last executing test programs: 3.590289214s ago: executing program 1 (id=26): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r0 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7079, 0x0, 0x4, 0x288}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xfe3b) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xd4f, 0x1, 0x6, 0x8, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@delchain={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x9, 0x0, 0x0) 2.459182431s ago: executing program 0 (id=31): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x11a9}]}}}]}, 0x3c}}, 0x4) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000140)={@loopback, <r2=>0x0}, &(0x7f0000000180)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', <r3=>0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$FUSE_WRITE(r4, &(0x7f00000000c0)={0x18}, 0xfffffdef) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r4, 0xc0945662, &(0x7f0000000200)={0x6, 0x0, '\x00', {0x0, @reserved}}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x20, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINK={0x0, 0x5, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8065}, 0x0) openat$vsock(0xffffff9c, &(0x7f0000000080), 0x10000, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00'}) gettid() r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x28000040}, 0x0) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000044}, 0x4) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000240)}, {0x0}], 0x2, 0x0, 0x80000001) ptrace(0x10, r7) ptrace$setregs(0xd, r7, 0x0, &(0x7f00000003c0)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r7, 0x10, &(0x7f0000000000)={0x8b40}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(r9, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="080029bd7000fddbdf2506000000080001007063690011000200303030303a30303a31302e300000000008000300010040000600040003000000ee269bec025b3931441564b2329fb92fd8b78096f79f3747959f38fedb"], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x404c850) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00'}) 2.366375822s ago: executing program 1 (id=32): r0 = socket$inet_dccp(0x2, 0x6, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x802, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000400)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0)) syz_io_uring_submit(r3, 0x0, &(0x7f0000000340)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff}) dup(r4) r5 = mq_open(&(0x7f0000000a00)='\xff\xff\xc2\x00\x00\x00\x00\x00\x00', 0x40, 0x0, 0x0) syncfs(r5) io_uring_enter(r2, 0x2df1, 0x4000, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)=[0x5, 0xfffffffffc83405f, 0x5, 0x3], &(0x7f0000000240)=[0x3, 0x4, 0x5, 0x3, 0x0, 0x1, 0x0], 0x5, 0x4}}, 0x3c) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYRES32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) r11 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r11, 0xc0105512, &(0x7f0000000200)) dup2(r10, r11) ioctl$KVM_SET_CPUID(r8, 0x4008ae8a, &(0x7f0000005f40)=ANY=[@ANYBLOB="f6"]) memfd_create(0x0, 0x0) 2.269698735s ago: executing program 1 (id=33): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r0 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7079, 0x0, 0x4, 0x288}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xfe3b) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xd4f, 0x1, 0x6, 0x8, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@delchain={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x9, 0x0, 0x0) 2.244148729s ago: executing program 3 (id=34): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x124, 0x30, 0x800, 0xfffffffc, 0x25dfdbfc, {}, [{0x110, 0x1, [@m_ct={0xc4, 0x1, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @multicast2}]}, {0x91, 0x6, "a489d6067976f11554d55007394228e39ba3c36a0926bb7659c45d26484bf60b49868e04a6081202c2a8e0f32126a3d98419c61c2eb3b7c0090000007e769c129932488ade91169288f099b9231c066fbeb762eeefbdeb2ee117f37aef1a6786fde87133fa0b259b150dfbde2bcc9e51093439ea7c7f2c2e2017e52a1b7e8200e8cc9d5c75d439b8c947b6b568"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x20, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0xfffffffd, 0x3}, 0xfffe}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x124}}, 0x40040) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r4, 0x11, 0x2, 0x0, &(0x7f0000000140)) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x11, 0x3, 0x10) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="400000002c0001000000000000000000040000802b001a"], 0x40}], 0x1}, 0x0) r6 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000000280)=<r7=>0x0, &(0x7f0000000200)=<r8=>0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) r9 = socket$inet(0x2, 0x6, 0x0) connect$inet(r9, &(0x7f0000000100)={0x1f, 0x0, @multicast1}, 0x29) r10 = socket$netlink(0x10, 0x3, 0x4) writev(r10, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001500257f09004b01fcfc8c860a881300f217e0060000e3323909b8f8896e33719fe3bb036e0bc90900000000000000000000ffff5bf1090000d0bd5e000000006203005b", 0x48}], 0x1) io_uring_enter(r6, 0x47f6, 0x0, 0x0, 0x0, 0x0) pread64(r0, &(0x7f0000000080)=""/79, 0x4f, 0x7f) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff}) sendmsg(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='\x00\x00', 0x2}], 0x1}, 0x8001) ioctl$SIOCSIFHWADDR(r11, 0x8905, &(0x7f0000000340)={'pim6reg0\x00', @remote}) unshare(0x62040200) 2.178047991s ago: executing program 0 (id=36): unshare(0x64000600) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r2=>0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000900eab8ffe997c4944f000008000300", @ANYRES32=r2, @ANYBLOB="1e0033"], 0x3c}}, 0x40000) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x74, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000000800000000080045000024100000000073907800000000e000000100000000fe9a90780220000000000000"], 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='i2c_reply\x00', r5}, 0x18) r7 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)={0x14, r9, 0x73bf44d8d76863a9, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) dup3(r7, r6, 0x0) fcntl$getflags(r4, 0x40a) io_setup(0x1000, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r10 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r10, &(0x7f0000019680)=""/102392, 0x18ff8) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r11, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) 1.436411972s ago: executing program 1 (id=37): openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x4200, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(0xffffffffffffffff, 0x2def, 0x4000, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x84) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000030100c0", @ANYRESOCT=0x0]) add_key(&(0x7f0000000000)='pkcs7_test\x00', 0x0, &(0x7f00000021c0)="305c0607e182087051667557c7d7982b8f57fb20a3adc9e3baa292ce8f0a861e6417acfc8648ad1b86400393d502b0cd490635d54cdf5bd0461690982b236949ab5e000000808ce41d86b9b949004fd8fe45b91e8fe7ec7c49750a1b0ade", 0x5e, 0xfffffffffffffffe) r5 = socket$key(0xf, 0x3, 0x2) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000540)={{{@in=@local, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@mcast2, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x526b}}, 0xe4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r9, 0x325, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) sendmsg$key(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020f00001500000000000000000000000800120000000100000000000000000006000000000000000000000000000000e00000020000000000000000000000002001000000000000000000000000000205000600000000000a00000000000000fe8000000000000000000000000000bb0000000000000000010018000000000005000500000000000a00000000000000ff0200000000000000000000000000010000000000"], 0xa8}}, 0x0) syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000000280)=<r10=>0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) 1.284291094s ago: executing program 3 (id=38): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x124, 0x30, 0x800, 0xfffffffc, 0x25dfdbfc, {}, [{0x110, 0x1, [@m_ct={0xc4, 0x1, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @multicast2}]}, {0x91, 0x6, "a489d6067976f11554d55007394228e39ba3c36a0926bb7659c45d26484bf60b49868e04a6081202c2a8e0f32126a3d98419c61c2eb3b7c0090000007e769c129932488ade91169288f099b9231c066fbeb762eeefbdeb2ee117f37aef1a6786fde87133fa0b259b150dfbde2bcc9e51093439ea7c7f2c2e2017e52a1b7e8200e8cc9d5c75d439b8c947b6b568"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x20, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0xfffffffd, 0x3}, 0xfffe}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x124}}, 0x40040) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r4, 0x11, 0x2, 0x0, &(0x7f0000000140)) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x11, 0x3, 0x10) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="400000002c0001000000000000000000040000802b001a"], 0x40}], 0x1}, 0x0) r6 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000000280)=<r7=>0x0, &(0x7f0000000200)=<r8=>0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) r9 = socket$inet(0x2, 0x6, 0x0) connect$inet(r9, &(0x7f0000000100)={0x1f, 0x0, @multicast1}, 0x29) r10 = socket$netlink(0x10, 0x3, 0x4) writev(r10, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001500257f09004b01fcfc8c860a881300f217e0060000e3323909b8f8896e33719fe3bb036e0bc90900000000000000000000ffff5bf1090000d0bd5e000000006203005b", 0x48}], 0x1) io_uring_enter(r6, 0x47f6, 0x0, 0x0, 0x0, 0x0) pread64(r0, &(0x7f0000000080)=""/79, 