last executing test programs: 6.522064917s ago: executing program 1 (id=8): r0 = fsopen(&(0x7f0000000000)='msdos\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x8) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x306c0) close_range(r1, 0xffffffffffffffff, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001180)={0x14}, 0x14}}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r3}) 5.649713355s ago: executing program 1 (id=9): r0 = fsopen(&(0x7f0000000000)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000100)='ext2\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BLKRRPART(r1, 0x125f, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x6, 0x0, 0x300}, 0x14}}, 0x0) 5.328067311s ago: executing program 1 (id=10): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000180)) r2 = syz_open_dev$mouse(&(0x7f0000000000), 0x8, 0xa40) close(r2) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 5.058792466s ago: executing program 1 (id=11): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup3(r1, r0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10}, 0x10}}, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) close(r4) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000000)=0xe4, 0x4) r5 = socket$alg(0x26, 0x5, 0x0) r6 = dup(r5) write$P9_RLOCK(r6, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0xfff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x8000000, 0x200, 0x0, 0x720d, 0x148, 0x98, 0x148, 0x168, 0x240, 0x240, 0x168, 0x240, 0x7fffffe, 0x0, {[{{@ip={@remote, @empty, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xb, 0x2, 0xfff}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @dev, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r4) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x2d4, r7, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000001}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x14b}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER={0x34, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth1_virt_wifi\x00'}}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth1_to_batadv\x00'}}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7d}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x40}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2bd}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER={0xbc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x6, @loopback, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @local, 0x4}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8f6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5b500000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x39c0}]}, @TIPC_NLA_LINK={0x100, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff01}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfe000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3c2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x4044804}, 0x84) sendto$inet(r3, 0x0, 0x0, 0x24000080, 0x0, 0x0) r8 = dup(r3) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, 0x0) 4.777320574s ago: executing program 0 (id=12): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x31102, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x5451, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x9040}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000ec0), 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r3, 0x5450, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0x0) r4 = syz_open_dev$vcsu(&(0x7f0000000000), 0x4, 0x82) close_range(r4, 0xffffffffffffffff, 0x0) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40741, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r5, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x45}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x840) r7 = socket$nl_route(0x10, 0x3, 0x0) getpeername(r7, &(0x7f0000000440)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000200)=0x80) setsockopt$netlink_NETLINK_PKTINFO(r7, 0x10e, 0x3, &(0x7f0000000040)=0x8, 0x4) 4.679962654s ago: executing program 0 (id=13): ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000000)=""/209) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100), 