, &(0x7f0000000080)={0x0, 0x7897, 0x400, 0x1, 0x232}) 3.325090912s ago: executing program 3 (id=73): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES64=r0], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ac8000000060a09040000000000000000020002000900010073797a30000000000900020073797a320000000048000480440001800c0001007061796c6f61640034000280080004400000000008000840000000000800024000000000080005400000000008000340000000860800064000000020"], 0xf0}}, 0x0) syz_usb_connect(0x6, 0x7a, 0x0, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r2, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x4], 0x0, 0x1}}, 0x40) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 2.643699176s ago: executing program 3 (id=76): r0 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800bfa2430000000200070201000100000095e0ffffffffffffff0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000faffffff00"/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) openat$hpet(0xffffffffffffff9c, &(0x7f0000002500), 0x0, 0x0) socket$inet(0x2, 0x4000000805, 0x0) pselect6(0x40, &(0x7f0000000400), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x140f, 0x1, 0x78bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x61c}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000801}, 0x8000) 2.580068189s ago: executing program 3 (id=78): openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) r0 = syz_io_uring_setup(0x233, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28) recvmmsg(r5, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000300)=""/105, 0x69}, {&(0x7f0000000380)=""/87, 0x57}, {&(0x7f00000000c0)=""/33, 0x21}], 0x3, &(0x7f0000000440)=""/157, 0x9d}, 0x1a62}, {{&(0x7f0000000500)=@ethernet={0x0, @local}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000580)=""/201, 0xc9}, {&(0x7f0000000680)=""/138, 0x8a}, {&(0x7f0000000740)=""/219, 0xdb}], 0x3, &(0x7f0000000880)=""/145, 0x91}, 0x10000}, {{0x0, 0x0, &(0x7f0000000c80)=[{0x0}, {&(0x7f0000000a40)=""/192, 0xc0}, {&(0x7f0000000bc0)=""/170, 0xaa}, {&(0x7f0000000b00)=""/109, 0x6d}], 0x4, &(0x7f0000000cc0)=""/88, 0x58}}], 0x4, 0x0, 0x0) 1.909611518s ago: executing program 0 (id=80): r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000040)={'tunl0\x00', &(0x7f0000000300)={'gretap0\x00', 0x0, 0x7, 0x7800, 0x101, 0x80, {{0x8, 0x4, 0x0, 0x2f, 0x20, 0x66, 0x0, 0x7, 0x15, 0x0, @empty, @multicast2, {[@lsrr={0x83, 0x3, 0xb1}, @cipso={0x86, 0x6, 0x3}, @noop]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, 0x0, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, &(0x7f00000002c0)) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}], 0x10) sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe0064e230000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) accept4$rose(r6, 0x0, &(0x7f0000000000), 0x80000) (fail_nth: 2) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) pwritev(r3, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000400)="8c149452d9ab0ad8c6d7f093a5541898be03084dae1f7667e6299e3d1cd1cdd7fe92247d624bdf620d8bcedfea74cbe9b740ef1f50d28755e497f2eaabf88c7ee3e03ae13e446bfcb0fc961a2567781d7fd34a02e475a5ae1ab9c6e59809727dbe693b821f1713e01a30d589e194061f63672c7012a6d7ef0c8258099f5f61cee1f53c82", 0x84}, {&(0x7f0000000580)="4da884cefbc10b944742b4a9a2f1c069853f815ad27dc4172ffc8a82209c7090929dd209ec21695020306f67db687d42edb4d06c6f7e636672362460a0d81fa00b93de353eab", 0x46}, {&(0x7f0000000600)="9690343cdcd6755b9be95c261dd0e5b92b0f08692b328a34135f9d401f448f821ede5a389fb99797164b1fcd3ca9b2a7579bfe2ce44f25d56acc49f36a3dd9473c8b7d34dec02739ce6853fde03168a513f39ddc3e5aeaa8bb00a94fa974f5e87a263dcd753ad8ced94004228a0f7fd0d91af1c484411952", 0x78}], 0x4, 0x25b5, 0xd4d) getrusage(0x0, &(0x7f0000000500)) 1.759646672s ago: executing program 3 (id=81): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES64=r0], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ac8000000060a09040000000000000000020002000900010073797a30000000000900020073797a320000000048000480440001800c0001007061796c6f61640034000280080004400000000008000840000000000800024000000000080005400000000008000340000000860800064000000020"], 0xf0}}, 0x0) syz_usb_connect(0x6, 0x7a, 0x0, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r3, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x4], 0x0, 0x1}}, 0x40) r5 = dup(r2) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1.75561235s ago: executing program 2 (id=82): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_dev$radio(&(0x7f0000000100), 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = dup(0xffffffffffffffff) r2 = syz_io_uring_setup(0x917, &(0x7f0000000300)={0x0, 0x400, 0x1, 0x1000001, 0xf7fffffc}, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNGETFILTER(r5, 0x801054db, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$unix(r6, &(0x7f0000000540)=@abs={0x0, 0x0, 0x4e23}, 0x6e) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="c50a0000000000006113b800000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000, @void, @value}, 0x94) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r1, 0x0, &(0x7f0000000a80)={&(0x7f0000000240)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/197, 0xc5}, {&(0x7f00000006c0)=""/231, 0xe7}, {&(0x7f0000000580)=""/162, 0xa2}, {&(0x7f00000001c0)=""/56, 0x38}, {&(0x7f0000000640)=""/120, 0x78}, {&(0x7f0000000c00)=""/227, 0xe3}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f00000002c0)=""/27, 0x1b}, {&(0x7f0000000840)=""/155, 0x9b}, {&(0x7f0000000900)=""/133, 0x85}], 0xa, &(0x7f0000000ac0)=""/16, 0x10}, 0x0, 0x140, 0x0, {0xfffd}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000049c0)={0x3, 0x2e, &(0x7f0000000e80)=ANY=[@ANYBLOB="180000000000008000000000f8ffffff18110000", @ANYRES8=r4, @ANYRESHEX, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000810000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000182b0000", @ANYRES32=r1, @ANYBLOB, @ANYRES32=r1, @ANYBLOB="000000000b00000018400000020000000000000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000480)='GPL\x00', 0x6, 0x0, 0x0, 0x45057bf4ccb05c67, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) write$dsp(r7, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r7, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r7, 0x40045010, &(0x7f0000000300)=0x3) r8 = socket(0x1, 0x803, 0x0) getsockopt$sock_buf(r8, 0x1, 0x27, 0x0, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_RESET(r7, 0x5000, 0x0) 1.649955486s ago: executing program 0 (id=83): r0 = syz_io_uring_setup(0x24b5, &(0x7f0000000080)={0x0, 0x5615, 0x0, 0x0, 0x38b}, &(0x7f0000000100), &(0x7f0000000140)) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000740)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x3}}, {{0xa1, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) syz_usb_disconnect(r1) ioctl$EVIOCRMFF(r1, 0x40085503, &(0x7f0000000000)=0x1) r3 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0xf) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0x7}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r6, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000080)=0x45d0f620, 0x4) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="3400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468"], 0x34}}, 0x0) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtaction={0x48, 0x31, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0xfffffffffffffffc, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x48}}, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000900)={0x1, r0, 0x33, {0x9, 0x6}, 0x8}, 0x1) 1.37938759s ago: executing program 2 (id=85): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'tunl0\x00', &(0x7f0000000500)={'gretap0\x00', 