0x4f, 0x7f) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff}) sendmsg(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='\x00\x00', 0x2}], 0x1}, 0x8001) ioctl$SIOCSIFHWADDR(r11, 0x8905, &(0x7f0000000340)={'pim6reg0\x00', @remote}) unshare(0x62040200) 1.263417417s ago: executing program 2 (id=39): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) fsync(r3) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYRESHEX=r2, @ANYRESDEC=r3, @ANYBLOB="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", @ANYRESDEC=r1], &(0x7f0000000100)='GPL\x00', 0xfff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r7 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r6}, &(0x7f0000000340)=<r8=>0x0, &(0x7f0000000280)=<r9=>0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000340)={{0x2, 0x4e20, @empty}, {0x6}, 0x20, {0x2, 0x4e24, @empty}, 'wlan1\x00'}) 1.164870618s ago: executing program 2 (id=40): openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x4200, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(0xffffffffffffffff, 0x2def, 0x4000, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x84) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000030100c0", @ANYRESOCT=0x0]) add_key(&(0x7f0000000000)='pkcs7_test\x00', 0x0, &(0x7f00000021c0)="305c0607e182087051667557c7d7982b8f57fb20a3adc9e3baa292ce8f0a861e6417acfc8648ad1b86400393d502b0cd490635d54cdf5bd0461690982b236949ab5e000000808ce41d86b9b949004fd8fe45b91e8fe7ec7c49750a1b0ade", 0x5e, 0xfffffffffffffffe) r6 = socket$key(0xf, 0x3, 0x2) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @dev}, 0x2}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000540)={{{@in=@local, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@mcast2, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x526b}}, 0xe4) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r10, 0x325, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) sendmsg$key(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020f00001500000000000000000000000800120000000100000000000000000006000000000000000000000000000000e00000020000000000000000000000002001000000000000000000000000000205000600000000000a00000000000000fe8000000000000000000000000000bb0000000000000000010018000000000005000500000000000a00000000000000ff0200000000000000000000000000010000000000"], 0xa8}}, 0x0) syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000000280)=<r11=>0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) 1.069486567s ago: executing program 0 (id=41): r0 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r0], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000200)={<r1=>0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x20, r3, 0x211, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x20}}, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x10, 0x0}}, 0x7d, r1}) r5 = socket(0xa, 0x1, 0x0) syz_open_dev$admmidi(&(0x7f0000000380), 0x7, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0x6}, {0x7}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0x5}}}]}, 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32, @ANYBLOB="000080000000000018003480"], 0x38}, 0x1, 0x300}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', <r8=>0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000017c0)=ANY=[@ANYBLOB="2800000070000100000000000000000007000000", @ANYRES32=r8, @ANYBLOB="100001"], 0x28}, 0x1, 0x1000000000000000}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl(r4, 0x8916, 0x0) ioctl(r5, 0x8936, &(0x7f0000000000)) r9 = openat$uinput(0xffffff9c, &(0x7f0000000080), 0x802, 0x0) ioctl$UI_END_FF_UPLOAD(r9, 0x406055c9, &(0x7f0000000180)={0x8, 0x1, {0x52, 0x4, 0x2, {0x7fff, 0xff}, {0x8, 0xffff}, @ramp={0x0, 0x0, {0xd, 0x1, 0xffff, 0x79}}}, {0x57, 0x6, 0x5310, {0xffff, 0x6}, {0x101, 0xcea5}, @period={0x5b, 0x401, 0x2, 0x3, 0x4, {0x63ed, 0x9, 0x9, 0x5}, 0x4, &(0x7f00000000c0)=[0x9, 0x2, 0xcc50, 0x1]}}}) sendmsg$can_bcm(r5, &(0x7f0000000340)={&(0x7f0000000100)={0x1d, r1}, 0x10, &(0x7f00000003c0)={&(0x7f0000000280)={0x2, 0x0, 0x3, {}, {}, {0x1, 0x1, 0x1}, 0x1, @can={{0x3, 0x1}, 0x8, 0x0, 0x0, 0x0, "98b473bf3dfd104b"}}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x44042) 1.05970846s ago: executing program 1 (id=42): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x40, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r0, 0x0, 0xa0028000}, 0x38) (fail_nth: 82) 889.845371ms ago: executing program 1 (id=43): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$cgroup_devices(r0, &(0x7f0000000040)=ANY=[], 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x1006}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0xffffffffffffffff, 0xe, &(0x7f0000000140)={0x2000, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$CDROM_SEND_PACKET(r2, 0x5393, &(0x7f0000000100)={"4689d4c4841a41c9e4641d9d", 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x454e, 0x4) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) syz_emit_ethernet(0x56, &(0x7f0000000b40)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a800008100000086dd6076cd8a00180000200100"], 0x0) openat$binfmt(0xffffff9c, 0x0, 0x41, 0x1ff) socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) syz_open_dev$video4linux(&(0x7f0000000000), 0x401, 0x0) 835.358506ms ago: executing program 0 (id=44): r0 = socket(0x10, 0x3, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x2001, 0x0, 0x2, 0x0) (async) pipe(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async) r2 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40088a01, &(0x7f0000000000)=0x100) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000400)) (async) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x1, 0x0, 0x0, {0x2}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffaf}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x25d2, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r4=>0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', <r5=>0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xf, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x2, 0x2, 0x6, 0x7b}}}}]}, 0x48}}, 0x44081) (async) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r6, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4) (async) bind$inet(r6, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) (async) sendmmsg(r6, &(0x7f0000003a80)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e24, @loopback}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000240)='7', 0x20}], 0x1}}], 0x1, 0x2c000011) r7 = socket(0x10, 0x3, 0x0) (async) r8 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', <r9=>0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000dc0)=@newqdisc={0x70, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0x8}, {0xfff2, 0xa}, {0x0, 0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x2, 0x3, 0x4c9, 0x1, 0x101}, {0x7, 0x1, 0xce, 0x3, 0x2, 0x1}, 0x7, 0x3, 0x32d}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xe6ccd60b157bc5c8}, @TCA_TBF_RATE64={0xc, 0x4, 0xd34b0ff52d069371}]}}]}, 0x70}}, 0x4000) (async) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb0800450000380001ac1414aa04019078e00000e04500000000000e2702840008ac1414aa64010102341517c1b7df60c73cfee885e00d3bc3322d44c115e511bce2f04ef07ebca64d7d12a3edf19af2e0a86a85598b3fc5b4712100828d2f"], 0x0) (async) syz_usbip_server_init(0x52093f6654b3a7f6) 700.111423ms ago: executing program 0 (id=45): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000006cc0)=[{{&(0x7f0000000780)={0xa, 0x4e22, 0x6, @mcast1, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="10000000290000004300000007290000140000002900000036000000020000000000000028"], 0x38}}], 0x1, 0x0) 699.508814ms ago: executing program 0 (id=46): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r0 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7079, 0x0, 0x4, 0x288}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xfe3b) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xd4f, 0x1, 0x6, 0x8, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@delchain={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x9, 0x0, 0x0) 358.705856ms ago: executing program 2 (id=47): sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3e8, 0x4, 0x70bd29, 0x25dfdbff, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x24000890}, 0x4040840) (async) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000100)={{0x3c, @rand_addr=0x64010101, 0x4e24, 0x4, 'sh\x00', 0x19, 0x3, 0x3}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x4e21, 0x1, 0xfffffffa, 0x8c, 0x9}}, 0x44) (async, rerun: 32) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000180)={'hsr0\x00'}) (async, rerun: 32) sendfile64(r0, r0, &(0x7f00000001c0)=0x8, 0x80000000) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x30}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@deltaction={0x30, 0x31, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb81}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8001}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x0) (async) r2 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000300), 0x220000, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000340)={0x1, 0x7e, 0x0, 0x9, 0x4, 0x2, 0x68, 0xc0, 0x9, 0xe, 0x3, 0x7f, 0x8, 0x7}, 0xe) openat$uhid(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) (async) io_uring_enter(r2, 0x4d3d, 0xdb8b, 0x11, &(0x7f00000003c0)={[0x5, 0x3ff]}, 0x8) (async) r3 = syz_open_dev$loop(&(0x7f0000000400), 0xfff, 0x40081) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000440)={'wlan1\x00', 0x4000}) (async) landlock_create_ruleset(&(0x7f0000000480)={0x8021, 