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)='%pi6 \x00'}, 0x20) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={r0, r1}, 0xc) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) read$snapshot(r2, &(0x7f0000000280)=""/198, 0xc6) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r3) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r2, 0x3, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$F2FS_IOC_RESIZE_FS(r2, 0x4008f510, &(0x7f0000000380)=0x4) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000480), 0x404041, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000500)=0xc) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x70, r6, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x1d}, @void, @val={0xc, 0x99, {0x1, 0x78}}}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r7}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x10}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x70}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_PID={0x8, 0x52, r8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x7c}]}, 0x70}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), r5) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xb8, r10, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x651}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x200}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xee22}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1b8}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffa}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffff00000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffff}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4042802}, 0x0) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r2, 0x21, &(0x7f0000000840)={0x0, 0xc758, 0x80, 0x0, 0x308, 0x0, r7}, 0x1) r11 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000008c0), 0x248600) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r11, 0xc08c5332, &(0x7f0000000900)={0x3ff, 0xc19, 0x0, 'queue1\x00', 0xfffffffa}) r12 = socket$inet_smc(0x2b, 0x1, 0x0) close(r12) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000009c0)={{0x1, 0x1, 0x18, r7, {0x8, 0xffff}}, './file0\x00'}) r14 = syz_genetlink_get_family_id$gtp(&(0x7f0000000a40), r2) sendmsg$GTP_CMD_ECHOREQ(r13, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x24, r14, 0x300, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FAMILY={0x5, 0xd, 0x1d}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008801}, 0x800) ioctl$VHOST_GET_VRING_ENDIAN(r5, 0x4008af14, &(0x7f0000000b40)={0x2, 0xffffffff}) 3.880573537s ago: executing program 0 (id=14): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000840)={[0xfffffffffffffffb]}, 0x8, 0x800) close(r0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000e40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000e00), 0x13f, 0x4}}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) write$UHID_CREATE2(r1, 0x0, 0x166) 1.197171445s ago: executing program 0 (id=15): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg$unix(r0, &(0x7f0000001900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001840)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}], 0x1, 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WDS_PEER(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_clone(0x1000, &(0x7f0000000180)="dc79262077d40d85739cbf5b8a0f2e2a91ce8ea8911be5bed0a188136f83eb555fd96fb94c9523f55afccd7a30faa87fff43c1ce34a071a5bf572ef7fc45168659caa64b42d20c6d85dab6c4707c582a5056fe75f75dc88507087bb559e6758a95eefe3bedf50a50f0f7f6d92c03ca98dc07a4ddcb8a5f62faf9edf1fe7d5317c7", 0x81, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000300)="ecf046a9f0cf68c455bf77eecdaab91f1953759f59e6411c28905b890fad8581435596795733892a787fe893e11a2012996cd735e36ea1f4cf889d460a05eb65619a700d8dec64d5c535fc14e485ddbf7d1cc07b328e618f79ff39374e6527ffd8f0513f9998c0ceca411438822824c471cfeed8d9e36240395d1e028fc53642d2fad5356dff05d402a92519941377324dd7b1e8c29df89b317e3663d4b17f87fb4a3c5e6932adfab91e0dce62c7") 340.652619ms ago: executing program 0 (id=16): r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x4, 