0x0, 0x7, 0x7800, 0x101, 0x80, {{0xd, 0x4, 0x0, 0x2f, 0x34, 0x66, 0x0, 0x7, 0x15, 0x0, @empty, @multicast2, {[@ssrr={0x89, 0xf, 0xca, [@rand_addr=0x64010101, @rand_addr=0x64010102, @local]}, @cipso={0x86, 0x6, 0x3}, @rr={0x7, 0xb, 0x25, [@loopback, @empty]}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x800, 0x119002) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000680)={0xff, 0x1, "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"}) connect$unix(r0, 0x0, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = socket$inet(0x2, 0x3, 0x33) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x7, 0x0, 0x10, 0xfffffffb}]}) getsockopt$inet_mreqsrc(r3, 0x0, 0x53, &(0x7f00000001c0)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r5 = dup3(r4, r2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f00000002c0)) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$sock(r6, &(0x7f00000004c0)={&(0x7f0000000340)=@generic={0x2b, "1e380929ffd6446e647f49add80e6a2773c595c2cc272e4c2e6f559a4ecc18d9ebb5b72fdf443ac599602d1b69fb5cee20edffae675acccae1a8c93b7113e944fe5c7982094914d4442fd07d580ba2bbc8740caddb0c81bf1bd9aaf47d3bd950c22abeb6e21716634cbc0147d554192ac24e23b107a102ad52ef19eb28c1"}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000240)="ac1a77ecd4845b6ca8849615757dc573922103135f98fa", 0x17}, {&(0x7f00000007c0)="9cb28f4fe3bf8489493ad848f2905b76eabc671ac70b5a385e8cae38cef103d366c754fd8c4aff9f004cae8841e8d7ba9cfdf3679de84c4cc85b6eb3c2390560a98c7f7da11b7226842fa0d47eb9622202d23703a7fb489c2c083b6924bd910b4b3c5fd0601b8085cadc181f35f4dc75d8c15ae6ce27dc496c3edd0228c272d30777d922a032e20c27352739d976e2d60922bdf67e5539de4b0095528b771a7899d9d221f6967cfa98076bd1b8175795e4bf1502b11dcb4a526aa16f50928b675fb7067d3d5708172f8779818ccce15a1533f84f", 0xd4}, {&(0x7f0000000940)="53944f5721facd83fc5eccd1aa06ee4aab37073e9dcc2447d1a04d97787d6611c2e09353a9a9081bcb2862952c908776cac68ee36fcfef68ac35efc74cff86f1d62755dfc02eba107175e4d7039b376037ff2d1826ddc543ac6c43ea71aa66cab51e2492b77ba1630507ab7733c18e98817c40f7a11450f6d608ef8d205667223c3b2caf6e63ad3b08aaf7", 0x8b}, {&(0x7f0000000a00)="788f1f0ed0f4706eda6b640ca80e97d055ea0f12f8d7c8b13aee6a1188b6a805aa471982e10450cde7e7201de5deba92a1542b16c295cdcc1c9d42bca81bdafe20473cb7b07180866e7fbc8eb3c041659e91f1152bf1054419c1afaa41dd4e0bdb1ca18ec0ce21b8fd6a99d1862acb13ff2430467cb5e8d7271aad73ee1ead07bc95cf8d5ae8b74f15367e584cecbea9b555a57701e8e66707955bbbe54cf3f2ff705ad6b4d782792760276de32b0a383d62824b86a9bc19c46ca48685b2f20bb66909ec8aa19cc27690658a9fa626264d3e013aac7f0740c9ed", 0xda}], 0x4, &(0x7f0000000b00)=[@txtime={{0x14, 0x1, 0x3d, 0x8}}, @mark={{0x10, 0x1, 0x24, 0xfffffffd}}, @mark={{0x10, 0x1, 0x24, 0x7}}, @mark={{0x10, 0x1, 0x24, 0x9}}, @mark={{0x10, 0x1, 0x24, 0xd}}, @mark={{0x10, 0x1, 0x24, 0x3cae}}, @mark={{0x10, 0x1, 0x24, 0x2}}, @timestamping={{0x10, 0x1, 0x25, 0x5}}], 0x84}, 0x1000c854) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}], 0x10) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x2, 0x0, @local, 0x2}]}, 0x0) r7 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r7, 0x84, 0x7c, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe0064e230000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) accept4$rose(r5, 0x0, &(0x7f0000000000), 0x80000) 1.224336899s ago: executing program 2 (id=87): ioperm(0x4008, 0x10, 0x7ff) socket$kcm(0x21, 0x2, 0x2) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000100)) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdfff7c}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x4, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x75fa, 0xe475, 0x0, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r6, &(0x7f0000000000)='7', 0x1, 0x24000000, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r7, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf250200000008000200002001000000000000000000000000000214000b00ff0100000000000000fffffffffd67732c53419581a3147065576261737c9e10a126238acb71600049f2adfb89c84f2f6bdd00ff0f00bd83f8e55bddc9480ca79208a2af73b21ce1d965f5dd75f81976f227303548bd680440e29735b120c9f4f1206045dde6640bb662e435eae016bce51883fc4433d6bb"], 0x4c}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e20, @loopback}}}, 0x84) 1.049906396s ago: executing program 1 (id=89): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x1402, 0x1, 0x70bd2a, 0x25dfdc01}, 0x10}, 0x1, 0x0, 0x0, 0x2400c404}, 0x40810) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x4000000000000004) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000280)="580000001300192340834b80040d8c5602067fffffff81000000010000dca8f76d8ea513dfb08e00940005891550f4a8000000006700008000f0000200002b02462efff5dd00000010000100000c0100fcff0000040e2da5", 0x58}], 0x1) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000080)=@raw=[@generic={0x1, 0x7, 0x5, 0x8, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0xfffffff8}], &(0x7f00000000c0)='GPL\x00', 0x1, 0xf, &(0x7f0000000100)=""/15, 0x41100, 0x2e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x7, 0x2}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000240)=[{0x0, 0x1, 0xe, 0x8}, {0x1, 0x3, 0x2}, {0x2, 0x5, 0x5, 0xa}, {0x5, 0x1, 0x10, 0x8}], 0x10, 0x2, @void, @value}, 0x94) signalfd(r2, &(0x7f00000003c0)={[0x9]}, 0x8) r4 = openat$cgroup_root(0xffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r3, r4, 0x1, 0x0, @void}, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r5) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, r6, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}]}, 0x38}}, 0x4044050) r7 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0xd) ioctl$TCFLSH(r7, 0x540b, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x5, &(0x7f0000000240)=0x20006, 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x20, 0x3e, 0x9, 0x0, 0x800, {0x3}, [@typed={0x4, 0x4}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x10}]}]}, 0x20}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000003e0007010000000000000000047c0000040012801400018008000300", @ANYRES32=0xee00, @ANYBLOB="080002"], 0x2c}}, 0x0) syz_open_dev$usbmon(&(0x7f0000000380), 0x697, 0x14400) 1.049554454s ago: executing program 1 (id=90): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0xfc, r1, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\x00\nod\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0xfc}}, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0x40000) 999.962715ms ago: executing program 2 (id=91): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000020000000000000000000002000000000000000000090010"], 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) (fail_nth: 1) 999.7517ms ago: executing program 2 (id=92): io_setup(0x281, &(0x7f0000000100)=0x0) io_pgetevents(r0, 0x1, 0x1, &(0x7f0000000000)=[{}], 0x0, 0x0) r1 = memfd_create(&(0x7f0000000600)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o84I\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HO\x00\x00\x00\x00R\xfc\xcb%u3\xec\xde%\x9d\xe4\x1d\rD\x82S\x17?\xd6\xb1\x9aF\xe2\xba[\xc7QR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11\x17\xd8\xda@4\x9f\xc5*T\x1e^\xf7o\xff\xff\xff\xffwI\x02\xf3\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\xa5\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\xae\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xf1\x1b\xe6\xb9\xe7\xff\xc5H\x04\x93\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94\xfe2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[z\xb6>\xd3\xe7Y*\xdb\xa7h\nt\xddP\n\xc5\xeb\xb1ux\x94@\x00\x00g\x02D9\x83\xa7\x97\xf4\xb25wL\x97\xfb\xb9\xccj\xb3\x96\xc1@\xee`{\x87\xa8]\x96\x9cjF^+\xcc1l\xcbmA,5\xc4J\xcab\xa6\x91\xa0\xeaU\x92\x01\x1f,\xfa\x10\"+\x01\x00\x91\xe9\x1cz\xd1f\x901\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00o\"\x85Np\xba\x0e<\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb8V\xe4\xa1C\x90\x17\xcc{\x9d\xf1\xbd\xb0\xca\x03\x96\x85h}\x8f\x1c)X\xc83rA\x90r\xb6\xba!;\x95\xaf\xe0\xcb\xec\xcd$\x02f\x8c4\x1aH\x8fC\xbfr\xd39\x92\x1fShu\x9e\b\xd4m\xa8\x16\xa6\xd5\xae\xcb\x03oFQ\"\xf7F\xb7\vp\xb6\xe5\x92\xe2O}.