last executing test programs: 4.866399697s ago: executing program 1 (id=42): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000002004000b7080000000000007b8af8ff00000000b7080000000200007b8af0ff00000000bfa1000000"], 0x0, 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x2, 0x2, 0xf, 0x7}, {0x5, 0x2, 0x13, 0x2}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000000000000800080000014000091ff0f00004500f5ff06ff00010100fc5e15f4c3d3fbd80dad0000abfa"], 0x125) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x41, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}) r6 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x7, @mcast1, 0x6}, 0x1c) sendto$inet6(r6, &(0x7f0000000100)="80000fdc2208a1ce", 0x8, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000006280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0xffffffffffffffff, 0x9, 0x8}, 0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000480)={'ip6tnl0\x00', 0x0, 0x4, 0x2, 0x80, 0xea3d, 0x413c24e7ec163e75, @remote, @mcast2, 0x8, 0x80, 0xa}}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x10, 0x8, 0x20ef, 0x120, r7, 0x40a2, '\x00', r8, r6, 0x0, 0x1, 0x5, 0x4, @void, @value, @void, @value}, 0x50) 3.920885628s ago: executing program 1 (id=44): openat$autofs(0xffffff9c, 0x0, 0x200142, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$netlink(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0500000000000000000044000000080003005135aea60b913c9d1ef638bb795b1403252a7ca92a94c988badb90619bdf7076fc21503941e09f4fda84282fdc67b03af9ddcafee7a8eab1d5983c3e4ea39145a5ca5287c13e777f124a8899145597c12eeda43e45756b410df1df60a387a9dfdcaec9f004288c32f6ebf9e61c82556fb560a5eb44d773b67ebb2ab80c738d6158c96f9bc4358296021b85299d2568d279f5ef556ce0b0e0792c4702de753dbd8853d3e94ea85352b8e8d6f3", @ANYRESOCT=r0], 0x34}}, 0x800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0) r4 = dup(r0) write$binfmt_misc(r4, 0x0, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r5, 0x3) r6 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r6, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r7 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg(r7, &(0x7f0000001500), 0x588, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)=ANY=[@ANYRES8=r4], 0x28}}, 0x24000080) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000090000000c000180080001"], 0x20}}, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="d81400003d00010027bd82000000000002"], 0x14d8}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 3.920585756s ago: executing program 3 (id=45): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0xe, 0x0, &(0x7f00000001c0)) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xa5ee}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) 3.920459125s ago: executing program 3 (id=46): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x8481, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000000)=0x27) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000013c0)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) (fail_nth: 18) 3.750970929s ago: executing program 3 (id=48): openat$autofs(0xffffff9c, &(0x7f0000000000), 0x200142, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$netlink(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000000000000044000000080003005135aea60b913c9d1ef638bb795b1403252a7ca92a94c988badb90619bdf7076fc21503941e09f4fda84282fdc67b03af9ddcafee7a8eab1d5983c3e4ea39145a5ca5287c13e777f124a8899145597c12eeda43e45756b410df1df60a387a9dfdcaec9f004288c32f6ebf9e61c82556fb560a5eb44d773b67ebb2ab80c738d6158c96f9bc4358296021b85299d2568d279f5ef556ce0b0e0792c4702de753dbd8853d3e94ea85352b8e8d6f3", @ANYRESOCT=r0], 0x34}}, 0x800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc}, @NFTA_LIMIT_UNIT={0xc}]}}}, {0x14, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0) r3 = dup(r0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r4, 0x3) r5 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r5, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r6 = accept4(r4, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmmsg(r6, &(0x7f0000001500), 0x588, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)=ANY=[@ANYRES8=r3], 0x28}}, 0x24000080) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000090000000c000180080001"], 0x20}}, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="d81400003d00010027bd82000000000002"], 0x14d8}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x2, 0x0) chdir(&(0x7f0000000280)='./file0\x00') 3.430816371s ago: executing program 3 (id=50): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f0000000500)=""/195, 0x40ffe, 0x0, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x11, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r3 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) io_uring_enter(r3, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) r5 = mq_open(&(0x7f0000000040)='!selinuxsel\xad\"\x0e\xabx\xb8\xc9\xa8x\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0140001000010002081000418e00000004fcff", 0x58}], 0x1) setsockopt$inet6_udp_int(r6, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4) mq_notify(r5, 0x0) 3.22795724s ago: executing program 1 (id=51): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$netlink(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r1, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}]}}}, {0x14, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x4}}}]}]}], {0x14}}, 0xbc}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x4b0}}, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r3, 0x3) r4 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r4, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r5 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg(r4, 0x0, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f0000001500), 0x588, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)=ANY=[@ANYRES8=r2], 0x28}}, 0x24000080) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000090000000c000180080001"], 0x20}}, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="d81400003d00010027bd82000000000002"], 0x14d8}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x2, 0x0) chdir(&(0x7f0000000280)='./file0\x00') 2.980653465s ago: executing program 1 (id=52): r0 = socket$alg(0x26, 0x5, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setscheduler(0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x6, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r3, &(0x7f00000000c0)=ANY=[@ANYRES8=r1], 0xff49) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000046000000950000000000000099284b762f4177bcb52cf215a8719e376f36e846a466", @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$cgroup_ro(r1, 0x0, 0x275a, 0x0) ioctl$SNDCTL_SEQ_CTRLRATE(r4, 0xc0045103, &(0x7f0000000040)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = syz_open_procfs(0x0, &(0x7f0000004440)='net/ptype\x00') read$FUSE(r6, &(0x7f0000004480)={0x2020}, 0x2020) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400", @ANYRES16=0x0, @ANYBLOB="c5072e5a64339c9dd4d0a8cbfcdbdf252b000000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x40d5}, 0x8c0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0}, 0x40) ioctl$DRM_IOCTL_GET_CLIENT(r5, 0xc0186405, &(0x7f0000000040)={0x1, 0xffff, {0xffffffffffffffff}, {0xee01}, 0x1ff, 0x3}) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) 2.660940866s ago: executing program 2 (id=54): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000002004000b7080000000000007b8af8ff00000000b7080000000200007b8af0ff00000000bfa100000000000007010000f8"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x2, 0x2, 0xf, 0x7}, {0x5, 0x2, 0x13, 0x2}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) r6 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) write$binfmt_aout(r6, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000000000000800080000014000091ff0f00004500f5ff06ff00010100fc5e15f4c3d3fbd80dad0000abfa"], 