0x82) close_range(r0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$fou(&(0x7f0000000240), r0) (fail_nth: 7) 321.577424ms ago: executing program 1 (id=17): r0 = socket(0xa, 0x1, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x801, 0x8942) pwritev2(r1, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$llc_int(r0, 0x29, 0x2, 0x0, 0x10) 231.099µs ago: executing program 0 (id=18): r0 = fsopen(&(0x7f0000000000)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x8) close_range(r1, 0xffffffffffffffff, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r3}) (fail_nth: 22) 0s ago: executing program 1 (id=19): syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) (async) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r1 = dup(r0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000040)=0x7c, 0x8) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000200)=""/4096) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:59043' (ED25519) to the list of known hosts. syzkaller login: [ 81.012246][ T3289] cgroup: Unknown subsys name 'net' [ 81.351142][ T3289] cgroup: Unknown subsys name 'cpuset' [ 81.385804][ T3289] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.069827][ T3289] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.704460][ T3294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.725646][ T3294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.927985][ T3295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.942463][ T3295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.858640][ T3294] hsr_slave_0: entered promiscuous mode [ 92.866101][ T3294] hsr_slave_1: entered promiscuous mode [ 93.112828][ T3295] hsr_slave_0: entered promiscuous mode [ 93.119151][ T3295] hsr_slave_1: entered promiscuous mode [ 93.124218][ T3295] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.126131][ T3295] Cannot create hsr debugfs directory [ 94.194225][ T3294] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.228283][ T3294] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.247728][ T3294] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.266918][ T3294] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.422313][ T3295] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.460556][ T3295] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.479710][ T3295] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.496203][ T3295] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.175488][ T3294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.401296][ T3295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.188022][ T3294] veth0_vlan: entered promiscuous mode [ 98.237936][ T3295] veth0_vlan: entered promiscuous mode [ 98.265633][ T3294] veth1_vlan: entered promiscuous mode [ 98.287874][ T3295] veth1_vlan: entered promiscuous mode [ 98.415192][ T3294] veth0_macvtap: entered promiscuous mode [ 98.446701][ T3294] veth1_macvtap: entered promiscuous mode [ 98.521241][ T3295] veth0_macvtap: entered promiscuous mode [ 98.548266][ T3295] veth1_macvtap: entered promiscuous mode [ 98.668699][ T3294] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.669386][ T3294] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.669737][ T3294] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.670042][ T3294] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.717768][ T3295] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.720045][ T3295] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.722501][ T3295] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.723024][ T3295] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.221372][ T3295] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 100.904244][ T3383] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 101.084180][ T3383] usb 1-1: Using ep0 maxpacket: 32 [ 101.121056][ T3383] usb 1-1: config 1 interface 0 has no altsetting 0 [ 101.161601][ T3383] usb 1-1: New USB device found, idVendor=056a, idProduct=003f, bcdDevice= 0.40 [ 101.166052][ T3383] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.168485][ T3383] usb 1-1: Product: э [ 101.169929][ T3383] usb 1-1: Manufacturer: [ 101.171423][ T3383] usb 1-1: SerialNumber: 向 [ 105.311833][ T3383] usbhid 1-1:1.0: can't add hid device: -71 [ 105.316159][ T3383] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 105.329386][ T3383] usb 1-1: USB disconnect, device number 2 [ 110.107648][ T3494] FAULT_INJECTION: forcing a failure. [ 110.107648][ T3494] name failslab, interval 1, probability 0, space 0, times 1 [ 110.115240][ T3494] CPU: 0 UID: 0 PID: 3494 Comm: syz.0.16 Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT [ 110.115550][ T3494] Hardware name: linux,dummy-virt (DT) [ 110.115793][ T3494] Call trace: [ 110.116032][ T3494] show_stack+0x18/0x24 (C) [ 110.116698][ T3494] dump_stack_lvl+0x78/0x90 [ 110.116853][ T3494] dump_stack+0x18/0x24 [ 110.116993][ T3494] should_fail_ex+0x1dc/0x234 [ 110.117131][ T3494] should_failslab+0x54/0x80 [ 110.117260][ T3494] kmem_cache_alloc_noprof+0x54/0x368 [ 110.117388][ T3494] security_file_alloc+0x28/0x1a0 [ 110.117520][ T3494] init_file+0x3c/0x11c [ 110.117651][ T3494] alloc_empty_file+0x70/0x138 [ 110.117781][ T3494] alloc_file_pseudo+0xa0/0x114 [ 110.117911][ T3494] sock_alloc_file+0x40/0xd8 [ 110.118051][ T3494] __sys_socket+0xd8/0x12c [ 110.118176][ T3494] __arm64_sys_socket+0x20/0x30 [ 110.118301][ T3494] invoke_syscall+0x48/0x110 [ 110.118431][ T3494] el0_svc_common.constprop.0+0x40/0xe0 [ 110.118561][ T3494] do_el0_svc+0x1c/0x28 [ 110.118690][ T3494] el0_svc+0x30/0xe0 [ 110.118816][ T3494] el0t_64_sync_handler+0x10c/0x138 [ 110.118943][ T3494] el0t_64_sync+0x1a4/0x1a8 [ 110.310804][ T3501] FAULT_INJECTION: forcing a failure. [ 110.310804][ T3501] name failslab, interval 1, probability 0, space 0, times 0 [ 110.314353][ T3501] CPU: 0 UID: 0 PID: 3501 Comm: syz.0.18 Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT [ 110.314531][ T3501] Hardware name: linux,dummy-virt (DT) [ 110.314599][ T3501] Call trace: [ 110.314653][ T3501] show_stack+0x18/0x24 (C) [ 110.314806][ T3501] dump_stack_lvl+0x78/0x90 [ 110.314941][ T3501] dump_stack+0x18/0x24 [ 110.315080][ T3501] should_fail_ex+0x1dc/0x234 [ 110.315238][ T3501] should_failslab+0x54/0x80 [ 110.315368][ T3501] kmem_cache_alloc_noprof+0x54/0x368 [ 110.315496][ T3501] __kernfs_new_node+0x6c/0x238 [ 110.315624][ T3501] kernfs_new_node+0x90/0xc8 [ 110.315750][ T3501] kernfs_create_link+0xc0/0xe4 [ 110.315877][ T3501] sysfs_do_create_link_sd+0x6c/0xf8 [ 110.316009][ T3501] sysfs_create_link+0x20/0x40 [ 110.316137][ T3501] software_node_notify+0x90/0x100 [ 110.316271][ T3501] device_add+0xe0/0x78c [ 110.316399][ T3501] iommufd_test+0x25c/0x14d8 [ 110.316528][ T3501] iommufd_fops_ioctl+0x234/0x2a4 [ 110.316659][ T3501] __arm64_sys_ioctl+0xb4/0xe8 [ 110.316789][ T3501] invoke_syscall+0x48/0x110 [ 110.316918][ T3501] el0_svc_common.constprop.0+0x40/0xe0 [ 110.317053][ T3501] do_el0_svc+0x1c/0x28 [ 110.317182][ T3501] el0_svc+0x30/0xe0 [ 110.317308][ T3501] el0t_64_sync_handler+0x10c/0x138 [ 110.317434][ T3501] el0t_64_sync+0x1a4/0x1a8 [ 110.364538][ T3501] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 110.387412][ T3498] ================================================================== [ 110.392416][ T3498] BUG: KASAN: slab-use-after-free in software_node_notify_remove+0xa0/0xcc [ 110.393529][ T3498] Read at addr f1f0000004747ec8 by task syz.0.18/3498 [ 110.393845][ T3498] Pointer tag: [f1], memory tag: [fe] [ 110.394011][ T3498] [ 110.394631][ T3498] CPU: 1 UID: 0 PID: 3498 Comm: syz.0.18 Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT [ 110.395029][ T3498] Hardware name: linux,dummy-virt (DT) [ 110.395279][ T3498] Call trace: [ 110.395469][ T3498] show_stack+0x18/0x24 (C) SYZFAIL: failed to recv rpc [ 110.395756][ T3498] dump_stack_lvl+0x78/0x90 [ 110.395917][ T3498] print_report+0x108/0x630 [ 110.396048][ T3498] kasan_report+0x88/0xac [ 110.396164][ T3498] __do_kernel_fault+0x170/0x1c8 [ 110.396283][ T3498] do_tag_check_fault+0x78/0x8c [ 110.396400][ T3498] do_mem_abort+0x44/0x94 [ 110.396516][ T3498] el1_abort+0x40/0x60 [ 110.396633][ T3498] el1h_64_sync_handler+ ** replaying previous printk message ** [ 110.396633][ T3498] el1h_64_sync_handler+0xa4/0x120 [ 110.396748][ T3498] el1h_64_sync+0x6c/0x70 [ 110.396940][ T3498] software_node_notify_remove+0xa0/0xcc (P) [ 110.397062][ T3498] device_del+0x164/0x384 [ 110.397178][ T3498] device_unregister+0x18/0x34 [ 110.397293][ T3498] iommufd_selftest_destroy+0x48/0x58 [ 110.397413][ T3498] iommufd_fops_release+0x9c/0x158 [ 110.397532][ T3498] __fput+0xcc/0x2dc [ 110.397652][ T3498] ____fput+0x14/0x20 [ 110.397769][ T3498] task_work_run+0x78/0xd4 [ 110.397887][ T3498] do_notify_resume+0x134/0x164 [ 110.398018][ T3498] el0_svc+0xc0/0xe0 [ 110.398133][ T3498] el0t_64_sync_handler+0x10c/0x138 [ 110.398248][ T3498] el0t_64_sync+0x1a4/0x1a8 [ 110.398488][ T3498] [ 110.399836][ T3498] Allocated by task 3501: [ 110.400087][ T3498] kasan_save_stack+0x3c/0x64 [ 110.400336][ T3498] save_stack_info+0x40/0x158 [ 110.400501][ T3498] kasan_save_alloc_info+0x14/0x20 [ 110.400662][ T3498] __kasan_kmalloc+0xb4/0xb8 [ 110.400821][ T3498] __kmalloc_cache_noprof+0x174/0x390 [ 110.400996][ T3498] swnode_register+0x38/0x1d8 [ 110.401160][ T3498] fwnode_create_software_node+0xb4/0x190 [ 110.401326][ T3498] device_create_managed_software_node+0x88/0x108 [ 110.401487][ T3498] iommufd_test+0x24c/0x14d8 [ 110.401648][ T3498] iommufd_fops_ioctl+0x234/0x2a4 [ 110.401811][ T3498] __arm64_sys_ioctl+0xb4/0xe8 [ 110.401979][ T3498] invoke_syscall+0x48/0x110 [ 110.402144][ T3498] el0_svc_common.constprop.0+0x40/0xe0 [ 110.402308][ T3498] do_el0_svc+0x1c/0x28 [ 110.402469][ T3498] el0_svc+0x30/0xe0 [ 110.402629][ T3498] el0t_64_sync_handler+0x10c/0x138 [ 110.402790][ T3498] el0t_64_sync+0x1a4/0x1a8 [ 110.402980][ T3498] [ 110.403137][ T3498] Freed by task 3498: [ 110.403357][ T3498] kasan_save_stack+0x3c/0x64 [ 110.403564][ T3498] save_stack_info+0x40/0x158 [ 110.403727][ T3498] kasan_save_free_info+0x18/0x24 [ 110.403886][ T3498] __kasan_slab_free+0x74/0x8c [ 110.404054][ T3498] kfree+0xfc/0x30c [ 110.404216][ T3498] software_node_release+0xd0/0xf0 [ 110.404379][ T3498] kobject_put+0xa4/0x114 [ 110.404542][ T3498] software_node_notify_remove+0xa0/0xcc [ 110.404701][ T3498] device_del+0x164/0x384 [ 110.404876][ T3498] device_unregister+0x18/0x34 [ 110.405043][ T3498] iommufd_selftest_destroy+0x48/0x58 [ 110.405205][ T3498] iommufd_fops_release+0x9c/0x158 [ 110.405367][ T3498] __fput+0xcc/0x2dc [ 110.405529][ T3498] ____fput+0x14/0x20 [ 110.405691][ T3498] task_work_run+0x78/0xd4 [ 110.405851][ T3498] do_notify_resume+0x134/0x164 [ 110.406019][ T3498] el0_svc+0xc0/0xe0 [ 110.406179][ T3498] el0t_64_sync_handler+0x10c/0x138 [ 110.406339][ T3498] el0t_64_sync+0x1a4/0x1a8 [ 110.406509][ T3498] [ 110.406645][ T3498] The buggy address belongs to the object at fff0000004747e00 [ 110.406645][ T3498] which belongs to the cache kmalloc-256 of size 256 [ 110.406850][ T3498] The buggy address is located 200 bytes inside of [ 110.406850][ T3498] 256-byte region [fff0000004747e00, fff0000004747f00) [ 110.407041][ T3498] [ 110.407311][ T3498] The buggy address belongs to the physical page: [ 110.407551][ T3498] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xf1f0000004747e00 pfn:0x44747 [ 110.407953][ T3498] flags: 0x1ffc00000000000(node=0|zone=0|lastcpupid=0x7ff|kasantag=0x0) [ 110.408385][ T3498] page_type: f5(slab) [ 110.408875][ T3498] raw: 01ffc00000000000 f5f0000003001800 dead000000000122 0000000000000000 [ 110.409084][ T3498] raw: f1f0000004747e00 000000008010000f 00000000f5000000 0000000000000000 [ 110.409308][ T3498] page dumped because: kasan: bad access detected [ 110.409456][ T3498] [ 110.409587][ T3498] Memory state around the buggy address: [ 110.409872][ T3498] fff0000004747c00: f1 f1 f1 f1 f1 f1 f1 f1 f1 f1 f1 f1 f1 f1 fe fe [ 110.410078][ T3498] fff0000004747d00: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 fe fe [ 110.410249][ T3498] >fff0000004747e00: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 110.410413][ T3498] ^ [ 110.410607][ T3498] fff0000004747f00: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 110.410760][ T3498] fff0000004748000: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 110.410942][ T3498] ================================================================== [ 