\x95A\x9bH\x8d\xa1\x80\x1b\x14u\xfdK\xce\xaf\x94i\xf1s\xf7\xb8Jq\xcb3=M\x84\x7f\x181/\x9bQ|4\xaf\xcf\r\xcfz Z\x19\xad_\x13\x99\xf7\xfdOD\xd3\x9d\x9d\xb8d5g\xf1\x84\xbd\xe5\xa2\xb3\xda\x82\x10n1\xed\xba\xe3\x96\x85\"\xb6\xa6n\xe7\xfd\xd4\a\x97\x85\x810/\xc4o\x11\xc8\x1b\xc0\f\xeec\xa4\x7f|P\x00\x00\x00\x000p\xaf\xfdk\xac\xcc\xac`\xc9\a<\xadIt\x9b\xeb\x8a\xfe\x9b\aO\xa5?h\xe1B\xa8C\x8e;/\xa8\x94\x1bs\xf0\xa9>\x9e\xff\xc9\xd2\x00h\xcb\xfb\xb6Y\xbfp\xd8\x90\x96\xec\x83N\x8bNnx\xb6\x16Y\xf8sU\xae\xa0\b\x8cLq\n\x1f\x99t\xb6\xffozu\xa0B(\xe9?\xcdA\xba\xa8\x13Qc\xda\x16?\xe8z\x8f\x862!\xbf\xa4\xb8\x9bC\xe9Od\xe8\xd32m\x06RX\x7f\xf7\xc2\n\x94\xe5P:l\xd9\xd5\xbd\rH6-\x8a\x12m\xff\xe9\xa0\r\tk\xda\xa4q(\xae\\\xb6\x14I\xf7\xe0z\xf10x0}, &(0x7f0000cab000)=0xc) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @loopback}, 0x1, 0x0, 0x1, 0x3}}, 0x2e) (async) setresgid(r1, 0x0, 0x0) (async, rerun: 32) setregid(0x0, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async, rerun: 32) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 32) madvise(&(0x7f0000520000/0x3000)=nil, 0x3000, 0xb) (async) openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) (async) openat$cgroup_int(r2, &(0x7f0000000040)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) 914.806578ms ago: executing program 1 (id=95): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x12, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000071122e000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2568, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) ioprio_set$pid(0x3, 0xffffffffffffffff, 0x2004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) pwritev(r0, &(0x7f0000000180), 0x0, 0x8, 0x80000010) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/igmp6\x00') preadv(r4, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/70, 0x46}], 0x1, 0x5, 0x27ffe) 906.309994ms ago: executing program 3 (id=96): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_getroute={0x1c, 0x1a, 0x105, 0x70bd2b, 0x25dfdbfe, {0x2, 0x14, 0x20, 0x80, 0xfe, 0x0, 0xfe, 0x3, 0xc00}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x805}, 0x280c0000) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000100), &(0x7f0000000180)=0x60) close(r0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, &(0x7f0000000200)=@arm64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000280)={0xa3d, r0, 0xc, {0x0, 0x6}, 0x6}, 0x1) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f00000002c0)={[0x3000, 0x8000000, 0xf000, 0x4000], 0x3ff, 0xc0, 0x4}) socketpair(0x11, 0xa, 0x4bd, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IMGETDEVINFO(r4, 0x80044944, &(0x7f0000000380)={0x5}) r5 = syz_open_dev$sg(&(0x7f00000003c0), 0x2, 0x311000) ioctl$SG_SET_FORCE_PACK_ID(r5, 0x227b, &(0x7f0000000400)) readv(r5, &(0x7f0000000680)=[{&(0x7f0000000440)=""/214, 0xd6}, {0x0}, {&(0x7f0000000540)=""/149, 0x95}, {&(0x7f0000000600)=""/104, 0x68}], 0x4) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f00000006c0)=""/178) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(r4, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, r6, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x4048054) socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c09425, &(0x7f00000008c0)={"5c63399a77647571c47c74f05e51cf1c", 0x0, 0x0, {0x5, 0x5}, {0x7fffffffffffffff, 0x2}, 0x132c, [0x1, 0x8, 0x8, 0xb51, 0x4, 0x120000, 0x2, 0x100, 0xfff, 0x75e2, 0x2f7d4e0c, 0x7, 0x10000, 0x5, 0x8000000000000000, 0x7]}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000980)={0x9, 0x0, {0x7, @usage=0x4, 0x0, 0x3, 0x6, 0x9, 0x9650, 0x1, 0x42, @struct={0xa, 0x6f8a0}, 0x66, 0x7fffffff, [0x7, 0x1, 0x1, 0x5, 0x8, 0xfff]}, {0x2, @struct={0x9, 0x10001}, 0x0, 0x1dee, 0x80, 0x2, 0x36c4, 0xfffffffffffffbab, 0xa, @usage=0x101, 0x300, 0x6d1, [0x1ff, 0x1, 0x6, 0x110, 0x70, 0x2]}, {0x800, @struct={0x3, 0x101}, 0x0, 0x1ff, 0x2, 0x40, 0x6, 0x74, 0x408, @usage=0x5, 0x1000, 0x8, [0x2, 0x7, 0x838, 0x7, 0xcba, 0x6]}, {0x8, 0x8, 0x100000000}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, &(0x7f0000000d80)={{r0}, r8, 0x10, @unused=[0x0, 0x8, 0x401, 0x3], @devid=r9}) recvfrom$inet6(r3, &(0x7f0000001d80)=""/213, 0xd5, 0x40, &(0x7f0000001e80)={0xa, 0x4e23, 0x28, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r10 = fsmount(r1, 0x1, 0x3) r11 = creat(&(0x7f0000001ec0)='./file0\x00', 0x43) r12 = socket$tipc(0x1e, 0x2, 0x0) connect$pppl2tp(r11, &(0x7f0000001f00)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x4, 0x1, 0x0, 0x4, {0xa, 0x4e23, 0x6, @mcast2, 0x2}}}, 0x3a) io_submit(0x0, 0x3, &(0x7f0000003180)=[&(0x7f0000001fc0)={0x0, 0x0, 0x0, 0x4, 0xfff9, r12, &(0x7f0000001f80)="424de3575fcc023c09b1f2bfc3262f2ea21abb", 0x13, 0x3, 0x0, 0x1, r11}, &(0x7f0000003000)={0x0, 0x0, 0x0, 0x8, 0x6, r10, &(0x7f0000002000)="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", 0x1000, 0x10000, 0x0, 0x2, r10}, &(0x7f0000003140)={0x0, 0x0, 0x0, 0x0, 0xd, r7, &(0x7f0000003040)="e5e531eafbff076b17405ca39ec15922d9764ff0163401180bccc96dfe9d292f02afc4031c589d13afc9d818a7b72a59487ae9946d50a29b5389cfcd0662ba08ed6ed108873440d5f7f6b8547b975d427bf748fe2410dd18fdb42b12aa419e551249e383fe0c4e823b66d2946dde13ce48b2505ed09587b35d82d870bd4f116b8a579f68540187a3296714e9edef643885b241ecd0df21c614c6e4274a26468ea4e80d69b5ba4ab0f624637fc4b5befbce876ba6c686e2c5aa5e6c934bbef3a2127349fb7f67875b5815585563ae489c72f99c2c25112afe55b44e4af4239c4d86ed94b29dfa6612bf", 0xe9, 0x32bf, 0x0, 0x1, r10}]) 839.611297ms ago: executing program 3 (id=97): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d0000008500000008000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r7 = socket$inet6(0xa, 0x80002, 0x0) r8 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x200, 0x2f5380, 0x32314142, 0x58595556, 0x425, 0x10001, 0xa, 0x2, 0x1, 0x3, 0x0, 0x7}}) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(r8, 0x4038564f, &(0x7f0000000300)={{0x1, @name="c42a6838d28443227483ec8fe343db49cbeecd991aef557d83b98b12db1f5b3d"}, 0x8, 0x4, 0x47}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, &(0x7f0000000380)=[0x1, 0x2], 0x2) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000003cc0), 0x0, 0x4001c00) 839.297493ms ago: executing program 0 (id=98): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x8c01, 0x0) write$snapshot(r0, 0x0, 0x1f) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0x1}, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200)={'#! ', './file0'}, 0xb) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000dc0)=@newtfilter={0x30, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {}, {0x5, 0xffe0}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmsg(r6, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x20) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001500010300800000000000000c000000"], 0x14}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1e2) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000100)='romfs\x00', 0x0, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="140002001400010600000000050080002b00"], 0x14}}, 0x0) 769.188514ms ago: executing program 2 (id=99): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000640), 0x0, 