0x3, 0x2}, 0x18, 0x0) (async) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000004c0)={'veth0_to_bond\x00', {0x2, 0x4e22, @broadcast}}) (async) ioctl$BLKROTATIONAL(r3, 0x127e, &(0x7f0000000500)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000005c0)={'batadv0\x00', <r5=>0x0}) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, r4, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x646c}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004040}, 0x8000) (async) r6 = openat$cuse(0xffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000780)={0x0, <r7=>0x0}, &(0x7f00000007c0)=0xc) (async) statx(r2, &(0x7f0000000800)='./file0\x00', 0x400, 0x400, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}) (async) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, <r9=>0x0}) mount$fuse(0x0, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000700), 0x0, &(0x7f0000000a00)={{'fd', 0x3d, r6}, 0x2c, {}, 0x2c, {'user_id', 0x3d, r7}, 0x2c, {'group_id', 0x3d, r8}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x3}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0xe00}}, {@blksize={'blksize', 0x3d, 0x1400}}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x1e00}}], [{@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@subj_user={'subj_user', 0x3d, '\':'}}, {@fowner_eq={'fowner', 0x3d, r9}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\\'}}]}}) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000b80), &(0x7f0000000bc0)=0x40) r10 = add_key$fscrypt_provisioning(&(0x7f0000000c00), &(0x7f0000000c40)={'syz', 0x3}, &(0x7f0000000c80)={0x1, 0x0, @auto=[0x24]}, 0x9, 0xfffffffffffffffb) (async) r11 = add_key$keyring(&(0x7f0000000cc0), &(0x7f0000000d00)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$instantiate(0xc, r10, 0x0, 0x0, r11) (async, rerun: 32) r12 = socket$kcm(0x29, 0x4, 0x0) (rerun: 32) sendmsg$kcm(r12, &(0x7f0000002180)={&(0x7f0000000d40)=@caif=@dbg={0x25, 0x1, 0x7}, 0x80, &(0x7f0000001f80)=[{&(0x7f0000000dc0)="9a791b6f4abf462b2752413d9b5b", 0xe}, {&(0x7f0000000e00)="8769abc5df6b199f3549cdffce94be1a56ef1d7ad83782108ffa2fe39cbd0965f4b77031e82840f2df9793ed39450f951f6b1462d3e30007c7a2917170f482ab25669bf9b08992518d05df5d53a8dbcc8591", 0x52}, {&(0x7f0000000e80)="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", 0x1000}, {&(0x7f0000001e80)="69bb7604d89b2be0c4d1eda5b966306ff68c52613933794c990f8c7ed3f37f406db72e1619bc711485819b65e80a5c", 0x2f}, {&(0x7f0000001ec0)="ed82ac066baec0ea10738009cd397aac99cf554a37bf58eada0c8c90935ef8779ef39eb1fe16a15d31e3dfeb5d53c43260714b4fd97b8543ca94d48e6aff12cff3abd20afa372e10d67fcc95f1339856d6b9e01705fc151fd3ef61d2db45fbd9aace7cda31db0928ce295054e470b826e6783874f753f9d2b4a9f98ec097b62b546e6b43d9d78e6a53134219b9523c2c", 0x90}], 0x5, &(0x7f0000001fc0)=[{0xd4, 0x10a, 0x81, "19688f8ee63dc30a0239bc0d8c8c4dc9d7fc5c356423e6c041fa716298b912c99acb717979c75e5679553248ec52cc9f6f6ed22f3698f1346be6768216e8d490e6813fbc1c0037d10eed43241c35d834f8ff0f469eddcbc00c778bdc1a21b02d510877d7e43b7549f4fe3bac8b5ca90d7afbfa1fa32cfb6e65d0db8cd9cf0a2b6a5d648b3be474a95ad206bb0f946be20b583cfde001def5c250e1e32994bc0f803ee5f8429ccc75987bb27780aa3835be4d8a38a4464a3f872833c5b16ed2edb0121a196298f264"}, {0xd8, 0x110, 0x1000, "c95f2e3d8bf9dc05dd404c0b48ddc2d98caa7860642c219946b65dbd112fc473730678f07704cc07c11093ba31aeca67c653d9b84829f4d77cc67b1ad6732bf2ef38ad1665aed871ca7bc686c386d123fdf5c4acd73df8f1503b34c0b3b34bb7b92ba117cdec6c4cdb7b0047507f4ea69f5d46b235025bf458213f9c008e69db826826506f92002bf1e9b1166003eaba36efc50220262f7698d391d4159b7bb0af5a31b9b4aadf125482251454e166c577157c8a333861e1950839c6a26f36ffb61ca84597008b6ceb7f"}], 0x1ac}, 0x24000040) 311.755177ms ago: executing program 2 (id=48): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x1}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50}, 0x50) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r3, &(0x7f0000002300)={0x2020, 0x0, <r4=>0x0}, 0x206e) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0xfffffffffffffffd, &(0x7f0000000600)={<r6=>0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r6}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000080)={0x1, 0x10, 0xfa00, {0x0, r6, 0x1f}}, 0x18) write$FUSE_LK(r2, &(0x7f0000000340)={0x28, 0x0, r4, {{0x2, 0x0, 0x1}}}, 0x28) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}}) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r7, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) pipe2$9p(&(0x7f00000001c0), 0x0) (async) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) (async) dup(r1) (async) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x1}}, 0x18) (async) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) (async) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) (async) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50}, 0x50) (async) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}}) (async) read$FUSE(r3, &(0x7f0000002300)={0x2020}, 0x206e) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0xfffffffffffffffd, &(0x7f0000000600), 0x111, 0x1}}, 0x20) (async) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r6}}, 0x10) (async) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000080)={0x1, 0x10, 0xfa00, {0x0, r6, 0x1f}}, 0x18) (async) write$FUSE_LK(r2, &(0x7f0000000340)={0x28, 0x0, r4, {{0x2, 0x0, 0x1}}}, 0x28) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}}) (async) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) (async) writev(r7, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) (async) 292.590731ms ago: executing program 3 (id=49): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = open(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000800000014100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000001000000000000020000000000"], 0x48) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="60000000230020002abd7000fddbdf25000000001c00040001004e234e240000ffffffff000000000000000000000000080800000000000000001a00fe8800000000000000000000000000010000000000d55648fa0000000000000000000001"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000001c0)={r1, 0x0, 0x0}, 0x20) bpf$ENABLE_STATS(0x20, &(0x7f00000002c0), 0x4) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000240)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x14) (async) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0, <r3=>0x0}, &(0x7f00000000c0)=0xc) (async) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000011c0)=ANY=[@ANYBLOB="1800000001000000d9cb8f7100"/24], 0x18}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) setresuid(r3, r3, r3) 218.916048ms ago: executing program 3 (id=50): syz_emit_ethernet(0x8a, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000081003a000800450000780010000000119078e0000001fffffffffffd4e2300649078020000000200000004000000e6c50274a3a8726cb1f34204dfca9c336b0000000800006c0a00000000000000000026ad5242c1390a9fee0000000000718b1c2d9e951df36a25e126157aa90ffa67f68843ed2c16c10659edd6cbc1fe"], 0x0) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (rerun: 32) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) (async) r1 = fsmount(0xffffffffffffffff, 0x0, 0x7c) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000180)={0x1, @vbi={0x0, 0x4, 0x35314241, 0x55595659}}) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000400)={r5}, 0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000140)={r5, 0x0, 0x2, 0x1}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000300)={r5, 0x75, "4f58cc3e92358b38d555e76957dd50c64642184ace73b3a8b12efa2961066144202d58959a8fc5f70f9d69052aed4f19441ad81881b2b28b41b985bffaa246071d98bf88c7997ac472d497b20b2bf90408ce1b07d9d2c8203c1dd49e24bedc57de668ca9399d4025065b90a236f539f66076db6b57"}, &(0x7f0000000280)=0x7d) (async) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1}) 218.560181ms ago: executing program 2 (id=51): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x40, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r0, 0x0, 0xa0028000}, 0x38) (fail_nth: 83) 169.610484ms ago: executing program 3 (id=52): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000006cc0)=[{{&(0x7f0000000780)={0xa, 0x4e22, 0x6, @mcast1, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1000000029000000430000000700000014000000290000003600000002000000000000000f"], 0x38}}], 0x1, 0x0) 119.807243ms ago: executing program 3 (id=53): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x48, r0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x400, 0xb}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}]]}, 0x48}, 0x1, 0x0, 0x0, 0x810}, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x2c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x2c}}, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 0s ago: executing program 2 (id=54): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000006800210700000000000000000007"], 0x18}}, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x80542, 0x0) readv(r2, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/159, 0x9f}, {&(0x7f0000000100)=""/222, 0xde}], 0x2) mmap$dsp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x5, 0x11, r2, 0x0) read$FUSE(r0, &(0x7f0000002940)={0x2020}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r3, &(0x7f0000000040)={{0x3, @bcast, 0x8}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r5}, &(0x7f0000000180)=<r7=>0x0, &(0x7f00000001c0)=<r8=>0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r6, 0x2ded, 0x4000, 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)) r9 = syz_genetlink_get_family_id$smc(&(0x7f00000005c0), 0xffffffffffffffff) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000020000001400020070696d367265673000000000000000000900010073597a30000000000900030073797a3100000000"], 0x40}}, 0x0) sendmsg$SMC_PNETID_DEL(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="270e000000170000000004"], 0x14}, 0x1, 0x40030000000000, 0x0, 0x40000}, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x0) r11 = openat$nmem0(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r11, 0xc004500a, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r12 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c<L\xaa\x87A\xcdN#\xfb\xb0\xf2\x1e\x0e#J\xd0hB<\xc0\x82A0)p\xe7&J\x82\x83\x83\xd14\x01\xcf\x1b\xa9\x1d\x1ef\x0f\x86(1\xd6l\xd2\x8f\xb0\xad\t\x15\xdb|\x87\xf1\xc4\xb8\xb2\x9a\xd2A\x80\xbf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd6\x80\x00\x00\x00\x00\x00\x00\x00\x88&}\xd1\x00\x00\x00\xe6\xaf\t\x9f\x96\rN\xc9\x90\xbe\xed\x1ad\x14\xe7\x84\t\'\x8b\x00\xdd\xc9\x0f\x14v\xb6\x04\xf2U\xb4\xf6\xbe\xddT\xcb\x00\x00\x00\x00\x00\x00\xe9\x00\x00\x00\x00\x00\x00o:}\xa7jmH\xedn\x11\xfe\xe2\x0fT\x00\x94\xbc\xc6\x7f\x93eE1xp\xa3\xdc\xd7K9J<\xeb\xd2!