0x125) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x41, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}) r7 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x7, @mcast1, 0x6}, 0x1c) sendto$inet6(r7, &(0x7f0000000100)="80000fdc2208a1ce", 0x8, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f0000006280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0xffffffffffffffff, 0x9, 0x8}, 0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000480)={'ip6tnl0\x00', 0x0, 0x4, 0x2, 0x80, 0xea3d, 0x413c24e7ec163e75, @remote, @mcast2, 0x8, 0x80, 0xa}}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x10, 0x8, 0x20ef, 0x120, r8, 0x40a2, '\x00', r9, r7, 0x0, 0x1, 0x5, 0x4, @void, @value, @void, @value}, 0x50) 2.210890188s ago: executing program 3 (id=55): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f00000002c0)='./file0\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000006, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) getpid() r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x68a500, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000280)={'syzkaller0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000580)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYRESDEC=r7, @ANYRESOCT=r6, @ANYRES16=r5], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x6c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) r10 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r10, 0x1, &(0x7f0000000580)=ANY=[@ANYRES16=r8, @ANYRES64, @ANYBLOB="7172c07cd3aa1dad5ad736b801a7f483512afabbb431127db0228219e8071c5d324aa84cbb19bb79d7a1b97cf906daee171ee355147e2e3d092c98dc8c3cfbcd6aaba580977d1dbf65c4787a4a26a4e31574bf5c0510092cea776a0c46277d474d6c9df3c8974132eb44b921e461d78c7199ecfb50d483906874b0c9a4a159d97a02a2679dce8525f3264c31d7f72f3bf5c2d228acab6dd3900caf69e0782f2624bbfd4c46aa12aa32eaacfc76ffe4b76163df1d6d"]) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000104000000000005000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028005002c0002000000080004"], 0x44}}, 0x0) 2.001034629s ago: executing program 0 (id=56): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) (async, rerun: 64) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) (async, rerun: 64) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) (async, rerun: 32) r2 = epoll_create1(0x0) (rerun: 32) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)) (async) read$FUSE(r0, &(0x7f0000000d00)={0x2020}, 0x2020) (async) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000080), &(0x7f0000000180)=0x8) (async) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) 2.000724817s ago: executing program 0 (id=57): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) open(0x0, 0x143142, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000000)='./file0\x00') chroot(0x0) umount2(&(0x7f0000000240)='./file0/../file0/../file0\x00', 0x0) 1.919826963s ago: executing program 0 (id=58): openat$autofs(0xffffff9c, &(0x7f0000000000), 0x200142, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$netlink(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000000000000044000000080003005135aea60b913c9d1ef638bb795b1403252a7ca92a94c988badb90619bdf7076fc21503941e09f4fda84282fdc67b03af9ddcafee7a8eab1d5983c3e4ea39145a5ca5287c13e777f124a8899145597c12eeda43e45756b410df1df60a387a9dfdcaec9f004288c32f6ebf9e61c82556fb560a5eb44d773b67ebb2ab80c738d6158c96f9bc4358296021b85299d2568d279f5ef556ce0b0e0792c4702de753dbd8853d3e94ea85352b8e8d6f3", @ANYRESOCT=r0], 0x34}}, 0x800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc}, @NFTA_LIMIT_UNIT={0xc}]}}}, {0x14, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0) r3 = dup(r0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r4, 0x3) r5 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r5, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r6 = accept4(r4, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmmsg(r6, &(0x7f0000001500), 0x588, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)=ANY=[@ANYRES8=r3], 0x28}}, 0x24000080) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000090000000c000180080001"], 0x20}}, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="d81400003d00010027bd82000000000002"], 0x14d8}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x2, 0x0) chdir(&(0x7f0000000280)='./file0\x00') 1.810612506s ago: executing program 2 (id=59): openat$autofs(0xffffff9c, 0x0, 0x200142, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$netlink(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0500000000000000000044000000080003005135aea60b913c9d1ef638bb795b1403252a7ca92a94c988badb90619bdf7076fc21503941e09f4fda84282fdc67b03af9ddcafee7a8eab1d5983c3e4ea39145a5ca5287c13e777f124a8899145597c12eeda43e45756b410df1df60a387a9dfdcaec9f004288c32f6ebf9e61c82556fb560a5eb44d773b67ebb2ab80c738d6158c96f9bc4358296021b85299d2568d279f5ef556ce0b0e0792c4702de753dbd8853d3e94ea85352b8e8d6f3", @ANYRESOCT=r0], 0x34}}, 0x800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0) r4 = dup(r0) write$binfmt_misc(r4, 0x0, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r5, 0x3) r6 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r6, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r7 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg(r7, &(0x7f0000001500), 0x588, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="500000000101010300000000000000000a0000000c001980080002f4c5050000300002802c00018014000300fc010014000400fc0100000000000000000000000000008a62e100fde382613d6076d9bcf075098adbb46e77af4ddc5dd21370a66be0e30118cfe30ab234748d4834e1a57d8cb0bb071600bf37b559ffe89de3396224486f2e37de27866fa61c33aa482b8382a6dc3e4834566f03ba13150197a5f33d224102bf526b77b846af7cccae92c79a0f9ebec5c0b5ea1073c7b789a1ec4153da4336b233fd2a21f51810d2314440f9eba017061a79ba0a6fbf95ec7f77498601685f759e5acf898a106b3f80cda4ac0126e9da3821d45cec2a5164612c7d397fa3e2ef97d5cb2cd82f3b7eebddd76a07b63d907931bde86584a19ace41be5f227bd06744"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)=ANY=[@ANYRES8=r4], 0x28}}, 0x24000080) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000090000000c000180080001"], 0x20}}, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="d81400003d00010027bd82000000000002"], 0x14d8}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 1.660068992s ago: executing program 0 (id=60): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$netlink(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r1, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}]}}}, {0x14, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x4}}}]}]}], {0x14}}, 0xbc}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x4b0}}, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r3, 0x3) r4 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r4, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r5 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg(r4, 0x0, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f0000001500), 0x588, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="500000000101010300000000000000000a0000000c001980080002f4c5050000300002802c00018014000300fc010014000400fc0100000000000000000000000000008a62e100fde382613d6076d9bcf075098adbb46e77af4ddc5dd21370a66be0e30118cfe30ab234748d4834e1a57d8cb0bb071600bf37b559ffe89de3396224486f2e37de27866fa61c33aa482b8382a6dc3e4834566f03ba13150197a5f33d224102bf526b77b846af7cccae92c79a0f9ebec5c0b5ea1073c7b789a1ec4153da4336b233fd2a21f51810d2314440f9eba017061a79ba0a6fbf95ec7f77498601685f759e5acf898a106b3f80cda4ac0126e9da3821d45cec2a5164612c7d397fa3e2ef97d5cb2cd82f3b7eebddd76a07b63d907931bde86584a19ace41be5f227bd06744"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)=ANY=[@ANYRES8=r2], 0x28}}, 0x24000080) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000090000000c000180080001"], 