0x2) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0cc5605, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000680)={'wpan0\x00'}) openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x6d8a, &(0x7f0000000300)={0x0, 0x40ac, 0x10000, 0x2, 0x3f, 0x0, r4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}) io_uring_enter(r5, 0x2def, 0x4000, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x3000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 0s ago: executing program 1 (id=100): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000141000000180017000007ff00036966cec65bb7bc027a3200000000", @ANYRESDEC=r1, @ANYBLOB='4\x00', @ANYRES32=r2], 0x34}, 0x1, 0x0, 0x0, 0x20}, 0x4000000) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file0\x00', 0x0, 0x8}, 0x14) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xd, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x13, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x6, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x8000) r9 = socket$kcm(0x10, 0x2, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r12, 0x0, 0x2}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bond={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x40004}, @IFLA_BOND_USE_CARRIER={0x5}, @IFLA_BOND_RESEND_IGMP={0x8}, @IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}]}}}]}, 0x54}}, 0x0) sendmsg$kcm(r9, 0x0, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x7, 0x800, 0xb12a, 0x8, 0x1, 0x3}}}}]}, 0x4c}}, 0x44080) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x1, 0x2, 0x0, 0x1, 0x80000000, 0xfffffff7}}, {0x4}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x55}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r5}, 0x18) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000f0f000000000700000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000003c000000050a01020000000000000000010000000c00024000000000000000010900010073797a3100000000040004800b0007"], 0xc4}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x3d6fc80, 0x380, 0x0}) openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000000), 0x149240, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:36138' (ED25519) to the list of known hosts. [ 42.130473][ T5863] cgroup: Unknown subsys name 'net' [ 42.266861][ T5863] cgroup: Unknown subsys name 'cpuset' [ 42.275600][ T5863] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 43.170127][ T5863] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.939130][ T5944] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.942390][ T5952] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.944815][ T5955] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.946622][ T5958] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.946933][ T5952] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.947706][ T5952] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.947922][ T5955] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.948108][ T5955] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.948546][ T5955] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.949118][ T5955] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.950180][ T5958] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.953076][ T5296] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.957336][ T5958] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.960260][ T5296] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.961890][ T5958] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.962221][ T5956] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.963068][ T5956] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.963419][ T5956] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.964317][ T5956] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.984461][ T5956] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.218724][ T5946] chnl_net:caif_netlink_parms(): no params data found [ 47.245152][ T5941] chnl_net:caif_netlink_parms(): no params data found [ 47.385579][ T5945] chnl_net:caif_netlink_parms(): no params data found [ 47.412085][ T5946] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.415649][ T5946] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.418068][ T5946] bridge_slave_0: entered allmulticast mode [ 47.420818][ T5946] bridge_slave_0: entered promiscuous mode [ 47.462678][ T5946] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.465101][ T5946] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.467906][ T5946] bridge_slave_1: entered allmulticast mode [ 47.471599][ T5946] bridge_slave_1: entered promiscuous mode [ 47.503410][ T5947] chnl_net:caif_netlink_parms(): no params data found [ 47.541050][ T5946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.589610][ T5946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.624217][ T5941] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.626699][ T5941] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.628968][ T5941] bridge_slave_0: entered allmulticast mode [ 47.631664][ T5941] bridge_slave_0: entered promiscuous mode [ 47.712392][ T5946] team0: Port device team_slave_0 added [ 47.714605][ T5941] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.717065][ T5941] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.719282][ T5941] bridge_slave_1: entered allmulticast mode [ 47.722242][ T5941] bridge_slave_1: entered promiscuous mode [ 47.724823][ T5945] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.727064][ T5945] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.729318][ T5945] bridge_slave_0: entered allmulticast mode [ 47.731898][ T5945] bridge_slave_0: entered promiscuous mode [ 47.740396][ T5946] team0: Port device team_slave_1 added [ 47.785150][ T5945] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.787355][ T5945] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.789549][ T5945] bridge_slave_1: entered allmulticast mode [ 47.792137][ T5945] bridge_slave_1: entered promiscuous mode [ 47.846420][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.849194][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.860969][ T5946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.869164][ T5941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.901583][ T5945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.946675][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.949298][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.958328][ T5946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.964850][ T5941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.970377][ T5945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.998584][ T5947] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.001380][ T5947] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.004430][ T5947] bridge_slave_0: entered allmulticast mode [ 48.008110][ T5947] bridge_slave_0: entered promiscuous mode [ 48.017272][ T5947] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.020182][ T5947] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.023162][ T5947] bridge_slave_1: entered allmulticast mode [ 48.026273][ T5947] bridge_slave_1: entered promiscuous mode [ 48.057487][ T5945] team0: Port device team_slave_0 added [ 48.061524][ T5945] team0: Port device team_slave_1 added [ 48.116389][ T5941] team0: Port device team_slave_0 added [ 48.180861][ T5941] team0: Port device team_slave_1 added [ 48.207204][ T5947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.260349][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.265621][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.276126][ T5945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.282130][ T5947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.288265][ T5946] hsr_slave_0: entered