\xf4\x19\xbd#\xb8\x83\x858\n\xf8\x12Z\x1a\x12\xfa\xcc\x04\r\xf3\xf4;\v\x15b^\xea\xa2\x04 \xe8\x99\xb3\x97\x9e\r\xb0\x05\xbb(f\xd0\x85\xc5\x15\xae#\x12Q\xacF\xfb\xc8\xbd\xcc#\v\x00\x00\x00\x00\x00\x00\x8f\x9b\x00\x03\xc8}\x11\xbc\x01\x8fi\xf5\x7f\xaf\x11\xfb\x16\x95\xdfc\xc9\x8a/&\x81w\xdf]ao\\\x88\xf7\xce\xbd\xb0\xa6J~\x8d\xf1\xe9\x1c\xcfo\xb3\xdc\x04Y\x8e\r\xf5\xa0\xeft\x06G0\xe3D\xd6\xa3L\xedN\x0e\xdc@7\xd8^\xae\xea\x92\xbe\x9c\xf9~c\xc1|\xca\x8d\x93R\xe5\xceU\xa5\x0f\xbf\xd8l\x96`\x0f\x00e\x8aR{\x17Y\x15m>\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x97052, r12, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4bfa, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000100)={0x2, 0x7, 0x2, {0x1, 0x1d26}, 0xbba}) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:32649' (ED25519) to the list of known hosts. [ 41.267555][ T5935] cgroup: Unknown subsys name 'net' [ 41.406727][ T5935] cgroup: Unknown subsys name 'cpuset' [ 41.409595][ T5935] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 42.167172][ T5935] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 44.937041][ T5954] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 44.940468][ T5960] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 44.943265][ T5960] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 44.945544][ T5960] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 44.947122][ T5956] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 44.947904][ T5960] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 44.950608][ T5956] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 44.951716][ T5960] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 44.953458][ T5956] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 44.955250][ T5960] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 44.957165][ T5956] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 44.959081][ T5960] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 44.960817][ T5956] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 44.962238][ T5960] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 44.963474][ T5961] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 44.963895][ T5962] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 44.963984][ T5956] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 44.965305][ T5956] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 44.966113][ T5956] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 44.966208][ T5960] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 44.966345][ T5960] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 44.968624][ T5296] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 44.969842][ T5956] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 44.972656][ T5296] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 45.124925][ T5947] chnl_net:caif_netlink_parms(): no params data found [ 45.133678][ T5949] chnl_net:caif_netlink_parms(): no params data found [ 45.142781][ T5948] chnl_net:caif_netlink_parms(): no params data found [ 45.180658][ T5958] chnl_net:caif_netlink_parms(): no params data found [ 45.253695][ T5949] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.256327][ T5949] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.258498][ T5949] bridge_slave_0: entered allmulticast mode [ 45.260442][ T5949] bridge_slave_0: entered promiscuous mode [ 45.263283][ T5947] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.265305][ T5947] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.267187][ T5947] bridge_slave_0: entered allmulticast mode [ 45.269466][ T5947] bridge_slave_0: entered promiscuous mode [ 45.323961][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.325914][ T5949] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.327759][ T5949] bridge_slave_1: entered allmulticast mode [ 45.329726][ T5949] bridge_slave_1: entered promiscuous mode [ 45.332086][ T5947] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.333973][ T5947] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.335970][ T5947] bridge_slave_1: entered allmulticast mode [ 45.337910][ T5947] bridge_slave_1: entered promiscuous mode [ 45.397699][ T5947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.400148][ T5948] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.401977][ T5948] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.403904][ T5948] bridge_slave_0: entered allmulticast mode [ 45.406605][ T5948] bridge_slave_0: entered promiscuous mode [ 45.409596][ T5958] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.411521][ T5958] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.413388][ T5958] bridge_slave_0: entered allmulticast mode [ 45.415886][ T5958] bridge_slave_0: entered promiscuous mode [ 45.418332][ T5958] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.420410][ T5958] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.422302][ T5958] bridge_slave_1: entered allmulticast mode [ 45.424394][ T5958] bridge_slave_1: entered promiscuous mode [ 45.427199][ T5949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.430281][ T5947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.432585][ T5948] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.434474][ T5948] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.436504][ T5948] bridge_slave_1: entered allmulticast mode [ 45.439168][ T5948] bridge_slave_1: entered promiscuous mode [ 45.457023][ T5949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.485191][ T5958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.505985][ T5947] team0: Port device team_slave_0 added [ 45.517316][ T5958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.521273][ T5949] team0: Port device team_slave_0 added [ 45.523835][ T5947] team0: Port device team_slave_1 added [ 45.527485][ T5948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.538261][ T5949] team0: Port device team_slave_1 added [ 45.556801][ T5948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.573736][ T5958] team0: Port device team_slave_0 added [ 45.592790][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.597567][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.605084][ T5947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.622904][ T5958] team0: Port device team_slave_1 added [ 45.631711][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.634308][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.641196][ T5947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.678993][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.680832][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.688949][ T5949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.699001][ T5948] team0: Port device team_slave_0 added [ 45.701425][ T5958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.703733][ T5958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.712640][ T5958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.716453][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.718864][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.727603][ T5949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.733693][ T5948] team0: Port device team_slave_1 added [ 45.748956][ T5958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.751336][ T5958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.762706][ T5958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.807052][ T5947] hsr_slave_0: entered promiscuous mode [ 45.809822][ T5947] hsr_slave_1: entered promiscuous mode [ 45.812954][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.815399][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.823381][ T5948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.828653][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.830428][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.837167][ T5948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.895449][ T5949] hsr_slave_0: entered promiscuous mode [ 45.898000][ T5949] hsr_slave_1: entered promiscuous mode [ 45.900420][ T5949] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.903160][ T5949] Cannot create hsr debugfs directory [ 45.925210][ T5958] hsr_slave_0: entered promiscuous mode [ 45.927162][ T5958] hsr_slave_1: entered promiscuous mode [ 45.929015][ T5958] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.930995][ T5958] Cannot create hsr debugfs directory [ 45.981930][ T5948] hsr_slave_0: entered promiscuous mode [ 45.983858][ T5948] hsr_slave_1: entered promiscuous mode [ 45.986769][ T5948] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.988771][ T5948] Cannot create hsr debugfs directory [ 46.177194][ T5947] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 46.182690][ T5947] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 46.187719][ T5947] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 46.194525][ T5947] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 46.209174][ T5949] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 46.212927][ T5949] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 46.216930][ T5949] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 46.221383][ T5949] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 46.251603][ T5948] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 46.255401][ T5948] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 46.258815][ T5948] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 46.265830][ T5948] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 46.294296][ T5958] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 46.297312][ T5958] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 46.300236][ T5958] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 46.303104][ T5958] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 46.332807][ T5947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.338909][ T5949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.357133][ T5947] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.366284][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.368317][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.371440][ T5949] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.381143][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.383095][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.392110][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.394226][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.400090][ T5948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.410525][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.412351][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.430325][ T5958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.441554][ T5948] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.451858][ T1135] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.453763][ T1135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.460024][ T5958] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.463848][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.465812][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.476093][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.478050][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.487512][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.489850][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.534552][ T5947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.567923][ T5947] veth0_vlan: entered promiscuous mode [ 46.572788][ T5947] veth1_vlan: entered promiscuous mode [ 46.582354][ T5949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.593087][ T5947] veth0_macvtap: entered promiscuous mode [ 46.600831][ T5947] veth1_macvtap: entered promiscuous mode [ 46.618484][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.625237][ T5948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.630884][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.633507][ T5958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.639439][ T5949] veth0_vlan: entered promiscuous mode [ 46.645475][ T5947] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.647826][ T5947] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.650088][ T5947] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.652328][ T5947] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.658787][ T5949] veth1_vlan: entered promiscuous mode [ 46.707495][ T5958] veth0_vlan: entered promiscuous mode [ 46.711070][ T5948] veth0_vlan: entered promiscuous mode [ 46.716482][ T5949] veth0_macvtap: entered promiscuous mode [ 46.719664][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.720644][ T5949] veth1_macvtap: entered promiscuous mode [ 46.722524][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.729280][ T5948] veth1_vlan: entered promiscuous mode [ 46.734618][ T5958] veth1_vlan: entered promiscuous mode [ 46.745320][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.748863][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.751923][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.755814][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.757893][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.758880][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.762553][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.765836][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.777580][ T5949] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.780018][ T5949] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.782349][ T5949] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.784901][ T5949] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.793269][ T5947] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 46.796944][ T5958] veth0_macvtap: entered promiscuous mode [ 46.800541][ T5948] veth0_macvtap: entered promiscuous mode [ 46.806257][ T5958] veth1_macvtap: entered promiscuous mode [ 46.812293][ T5958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.815616][ T5958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.818192][ T5958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.820830][ T5958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.823812][ T5958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.826297][ T5948] veth1_macvtap: entered promiscuous mode [ 46.839147][ T5958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.841678][ T5958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.844100][ T5958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.847811][ T5958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.850861][ T5958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.853892][ T5958] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.857894][ T5958] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.860216][ T5958] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.862493][ T5958] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.879260][ T5948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.882015][ T5948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.885362][ T5948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.888322][ T5948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.891559][ T5948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.895023][ T5948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.898029][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.901614][ T5948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.904522][ T5948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.907030][ T5948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.909708][ T5948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.912235][ T5948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.915170][ T5948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.918178][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.922751][ T5948] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.926592][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.926728][ T5948] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.928658][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.933396][ T5948] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.935827][ T5948] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.952724][ T6014] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 46.955861][ T6014] PKCS7: Only support pkcs7_signedData type [ 46.958201][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.960495][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.991536][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.993627][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.999413][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.001596][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.013596][ T1136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.016608][ T1136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.024019][ T1136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.026350][ T5954] Bluetooth: hci0: command tx timeout [ 47.026355][ T5296] Bluetooth: hci3: command tx timeout [ 47.028367][ T5954] Bluetooth: hci1: command tx timeout [ 47.029917][ T5296] Bluetooth: hci2: command tx timeout [ 47.032858][ T1136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.079986][ T6020] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4'. [ 47.082388][ T6020] netlink: 59 bytes leftover after parsing attributes in process `syz.3.4'. [ 47.094268][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 48.025212][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 48.127864][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 48.570459][ T6042] netlink: 39 bytes leftover after parsing attributes in process `syz.2.6'. [ 48.689749][ T6050] netlink: 39 bytes leftover after parsing attributes in process `syz.1.9'. [ 48.694321][ T8] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 48.865220][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 48.871026][ T8] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 48.873267][ T8] usb 5-1: config 179 has no interface number 0 [ 48.875821][ T8] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 48.878813][ T8] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 48.881774][ T8] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 48.885411][ T8] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 48.888061][ T8] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 48.891595][ T8] usb 5-1: config 179 interface 65 has no altsetting 0 [ 48.893440][ T8] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 48.897205][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.906180][ T6039] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 48.934088][ T8] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:179.65/input/input5 [ 49.104924][ T5296] Bluetooth: hci2: command tx timeout [ 49.114572][ T5954] Bluetooth: hci3: command tx timeout [ 49.114935][ T5950] Bluetooth: hci0: command tx timeout [ 49.115898][ T5296] Bluetooth: hci1: command tx timeout [ 49.123895][ T6010] usb 5-1: USB disconnect, device number 2 [ 49.123926][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 49.127465][ T6010] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 49.345592][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.474465][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.551110][ T6058] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11'. [ 49.618486][ T6058] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11'. [ 49.675008][ T6059] netlink: 'syz.3.12': attribute type 10 has an invalid length. [ 49.685681][ T6067] xt_TCPMSS: Only works on TCP SYN packets [ 49.726074][ T6068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12'. [ 49.780649][ T6069] netlink: 'syz.0.14': attribute type 10 has an invalid length. [ 49.783202][ T6059] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.785755][ T6059] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.798789][ T6059] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.801111][ T6059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.803934][ T6059] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.806359][ T6059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.811656][ T6059] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 49.816845][ T6068] bridge_slave_1: left allmulticast mode [ 49.818748][ T6068] bridge_slave_1: left promiscuous mode [ 49.820729][ T6068] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.834682][ T6067] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14'. [ 49.868243][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 49.868358][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 49.870385][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 49.872656][ T6068] bridge_slave_0: left allmulticast mode [ 49.876431][ T6068] bridge_slave_0: left promiscuous mode [ 49.877976][ T6068] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.912480][ T6068] bond0: (slave bridge0): Releasing backup interface [ 49.970652][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 49.970782][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 49.972803][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 49.980800][ T6069] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.983727][ T6069] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.996974][ T6069] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.998977][ T6069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.001375][ T6069] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.003367][ T6069] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.015436][ T6069] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 50.018689][ T6067] bridge_slave_1: left allmulticast mode [ 50.020333][ T6067] bridge_slave_1: left promiscuous mode [ 50.022454][ T6067] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.030587][ T6067] bridge_slave_0: left allmulticast mode [ 50.032144][ T6067] bridge_slave_0: left promiscuous mode [ 50.033981][ T6067] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.047701][ T6067] bond0: (slave bridge0): Releasing backup interface [ 50.890928][ T6076] syz.2.16 (6076): drop_caches: 2 [ 51.184370][ T5950] Bluetooth: hci3: command tx timeout [ 51.184386][ T5954] Bluetooth: hci1: command tx timeout [ 51.214244][ T62] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 51.219930][ T6083] netlink: 39 bytes leftover after parsing attributes in process `syz.2.18'. [ 51.384250][ T62] usb 6-1: Using ep0 maxpacket: 16 [ 51.387435][ T62] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.390602][ T62] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 51.395039][ T62] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 51.397560][ T62] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.414498][ T62] usb 6-1: config 0 descriptor?? [ 51.425799][ T62] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input6 [ 51.649069][ T62] usb 6-1: USB disconnect, device number 2 [ 51.649141][ C0] pxrc 6-1:0.0: pxrc_usb_irq - usb_submit_urb failed with result: -19 [ 51.684526][ T6079] bridge1: entered promiscuous mode [ 51.825304][ T5950] Bluetooth: hci0: command tx timeout [ 51.904240][ T5950] Bluetooth: hci2: command tx timeout [ 52.495122][ T6094] netlink: 24 bytes leftover after parsing attributes in process `syz.3.21'. [ 52.647495][ T6096] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 52.649340][ T6096] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 52.651813][ T6096] vhci_hcd vhci_hcd.0: Device attached [ 52.844590][ T833] vhci_hcd: vhci_device speed not set [ 52.934455][ T833] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 53.264940][ T5950] Bluetooth: hci3: command tx timeout [ 53.283888][ T5950] Bluetooth: hci1: command tx timeout [ 53.476444][ T6108] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 53.481228][ T6108] batman_adv: batadv0: Adding interface: gretap1 [ 53.482869][ T6108] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.489171][ T6108] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 53.917135][ T6099] vhci_hcd: connection reset by peer [ 53.920690][ T1135] vhci_hcd: stop threads [ 53.922450][ T1135] vhci_hcd: release socket [ 53.924256][ T1135] vhci_hcd: disconnect device [ 53.977999][ T6116] netlink: 24 bytes leftover after parsing attributes in process `syz.1.26'. [ 54.341606][ T6119] tc_dump_action: action bad kind [ 54.349727][ T6119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.27'. [ 54.453106][ T6126] overlayfs: missing 'lowerdir' [ 54.855326][ T6129] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 54.857895][ T6129] PKCS7: Only support pkcs7_signedData type [ 55.312607][ T6140] netlink: 24 bytes leftover after parsing attributes in process `syz.1.33'. [ 55.530571][ T6150] netlink: 14 bytes leftover after parsing attributes in process `syz.2.35'. [ 55.533904][ T6150] netlink: 'syz.2.35': attribute type 10 has an invalid length. [ 55.539817][ T6150] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 55.608446][ T6157] netlink: 39 bytes leftover after parsing attributes in process `syz.3.34'. [ 56.181402][ T6161] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 56.183200][ T6161] PKCS7: Only support pkcs7_signedData type [ 56.502929][ T6168] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 56.504945][ T6168] PKCS7: Only support pkcs7_signedData type [ 56.526702][ T6172] FAULT_INJECTION: forcing a failure. [ 56.526702][ T6172] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 56.530588][ T6172] CPU: 0 UID: 0 PID: 6172 Comm: syz.1.42 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 56.533381][ T6172] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 56.536311][ T6172] Call Trace: [ 56.537199][ T6172] <TASK> [ 56.538028][ T6172] dump_stack_lvl+0x16c/0x1f0 [ 56.539326][ T6172] should_fail_ex+0x497/0x5b0 [ 56.540690][ T6172] _copy_from_user+0x2e/0xd0 [ 56.541927][ T6172] generic_map_update_batch+0x391/0x5f0 [ 56.543395][ T6172] ? __pfx_generic_map_update_batch+0x10/0x10 [ 56.545001][ T6172] ? __fget_files+0x206/0x3a0 [ 56.546289][ T6172] ? __pfx_generic_map_update_batch+0x10/0x10 [ 56.547963][ T6172] bpf_map_do_batch+0x576/0x640 [ 56.549292][ T6172] __sys_bpf+0x1c9f/0x57a0 [ 56.550538][ T6172] ? __pfx_lock_release+0x10/0x10 [ 56.551934][ T6172] ? __pfx___sys_bpf+0x10/0x10 [ 56.553266][ T6172] ? vfs_write+0x306/0x1150 [ 56.554486][ T6172] ? __mutex_unlock_slowpath+0x164/0x690 [ 56.556011][ T6172] ? fput+0x67/0x440 [ 56.557156][ T6172] ? ksys_write+0x1ba/0x250 [ 56.558404][ T6172] ? __pfx_ksys_write+0x10/0x10 [ 56.559751][ T6172] __ia32_sys_bpf+0x76/0xe0 [ 56.561016][ T6172] __do_fast_syscall_32+0x73/0x120 [ 56.562374][ T6172] do_fast_syscall_32+0x32/0x80 [ 56.563669][ T6172] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 56.565384][ T6172] RIP: 0023:0xf7f37579 [ 56.566502][ T6172] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 56.571595][ T6172] RSP: 002b:00000000f508655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 56.573806][ T6172] RAX: ffffffffffffffda RBX: 000000000000001a RCX: 0000000020000300 [ 56.575902][ T6172] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 0000000000000000 [ 56.578067][ T6172] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 56.580202][ T6172] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 56.582291][ T6172] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 56.584409][ T6172] </TASK> [ 56.684495][ T6176] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 56.695383][ T6178] netlink: 39 