0x20}}, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="d81400003d00010027bd82000000000002"], 0x14d8}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x2, 0x0) chdir(&(0x7f0000000280)='./file0\x00') 1.309987195s ago: executing program 0 (id=61): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x2, 0x2, 0xf, 0x7}, {0x5, 0x2, 0x13, 0x2}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) r6 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) write$binfmt_aout(r6, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000000000000800080000014000091ff0f00004500f5ff06ff00010100fc5e15f4c3d3fbd80dad0000abfa"], 0x125) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x41, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000000)=0x5, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x7, @mcast1, 0x6}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="80000fdc2208a1ce", 0x8, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 890.831612ms ago: executing program 1 (id=62): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000002004000b7080000000000007b8af8ff00000000b7080000000200007b8af0ff00000000bfa100000000000007010000f8"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x2, 0x2, 0xf, 0x7}, {0x5, 0x2, 0x13, 0x2}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f00000000c0), &(0x7f0000000280)) r4 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) write$binfmt_aout(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000000000000800080000014000091ff0f00004500f5ff06ff00010100fc5e15f4c3d3fbd80dad0000abfa"], 0x125) r5 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x7, @mcast1, 0x6}, 0x1c) sendto$inet6(r5, &(0x7f0000000100)="80000fdc2208a1ce", 0x8, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000006280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0xffffffffffffffff, 0x9, 0x8}, 0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000480)={'ip6tnl0\x00', 0x0, 0x4, 0x2, 0x80, 0xea3d, 0x413c24e7ec163e75, @remote, @mcast2, 0x8, 0x80, 0xa}}) 830.91313ms ago: executing program 2 (id=63): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000005200010000000000000000001c0000000c00010007"], 0x20}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f00000003c0)={0xf0, 0x300, 0x0, 0x5, 0x0, r3, 0x0}]) 717.808488ms ago: executing program 3 (id=64): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000002004000b7080000000000007b8af8ff00000000b7080000000200007b8af0ff00000000bfa1000000"], 0x0, 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x2, 0x2, 0xf, 0x7}, {0x5, 0x2, 0x13, 0x2}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000000000000800080000014000091ff0f00004500f5ff06ff00010100fc5e15f4c3d3fbd80dad0000abfa"], 0x125) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x41, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}) r6 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x7, @mcast1, 0x6}, 0x1c) sendto$inet6(r6, &(0x7f0000000100)="80000fdc2208a1ce", 0x8, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000006280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0xffffffffffffffff, 0x9, 0x8}, 0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000480)={'ip6tnl0\x00', 0x0, 0x4, 0x2, 0x80, 0xea3d, 0x413c24e7ec163e75, @remote, @mcast2, 0x8, 0x80, 0xa}}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x10, 0x8, 0x20ef, 0x120, r7, 0x40a2, '\x00', r8, r6, 0x0, 0x1, 0x5, 0x4, @void, @value, @void, @value}, 0x50) 450.443436ms ago: executing program 2 (id=65): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001580)=@newtaction={0xf0, 0x30, 0x4101, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x3f000000}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 449.751985ms ago: executing program 2 (id=66): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) open(0x0, 0x143142, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000000)='./file0\x00') chroot(&(0x7f00000001c0)='./file0/../file0/../file0\x00') umount2(0x0, 0x0) 449.452327ms ago: executing program 2 (id=67): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000002004000b7080000000000007b8af8ff00000000b7080000000200007b8af0ff00000000bfa100000000000007010000f8"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x2, 0x2, 0xf, 0x7}, {0x5, 0x2, 0x13, 0x2}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) r6 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) write$binfmt_aout(r6, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000000000000800080000014000091ff0f00004500f5ff06ff00010100fc5e15f4c3d3fbd80dad0000abfa"], 0x125) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x41, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}) r7 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x7, @mcast1, 0x6}, 0x1c) sendto$inet6(r7, &(0x7f0000000100)="80000fdc2208a1ce", 0x8, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f0000006280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0xffffffffffffffff, 0x9, 0x8}, 0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000480)={'ip6tnl0\x00', 0x0, 0x4, 0x2, 0x80, 0xea3d, 0x413c24e7ec163e75, @remote, @mcast2, 0x8, 0x80, 0xa}}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x10, 0x8, 0x20ef, 0x120, r8, 0x40a2, '\x00', r9, r7, 0x0, 0x1, 0x5, 0x4, @void, @value, @void, @value}, 0x50) 390.773471ms ago: executing program 0 (id=68): openat$autofs(0xffffff9c, &(0x7f0000000000), 0x200142, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$netlink(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000000000000044000000080003005135aea60b913c9d1ef638bb795b1403252a7ca92a94c988badb90619bdf7076fc21503941e09f4fda84282fdc67b03af9ddcafee7a8eab1d5983c3e4ea39145a5ca5287c13e777f124a8899145597c12eeda43e45756b410df1df60a387a9dfdcaec9f004288c32f6ebf9e61c82556fb560a5eb44d773b67ebb2ab80c738d6158c96f9bc4358296021b85299d2568d279f5ef556ce0b0e0792c4702de753dbd8853d3e94ea85352b8e8d6f3", @ANYRESOCT=r0], 0x34}}, 0x800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc}, @NFTA_LIMIT_UNIT={0xc}]}}}, {0x14, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0) r3 = dup(r0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r4, 0x3) r5 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r5, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r6 = accept4(r4, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000007940), 0x55, 0x0, 0x0) sendmmsg(r6, &(0x7f0000001500), 0x588, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="500000000101010300000000000000000a0000000c001980080002f4c5050000300002802c00018014000300fc010014000400fc0100000000000000000000000000008a62e100fde382613d6076d9bcf075098adbb46e77af4ddc5dd21370a66be0e30118cfe30ab234748d4834e1a57d8cb0bb071600bf37b559ffe89de3396224486f2e37de27866fa61c33aa482b8382a6dc3e4834566f03ba13150197a5f33d224102bf526b77b846af7cccae92c79a0f9ebec5c0b5ea1073c7b789a1ec4153da4336b233fd2a21f51810d2314440f9eba017061a79ba0a6fbf95ec7f77498601685f759e5acf898a106b3f80cda4ac0126e9da3821d45cec2a5164612c7d397fa3e2ef97d5cb2cd82f3b7eebddd76a07b63d907931bde86584a19ace41be5f227bd06744"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)=ANY=[@ANYRES8=r3], 0x28}}, 0x24000080) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000090000000c000180080001"], 0x20}}, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="d81400003d00010027bd82000000000002"], 0x14d8}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x2, 0x0) chdir(&(0x7f0000000280)='./file0\x00') 0s ago: executing program 1 (id=69): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$netlink(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r1, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}]}}}, {0x14, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x4}}}]}]}], {0x14}}, 0xbc}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x4b0}}, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r3, 