promiscuous mode [ 48.291386][ T5946] hsr_slave_1: entered promiscuous mode [ 48.308673][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.311485][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.321176][ T5945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.340011][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.342281][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.350634][ T5941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.363928][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.366075][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.374242][ T5941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.403683][ T5947] team0: Port device team_slave_0 added [ 48.449744][ T5947] team0: Port device team_slave_1 added [ 48.567411][ T5945] hsr_slave_0: entered promiscuous mode [ 48.569690][ T5945] hsr_slave_1: entered promiscuous mode [ 48.571812][ T5945] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.574431][ T5945] Cannot create hsr debugfs directory [ 48.596374][ T5941] hsr_slave_0: entered promiscuous mode [ 48.599490][ T5941] hsr_slave_1: entered promiscuous mode [ 48.602382][ T5941] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.606876][ T5941] Cannot create hsr debugfs directory [ 48.610249][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.612950][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.621903][ T5947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.628718][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.630921][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.639600][ T5947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.783749][ T5947] hsr_slave_0: entered promiscuous mode [ 48.785985][ T5947] hsr_slave_1: entered promiscuous mode [ 48.788339][ T5947] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.790713][ T5947] Cannot create hsr debugfs directory [ 48.994644][ T5956] Bluetooth: hci3: command tx timeout [ 48.994709][ T68] Bluetooth: hci1: command tx timeout [ 48.996520][ T5950] Bluetooth: hci2: command tx timeout [ 48.996725][ T5950] Bluetooth: hci0: command tx timeout [ 49.077003][ T5946] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.097205][ T5946] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.102609][ T5946] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.112468][ T5946] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.135910][ T5945] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.140656][ T5945] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.146073][ T5945] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.155472][ T5945] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.197614][ T5941] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.207047][ T5941] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.218687][ T5941] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.238092][ T5941] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.304840][ T5947] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.310802][ T5947] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.317975][ T5947] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.324347][ T5947] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.355793][ T5946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.387934][ T5946] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.404593][ T5945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.410719][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.413943][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.431032][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.433737][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.439946][ T5941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.453110][ T5945] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.484194][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.486998][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.493701][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.496568][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.505633][ T5941] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.512205][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.515033][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.548972][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.552034][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.562698][ T5946] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.605160][ T5947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.630821][ T5947] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.640698][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.643530][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.651477][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.653750][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.678087][ T5947] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.717575][ T5946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.751525][ T5945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.763813][ T5946] veth0_vlan: entered promiscuous mode [ 49.778085][ T5946] veth1_vlan: entered promiscuous mode [ 49.786489][ T5941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.806263][ T5945] veth0_vlan: entered promiscuous mode [ 49.814287][ T5947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.821446][ T5945] veth1_vlan: entered promiscuous mode [ 49.834197][ T5946] veth0_macvtap: entered promiscuous mode [ 49.840039][ T5946] veth1_macvtap: entered promiscuous mode [ 49.850122][ T5941] veth0_vlan: entered promiscuous mode [ 49.867348][ T5941] veth1_vlan: entered promiscuous mode [ 49.874727][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.882565][ T5945] veth0_macvtap: entered promiscuous mode [ 49.886855][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.901356][ T5945] veth1_macvtap: entered promiscuous mode [ 49.909054][ T5946] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.912632][ T5946] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.918256][ T5946] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.921672][ T5946] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.948039][ T5947] veth0_vlan: entered promiscuous mode [ 49.964072][ T5941] veth0_macvtap: entered promiscuous mode [ 49.966874][ T5945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.971452][ T5945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.977794][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.987882][ T5945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.992235][ T5945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.998150][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.015356][ T5947] veth1_vlan: entered promiscuous mode [ 50.019768][ T5941] veth1_macvtap: entered promiscuous mode [ 50.022809][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.023064][ T5945] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.026893][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.029571][ T5945] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.035702][ T5945] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.038505][ T5945] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.066954][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.070443][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.073895][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.077296][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.081752][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.090794][ T1200] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.093742][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.094581][ T1200] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.097347][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.097355][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.109028][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.114791][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.120651][ T5941] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.126570][ T5941] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.130459][ T5941] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.134587][ T5941] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.160543][ T5947] veth0_macvtap: entered promiscuous mode [ 50.171213][ T5946] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.185592][ T5947] veth1_macvtap: entered promiscuous mode [ 50.189121][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.195858][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.224527][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.227094][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.249749][ T5947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.253140][ T5947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.259454][ T5947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.262801][ T5947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.266338][ T5947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.269745][ T5947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.275229][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.278658][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.279564][ T5947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.281853][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.285448][ T5947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.285457][ T5947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.286032][ T6008] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5'. [ 50.298674][ T5947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.301745][ T5947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.305076][ T5947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.308836][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.319816][ T6008] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5'. [ 50.320096][ T5947] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.326004][ T5947] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.328718][ T5947] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.331465][ T5947] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.345627][ T788] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.347782][ T6008] autofs4:pid:6008:validate_dev_ioctl: path string terminator missing for cmd(0xc0189375) [ 50.348885][ T788] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.401980][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.406741][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.423432][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.426193][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.503541][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.513910][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.522526][ T6022] netlink: 84 bytes leftover after parsing attributes in process `syz.1.7'. [ 50.643482][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 51.074475][ T5956] Bluetooth: hci1: command tx timeout [ 51.074607][ T5296] Bluetooth: hci3: command tx timeout [ 51.074613][ T5958] Bluetooth: hci0: command tx timeout [ 51.074684][ T5950] Bluetooth: hci2: command tx timeout [ 51.280749][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 51.580913][ T6038] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 51.757201][ T6040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9'. [ 51.805604][ T1117] sr 2:0:0:0: [sr0] tag#15 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 51.809885][ T1117] sr 2:0:0:0: [sr0] tag#15 Sense Key : Illegal Request [current] [ 51.822822][ T1117] sr 2:0:0:0: [sr0] tag#15 Add. Sense: Invalid command operation code [ 51.826558][ T1117] sr 2:0:0:0: [sr0] tag#15 CDB: Write(10) 2a 00 00 00 00 00 00 00 02 00 [ 51.830192][ T1117] critical target error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 51.836963][ T1117] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 51.872696][ T6040] bridge_slave_1: left allmulticast mode [ 51.875890][ T6040] bridge_slave_1: left promiscuous mode [ 51.878409][ T6040] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.884725][ T6044] netlink: 84 bytes leftover after parsing attributes in process `syz.3.10'. [ 51.923684][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 51.927225][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 51.930455][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 51.953347][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 51.976262][ T6040] bridge_slave_0: left allmulticast mode [ 51.979476][ T6040] bridge_slave_0: left promiscuous mode [ 51.987090][ T6040] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.471267][ T5296] Bluetooth: unknown link type 108 [ 52.473555][ T5296] Bluetooth: hci2: connection err: -111 [ 52.502812][ T6051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12'. [ 52.511007][ T6051] netlink: 'syz.1.12': attribute type 10 has an invalid length. [ 52.526438][ T6051] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 52.628530][ T6053] netlink: 84 bytes leftover after parsing attributes in process `syz.0.13'. [ 53.153362][ T5296] Bluetooth: hci2: command tx timeout [ 53.153486][ T5950] Bluetooth: hci1: command tx timeout [ 53.155178][ T5296] Bluetooth: hci0: command tx timeout [ 53.157589][ T5956] Bluetooth: hci3: command 0x040f tx timeout [ 53.531325][ T5956] Bluetooth: unknown link type 108 [ 53.534036][ T5956] Bluetooth: hci1: connection err: -111 [ 53.804303][ T0] NOHZ tick-stop error: local softirq work is pending, handler #248!!! [ 53.846187][ T6063] block device autoloading is deprecated and will be removed. [ 53.955775][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 54.006111][ T6066] netlink: 84 bytes leftover after parsing attributes in process `syz.3.17'. [ 54.816734][ T6076] netlink: 84 bytes leftover after parsing attributes in process `syz.0.20'. [ 55.244772][ T5956] Bluetooth: hci3: command 0x040f tx timeout [ 55.245129][ T5296] Bluetooth: hci2: command tx timeout [ 55.245133][ T68] Bluetooth: hci1: command tx timeout [ 55.530452][ T6087] netlink: 84 bytes leftover after parsing attributes in process `syz.3.24'. [ 56.031380][ T6099] capability: warning: `syz.0.26' uses deprecated v2 capabilities in a way that may be insecure [ 56.082556][ T6106] netlink: 84 bytes leftover after parsing attributes in process `syz.0.27'. [ 56.102639][ T40] audit: type=1804 audit(1746902223.458:2): pid=6106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.27" name="/newroot/7/file0" dev="tmpfs" ino=57 res=1 errno=0 [ 56.501880][ T6111] hfs: unable to load iocharset "io#harset" [ 56.564054][ T6109] IPVS: length: 78 != 8 [ 56.588628][ T6109] vivid-000: ================= START STATUS ================= [ 56.591652][ T6109] vivid-000: Generate PTS: true [ 56.595029][ T6109] vivid-000: Generate SCR: true [ 56.597180][ T6109] tpg source WxH: 640x360 (Y'CbCr) [ 56.598994][ T6109] tpg field: 1 [ 56.600195][ T6109] tpg crop: (0,0)/640x360 [ 56.601709][ T6109] tpg compose: (0,0)/640x360 [ 56.604428][ T6109] tpg colorspace: 8 [ 56.606114][ T6109] tpg transfer function: 0/0 [ 56.607671][ T6109] tpg Y'CbCr encoding: 0/0 [ 56.609183][ T6109] tpg quantization: 0/0 [ 56.610683][ T6109] tpg RGB range: 0/2 [ 56.612012][ T6109] vivid-000: ================== END STATUS ================== [ 