110.412579][ T3498] Disabling lock debugging due to kernel taint [ 110.436801][ T3498] ------------[ cut here ]------------ [ 110.437038][ T3498] refcount_t: underflow; use-after-free. [ 110.437644][ T3498] WARNING: CPU: 1 PID: 3498 at lib/refcount.c:28 refcount_warn_saturate+0xf4/0x144 [ 110.459272][ T3498] Modules linked in: [ 110.460553][ T3498] CPU: 1 UID: 0 PID: 3498 Comm: syz.0.18 Tainted: G B 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT [ 110.461506][ T3498] Tainted: [B]=BAD_PAGE [ 110.461996][ T3498] Hardware name: linux,dummy-virt (DT) [ 110.462557][ T3498] pstate: 61402009 (nZCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 110.463285][ T3498] pc : refcount_warn_saturate+0xf4/0x144 [ 110.463956][ T3498] lr : refcount_warn_saturate+0xf4/0x144 [ 110.464448][ T3498] sp : ffff8000895d3c50 [ 110.464877][ T3498] x29: ffff8000895d3c50 x28: faf00000098cb6c0 x27: 0000000000000000 [ 110.465864][ T3498] x26: 0000000000000000 x25: 0000000000000000 x24: 0000000000000000 [ 110.466619][ T3498] x23: 0000000000000000 x22: 0000000000400040 x21: ffff800082a5ac88 [ 110.467449][ T3498] x20: fbf0000009885000 x19: f1f0000004747e00 x18: 00000000ffffffff [ 110.468232][ T3498] x17: 0000000000000000 x16: 0000000000000000 x15: ffff8000895d3680 [ 110.469035][ T3498] x14: 00000000ffffffea x13: ffff8000895d3a08 x12: ffff8000829a0b88 [ 110.469875][ T3498] x11: 0000000000000001 x10: 0000000000000001 x9 : 000000000002ffe8 [ 110.470691][ T3498] x8 : c0000000ffffdfff x7 : ffff8000828f0b00 x6 : 00000000000affa8 [ 110.471558][ T3498] x5 : ffff8000829a0b30 x4 : 0000000000000000 x3 : 0000000000000000 [ 110.472389][ T3498] x2 : 0000000000000000 x1 : 0000000000000000 x0 : faf00000098cb6c0 [ 110.473304][ T3498] Call trace: [ 110.473825][ T3498] refcount_warn_saturate+0xf4/0x144 (P) [ 110.474365][ T3498] kobject_put+0x110/0x114 [ 110.474815][ T3498] software_node_notify_remove+0xbc/0xcc [ 110.475394][ T3498] device_del+0x164/0x384 [ 110.475856][ T3498] device_unregister+0x18/0x34 [ 110.476281][ T3498] iommufd_selftest_destroy+0x48/0x58 [ 110.476721][ T3498] iommufd_fops_release+0x9c/0x158 [ 110.477164][ T3498] __fput+0xcc/0x2dc [ 110.477568][ T3498] ____fput+0x14/0x20 [ 110.478041][ T3498] task_work_run+0x78/0xd4 [ 110.478495][ T3498] do_notify_resume+0x134/0x164 [ 110.479016][ T3498] el0_svc+0xc0/0xe0 [ 110.479503][ T3498] el0t_64_sync_handler+0x10c/0x138 [ 110.479979][ T3498] el0t_64_sync+0x1a4/0x1a8 [ 110.480478][ T3498] ---[ end trace 0000000000000000 ]--- fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 111.162217][ T156] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.231142][ T156] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.299691][ T156] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.402414][ T156] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.187371][ T156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.247809][ T156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.309283][ T156] bond0 (unregistering): Released all slaves [ 112.434236][ T156] hsr_slave_0: left promiscuous mode [ 112.439528][ T156] hsr_slave_1: left promiscuous mode [ 112.457939][ T156] veth1_macvtap: left promiscuous mode [ 112.458486][ T156] veth0_macvtap: left promiscuous mode [ 112.458944][ T156] veth1_vlan: left promiscuous mode [ 112.459394][ T156] veth0_vlan: left promiscuous mode [ 113.745719][ T156] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.805454][ T156] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.865472][ T156] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.924990][ T156] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.579241][ T156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.645090][ T156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.709741][ T156] bond0 (unregistering): Released all slaves [ 114.836872][ T156] hsr_slave_0: left promiscuous mode [ 114.841175][ T156] hsr_slave_1: left promiscuous mode [ 114.856639][ T156] veth1_macvtap: left promiscuous mode [ 114.858634][ T156] veth0_macvtap: left promiscuous mode [ 114.861929][ T156] veth1_vlan: left promiscuous mode [ 114.862483][ T156] veth0_vlan: left promiscuous mode VM DIAGNOSIS: 09:00:26 Registers: info registers vcpu 0 CPU#0 PC=ffff800081b0597c X00=ffff800081b05978 X01=ffff8000813d05c0 X02=0000000000000000 X03=f0f0000006300280 X04=f7f0000003ca5228 X05=0000000000000000 X06=000000000096edf2 X07=0000000000000000 X08=0000000000000038 X09=0000000000000000 X10=0000000000000001 X11=0000000000001eab X12=ffff8000829a0b88 X13=ffff800083073b7d X14=ffff800083073b88 X15=ffff8000830739f0 X16=ffff800080000000 X17=fff07ffffd032000 X18=00000000ffffffff X19=ffff800082bb7c40 X20=000000199c82cc00 X21=000000000000506e X22=f0f00000063002e2 X23=f0f00000063002e2 X24=ffff800082c3ed80 X25=0000000000000000 X26=f0f00000063002ce X27=ffff800082c3ed80 X28=f1f0000004722f80 X29=ffff8000800037c0 X30=ffff8000813d05d8 SP=ffff8000800037c0 PSTATE=60402009 -ZC- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000000000000000 P01=0000000000000000 P02=0000000000000000 P03=0000000000000000 P04=0000000000000000 P05=0000000000000000 P06=0000000000000000 P07=0000000000000000 P08=0000000000000000 P09=0000000000000000 P10=0000000000000000 P11=0000000000000000 P12=0000000000000000 P13=0000000000000000 P14=0000000000000000 P15=0000000000000000 FFR=0000000000000000 Z00=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:6e61686300746e65:7665752f00276567 Z01=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:00000000f0000000:00000000f0000000 Z02=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:f00ff00ff00ff00f:f00ff00ff00ff00f Z03=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000f0000000f000:0000f0000000f000 Z04=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:f00ff00ff00ff00f:f00ff00ff00ff00f Z05=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:000f0f00f0f0f0f0:000f0f00f0f0f0f0 Z06=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:c00c000000000000:c00c000000000000 Z07=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z08=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z17=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z18=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 info registers vcpu 1 CPU#1 PC=ffff800080316c6c X00=f8f00000098bc000 X01=f6f0000004ef4900 X02=0000000000000000 X03=0000000000000000 X04=00000000ffffffff X05=00000000000007cd X06=00000000000007cd X07=f8f00000032a577c X08=f3f000000660fabc X09=00000000000007ce X10=0000000087181af8 X11=0000000003941bb4 X12=0000000023895b81 X13=000000004739819a X14=00000000b1ccbb38 X15=000000006ef6457e X16=000000003b780f13 X17=00000000260a2221 X18=0000000000000014 X19=ffff8000832c3b78 X20=ffff8000832c3c58 X21=0000000000000006 X22=ffff8000832c3b78 X23=0000000000000000 X24=f1f000000967f280 X25=ffff800081e0e620 X26=f1f00000047865a0 X27=f3f000000660fa00 X28=0000000000000080 X29=ffff8000832c3cf0 X30=ffff8000808dc780 SP=ffff8000832c3c10 PSTATE=20402009 --C- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000000000000000 P01=0000000000000000 P02=0000000000000000 P03=0000000000000000 P04=0000000000000000 P05=0000000000000000 P06=0000000000000000 P07=0000000000000000 P08=0000000000000000 P09=0000000000000000 P10=0000000000000000 P11=0000000000000000 P12=0000000000000000 P13=0000000000000000 P14=0000000000000000 P15=0000000000000000 FFR=0000000000000000 Z00=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:000000a003000000:000000a003000000 Z01=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:00000000000000a0 Z02=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z03=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000028:00000000000000a0 Z04=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z05=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z06=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:6edc4d3a2914b135:d8e9c869e2695c88 Z07=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:b20fae707afde253:388e9c6c4fa85ca0 Z08=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z16=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000ffffcb36f840:0000ffffcb36f840 Z17=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:ffffff80ffffffd0:0000ffffcb36f810 Z18=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000:0000000000000000