0x3) r4 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r4, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r5 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg(r4, 0x0, 0x0, 0x0, 0x0) sendmmsg(r5, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)=ANY=[@ANYRES8=r2], 0x28}}, 0x24000080) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000090000000c000180080001"], 0x20}}, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="d81400003d00010027bd82000000000002"], 0x14d8}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x2, 0x0) chdir(&(0x7f0000000280)='./file0\x00') kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:12882' (ED25519) to the list of known hosts. [ 33.788570][ T5326] cgroup: Unknown subsys name 'net' [ 33.907488][ T5326] cgroup: Unknown subsys name 'cpuset' [ 33.910289][ T5326] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 34.653565][ T5326] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 36.619523][ T5343] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 36.629338][ T5345] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 36.631791][ T5345] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 36.633855][ T5345] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 36.636557][ T5345] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 36.639948][ T5345] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 36.641923][ T5345] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 36.641965][ T5348] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 36.644078][ T5345] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 36.646103][ T5348] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 36.648109][ T5345] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 36.649575][ T5348] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 36.652032][ T5345] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 36.653908][ T5348] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 36.655263][ T5351] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 36.657300][ T5348] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 36.658944][ T5351] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 36.660529][ T5348] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 36.662165][ T5351] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 36.664087][ T5348] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 36.665880][ T5352] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 36.669519][ T5353] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 36.672872][ T5353] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 36.675697][ T66] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 36.842248][ T5340] chnl_net:caif_netlink_parms(): no params data found [ 36.869419][ T5349] chnl_net:caif_netlink_parms(): no params data found [ 36.912088][ T5346] chnl_net:caif_netlink_parms(): no params data found [ 36.922936][ T5339] chnl_net:caif_netlink_parms(): no params data found [ 36.954361][ T5340] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.956813][ T5340] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.958814][ T5340] bridge_slave_0: entered allmulticast mode [ 36.961292][ T5340] bridge_slave_0: entered promiscuous mode [ 36.966392][ T5340] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.968349][ T5340] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.970209][ T5340] bridge_slave_1: entered allmulticast mode [ 36.972207][ T5340] bridge_slave_1: entered promiscuous mode [ 36.999738][ T5349] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.001641][ T5349] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.003531][ T5349] bridge_slave_0: entered allmulticast mode [ 37.005563][ T5349] bridge_slave_0: entered promiscuous mode [ 37.032362][ T5349] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.034266][ T5349] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.036228][ T5349] bridge_slave_1: entered allmulticast mode [ 37.038259][ T5349] bridge_slave_1: entered promiscuous mode [ 37.086434][ T5340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.090040][ T5340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.100689][ T5349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.135189][ T5349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.147534][ T5339] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.149465][ T5339] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.151372][ T5339] bridge_slave_0: entered allmulticast mode [ 37.153395][ T5339] bridge_slave_0: entered promiscuous mode [ 37.172013][ T5340] team0: Port device team_slave_0 added [ 37.181642][ T5339] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.183750][ T5339] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.186822][ T5339] bridge_slave_1: entered allmulticast mode [ 37.189033][ T5339] bridge_slave_1: entered promiscuous mode [ 37.199563][ T5346] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.201517][ T5346] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.203487][ T5346] bridge_slave_0: entered allmulticast mode [ 37.205619][ T5346] bridge_slave_0: entered promiscuous mode [ 37.208582][ T5340] team0: Port device team_slave_1 added [ 37.228449][ T5349] team0: Port device team_slave_0 added [ 37.237918][ T5346] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.239740][ T5346] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.241585][ T5346] bridge_slave_1: entered allmulticast mode [ 37.243892][ T5346] bridge_slave_1: entered promiscuous mode [ 37.254843][ T5349] team0: Port device team_slave_1 added [ 37.257370][ T5339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.275295][ T5340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.277076][ T5340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.283504][ T5340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.294786][ T5339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.298233][ T5346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.300867][ T5340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.302641][ T5340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.309576][ T5340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.328882][ T5346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.341108][ T5349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.342906][ T5349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.349433][ T5349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.361932][ T5339] team0: Port device team_slave_0 added [ 37.364830][ T5339] team0: Port device team_slave_1 added [ 37.374584][ T5349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.377068][ T5349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.383594][ T5349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.396456][ T5346] team0: Port device team_slave_0 added [ 37.415009][ T5340] hsr_slave_0: entered promiscuous mode [ 37.417618][ T5340] hsr_slave_1: entered promiscuous mode [ 37.427668][ T5339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.429392][ T5339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.435860][ T5339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.439824][ T5346] team0: Port device team_slave_1 added [ 37.449861][ T5339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.451648][ T5339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.458158][ T5339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.476443][ T5346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.478206][ T5346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.484512][ T5346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.489871][ T5346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.491622][ T5346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.498103][ T5346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.531902][ T5349] hsr_slave_0: entered promiscuous mode [ 37.533713][ T5349] hsr_slave_1: entered promiscuous mode [ 37.535719][ T5349] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.537757][ T5349] Cannot create hsr debugfs directory [ 37.582509][ T5339] hsr_slave_0: entered promiscuous mode [ 37.584527][ T5339] hsr_slave_1: entered promiscuous mode [ 37.586744][ T5339] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.588789][ T5339] Cannot create hsr debugfs directory [ 37.620031][ T5346] hsr_slave_0: entered promiscuous mode [ 37.622097][ T5346] hsr_slave_1: entered promiscuous mode [ 37.624138][ T5346] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.626094][ T5346] Cannot create hsr debugfs directory [ 37.724303][ T5340] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.748182][ T5340] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.758066][ T5340] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.763584][ T5340] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.776905][ T5349] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.781450][ T5349] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.784398][ T5349] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.787872][ T5349] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.794147][ T5340] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.796081][ T5340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.798196][ T5340] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.800046][ T5340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.817223][ T5349] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.819070][ T5349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.820914][ T5349] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.822697][ T5349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.829837][ T5339] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.836870][ T5339] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.840161][ T5339] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.845573][ T5339] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.864244][ T5346] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.868732][ T5346] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.878408][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.881146][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.883989][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.887031][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.900091][ T5346] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.906702][ T5346] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.921702][ T5340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.935691][ T5349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.947495][ T5340] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.959905][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.961734][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.966272][ T5349] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.972224][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.974049][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.978449][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.980535][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.991095][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.992910][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.017510][ T5339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.031599][ T5346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.037097][ T5339] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.043544][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.045496][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.053196][ T5346] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.056931][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.058792][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.076762][ T101] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.078567][ T101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.083228][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.085145][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.114702][ T5340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.123322][ T5349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.148513][ T5339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.153074][ T5349] veth0_vlan: entered promiscuous mode [ 38.159380][ T5349] veth1_vlan: entered promiscuous mode [ 38.172416][ T5340] veth0_vlan: entered promiscuous mode [ 38.179532][ T5349] veth0_macvtap: entered promiscuous mode [ 38.188036][ T5340] veth1_vlan: entered promiscuous mode [ 38.190122][ T5349] veth1_macvtap: entered promiscuous mode [ 38.202333][ T5339] veth0_vlan: entered promiscuous mode [ 38.208843][ T5346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.212490][ T5349] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.217564][ T5339] veth1_vlan: entered promiscuous mode [ 38.226553][ T5349] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.229925][ T5349] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.232864][ T5349] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.236225][ T5349] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.238950][ T5349] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.269726][ T5340] veth0_macvtap: entered promiscuous mode [ 38.278619][ T5340] veth1_macvtap: entered promiscuous mode [ 38.282691][ T5346] veth0_vlan: entered promiscuous mode [ 38.285973][ T5339] veth0_macvtap: entered promiscuous mode [ 38.291529][ T5339] veth1_macvtap: entered promiscuous mode [ 38.295862][ T5346] veth1_vlan: entered promiscuous mode [ 38.304525][ T5340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.308043][ T5340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.311237][ T5340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.318179][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.320965][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.325567][ T5340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.328454][ T5340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.331638][ T5340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.333944][ T5339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.336736][ T5339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.339205][ T5339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.341704][ T5339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.344626][ T5339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.357375][ T5339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.360042][ T5339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.362541][ T5339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.365404][ T5339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.368480][ T5339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.371547][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.372180][ T5339] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.374092][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.377668][ T5339] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.380760][ T5339] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.382952][ T5339] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.387505][ T5340] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.389744][ T5340] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.392142][ T5340] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.394388][ T5340] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.406825][ T5346] veth0_macvtap: entered promiscuous mode [ 38.420435][ T5346] veth1_macvtap: entered promiscuous mode [ 38.438035][ T5349] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.446880][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.448687][ T5346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.448946][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.451688][ T5346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.451696][ T5346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.451703][ T5346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.462349][ T5346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.466822][ T5346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.470360][ T5346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.481890][ T5346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.484597][ T5346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.488067][ T5346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.490869][ T5346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.493361][ T5346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.497816][ T5346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.502591][ T5346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.505435][ T1098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.507401][ T1098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.514385][ T5346] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.517473][ T5346] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.519609][ T5346] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.521730][ T5346] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.524283][ T5401] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2'. [ 38.537562][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.539922][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.553271][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.556091][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.571016][ T101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.573024][ T101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.592165][ T101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.594814][ T101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.634722][ T5406] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1'. [ 38.645278][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 38.645520][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 38.649735][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 38.651970][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 38.655165][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 38.662192][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 38.664334][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 38.666908][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 38.671147][ T5408] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4'. [ 38.733303][ T5402] netlink: 5304 bytes leftover after parsing attributes in process `syz.1.2'. [ 38.745738][ T4785] Bluetooth: hci3: command tx timeout [ 38.745741][ T66] Bluetooth: hci0: command tx timeout [ 38.758187][ T4785] Bluetooth: hci1: command tx timeout [ 38.759716][ T4785] Bluetooth: hci2: command tx timeout [ 38.874247][ T5410] netlink: 5304 bytes leftover after parsing attributes in process `syz.0.1'. [ 38.891217][ T5410] 9pnet_virtio: no channels available for device syz [ 38.947694][ T5408] netlink: 5304 bytes leftover after parsing attributes in process `syz.3.4'. [ 38.953864][ T5408] 9pnet_virtio: no channels available for device syz [ 39.615358][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 39.617622][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 40.327308][ T5457] netlink: 5304 bytes leftover after parsing attributes in process `syz.0.9'. [ 40.522566][ T5460] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11'. [ 40.527740][ T5460] netlink: 48 bytes leftover after parsing attributes in process `syz.2.11'. [ 40.669994][ T5480] netlink: 5304 bytes leftover after parsing attributes in process `syz.2.11'. [ 40.825171][ T66] Bluetooth: hci3: command tx timeout [ 40.835275][ T66] Bluetooth: hci2: command tx timeout [ 40.837030][ T66] Bluetooth: hci1: command tx timeout [ 40.838641][ T66] Bluetooth: hci0: command tx timeout [ 41.914852][ T5502] 9pnet_virtio: no channels available for device syz [ 42.906254][ T4785] Bluetooth: hci0: command tx timeout [ 42.906282][ T66] Bluetooth: hci1: command tx timeout [ 42.906913][ T5348] Bluetooth: hci2: command tx timeout [ 42.906954][ T5348] Bluetooth: hci3: command tx timeout [ 43.066904][ T5543] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 43.250050][ T5544] bridge1: entered allmulticast mode [ 43.316513][ T5547] 9pnet_virtio: no channels available for device syz [ 43.623073][ T5550] No control pipe specified [ 43.831507][ T5559] __nla_validate_parse: 8 callbacks suppressed [ 43.831519][ T5559] netlink: 5304 bytes leftover after parsing attributes in process `syz.2.27'. [ 43.969210][ T5564] netlink: 5304 bytes leftover after parsing attributes in process `syz.0.29'. [ 44.002069][ T5560] 9pnet_virtio: no channels available for device syz [ 44.704977][ T5575] netlink: 48 bytes leftover after parsing attributes in process `syz.2.31'. [ 44.715386][ T5576] netlink: 'syz.3.32': attribute type 7 has an invalid length. [ 44.717685][ T5576] netlink: 'syz.3.32': attribute type 39 has an invalid length. [ 44.765924][ T5576] bridge2: port 1(gretap1) entered blocking state [ 44.767680][ T5576] bridge2: port 1(gretap1) entered disabled state [ 44.769348][ T5576] gretap1: entered allmulticast mode [ 44.771214][ T5576] gretap1: entered promiscuous mode [ 44.877584][ T5578] netlink: 5304 bytes leftover after parsing attributes in process `syz.2.31'. [ 44.985250][ T66] Bluetooth: hci0: command tx timeout [ 44.985955][ T4785] Bluetooth: hci1: command tx timeout [ 44.986772][ T66] Bluetooth: hci3: command tx timeout [ 44.988729][ T4785] Bluetooth: hci2: command tx timeout [ 45.164861][ T5587] syzkaller0: entered promiscuous mode [ 45.166336][ T5587] syzkaller0: entered allmulticast mode [ 45.213829][ T5587] program syz.2.34 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 45.527223][ T5593] netlink: 48 bytes leftover after parsing attributes in process `syz.3.37'. [ 45.597412][ T5594] netlink: 5304 bytes leftover after parsing attributes in process `syz.3.37'. [ 45.602231][ T5594] 9pnet_virtio: no channels available for device syz [ 45.830663][ T5599] netlink: 5304 bytes leftover after parsing attributes in process `syz.1.39'. [ 45.833882][ T5599] 9pnet_virtio: no channels available for device syz [ 47.050056][ T5635] netlink: 24 bytes leftover after parsing attributes in process `syz.1.44'. [ 47.053559][ T5635] netlink: 48 bytes leftover after parsing attributes in process `syz.1.44'. [ 47.100144][ T5639] FAULT_INJECTION: forcing a failure. [ 47.100144][ T5639] name failslab, interval 1, probability 0, space 0, times 1 [ 47.104760][ T5639] CPU: 1 UID: 0 PID: 5639 Comm: syz.3.46 Not tainted 6.12.0-rc4-syzkaller #0 [ 47.107450][ T5639] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 47.110162][ T5639] Call Trace: [ 47.111018][ T5639] [ 47.111730][ T5639] dump_stack_lvl+0x16c/0x1f0 [ 47.112910][ T5639] should_fail_ex+0x497/0x5b0 [ 47.114104][ T5639] ? fs_reclaim_acquire+0xae/0x150 [ 47.115403][ T5639] should_failslab+0xc2/0x120 [ 47.116598][ T5639] __kmalloc_noprof+0xcb/0x410 [ 47.117790][ T5639] constrain_params_by_rules+0x176/0xca0 [ 47.119319][ T5639] ? stack_depot_save_flags+0x31b/0x900 [ 47.120756][ T5639] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 47.122307][ T5639] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 47.123774][ T5639] ? lockdep_hardirqs_on+0x7c/0x110 [ 47.125122][ T5639] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 47.126653][ T5639] ? snd_pcm_oss_change_params_locked+0x13d7/0x3a50 [ 47.128306][ T5639] ? snd_pcm_oss_make_ready+0xe6/0x1b0 [ 47.129665][ T5639] ? snd_pcm_oss_ioctl+0x1ad3/0x3780 [ 47.131129][ T5639] ? __do_compat_sys_ioctl+0x259/0x2b0 [ 47.132463][ T5639] ? __do_fast_syscall_32+0x73/0x120 [ 47.133864][ T5639] ? do_fast_syscall_32+0x32/0x80 [ 47.135194][ T5639] ? snd_interval_refine+0x2fa/0x580 [ 47.136571][ T5639] snd_pcm_hw_refine+0x7ef/0xad0 [ 47.137850][ T5639] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 47.139288][ T5639] snd_pcm_hw_param_first+0x328/0x6b0 [ 47.140800][ T5639] snd_pcm_hw_param_near.constprop.0+0x711/0x8f0 [ 47.142463][ T5639] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 47.144394][ T5639] ? kfree+0x14f/0x4b0 [ 47.145521][ T5639] ? calc_src_frames.isra.0+0x187/0x1d0 [ 47.147003][ T5639] ? calc_dst_frames.constprop.0.isra.0+0x103/0x130 [ 47.148788][ T5639] snd_pcm_oss_change_params_locked+0x13d7/0x3a50 [ 47.150574][ T5639] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 47.152468][ T5639] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 47.154256][ T5639] ? snd_pcm_oss_make_ready+0xc4/0x1b0 [ 47.155716][ T5639] ? __pfx___mutex_lock+0x10/0x10 [ 47.156972][ T5639] snd_pcm_oss_make_ready+0xe6/0x1b0 [ 47.158299][ T5639] snd_pcm_oss_ioctl+0x1ad3/0x3780 [ 47.159656][ T5639] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 47.161039][ T5639] ? __fget_files+0x244/0x3f0 [ 47.162220][ T5639] ? __pfx_snd_pcm_oss_ioctl_compat+0x10/0x10 [ 47.162663][ T5640] netlink: 5304 bytes leftover after parsing attributes in process `syz.1.44'. [ 47.163815][ T5639] __do_compat_sys_ioctl+0x259/0x2b0 [ 47.167345][ T5639] __do_fast_syscall_32+0x73/0x120 [ 47.168629][ T5639] do_fast_syscall_32+0x32/0x80 [ 47.169861][ T5639] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 47.171443][ T5639] RIP: 0023:0xf73be579 [ 47.172493][ T5639] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 47.177387][ T5639] RSP: 002b:00000000f56a656c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 47.179577][ T5639] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005008 [ 47.181923][ T5639] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 47.184124][ T5639] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 47.186302][ T5639] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 47.188295][ T5639] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 47.190312][ T5639] [ 47.817002][ T5660] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 48.836660][ T5680] syzkaller0: entered promiscuous mode [ 48.838064][ T5680] syzkaller0: entered allmulticast mode [ 48.893560][ T5680] program syz.3.55 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 49.044107][ T5689] __nla_validate_parse: 3 callbacks suppressed [ 49.044118][ T5689] netlink: 48 bytes leftover after parsing attributes in process `syz.0.58'. [ 49.170335][ T5693] netlink: 24 bytes leftover after parsing attributes in process `syz.2.59'. [ 49.208442][ T5690] netlink: 5304 bytes leftover after parsing attributes in process `syz.0.58'. [ 49.216220][ T5690] 9pnet_virtio: no channels available for device syz [ 49.255809][ T5694] netlink: 48 bytes leftover after parsing attributes in process `syz.2.59'. [ 49.337675][ T5697] netlink: 5304 bytes leftover after parsing attributes in process `syz.2.59'. [ 49.444816][ T5698] netlink: 5304 bytes leftover after parsing attributes in process `syz.0.60'. [ 49.449397][ T5698] 9pnet_virtio: no channels available for device syz [ 50.249671][ T39] audit: type=1804 audit(1729553156.891:2): pid=5722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.63" name="/" dev="pidfs" ino=6023 res=1 errno=0 [ 50.592160][ T5754] netlink: 48 bytes leftover after parsing attributes in process `syz.0.68'. [ 50.765914][ T5756] netlink: 5304 bytes leftover after parsing attributes in process `syz.0.68'. [ 51.027601][ T5761] netlink: 5304 bytes leftover after parsing attributes in process `syz.1.69'. [ 51.030817][ T5761] ------------[ cut here ]------------ [ 51.032393][ T5761] kmem_cache of name '9p-fcall-cache-syz' already exists [ 51.034349][ T5761] WARNING: CPU: 3 PID: 5761 at mm/slab_common.c:107 __kmem_cache_create_args+0xb0/0x3c0 [ 51.037121][ T5761] Modules linked in: [ 51.038559][ T5761] CPU: 3 UID: 0 PID: 5761 Comm: syz.1.69 Not tainted 6.12.0-rc4-syzkaller #0 [ 51.042438][ T5761] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 51.045546][ T5761] RIP: 0010:__kmem_cache_create_args+0xb0/0x3c0 [ 51.047194][ T5761] Code: 98 48 3d d0 bb f1 8d 74 25 48 8b 7b 60 48 89 ee e8 65 ee 34 09 85 c0 75 e0 90 48 c7 c7 10 33 58 8d 48 89 ee e8 41 a6 7e ff 90 <0f> 0b 90 90 be 20 00 00 00 48 89 ef e8 ef ef 34 09 48 85 c0 0f 85 [ 51.052946][ T5761] RSP: 0018:ffffc90000ecf8f0 EFLAGS: 00010286 [ 51.055571][ T5761] RAX: 0000000000000000 RBX: ffff888048fe6500 RCX: ffffc9000c403000 [ 51.057797][ T5761] RDX: 0000000000040000 RSI: ffffffff814e38c6 RDI: 0000000000000001 [ 51.059873][ T5761] RBP: ffff88801cf62580 R08: 0000000000000001 R09: 0000000000000000 [ 51.062000][ T5761] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 51.064084][ T5761] R13: 0000000000020018 R14: ffffc90000ecf9e0 R15: 0000000000020018 [ 51.066645][ T5761] FS: 0000000000000000(0000) GS:ffff88802b700000(0063) knlGS:00000000f56e5b40 [ 51.069077][ T5761] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 51.071012][ T5761] CR2: 0000000020772000 CR3: 00000000648b0000 CR4: 0000000000352ef0 [ 51.073393][ T5761] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 51.075843][ T5761] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 51.078075][ T5761] Call Trace: [ 51.078978][ T5761] [ 51.079753][ T5761] ? __warn+0xea/0x3d0 [ 51.080871][ T5761] ? __kmem_cache_create_args+0xb0/0x3c0 [ 51.082333][ T5761] ? report_bug+0x3c0/0x580 [ 51.083542][ T5761] ? handle_bug+0x54/0xa0 [ 51.084675][ T5761] ? exc_invalid_op+0x17/0x50 [ 51.086316][ T5761] ? asm_exc_invalid_op+0x1a/0x20 [ 51.088194][ T5761] ? __warn_printk+0x1a6/0x350 [ 51.089910][ T5761] ? __kmem_cache_create_args+0xb0/0x3c0 [ 51.091753][ T5761] p9_client_create+0xe27/0x1190 [ 51.093320][ T5761] ? __pfx_p9_client_create+0x10/0x10 [ 51.095149][ T5761] ? __raw_spin_lock_init+0x3a/0x110 [ 51.096830][ T5761] v9fs_session_init+0x1f8/0x1a80 [ 51.098708][ T5761] ? __pfx_v9fs_session_init+0x10/0x10 [ 51.100738][ T5761] ? kasan_save_track+0x14/0x30 [ 51.102485][ T5761] v9fs_mount+0xc6/0xa50 [ 51.104077][ T5761] ? __pfx_v9fs_mount+0x10/0x10 [ 51.105942][ T5761] ? __pfx_v9fs_mount+0x10/0x10 [ 51.107661][ T5761] legacy_get_tree+0x109/0x220 [ 51.109356][ T5761] vfs_get_tree+0x8f/0x380 [ 51.111064][ T5761] path_mount+0x6e1/0x1f10 [ 51.112768][ T5761] ? kmem_cache_free+0x152/0x4b0 [ 51.114572][ T5761] ? __pfx_path_mount+0x10/0x10 [ 51.116448][ T5761] ? putname+0x12e/0x170 [ 51.118027][ T5761] __ia32_sys_mount+0x292/0x310 [ 51.119839][ T5761] ? __pfx___ia32_sys_mount+0x10/0x10 [ 51.121793][ T5761] __do_fast_syscall_32+0x73/0x120 [ 51.123666][ T5761] do_fast_syscall_32+0x32/0x80 [ 51.125511][ T5761] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 51.127780][ T5761] RIP: 0023:0xf7f82579 [ 51.129258][ T5761] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 51.136030][ T5761] RSP: 002b:00000000f56e556c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 51.138964][ T5761] RAX: ffffffffffffffda RBX: 00000000200001c0 RCX: 0000000020000480 [ 51.141745][ T5761] RDX: 00000000200004c0 RSI: 0000000000000002 RDI: 0000000000000000 [ 51.144534][ T5761] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 51.147484][ T5761] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 51.149581][ T5761] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 51.151678][ T5761] [ 51.152509][ T5761] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 51.154444][ T5761] CPU: 3 UID: 0 PID: 5761 Comm: syz.1.69 Not tainted 6.12.0-rc4-syzkaller #0 [ 51.156761][ T5761] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 51.159638][ T5761] Call Trace: [ 51.160520][ T5761] [ 51.161310][ T5761] dump_stack_lvl+0x3d/0x1f0 [ 51.162540][ T5761] panic+0x71d/0x800 [ 51.163722][ T5761] ? __pfx_panic+0x10/0x10 [ 51.164986][ T5761] ? show_trace_log_lvl+0x29d/0x3d0 [ 51.166461][ T5761] ? __kmem_cache_create_args+0xb0/0x3c0 [ 51.167987][ T5761] check_panic_on_warn+0xab/0xb0 [ 51.169224][ T5761] __warn+0xf6/0x3d0 [ 51.170392][ T5761] ? __kmem_cache_create_args+0xb0/0x3c0 [ 51.171873][ T5761] report_bug+0x3c0/0x580 [ 51.173017][ T5761] handle_bug+0x54/0xa0 [ 51.174203][ T5761] exc_invalid_op+0x17/0x50 [ 51.175526][ T5761] asm_exc_invalid_op+0x1a/0x20 [ 51.176839][ T5761] RIP: 0010:__kmem_cache_create_args+0xb0/0x3c0 [ 51.178659][ T5761] Code: 98 48 3d d0 bb f1 8d 74 25 48 8b 7b 60 48 89 ee e8 65 ee 34 09 85 c0 75 e0 90 48 c7 c7 10 33 58 8d 48 89 ee e8 41 a6 7e ff 90 <0f> 0b 90 90 be 20 00 00 00 48 89 ef e8 ef ef 34 09 48 85 c0 0f 85 [ 51.183729][ T5761] RSP: 0018:ffffc90000ecf8f0 EFLAGS: 00010286 [ 51.185320][ T5761] RAX: 0000000000000000 RBX: ffff888048fe6500 RCX: ffffc9000c403000 [ 51.187409][ T5761] RDX: 0000000000040000 RSI: ffffffff814e38c6 RDI: 0000000000000001 [ 51.189475][ T5761] RBP: ffff88801cf62580 R08: 0000000000000001 R09: 0000000000000000 [ 51.191556][ T5761] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 51.193634][ T5761] R13: 0000000000020018 R14: ffffc90000ecf9e0 R15: 0000000000020018 [ 51.195721][ T5761] ? __warn_printk+0x1a6/0x350 [ 51.197003][ T5761] p9_client_create+0xe27/0x1190 [ 51.198317][ T5761] ? __pfx_p9_client_create+0x10/0x10 [ 51.199760][ T5761] ? __raw_spin_lock_init+0x3a/0x110 [ 51.201155][ T5761] v9fs_session_init+0x1f8/0x1a80 [ 51.202632][ T5761] ? __pfx_v9fs_session_init+0x10/0x10 [ 51.204107][ T5761] ? kasan_save_track+0x14/0x30 [ 51.205414][ T5761] v9fs_mount+0xc6/0xa50 [ 51.206542][ T5761] ? __pfx_v9fs_mount+0x10/0x10 [ 51.207854][ T5761] ? __pfx_v9fs_mount+0x10/0x10 [ 51.209143][ T5761] legacy_get_tree+0x109/0x220 [ 51.210421][ T5761] vfs_get_tree+0x8f/0x380 [ 51.211616][ T5761] path_mount+0x6e1/0x1f10 [ 51.212808][ T5761] ? kmem_cache_free+0x152/0x4b0 [ 51.214126][ T5761] ? __pfx_path_mount+0x10/0x10 [ 51.215423][ T5761] ? putname+0x12e/0x170 [ 51.216552][ T5761] __ia32_sys_mount+0x292/0x310 [ 51.217842][ T5761] ? __pfx___ia32_sys_mount+0x10/0x10 [ 51.219281][ T5761] __do_fast_syscall_32+0x73/0x120 [ 51.220633][ T5761] do_fast_syscall_32+0x32/0x80 [ 51.221921][ T5761] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 51.223595][ T5761] RIP: 0023:0xf7f82579 [ 51.224678][ T5761] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 51.229673][ T5761] RSP: 002b:00000000f56e556c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 51.231844][ T5761] RAX: ffffffffffffffda RBX: 00000000200001c0 RCX: 0000000020000480 [ 51.233903][ T5761] RDX: 00000000200004c0 RSI: 0000000000000002 RDI: 0000000000000000 [ 51.235966][ T5761] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 51.238077][ T5761] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 51.240158][ T5761] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 51.242224][ T5761] [ 51.243623][ T5761] Kernel Offset: disabled [ 51.244825][ T5761] Rebooting in 86400 seconds.. VM DIAGNOSIS: 23:25:57 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffffffffffffffff RCX=ffffffff8169fff8 RDX=1ffff11004427a6a RSI=0000000000000008 RDI=ffffffff96990c48 RBP=0000000000000040 RSP=ffffc90000007c68 R8 =0000000000000000 R9 =fffffbfff2d32189 R10=ffffffff96990c4f R11=0000000000000002 R12=0000000000000000 R13=ffff88802213d360 R14=0000000000000051 R15=ffff88802213c880 RIP=ffffffff8169fb3c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b400000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000204d6000 CR3=00000000648b0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f73ebff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000001188b1 RBX=0000000000000001 RCX=ffffffff8b139ef9 RDX=0000000000000000 RSI=ffffffff8b4cc940 RDI=ffffffff8bb12d60 RBP=ffffed10036ec910 RSP=ffffc90000477e08 R8 =0000000000000001 R9 =ffffed10056a7025 R10=ffff88802b53812b R11=0000000000000000 R12=0000000000000001 R13=ffff88801b764880 R14=ffffffff901ce5c8 R15=0000000000000000 RIP=ffffffff8b13b2df RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f30e9f80 CR3=000000002a9d6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000004080 Opmask01=0000000000000000 Opmask02=00000000ffbfef77 Opmask03=0000000000000000 Opmask04=00000000ffdfffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd6a3086d0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a2a2a2a2a2a2a2a 2a2a2a2a2a2a2a2a ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff0000000000ff ffffff00ff00ff00 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656e696c5f706c63 73002a5d392d305b 79747400786d7470 0079747400646461 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 54003d534b4e494c 564544003d4d4554 535953425553003d 4854415056454400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 540018534b4e494c 56454400184d4554 5359534255530018 4854415056454400 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000251 0000000000000000 31706f6f6c2f6b63 6f6c622f6c617574 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f4a414d 0000000000000021 000000007063742d ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 68303e3b3a38253b 3a253e3a6e68303b 21383b657a687438 2739243c3b243b27 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 69305f474f5b647c 69303a2433273f39 7b27697a787c7a30 23333a3a38263342 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692054524f50202c 2064696c61696d20 0070253a20252054 524f504d49005452 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692020520050202c 2025204f504d4900 0061253a20252000 2527204d49005452 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000006 RBX=ffff88804247c240 RCX=1ffffffff2039471 RDX=0000000000000000 RSI=ffffffff8b4cc940 RDI=ffffffff8bb12d60 RBP=0000000000000282 RSP=ffffc900062dfb58 R8 =0000000000000001 R9 =0000000000000001 R10=ffffffff901ce5cf R11=0000000000000000 R12=ffff88802b000180 R13=ffff88804247c240 R14=1ffff92000c5bf86 R15=ffff88802b000000 RIP=ffffffff8b200270 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f9e2fea8500 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000002036d000 CR3=0000000024768000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000005000001 Opmask01=0000000000000000 Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=000000007fffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff1a85fc00 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6565656565656565 6565656565656565 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffff0000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65746e6f63007325 203a726f72726520 64656e7275746572 2072657672657300 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40514b4a46005600 051f574a57574005 41404b5750514057 0557405357405600 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00303d20222f223d 20313d6e20222033 2e302e3d6f6e2220 226d66632070223d ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00303d2022252237 20313d6220222020 2430243633342220 2237653d20202033 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f64636c64656964 7f3760687f792a3f 33383d3c333e3338 3e37796f792a3f33 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7c6f6e2a28252837 6f676b642a28393c 2438247073792837 676765692a79786f ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8503ecf5 RDI=ffffffff9a640260 RBP=ffffffff9a640220 RSP=ffffc90000ecf258 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000020 R14=ffffffff8503ec90 R15=0000000000000000 RIP=ffffffff8503ed1f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b700000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000020772000 CR3=00000000648b0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000b000000000 0000000300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000