56.900457][ T6113] geneve1: entered promiscuous mode [ 57.117626][ T6125] process 'syz.3.31' launched './file1' with NULL argv: empty string added [ 57.315028][ T5296] Bluetooth: hci3: command 0x040f tx timeout [ 57.315546][ T5956] Bluetooth: unknown link type 108 [ 57.319295][ T5956] Bluetooth: hci2: connection err: -111 [ 57.886348][ T5956] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 57.889698][ T5956] Bluetooth: hci0: Injecting HCI hardware error event [ 57.892631][ T5956] Bluetooth: hci0: hardware error 0x00 [ 58.609065][ T6161] netlink: 4 bytes leftover after parsing attributes in process `syz.3.36'. [ 58.615276][ T6161] netlink: 269 bytes leftover after parsing attributes in process `syz.3.36'. [ 58.618821][ T6161] netlink: 269 bytes leftover after parsing attributes in process `syz.3.36'. [ 58.624177][ T6161] netlink: 4 bytes leftover after parsing attributes in process `syz.3.36'. [ 58.628170][ T6161] netlink: 4 bytes leftover after parsing attributes in process `syz.3.36'. [ 58.633887][ T6161] netlink: 4 bytes leftover after parsing attributes in process `syz.3.36'. [ 58.770624][ T6170] 9pnet_fd: Insufficient options for proto=fd [ 58.826561][ T6172] warning: `syz.0.41' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 59.953301][ T5956] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 60.306399][ T6199] netlink: 84 bytes leftover after parsing attributes in process `syz.0.50'. [ 60.398783][ T6204] netlink: 68 bytes leftover after parsing attributes in process `syz.1.49'. [ 61.634670][ T6216] ======================================================= [ 61.634670][ T6216] WARNING: The mand mount option has been deprecated and [ 61.634670][ T6216] and is ignored by this kernel. Remove the mand [ 61.634670][ T6216] option from the mount to silence this warning. [ 61.634670][ T6216] ======================================================= [ 63.113428][ T6239] input: syz0 as /devices/virtual/input/input5 [ 63.295617][ T6242] netlink: 'syz.2.60': attribute type 11 has an invalid length. [ 63.298127][ T6242] netlink: 224 bytes leftover after parsing attributes in process `syz.2.60'. [ 63.747791][ T6258] netlink: 84 bytes leftover after parsing attributes in process `syz.0.62'. [ 64.049467][ T6264] bpq0: entered allmulticast mode [ 64.384772][ T6274] sctp: [Deprecated]: syz.3.68 (pid 6274) Use of struct sctp_assoc_value in delayed_ack socket option. [ 64.384772][ T6274] Use struct sctp_sack_info instead [ 65.396627][ T6293] netlink: 84 bytes leftover after parsing attributes in process `syz.3.73'. [ 66.944575][ T6315] FAULT_INJECTION: forcing a failure. [ 66.944575][ T6315] name failslab, interval 1, probability 0, space 0, times 1 [ 66.949333][ T6315] CPU: 1 UID: 0 PID: 6315 Comm: syz.0.80 Not tainted 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 66.949347][ T6315] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 66.949353][ T6315] Call Trace: [ 66.949356][ T6315] [ 66.949360][ T6315] dump_stack_lvl+0x16c/0x1f0 [ 66.949377][ T6315] should_fail_ex+0x512/0x640 [ 66.949391][ T6315] ? fs_reclaim_acquire+0xae/0x150 [ 66.949407][ T6315] should_failslab+0xc2/0x120 [ 66.949419][ T6315] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 66.949431][ T6315] ? security_inode_alloc+0x3b/0x2b0 [ 66.949444][ T6315] security_inode_alloc+0x3b/0x2b0 [ 66.949454][ T6315] inode_init_always_gfp+0xce4/0x1030 [ 66.949471][ T6315] alloc_inode+0x86/0x240 [ 66.949483][ T6315] sock_alloc+0x40/0x280 [ 66.949495][ T6315] do_accept+0xf7/0x530 [ 66.949509][ T6315] ? do_raw_spin_lock+0x12c/0x2b0 [ 66.949524][ T6315] ? __pfx_do_accept+0x10/0x10 [ 66.949546][ T6315] __sys_accept4+0x100/0x1b0 [ 66.949561][ T6315] ? __pfx___sys_accept4+0x10/0x10 [ 66.949576][ T6315] ? __pfx_ksys_write+0x10/0x10 [ 66.949587][ T6315] __ia32_sys_accept4+0x94/0x100 [ 66.949602][ T6315] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 66.949616][ T6315] __do_fast_syscall_32+0x73/0x120 [ 66.949630][ T6315] do_fast_syscall_32+0x32/0x80 [ 66.949644][ T6315] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 66.949656][ T6315] RIP: 0023:0xf7fa8579 [ 66.949664][ T6315] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 66.949673][ T6315] RSP: 002b:00000000f50c655c EFLAGS: 00000296 ORIG_RAX: 000000000000016c [ 66.949683][ T6315] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000000 [ 66.949688][ T6315] RDX: 0000000080000000 RSI: 0000000000080000 RDI: 0000000000000000 [ 66.949694][ T6315] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 66.949699][ T6315] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 66.949704][ T6315] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 66.949715][ T6315] [ 66.954674][ T6318] netlink: 84 bytes leftover after parsing attributes in process `syz.3.81'. [ 67.229328][ T6328] virtio-fs: tag not found [ 67.241169][ T6323] netlink: 4 bytes leftover after parsing attributes in process `syz.0.83'. [ 67.285157][ T6328] netlink: 68 bytes leftover after parsing attributes in process `syz.1.84'. [ 67.286638][ T6323] netlink: 48 bytes leftover after parsing attributes in process `syz.0.83'. [ 67.628509][ T6341] openvswitch: netlink: IP tunnel dst address not specified [ 67.631711][ T6341] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 67.670478][ T6343] FAULT_INJECTION: forcing a failure. [ 67.670478][ T6343] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 67.674674][ T6343] CPU: 0 UID: 0 PID: 6343 Comm: syz.2.91 Not tainted 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 67.674688][ T6343] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 67.674694][ T6343] Call Trace: [ 67.674698][ T6343] [ 67.674702][ T6343] dump_stack_lvl+0x16c/0x1f0 [ 67.674719][ T6343] should_fail_ex+0x512/0x640 [ 67.674735][ T6343] _copy_from_user+0x2e/0xd0 [ 67.674763][ T6343] __sys_bpf+0x21d/0x4d80 [ 67.674780][ T6343] ? __pfx___sys_bpf+0x10/0x10 [ 67.674794][ T6343] ? ksys_write+0x190/0x240 [ 67.674805][ T6343] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 67.674836][ T6343] ? fput+0x70/0xf0 [ 67.674849][ T6343] ? ksys_write+0x1b9/0x240 [ 67.674858][ T6343] ? __pfx_ksys_write+0x10/0x10 [ 67.674869][ T6343] __ia32_sys_bpf+0x76/0xe0 [ 67.674883][ T6343] __do_fast_syscall_32+0x73/0x120 [ 67.674897][ T6343] do_fast_syscall_32+0x32/0x80 [ 67.674911][ T6343] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 67.674922][ T6343] RIP: 0023:0xf7f42579 [ 67.674934][ T6343] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 67.674943][ T6343] RSP: 002b:00000000f506655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 67.674953][ T6343] RAX: ffffffffffffffda RBX: 0000000000000012 RCX: 0000000080000280 [ 67.674958][ T6343] RDX: 0000000000000028 RSI: 0000000000000000 RDI: 0000000000000000 [ 67.674964][ T6343] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 67.674969][ T6343] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 67.674974][ T6343] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 67.674986][ T6343] [ 67.738678][ C0] vkms_vblank_simulate: vblank timer overrun [ 67.864624][ T6364] random: crng reseeded on system resumption [ 68.514380][ T5296] Bluetooth: hci3: command 0x040f tx timeout [ 68.683631][ T6378] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 68.703555][ T79] ------------[ cut here ]------------ [ 68.705565][ T79] RTNL: assertion failed at ./include/net/netdev_lock.h (56) [ 68.708217][ T79] WARNING: CPU: 3 PID: 79 at ./include/net/netdev_lock.h:56 __linkwatch_sync_dev+0x1ed/0x230 [ 68.711545][ T79] Modules linked in: [ 68.713148][ T79] CPU: 3 UID: 0 PID: 79 Comm: kworker/u32:4 Not tainted 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 68.718662][ T79] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 68.722012][ T79] Workqueue: bond0 bond_mii_monitor [ 68.723850][ T79] RIP: 0010:__linkwatch_sync_dev+0x1ed/0x230 [ 68.725777][ T79] Code: 05 ff ff ff e8 a4 fb 6b f8 c6 05 87 e0 1e 07 01 90 ba 38 00 00 00 48 c7 c6 e0 51 c1 8c 48 c7 c7 80 51 c1 8c e8 84 dc 2b f8 90 <0f> 0b 90 90 e9 d6 fe ff ff 48 c7 c7 94 3f 85 90 e8 6e 7d d0 f8 e9 [ 68.731745][ T79] RSP: 0018:ffffc9000108fa00 EFLAGS: 00010282 [ 68.733711][ T79] RAX: 0000000000000000 RBX: ffff88805e046000 RCX: ffffffff817a7f78 [ 68.736238][ T79] RDX: ffff88801f8fc880 RSI: ffffffff817a7f85 RDI: 0000000000000001 [ 68.738805][ T79] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 68.741247][ T79] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff92000211f4a [ 68.743741][ T79] R13: ffff88805e046cc5 R14: ffffffff8c372aa0 R15: ffffffff89871ff0 [ 68.746219][ T79] FS: 0000000000000000(0000) GS:ffff888097aec000(0000) knlGS:0000000000000000 [ 68.748901][ T79] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 68.750906][ T79] CR2: 0000000000000000 CR3: 000000006b683000 CR4: 0000000000352ef0 [ 68.753424][ T79] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 68.755853][ T79] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 68.758258][ T79] Call Trace: [ 68.759288][ T79] [ 68.760231][ T79] ethtool_op_get_link+0x1d/0x70 [ 68.761741][ T79] bond_check_dev_link+0x3f9/0x710 [ 68.763383][ T79] ? __pfx_bond_check_dev_link+0x10/0x10 [ 68.765130][ T79] bond_mii_monitor+0x3c0/0x2dc0 [ 68.766672][ T79] ? __pfx_bond_mii_monitor+0x10/0x10 [ 68.768323][ T79] ? rcu_is_watching+0x12/0xc0 [ 68.769849][ T79] process_one_work+0x9cc/0x1b70 [ 68.771406][ T79] ? __pfx_process_one_work+0x10/0x10 [ 68.773064][ T79] ? assign_work+0x1a0/0x250 [ 68.774554][ T79] worker_thread+0x6c8/0xf10 [ 68.776037][ T79] ? __kthread_parkme+0x19e/0x250 [ 68.777608][ T79] ? __pfx_worker_thread+0x10/0x10 [ 68.779213][ T79] kthread+0x3c2/0x780 [ 68.780477][ T79] ? __pfx_kthread+0x10/0x10 [ 68.781896][ T79] ? __pfx_kthread+0x10/0x10 [ 68.783397][ T79] ? __pfx_kthread+0x10/0x10 [ 68.784840][ T79] ? __pfx_kthread+0x10/0x10 [ 68.786312][ T79] ? rcu_is_watching+0x12/0xc0 [ 68.787783][ T79] ? __pfx_kthread+0x10/0x10 [ 68.789255][ T79] ret_from_fork+0x45/0x80 [ 68.790665][ T79] ? __pfx_kthread+0x10/0x10 [ 68.792312][ T79] ret_from_fork_asm+0x1a/0x30 [ 68.793994][ T79] [ 68.794972][ T79] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 68.797222][ T79] CPU: 3 UID: 0 PID: 79 Comm: kworker/u32:4 Not tainted 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 68.800793][ T79] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 68.804030][ T79] Workqueue: bond0 bond_mii_monitor [ 68.805703][ T79] Call Trace: [ 68.806784][ T79] [ 68.807703][ T79] dump_stack_lvl+0x3d/0x1f0 [ 68.809117][ T79] panic+0x71c/0x800 [ 68.810362][ T79] ? __pfx_panic+0x10/0x10 [ 68.811735][ T79] ? show_trace_log_lvl+0x29b/0x3e0 [ 68.813383][ T79] ? check_panic_on_warn+0x1f/0xb0 [ 68.815026][ T79] ? __linkwatch_sync_dev+0x1ed/0x230 [ 68.816753][ T79] check_panic_on_warn+0xab/0xb0 [ 68.818287][ T79] __warn+0xf6/0x3c0 [ 68.819542][ T79] ? __pfx_vprintk_emit+0x10/0x10 [ 68.821166][ T79] ? __linkwatch_sync_dev+0x1ed/0x230 [ 68.822836][ T79] report_bug+0x3c3/0x580 [ 68.824215][ T79] ? __linkwatch_sync_dev+0x1ed/0x230 [ 68.825939][ T79] handle_bug+0x184/0x210 [ 68.827304][ T79] exc_invalid_op+0x17/0x50 [ 68.828719][ T79] asm_exc_invalid_op+0x1a/0x20 [ 68.830263][ T79] RIP: 0010:__linkwatch_sync_dev+0x1ed/0x230 [ 68.832092][ T79] Code: 05 ff ff ff e8 a4 fb 6b f8 c6 05 87 e0 1e 07 01 90 ba 38 00 00 00 48 c7 c6 e0 51 c1 8c 48 c7 c7 80 51 c1 8c e8 84 dc 2b f8 90 <0f> 0b 90 90 e9 d6 fe ff ff 48 c7 c7 94 3f 85 90 e8 6e 7d d0 f8 e9 [ 68.838258][ T79] RSP: 0018:ffffc9000108fa00 EFLAGS: 00010282 [ 68.840210][ T79] RAX: 0000000000000000 RBX: ffff88805e046000 RCX: ffffffff817a7f78 [ 68.842699][ T79] RDX: ffff88801f8fc880 RSI: ffffffff817a7f85 RDI: 0000000000000001 [ 68.845206][ T79] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 68.847708][ T79] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff92000211f4a [ 68.850336][ T79] R13: ffff88805e046cc5 R14: ffffffff8c372aa0 R15: ffffffff89871ff0 [ 68.852850][ T79] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 68.854818][ T79] ? __warn_printk+0x198/0x350 [ 68.856370][ T79] ? __warn_printk+0x1a5/0x350 [ 68.857899][ T79] ethtool_op_get_link+0x1d/0x70 [ 68.859467][ T79] bond_check_dev_link+0x3f9/0x710 [ 68.861130][ T79] ? __pfx_bond_check_dev_link+0x10/0x10 [ 68.862912][ T79] bond_mii_monitor+0x3c0/0x2dc0 [ 68.864488][ T79] ? __pfx_bond_mii_monitor+0x10/0x10 [ 68.866278][ T79] ? rcu_is_watching+0x12/0xc0 [ 68.867787][ T79] process_one_work+0x9cc/0x1b70 [ 68.869362][ T79] ? __pfx_process_one_work+0x10/0x10 [ 68.871078][ T79] ? assign_work+0x1a0/0x250 [ 68.872521][ T79] worker_thread+0x6c8/0xf10 [ 68.874031][ T79] ? __kthread_parkme+0x19e/0x250 [ 68.875653][ T79] ? __pfx_worker_thread+0x10/0x10 [ 68.877302][ T79] kthread+0x3c2/0x780 [ 68.878607][ T79] ? __pfx_kthread+0x10/0x10 [ 68.880099][ T79] ? __pfx_kthread+0x10/0x10 [ 68.881572][ T79] ? __pfx_kthread+0x10/0x10 [ 68.883024][ T79] ? __pfx_kthread+0x10/0x10 [ 68.884493][ T79] ? rcu_is_watching+0x12/0xc0 [ 68.886042][ T79] ? __pfx_kthread+0x10/0x10 [ 68.887534][ T79] ret_from_fork+0x45/0x80 [ 68.888948][ T79] ? __pfx_kthread+0x10/0x10 [ 68.890431][ T79] ret_from_fork_asm+0x1a/0x30 [ 68.891947][ T79] [ 68.893572][ T79] Kernel Offset: disabled [ 68.894948][ T79] Rebooting in 86400 seconds.. VM DIAGNOSIS: 18:37:16 Registers: info registers vcpu 0 CPU#0 RAX=00000000001b0ef3 RBX=0000000000000000 RCX=ffffffff8b6943e9 RDX=0000000000000000 RSI=ffffffff8dbdb841 RDI=ffffffff8bf46d20 RBP=fffffbfff1c12ee8 RSP=ffffffff8e007e10 R8 =0000000000000001 R9 =ffffed10056465bd R10=ffff88802b232deb R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e097740 R14=ffffffff90851010 R15=0000000000000000 RIP=ffffffff8b692c7f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977ec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000000c3a12ff CR3=000000004fd53000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000180ec9 RBX=0000000000000001 RCX=ffffffff8b6943e9 RDX=0000000000000000 RSI=ffffffff8dbdb841 RDI=ffffffff8bf46d20 RBP=ffffed1003ada488 RSP=ffffc9000046fdf8 R8 =0000000000000001 R9 =ffffed10056665bd R10=ffff88802b332deb R11=0000000000000000 R12=0000000000000001 R13=ffff88801d6d2440 R14=ffffffff90851010 R15=0000000000000000 RIP=ffffffff8b692c7f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880978ec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002f5e8ffc CR3=000000006c3b4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000000bd691 RBX=0000000000000002 RCX=ffffffff8b6943e9 RDX=0000000000000000 RSI=ffffffff8dbdb841 RDI=ffffffff8bf46d20 RBP=ffffed1003ada910 RSP=ffffc9000047fdf8 R8 =0000000000000001 R9 =ffffed10056865bd R10=ffff88802b432deb R11=0000000000000000 R12=0000000000000002 R13=ffff88801d6d4880 R14=ffffffff90851010 R15=0000000000000000 RIP=ffffffff8b692c7f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880979ec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000000c24df6a CR3=000000004e59b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f7462ff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854c18b5 RDI=ffffffff9addfbc0 RBP=ffffffff9addfb80 RSP=ffffc9000108f370 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9addfb80 R15=ffffffff854c1850 RIP=ffffffff854c18df RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097aec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000000000000 CR3=000000006b683000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000