bytes leftover after parsing attributes in process `syz.3.38'. [ 56.894497][ T6188] netlink: 24 bytes leftover after parsing attributes in process `syz.0.46'. [ 57.196211][ T6191] IPVS: set_ctl: invalid protocol: 60 100.1.1.1:20004 [ 57.268239][ T6196] 9pnet: bogus RWRITE count (512 > 41) [ 57.426602][ T6216] FAULT_INJECTION: forcing a failure. [ 57.426602][ T6216] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 57.430009][ T6216] CPU: 3 UID: 0 PID: 6216 Comm: syz.2.51 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 57.432813][ T6216] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 57.435784][ T6216] Call Trace: [ 57.436668][ T6216] <TASK> [ 57.437448][ T6216] dump_stack_lvl+0x16c/0x1f0 [ 57.438661][ T6216] should_fail_ex+0x497/0x5b0 [ 57.439980][ T6216] _copy_from_user+0x2e/0xd0 [ 57.441213][ T6216] generic_map_update_batch+0x3ff/0x5f0 [ 57.442660][ T6216] ? __pfx_generic_map_update_batch+0x10/0x10 [ 57.444293][ T6216] ? __fget_files+0x206/0x3a0 [ 57.445526][ T6216] ? __pfx_generic_map_update_batch+0x10/0x10 [ 57.447101][ T6216] bpf_map_do_batch+0x576/0x640 [ 57.448390][ T6216] __sys_bpf+0x1c9f/0x57a0 [ 57.449555][ T6216] ? __pfx_lock_release+0x10/0x10 [ 57.450877][ T6216] ? __pfx___sys_bpf+0x10/0x10 [ 57.452129][ T6216] ? vfs_write+0x306/0x1150 [ 57.453338][ T6216] ? __mutex_unlock_slowpath+0x164/0x690 [ 57.454979][ T6216] ? fput+0x67/0x440 [ 57.456128][ T6216] ? ksys_write+0x1ba/0x250 [ 57.457306][ T6216] ? __pfx_ksys_write+0x10/0x10 [ 57.458562][ T6216] __ia32_sys_bpf+0x76/0xe0 [ 57.459738][ T6216] __do_fast_syscall_32+0x73/0x120 [ 57.461072][ T6216] do_fast_syscall_32+0x32/0x80 [ 57.462333][ T6216] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 57.463980][ T6216] RIP: 0023:0xf7fb4579 [ 57.465545][ T6216] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 57.470571][ T6216] RSP: 002b:00000000f510655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 57.472719][ T6216] RAX: ffffffffffffffda RBX: 000000000000001a RCX: 0000000020000300 [ 57.474714][ T6216] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 0000000000000000 [ 57.477065][ T6216] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 57.479078][ T6216] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 57.481160][ T6216] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 57.483176][ T6216] </TASK> [ 57.548445][ T6214] [ 57.549223][ T6214] ====================================================== [ 57.551605][ T6214] WARNING: possible circular locking dependency detected [ 57.553491][ T6214] 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 Not tainted [ 57.556972][ T6214] ------------------------------------------------------ [ 57.559208][ T6214] syz.3.53/6214 is trying to acquire lock: [ 57.561128][ T6214] ffff888023d9b218 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock){+...}-{3:3}, at: __dev_queue_xmit+0x3343/0x43e0 [ 57.565113][ T6214] [ 57.565113][ T6214] but task is already holding lock: [ 57.567616][ T6214] ffff888068d81108 (&local->handle_wake_tx_queue_lock){+.-.}-{3:3}, at: ieee80211_handle_wake_tx_queue+0x8a/0x260 [ 57.571701][ T6214] [ 57.571701][ T6214] which lock already depends on the new lock. [ 57.571701][ T6214] [ 57.575007][ T6214] [ 57.575007][ T6214] the existing dependency chain (in reverse order) is: [ 57.577180][ T6214] [ 57.577180][ T6214] -> #2 (&local->handle_wake_tx_queue_lock){+.-.}-{3:3}: [ 57.579435][ T6214] _raw_spin_lock+0x2e/0x40 [ 57.580708][ T6214] ieee80211_handle_wake_tx_queue+0x8a/0x260 [ 57.582327][ T6214] ieee80211_queue_skb+0x12b5/0x2010 [ 57.583271][ T6220] ax25_connect(): syz.2.54 uses autobind, please contact jreuter@yaina.de [ 57.583919][ T6214] ieee80211_tx+0x2e6/0x420 [ 57.587330][ T6214] ieee80211_xmit+0x30e/0x3e0 [ 57.587341][ T6214] __ieee80211_subif_start_xmit+0xa62/0x1410 [ 57.587351][ T6214] ieee80211_subif_start_xmit+0x118/0x16c0 [ 57.587361][ T6214] dev_hard_start_xmit+0x9a/0x7b0 [ 57.593783][ T6214] __dev_queue_xmit+0x7f0/0x43e0 [ 57.595168][ T6214] neigh_resolve_output+0x5bc/0x950 [ 57.596571][ T6214] ip6_finish_output2+0xb1b/0x2070 [ 57.597957][ T6214] ip6_finish_output+0x3f9/0x1360 [ 57.599295][ T6214] ip6_output+0x1f8/0x540 [ 57.600528][ T6214] mld_sendpack+0x9f0/0x11d0 [ 57.601808][ T6214] mld_ifc_work+0x740/0xca0 [ 57.603030][ T6214] process_one_work+0x958/0x1b30 [ 57.604512][ T6214] worker_thread+0x6c8/0xf00 [ 57.606274][ T6214] kthread+0x2c1/0x3a0 [ 57.607879][ T6214] ret_from_fork+0x45/0x80 [ 57.609593][ T6214] ret_from_fork_asm+0x1a/0x30 [ 57.611500][ T6214] [ 57.611500][ T6214] -> #1 (_xmit_ETHER#2){+.-.}-{3:3}: [ 57.614167][ T6214] _raw_spin_lock+0x2e/0x40 [ 57.615978][ T6214] sch_direct_xmit+0x340/0xc30 [ 57.617896][ T6214] __dev_queue_xmit+0x13d4/0x43e0 [ 57.619883][ T6214] lapb_data_transmit+0x93/0xc0 [ 57.621801][ T6214] lapb_transmit_buffer+0xce/0x390 [ 57.623790][ T6214] lapb_send_control+0x1ce/0x320 [ 57.625694][ T6214] lapb_establish_data_link+0xeb/0x110 [ 57.627801][ T6214] lapb_device_event+0x398/0x570 [ 57.629804][ T6214] notifier_call_chain+0xb7/0x410 [ 57.631789][ T6214] call_netdevice_notifiers_info+0xbe/0x140 [ 57.634088][ T6214] __dev_notify_flags+0x12d/0x2e0 [ 57.636072][ T6214] dev_change_flags+0x10c/0x160 [ 57.638038][ T6214] devinet_ioctl+0x11d7/0x1f40 [ 57.639918][ T6214] inet_ioctl+0x3aa/0x3f0 [ 57.641370][ T6214] sock_do_ioctl+0x116/0x280 [ 57.643111][ T6214] sock_ioctl+0x228/0x6c0 [ 57.644799][ T6214] __x64_sys_ioctl+0x190/0x200 [ 57.646592][ T6214] do_syscall_64+0xcd/0x250 [ 57.648312][ T6214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.650573][ T6214] [ 57.650573][ T6214] -> #0 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock){+...}-{3:3}: [ 57.653775][ T6214] __lock_acquire+0x249e/0x3c40 [ 57.655406][ T6214] lock_acquire.part.0+0x11b/0x380 [ 57.656917][ T6214] _raw_spin_lock+0x2e/0x40 [ 57.658503][ T6214] __dev_queue_xmit+0x3343/0x43e0 [ 57.660553][ T6214] netlink_deliver_tap+0xa61/0xca0 [ 57.662047][ T6214] netlink_unicast+0x6b4/0x7f0 [ 57.663403][ T6214] hwsim_unicast_netgroup+0x432/0x6c0 [ 57.664954][ T6214] mac80211_hwsim_tx_frame_nl+0xc00/0xdd0 [ 57.666579][ T6214] mac80211_hwsim_tx+0xed9/0x2500 [ 57.668058][ T6214] ieee80211_handle_wake_tx_queue+0x18a/0x260 [ 57.669787][ T6214] ieee80211_queue_skb+0x12b5/0x2010 [ 57.671311][ T6214] __ieee80211_xmit_fast+0x666/0x2c60 [ 57.672846][ T6214] __ieee80211_subif_start_xmit+0x85c/0x1410 [ 57.674481][ T6214] ieee80211_subif_start_xmit+0x118/0x16c0 [ 57.676134][ T6214] dev_hard_start_xmit+0x9a/0x7b0 [ 57.677560][ T6214] __dev_queue_xmit+0x7f0/0x43e0 [ 57.679054][ T6214] ip_finish_output2+0x1438/0x2130 [ 57.680842][ T6214] __ip_finish_output+0x49e/0x950 [ 57.682267][ T6214] ip_finish_output+0x35/0x380 [ 57.683639][ T6214] ip_output+0x13b/0x2a0 [ 57.684864][ T6214] ip_local_out+0x33e/0x4a0 [ 57.686158][ T6214] __ip_queue_xmit+0x777/0x1970 [ 57.687521][ T6214] l2tp_ip_sendmsg+0x60e/0x15b0 [ 57.688932][ T6214] inet_sendmsg+0x119/0x140 [ 57.690292][ T6214] ____sys_sendmsg+0x907/0xb40 [ 57.691681][ T6214] ___sys_sendmsg+0x135/0x1e0 [ 57.693025][ T6214] __sys_sendmmsg+0x2fa/0x420 [ 57.694373][ T6214] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 57.695924][ T6214] __do_fast_syscall_32+0x73/0x120 [ 57.697370][ T6214] do_fast_syscall_32+0x32/0x80 [ 57.698760][ T6214] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 57.700582][ T6214] [ 57.700582][ T6214] other info that might help us debug this: [ 57.700582][ T6214] [ 57.703152][ T6214] Chain exists of: [ 57.703152][ T6214] dev->qdisc_tx_busylock ?: &qdisc_tx_busylock --> _xmit_ETHER#2 --> &local->handle_wake_tx_queue_lock [ 57.703152][ T6214] [ 57.707452][ T6214] Possible unsafe locking scenario: [ 57.707452][ T6214] [ 57.709383][ T6214] CPU0 CPU1 [ 57.710799][ T6214] ---- ---- [ 57.712431][ T6214] lock(&local->handle_wake_tx_queue_lock); [ 57.714432][ T6214] lock(_xmit_ETHER#2); [ 57.716175][ T6214] lock(&local->handle_wake_tx_queue_lock); [ 57.718338][ T6214] lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock); [ 57.720111][ T6214] [ 57.720111][ T6214] *** DEADLOCK *** [ 57.720111][ T6214] [ 57.722387][ T6214] 11 locks held by syz.3.53/6214: [ 57.723929][ T6214] #0: ffff888021508258 (sk_lock-AF_INET){+.+.}-{0:0}, at: l2tp_ip_sendmsg+0x2a/0x15b0 [ 57.726752][ T6214] #1: ffffffff8ddbad40 (rcu_read_lock){....}-{1:3}, at: l2tp_ip_sendmsg+0xebd/0x15b0 [ 57.729605][ T6214] #2: ffffffff8ddbad40 (rcu_read_lock){....}-{1:3}, at: __ip_queue_xmit+0x73/0x1970 [ 57.732448][ T6214] #3: ffffffff8ddbad40 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x364/0x2130 [ 57.735364][ T6214] #4: ffffffff8ddbace0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x277/0x43e0 [ 57.738316][ T6214] #5: ffff88804bb66518 (_xmit_ETHER#2){+.-.}-{3:3}, at: __dev_queue_xmit+0x1d27/0x43e0 [ 57.741218][ T6214] #6: ffffffff8ddbad40 (rcu_read_lock){....}-{1:3}, at: __ieee80211_subif_start_xmit+0x307/0x1410 [ 57.744587][ T6214] #7: ffff888068d81108 (&local->handle_wake_tx_queue_lock){+.-.}-{3:3}, at: ieee80211_handle_wake_tx_queue+0x8a/0x260 [ 57.748339][ T6214] #8: ffffffff8ddbad40 (rcu_read_lock){....}-{1:3}, at: hwsim_unicast_netgroup+0x3f/0x6c0 [ 57.751359][ T6214] #9: ffffffff8ddbad40 (rcu_read_lock){....}-{1:3}, at: netlink_deliver_tap+0x103/0xca0 [ 57.754300][ T6214] #10: ffffffff8ddbace0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x277/0x43e0 [ 57.757290][ T6214] [ 57.757290][ T6214] stack backtrace: [ 57.759093][ T6214] CPU: 2 UID: 0 PID: 6214 Comm: syz.3.53 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 57.762219][ T6214] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 57.765458][ T6214] Call Trace: [ 57.766479][ T6214] <TASK> [ 57.767383][ T6214] dump_stack_lvl+0x116/0x1f0 [ 57.768829][ T6214] print_circular_bug+0x41c/0x610 [ 57.770355][ T6214] check_noncircular+0x31a/0x400 [ 57.772107][ T6214] ? __pfx_check_noncircular+0x10/0x10 [ 57.774050][ T6214] ? register_lock_class+0xb1/0x1240 [ 57.775927][ T6214] ? lock_acquire.part.0+0x11b/0x380 [ 57.777797][ T6214] ? lockdep_lock+0xc6/0x200 [ 57.779501][ T6214] ? __pfx_lockdep_lock+0x10/0x10 [ 57.781176][ T6214] ? __pfx_lock_release+0x10/0x10 [ 57.782489][ T6214] __lock_acquire+0x249e/0x3c40 [ 57.783758][ T6214] ? __pfx___lock_acquire+0x10/0x10 [ 57.785146][ T6214] lock_acquire.part.0+0x11b/0x380 [ 57.786688][ T6214] ? __dev_queue_xmit+0x3343/0x43e0 [ 57.788226][ T6214] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 57.790089][ T6214] ? rcu_is_watching+0x12/0xc0 [ 57.791698][ T6214] ? trace_lock_acquire+0x14e/0x1f0 [ 57.793457][ T6214] ? trace_lock_acquire+0x14e/0x1f0 [ 57.795193][ T6214] ? __dev_queue_xmit+0x3343/0x43e0 [ 57.796903][ T6214] ? lock_acquire+0x2f/0xb0 [ 57.798454][ T6214] ? __dev_queue_xmit+0x3343/0x43e0 [ 57.800202][ T6214] _raw_spin_lock+0x2e/0x40 [ 57.801738][ T6214] ? __dev_queue_xmit+0x3343/0x43e0 [ 57.803458][ T6214] __dev_queue_xmit+0x3343/0x43e0 [ 57.805059][ T6214] ? ip_local_out+0x33e/0x4a0 [ 57.806293][ T6214] ? __ip_queue_xmit+0x777/0x1970 [ 57.807658][ T6214] ? l2tp_ip_sendmsg+0x60e/0x15b0 [ 57.809036][ T6214] ? inet_sendmsg+0x119/0x140 [ 57.810271][ T6214] ? ____sys_sendmsg+0x907/0xb40 [ 57.811535][ T6214] ? ___sys_sendmsg+0x135/0x1e0 [ 57.812808][ T6214] ? __sys_sendmmsg+0x2fa/0x420 [ 57.813986][ T6214] ? __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 57.815661][ T6214] ? __do_fast_syscall_32+0x73/0x120 [ 57.817064][ T6214] ? do_fast_syscall_32+0x32/0x80 [ 57.818404][ T6214] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 57.820105][ T6214] ? __pfx___dev_queue_xmit+0x10/0x10 [ 57.821502][ T6214] ? rcu_is_watching+0x12/0xc0 [ 57.822754][ T6214] ? trace_kmem_cache_alloc+0x2d/0xd0 [ 57.824172][ T6214] ? kmem_cache_alloc_noprof+0x21b/0x3b0 [ 57.825713][ T6214] ? __copy_skb_header+0x2e8/0x5b0 [ 57.827050][ T6214] ? __skb_clone+0x570/0x760 [ 57.828286][ T6214] netlink_deliver_tap+0xa61/0xca0 [ 57.829629][ T6214] netlink_unicast+0x6b4/0x7f0 [ 57.830902][ T6214] ? __pfx_netlink_unicast+0x10/0x10 [ 57.832272][ T6214] hwsim_unicast_netgroup+0x432/0x6c0 [ 57.833668][ T6214] ? hwsim_unicast_netgroup+0xb7/0x6c0 [ 57.835280][ T6214] mac80211_hwsim_tx_frame_nl+0xc00/0xdd0 [ 57.836751][ T6214] ? __pfx_mac80211_hwsim_tx_frame_nl+0x10/0x10 [ 57.838389][ T6214] ? __pfx_ieee80211_tx_dequeue+0x10/0x10 [ 57.839872][ T6214] ? mac80211_hwsim_monitor_rx+0x1cd/0x880 [ 57.841397][ T6214] mac80211_hwsim_tx+0xed9/0x2500 [ 57.842714][ T6214] ieee80211_handle_wake_tx_queue+0x18a/0x260 [ 57.844324][ T6214] ? __ieee80211_schedule_txq+0x167/0xc30 [ 57.845813][ T6214] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 57.847514][ T6214] ? __pfx___ieee80211_schedule_txq+0x10/0x10 [ 57.849112][ T6214] ? __local_bh_enable_ip+0xa4/0x120 [ 57.850504][ T6214] ieee80211_queue_skb+0x12b5/0x2010 [ 57.851902][ T6214] ? __lock_acquire+0xc37/0x3c40 [ 57.853219][ T6214] __ieee80211_xmit_fast+0x666/0x2c60 [ 57.854792][ T6214] ? find_held_lock+0x2d/0x110 [ 57.856170][ T6214] ? __pfx___ieee80211_xmit_fast+0x10/0x10 [ 57.857690][ T6214] ? sta_info_get_bss+0x18b/0x3a0 [ 57.859036][ T6214] __ieee80211_subif_start_xmit+0x85c/0x1410 [ 57.860604][ T6214] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 57.862255][ T6214] ? __lock_acquire+0x15a9/0x3c40 [ 57.863572][ T6214] ieee80211_subif_start_xmit+0x118/0x16c0 [ 57.865129][ T6214] ? __pfx___lock_acquire+0x10/0x10 [ 57.866478][ T6214] ? skb_network_protocol+0x127/0x6d0 [ 57.867905][ T6214] ? kasan_save_free_info+0x3b/0x60 [ 57.869267][ T6214] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 57.871138][ T6214] ? lock_acquire.part.0+0x11b/0x380 [ 57.872542][ T6214] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 57.874014][ T6214] ? rcu_is_watching+0x12/0xc0 [ 57.875333][ T6214] ? dev_hard_start_xmit+0x9a/0x7b0 [ 57.876712][ T6214] dev_hard_start_xmit+0x9a/0x7b0 [ 57.878052][ T6214] __dev_queue_xmit+0x7f0/0x43e0 [ 57.879354][ T6214] ? hlock_class+0x4e/0x130 [ 57.880562][ T6214] ? __lock_acquire+0x15a9/0x3c40 [ 57.881910][ T6214] ? __pfx___dev_queue_xmit+0x10/0x10 [ 57.883315][ T6214] ? __free_zapped_classes+0x2f0/0x2f0 [ 57.884847][ T6214] ? skb_free_head+0x18a/0x1d0 [ 57.886069][ T6214] ? __pfx___lock_acquire+0x10/0x10 [ 57.887436][ T6214] ? __pfx_mark_lock+0x10/0x10 [ 57.888703][ T6214] ? skb_free_head+0x18a/0x1d0 [ 57.889933][ T6214] ? skb_headers_offset_update+0x129/0x260 [ 57.891470][ T6214] ? find_held_lock+0x2d/0x110 [ 57.892737][ T6214] ? __ip_finish_output+0x49e/0x950 [ 57.894067][ T6214] ? __pfx_lock_release+0x10/0x10 [ 57.895356][ T6214] ? mark_held_locks+0x9f/0xe0 [ 57.896605][ T6214] ip_finish_output2+0x1438/0x2130 [ 57.897968][ T6214] ? __pfx_ip_finish_output2+0x10/0x10 [ 57.899390][ T6214] ? ip_skb_dst_mtu+0x3fc/0xc70 [ 57.900644][ T6214] ? __pfx_ip_skb_dst_mtu+0x10/0x10 [ 57.902013][ T6214] __ip_finish_output+0x49e/0x950 [ 57.903333][ T6214] ip_finish_output+0x35/0x380 [ 57.904759][ T6214] ip_output+0x13b/0x2a0 [ 57.905876][ T6214] ? __pfx_ip_output+0x10/0x10 [ 57.907130][ T6214] ip_local_out+0x33e/0x4a0 [ 57.908335][ T6214] __ip_queue_xmit+0x777/0x1970 [ 57.909586][ T6214] l2tp_ip_sendmsg+0x60e/0x15b0 [ 57.910846][ T6214] ? __pfx_l2tp_ip_sendmsg+0x10/0x10 [ 57.912243][ T6214] inet_sendmsg+0x119/0x140 [ 57.913426][ T6214] ____sys_sendmsg+0x907/0xb40 [ 57.914620][ T6214] ? __pfx_____sys_sendmsg+0x10/0x10 [ 57.915985][ T6214] ? get_compat_msghdr+0x11b/0x170 [ 57.917335][ T6214] ? __pfx_lock_release+0x10/0x10 [ 57.918662][ T6214] ? find_held_lock+0x2d/0x110 [ 57.919904][ T6214] ___sys_sendmsg+0x135/0x1e0 [ 57.921096][ T6214] ? __up_read+0x1fb/0x760 [ 57.922368][ T6214] ? __pfx____sys_sendmsg+0x10/0x10 [ 57.923742][ T6214] ? handle_mm_fault+0x497/0xaa0 [ 57.925267][ T6214] ? __pfx___might_resched+0x10/0x10 [ 57.926851][ T6214] ? __sys_sendmmsg+0x30e/0x420 [ 57.928177][ T6214] __sys_sendmmsg+0x2fa/0x420 [ 57.929411][ T6214] ? __pfx___sys_sendmmsg+0x10/0x10 [ 57.930784][ T6214] ? l2tp_ip_connect+0x12c/0x3c0 [ 57.932095][ T6214] ? __pfx_do_futex+0x10/0x10 [ 57.933340][ T6214] ? xfd_validate_state+0x5d/0x180 [ 57.934731][ T6214] ? rcu_is_watching+0x12/0xc0 [ 57.935978][ T6214] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 57.937405][ T6214] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 57.939090][ T6214] __do_fast_syscall_32+0x73/0x120 [ 57.940439][ T6214] do_fast_syscall_32+0x32/0x80 [ 57.941704][ T6214] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 57.943343][ T6214] RIP: 0023:0xf70ee579 [ 57.944501][ T6214] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 57.949588][ T6214] RSP: 002b:00000000f50e055c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 57.951759][ T6214] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000900 [ 57.953816][ T6214] RDX: 00000000040000cf RSI: 0000000000000000 RDI: 0000000000000000 [ 57.955887][ T6214] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 57.958016][ T6214] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 57.960073][ T6214] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 57.962129][ T6214] </TASK> [ 57.976587][ T6213] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 58.294254][ T833] vhci_hcd: vhci_device speed not set VM DIAGNOSIS: 18:47:03 Registers: info registers vcpu 0 CPU#0 RAX=00000000001297fc RBX=0000000000000000 RCX=ffffffff8b1a2819 RDX=ffffed1005686fee RSI=ffffffff8bb16e40 RDI=ffffffff81702e19 RBP=fffffbfff1b52ef8 RSP=ffffffff8da07e20 R8 =0000000000000000 R9 =ffffed1005686fed R10=ffff88802b437f6b R11=0000000000000001 R12=0000000000000000 R13=ffffffff8da977c0 R14=ffffffff901ce210 R15=0000000000000000 RIP=ffffffff8b1a3bff RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f50bdc80 CR3=0000000044120000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000007 RBX=ffff8880274da440 RCX=1ffffffff203a2a2 RDX=0000000000000000 RSI=0000000000000000 RDI=0000000000000007 RBP=1ffff92000c30f23 RSP=ffffc900061878f0 R8 =0000000000000007 R9 =7fffffffffffffff R10=7fffffffffffffff R11=0000000000000001 R12=ffffc90006187938 R13=dffffc0000000000 R14=7fffffffffffffff R15=ffff8880274da440 RIP=ffffffff8b1b40bd RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b500000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000020028000 CR3=00000000536a0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85142575 RDI=ffffffff9a6672c0 RBP=ffffffff9a667280 RSP=ffffc900064b5ef0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=722d302e33312e36 R12=0000000000000000 R13=0000000000000030 R14=ffffffff85142510 R15=0000000000000000 RIP=ffffffff8514259f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b600000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000002000601c CR3=0000000021606000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000000557d4 RBX=0000000000000003 RCX=ffffffff8b1a2819 RDX=ffffed10056e6fee RSI=ffffffff8bb16e40 RDI=ffffffff81702e19 RBP=ffffed10039df488 RSP=ffffc9000049fe08 R8 =0000000000000000 R9 =ffffed10056e6fed R10=ffff88802b737f6b R11=0000000000000001 R12=0000000000000003 R13=ffff88801cefa440 R14=ffffffff901ce210 R15=0000000000000000 RIP=ffffffff8b1a3bff RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000000c286ca0 CR3=000000004ea6e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000